Privacy for suppliers and customers

PRIVACY POLICY pursuant to art. 13 of EU Regulation 2016/679 (GDPR) on the protection of personal data

Before communicating any personal data to us, we invite you to carefully read the following information provided pursuant to art. 13 of the

EU Regulation 2016/679 (GDPR) on the protection of personal data to find out what data we process, for what purposes we process them

we will treat, what failure to provide the data requested from you entails and what your rights are in relation to such data.

1. Data controller

The Data Controller of your data is Fabo S.p.A., with registered office in via Cecinese 84-84/A, 51036 Larciano (PT), Fraz. Castelmartini, VAT no. 00126020478 (hereinafter referred to as FABO), which you may contact for any information or request at the following addresses: Tel. +390573 84851; fax +39 0573 84109; emailprivacy@fabotape.com.

2. Categories of data processed

The data concerning you, and which FABO will process, belong to the category of common personal data (such as personal and contact details or banking data). In particular, FABO will process:

• The data collected for the execution and carrying out of specific contractual or pre-contractual relationships with FABO or which may be entered into in the future or which have been voluntarily provided by you by contacting FABO directly (for example, by email, by filling in specific forms also online, leaving your business card or in another way in order to obtain commercial information in view of a possible contractual relationship);

• data collected in forms, including online, or data that you have voluntarily provided to us when you have given express consent to the processing of data for marketing purposes.

3. Purpose of processing and legal basis

The personal data and information collected by FABO in the execution and performance of specific contractual or pre-contractual relationships established with you may be processed for the following distinct purposes:

a) To respond to a direct request which can be satisfied by means of an electronic response or the sending of paper material as appropriate (legal basis: pre-contractual measures).

b) For purposes strictly connected and instrumental to the execution of the existing contractual or pre-contractual relationship (legal basis: contract).

c) To fulfill legal obligations imposed by current administrative, fiscal and accounting legislation (legal basis: legal obligation).

d) Only with your consent (legal basis consent), for sending commercial or promotional communications, electronic or paper, for direct sales purposes, for carrying out market research and for receiving our Newsletter with updates on new products and/or services offered by our Company, any promotions and our participation in trade fairs or sector events (all jointly referred to as “marketing purposes“).

4. Consequences of failure to provide data

The data requested for the purposes indicated above in letters a) b) and c) are necessary to respond to your requests, to execute the the contract or to fulfill a legal obligation. Therefore, failure to provide this data makes it impossible to respond to your pre-contractual requests, to execute the contract and/or to fulfill other legal obligations required of FABO.On the contrary, the data requested for marketing purposes (indicated in letter d) are optional. In this case, the consent you may have given is always revocable and any refusal does not in any way preclude the execution of the obligations arising from the existing contractual relationship, but will only result in the impossibility of being registered for the FABO Newsletter to receive updates on new products and/or services or to receive other advertising, commercial or promotional communications.

5. Storage period and processing methods

The data provided will be processed only for the time necessary to carry out the requested service or to provide you with the information requested and stored for the following 24 months (letter a).In the event that you are (or have become after pre-contractual relations) a customer or supplier of FABO, your data will be stored for a period of 10 years from the conclusion of the last service for tax purposes or from the conclusion of the relationship (letters b and c).In the case of data provided for marketing purposes (letter d), your data will be processed for 24 months and, if earlier, until you revoke it. the consent given. In any case, before the 24 months expire, you will be asked if you want to continue receiving our commercial information and, if you do not renew your consent, your data will be deleted. The data will be processed electronically and on paper. All data processing operations are carried out in such a way as to guarantee the integrity, confidentiality and availability of personal data.

6. Data recipients and transfers outside the EU

Personal data are processed by FABO and by expressly authorized persons in charge, with a guarantee of security and confidentiality and with a commitment not to disseminate or communicate them to external third parties. Your data may be communicated for needs related to the purposes indicated in this information notice only to the Entities and professionals used by FABO, who operate as independent owners or who are expressly appointed as external Managers, including agents, the firm of chartered accountants, banks, the email manager, the financial advisor, law firms, and freight forwarders. You may request an updated list of such Managers and their contact details from FABO at any time.

Personal data may be transferred to third parties based in a non-European Union country only in compliance with the

guarantees provided for by EU Regulation 2016/679. In particular, they could be transferred to a country for which there is a decision

of adequacy or which offers adequate guarantees pursuant to Articles 45 and 46 of the EU Regulation, or even in foreign countries which do not offer adequate guarantees

for the protection of personal data pursuant to Regulation 2016/679 when the transfer is necessary for the execution of the

contract and pre-contractual negotiations (art. 49, paragraph 1, letter b). FABO has suppliers who are also based outside the European Union,

but will not transfer your data to such suppliers. In the event that it is necessary to transfer your data to such suppliers (for example, to provide execution of the contract concluded with you), FABO will communicate this to you, also indicating the conditions that legitimise the transfer.

7. Your rights

In relation to the data provided, you may at any time exercise, for all or part of the data and/or processing, the following rights:

• Right of access (art. 15): you can ask FABO for confirmation of the existence of processing of your data, access the same and/or obtain a copy of the data concerning you processed by us.

• Right to rectification (art. 16): you can ask for your personal data to be updated, corrected or integrated.

• Right to be forgotten (art. 17): if one of the reasons provided for by this regulation exists, you can request the deletion of your personal data, which will be permanently deleted by us.

• Right to limitation (art. 18): if one of the conditions set out in this regulation exists, you can request the limitation of the processing of your data. In this case, the data will be stored by us but will no longer be processed for other purposes.

• Right to portability (art. 20): under the conditions set out in this regulation, you can ask to receive your personal data in an interoperable format and/or transmit them to another data controller.

• Right to object (art. 21): you can object to all or part of the processing by indicating the reason if the conditions apply provided for by this rule. You may also object to the processing for marketing purposes at any time and without any justification. In this case, processing for marketing purposes will cease immediately.

If the legal basis of the processing is consent, you may revoke the consent given at any time. In this case, the processing will cease for all processing for which you have revoked your consent, unless there is a different legal basis for the processing (Right to revoke consent: art. 7, paragraph 3).

These rights may be exercised by making an informal request to FABO at the addresses indicated above, to which an appropriate response will be given without delay, and in any case no later than one month from the request.Finally, we remind you that if you believe that your rights have been violated, we invite you to report it to us. In any case, you can always lodge a complaint with the Data Protection Authority pursuant to art. 77 of EU Regulation 2016/679.

* * *

This policy may be modified at any time due to changes in our practices. We therefore invite you to consult it periodically. For more information on the processing of data collected through our site web www.fabotape.com (such as browsing or profiling data) We invite you to consult our privacy and cookie policies published in the dedicated section.