## I – INFORMATION REGARDING THE WEBSITE'S PRIVACY POLICY

### 1. Introduction

This section contains information on how Perlinolandia di Sabrina Milardi, VAT number: 03070620608, manages user data for the e-commerce site https://www.perlinolandia.it (hereinafter "PERLINOLANDIA website").

### 2. Regulatory Reference

This privacy policy also serves the purpose of Article 13 of Legislative Decree no. 196/2003, Code on the Protection of Personal Data, and Article 13 of EU Regulation no. 2016/679 (hereinafter "GDPR"), relating to the protection, processing, and dissemination of personal data of individuals interacting with the website. This policy is provided only for the PERLINOLANDIA website and not for other websites possibly consulted by the user through links contained within it.

### 3. Purpose of the Privacy Policy

The purpose of this document is to provide guidelines on the methods, timing, and nature of the information that data controllers must provide to users when they connect to the PERLINOLANDIA website, regardless of the purposes of the connection, according to Italian and European legislation.

### 4. Changes to the Privacy Policy

The privacy policy may be subject to changes due to the introduction of new regulations; therefore, users are invited to periodically check this page.

### 5. Consent of Minors

If the user is under 16 years of age, under Article 8, paragraph 1 of EU Regulation 2016/679, they must legitimize their consent through the authorization of parents or those who act in their place.

## II – DATA PROCESSING

### 1. Data Controller

1. The data controller is the natural or legal person, public authority, service, or other body that, individually or together with others, determines the purposes and means of the processing of personal data. They are also responsible for security profiles.

2. Concerning this website, the data controller is Perlinolandia di Sabrina Milardi.

### 2. Data Processor

1. The data processor is the natural or legal person, public authority, service, or other body that processes personal data on behalf of the data controller.

2. Under Article 28 of EU Regulation no. 2016/679, the data processor for the PERLINOLANDIA website is Mrs. Sabrina Milardi.

### 3. Data Processing Location

1. The processing of data covered by the GDPR takes place at the company's headquarters located in Fiuggi (FR), Via del Pisciarello 13/b - 03014, and is handled by the technical staff of the Office in Charge of Processing. In occasional website maintenance operations, data processing may be carried out by external parties such as hosting service providers. The web hosting, responsible for data processing on behalf of the controller, is located in the European Economic Area and complies with European standards.

## III – COOKIES

### 1. Cookies

1. The PERLINOLANDIA website uses cookies to make the user’s browsing experience easier and more intuitive: cookies are small text strings used to store some information that may concern the user, their preferences, or the device used to access the Internet (computer, tablet, or smartphone) and are primarily used to adjust the site’s operation to the user's expectations, offering a more personalized browsing experience and remembering previous choices.

2. A cookie consists of a reduced set of data transferred to the user’s browser from a web server and can only be read by the server that made the transfer. It is not executable code and does not transmit viruses.

3. Cookies do not record any personal information, and any identifiable data will not be stored. If desired, it is possible to prevent the saving of some or all cookies. However, in this case, the use of the site and the services offered may be compromised. To proceed without changing the cookie options, it is sufficient to continue browsing. Cookies reside in the memory cache of the program that allows internet browsing (browser) and can be deleted at any time by following the information available in the Help section of each browser.

The types of cookies used by the site are as follows:

### 2. Technical Cookies

1. Technical cookies allow the site to be used securely and efficiently.

2. Cookies that are placed in the browser and managed by third-party services hosted on the website are technical only if used for optimization purposes by the site owner, who can collect aggregated information on the number of users and how they visit the site (statistical cookies). Under these conditions, the same rules regarding information and consent provided for technical cookies apply to statistical cookies.

3. Based on their duration, temporary session cookies are automatically deleted at the end of the browsing session and are used to identify the user uniquely during navigation, while permanent cookies remain active on the PC until they expire or are deleted by the user.

4. Similarly, session cookies are stored to allow access and remain in the reserved area of the portal as an authenticated user.

