Information Letter pursuant to Legislative Decree No. 196 of June 30, 2003 – 'Personal Data Protection Code

Pursuant to Article 13 of Legislative Decree No. 196 of June 30, 2003 ("Personal Data Protection Code"), we hereby inform you that we process personal data of customers and suppliers, as well as data of individuals who voluntarily provide their personal information to our company (personally, by telephone, fax, or e-mail), including those who register on our website. We also process data obtained from third parties, such as those collected from external databases for business information, public registers, etc. In such cases, only common (non-sensitive) personal data is collected and processed. Our company guarantees, within the framework of legal regulations, that the processing of personal data is carried out with full respect for the fundamental rights and freedoms, as well as the dignity of the data subjects—particularly regarding confidentiality, personal identity, and the right to the protection of personal data.


Purposes and Objectives of Data Processing:

• Fulfillment of legal obligations, obligations under regulations, EU directives, as well as civil and tax legislation
• Fulfillment of any contractual obligations towards the data subject
• Execution of tasks related to the business operations of our company, such as compiling internal statistics, accounting, and maintaining the customer/supplier registry
• Business-related purposes such as the sending of commercial information and advertising materials (by mail, fax, and e-mail), marketing, and market research
• Protection of claims and management of liabilities
• Purposes related to insurance, particularly credit insurance

In relation to the purposes stated above, your personal data may be disclosed, if necessary, to:

• To public administrations and authorities, if required by law
• To credit institutions with which our company maintains business relations for the management of receivables/payables and for financial intermediation
• To all natural and/or legal, public and/or private entities (such as legal, administrative, and tax consultancy offices, courts, chambers of commerce, etc.) if the disclosure proves to be necessary or useful for the performance of our business activities
• To suppliers/manufacturers, if necessary for the registration of products
• The personal data processed by our company will not be disclosed to the publi

Data processing may be carried out with or without the aid of electronic or, in any case, automated tools and includes all operations provided for by Article 4, paragraph 1, letter a) of Legislative Decree No. 196 of June 30, 2003, that are necessary for the processing of the relevant data. In any case, data processing will be conducted in compliance with all security measures that ensure the protection and confidentiality of the data.


Navigation Data within the Scope of Our Internet Information Service:

The computer systems and software procedures used to operate the website www.konradfissneider.com
collect, during normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals; however, due to its nature, it could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used to connect to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, and other parameters related to the user's operating system and computing environment. These data are used solely for the purpose of obtaining anonymous statistical information regarding the use of the website and to verify its correct functioning. The data may also be used to ascertain liability in the event of cybercrimes committed against the website.


Rights of the Data Subject

The Data Protection Act grants the data subject the possibility to exercise certain rights according to Article 7. Specifically, the data subject has the right to obtain information on whether personal data concerning them exists and, if so, which data is held, as well as to receive clear and comprehensible details about this data, its origin, the reasons and purposes for its processing, and information about the data controller and processors, as well as the persons or categories of persons to whom this data may be disclosed. The data subject has the right to update, correct, and supplement their data, as well as to request that data be deleted, blocked, or anonymized if the processing violates legal provisions. They have the right to object, wholly or partially, to the processing of their data for justified reasons, and without justification, if the data is used for commercial information, sending advertising material, direct sales, market research, or opinion polls. These rights according to Article 7 may be exercised by the data subject or a person authorized by them, by submitting a request to the data controller — Konrad Fissneider — via registered mail or email at info@konradfissneider.com
.

Controller of Data Processing:

Konrad Fissneider
St.Nr.: FSSKRD57P08B160K