5. Technical cookies are not stored persistently but only for the duration of the browsing session until the browser is closed and disappear with its closure. Their use is strictly limited to the transmission of session identifiers consisting of random numbers generated by the server necessary to allow safe and efficient exploration of the site.

### 3. Third-Party Cookies

1. Regarding their origin, cookies sent to the browser directly from the site being visited and those of third parties sent to the computer from other sites and not from the one being visited are distinguished.

2. Permanent cookies are often third-party cookies.

3. Most third-party cookies consist of tracking cookies used to identify online behavior, understand interests, and then personalize advertising proposals for users.

4. During navigation on the PERLINOLANDIA website, third-party cookies of an analytical and profiling type may be installed. They are sent from external domains to the site.

5. The use of these cookies is governed by the rules set by third parties, so users are invited to read the privacy policies and instructions for managing or disabling cookies published on their respective web pages.

6. Article 22 of EU Regulation 2016/679 and Article 122 of the Data Protection Code will apply.

### 4. Analytical Cookies

1. Third-party analytical cookies are used to gather information about user browsing behavior. The collection takes place anonymously to monitor performance and improve site usability.

2. When these types of cookies are used, the user must give explicit consent.

### 5. Profiling Cookies

1. Profiling cookies are intended to create user cultural and social profiles and are used to send advertising messages in line with the preferences expressed by the user during web browsing.

2. When these types of cookies are used, the user must give explicit consent.

## IV – DATA PROCESSED

### 1. Data Processing Methods

1. The PERLINOLANDIA website uses log files in which information collected automatically during user visits is stored. The information collected includes:

   - Internet Protocol (IP) address;

   - Browser type and device parameters used to connect to the site;

   - Internet service provider (ISP) name;

   - Date and time of visit;

   - Referral and exit pages;

   - Click count, if applicable.

2. The above information is processed automatically and collected in aggregate form only to verify the correct functioning of the site and for security reasons. Such information will be processed based on the legitimate interests of the owner.

3. For security purposes (spam filters, firewalls, virus detection), automatically recorded data may also include personal data such as the IP address, which could be used, in compliance with applicable laws, to block attempts to damage the site itself or cause damage to other users, or otherwise harmful or criminal activities. Such data are never used for user identification or profiling but only to protect the site and its users. This information will be processed based on the legitimate interests of the owner.

4. The PERLINOLANDIA website allows buyers to post reviews. In this case, the site automatically detects and records some user identification data, including the email address. These data are voluntarily provided by the user at the time of the service request. By submitting the review, the user expressly accepts the privacy policy and, in particular, consents to the free dissemination of the contents provided, even to third parties. The received data will be used exclusively for the requested service and only for the time necessary to provide the service.

5. The information that users of the site will deem to make public through the services and tools provided to them is provided by the user knowingly and voluntarily, exempting this site from any liability for any law violations. It is up to the user to verify that they have permission to enter personal data of third parties or content protected by national and international regulations.

### 2. Data Processing Purposes

1. Data collected by the PERLINOLANDIA website during its operation is used for the above purposes, to generate quotes, or respond to information requests.

2. Data retention will be carried out for the period strictly necessary to achieve the purposes indicated above and, in any case, no longer than 5 years.

3. Data used for security purposes (blocking attempts to damage the site) are retained for the time strictly necessary to achieve the previously indicated purpose.

### 3. Data Provided by the User

1. The optional, explicit, and voluntary sending of emails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.

### 4. Support in Configuring Your Browser

1. Users can manage cookies also through the settings of their browser. However, deleting cookies from the browser may remove the preferences set for the site.

2. For further information and support, you can also visit the specific help page of the browser being used:

   - Internet Explorer: [http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies](http://windows.microsoft

Firefox

https://support.mozilla.org/en-us/kb/enable-and-disable-cookies-website-preferences

Safari

http://www.apple.com/legal/privacy/it/

Chrome

https://support.google.com/accounts/answer/61416?hl=it

Opera

http://www.opera.com/help/tutorials/security/cookies/

5 – Social Network Plugins

  1. This site also incorporates plugins and/or buttons for social networks to allow easy sharing of content on users' favorite social networks. These plugins are programmed not to set any cookies when accessing the page, to protect users' privacy. Cookies are set, if so provided by the social networks, only when the user makes an actual and voluntary use of the plugin. Please note that if the user browses while logged into the social network, they have already consented to the use of cookies conveyed through this site at the time of registration with the social network.

  2. The collection and use of information obtained through the plugin are governed by the respective privacy policies of the social networks, to which please refer:

V – User Rights

Article 13, paragraph 2 of EU Regulation 2016/679 lists the rights of the user.

  1. The PERLINOLANDIA website therefore intends to inform the user of the existence:

    • of the right of the interested party to request access to personal data (Art. 15 EU Regulation), their update (Art. 7, paragraph 3, letter a) Legislative Decree 196/2003), rectification (Art. 16 EU Regulation), integration (Art. 7, paragraph 3, letter a) Legislative Decree 196/2003) or limitation of the processing that concerns them (Art. 18 EU Regulation) or to oppose, for legitimate reasons, their processing (Art. 21 EU Regulation), in addition to the right to data portability (Art. 20 EU Regulation);
    • of the right to request cancellation (Art. 17 EU Regulation), transformation into anonymous form, or blocking of data processed in violation of the law, including those for which storage is not necessary in relation to the purposes for which the data were collected or subsequently processed (Art. 7, paragraph 3, letter b) Legislative Decree 196/2003);
    • of the right to obtain the attestation that the operations of updating, rectification, integration of data, cancellation, blocking of data, transformation have been brought to the knowledge, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment proves impossible or involves a manifestly disproportionate use of means with respect to the right protected (Art. 7, paragraph 3, letter c) Legislative Decree 196/2003);
  2. Requests can be addressed to the data controller, without formalities or, alternatively, using the model provided by the Data Protection Authority, or by sending an email to: info@perlinolandia.it

  3. The PERLINOLANDIA website is also equipped with an automatic system for deleting registration data by the same user who intends to remove them permanently through a specific command within their control panel.

  4. If the processing is based on Article 6, paragraph 1, letter a) – express consent to use – or on Article 9, paragraph 2 letter a) – express consent to the use of genetic, biometric, health-related data revealing religious or philosophical beliefs, or trade union membership, revealing racial or ethnic origin, political opinions – the user has the right to revoke the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.

  5. Likewise, in case of violation of the law, the user has the right to lodge a complaint with the Data Protection Authority, which is the authority in charge of control in the Italian state.

  6. For a more in-depth examination of the rights that belong to you, see Articles 15 and following of EU Regulation 2016/679 and Article 7 of Legislative Decree 196/2003.

VI – Data Transfer to Non-EU Countries

  1. This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook, and Microsoft (LinkedIn) through the social plugins and the Google Analytics service. The transfer is authorized and strictly regulated by Article 45, paragraph 1 of EU Regulation 2016/679, for which no further consent is required. The aforementioned companies guarantee their adherence to the Privacy Shield.

  2. Data will never be transferred to third countries that do not comply with the conditions set out in Article 45 and following of the EU Regulation.

VII – Security of Provided Data

  1. This site processes users' data lawfully and correctly, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of data. The processing is carried out using IT and/or telematic tools, with organizational methods and with logics strictly related to the purposes indicated.

  2. In addition to the owner, in some cases, categories of persons in charge involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the data.

VIII – Changes to This Document

  1. This document constitutes the privacy policy of this site.

  2. It may be subject to changes or updates. In the case of significant changes and updates, these will be reported with appropriate notifications to users.

  3. The document was updated on 12/11/2018 to comply with regulatory provisions, and in particular in accordance with EU Regulation 2016/679.