PERSONAL DATA PROCESSING PRIVACY NOTICE

In accordance with Article 13 of EU Regulation 2016/679 concerning the protection of natural persons with regard to the Processing of Personal Data and the free movement of such data (hereinafter referred to as the GDPR), Domenico Muliere, in his capacity as Data Controller, informs you that the data provided by you will be processed according to the procedures and for the purposes indicated below.

1. Data Controller and Data Processors
The Data Controller and Data Processor is:

Domenico Muliere
Via Giulio Emanuele Rizzo, 11
Rome (RM), Italy
Email: [domenico.muliere@gmail.com](mailto:domenico.muliere@gmail.com)
Regional Authorization No. 23400
CIN: IT058091C2I5T2JYKP

2. Purposes of Processing and Legal Basis
The processing of your personal data will be carried out in compliance with the conditions of lawfulness set out in Article 6 of the GDPR
for the following purposes:

1. to provide our services;
2. to review, process and respond to your request for information;
3. to comply with any obligation established by applicable laws, regulations, related legislation and commercial practices, particularly in tax and fiscal matters;
4. to monitor the development of relationships with data subjects (in order to improve such relationships);
5. to send promotional and commercial information and offers;
6. to request information for statistical purposes and for the improvement of products and services in a broad sense;
7. to interact with and display content from social networks and external platforms.
8. For the purposes referred to in points 1, 2, 3, 4 and 7, processing is necessary:
* for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures;
* to comply with a legal obligation to which the Data Controller is subject.

The above is pursuant to Article 6.1(b) and (c) of the GDPR and for the pursuit of the legitimate interests of the Data Controller or third parties pursuant to Article 6.1(f) of the GDPR. For the purposes referred to in points 5 and 6, processing is based on the data subject's explicit consent pursuant to Article 6.1(a) of the GDPR.

3. Processing Methods
Your personal data will be processed lawfully, fairly and transparently, mainly using electronic or IT tools, and will be stored both in the Data Controller's electronic database and in paper archives, using appropriate technical and organizational measures to ensure a level of security appropriate to the risk pursuant to Article 32 of the GDPR, as well as appropriate measures to protect the rights, freedoms and legitimate interests of the data subject.

4. Mandatory or Optional Nature of Providing Data
Providing data in relation to the purposes indicated in Section 2 is optional; however, failure to provide one or more items of data will make it impossible to respond to your request for information and to provide the services offered by the Data Controller.

5. Parties to Whom Personal Data May Be Disclosed
The personal data collected may be disclosed to:
employees and collaborators of the Data Controller, in their capacity as authorized persons and/or internal or external Data Processors and/or system administrators. Within the scope of the purposes described above and in compliance with EU Regulation No. 679/2016, your personal data may be transferred to connectivity and hosting service providers located abroad, either within or outside the European Union.

6. Existence of an Automated Decision-Making Process
Pursuant to Article 13, paragraph 2, letter (f) of the GDPR, you are informed that the data collected will not be subject to any automated decision-making process, including profiling.

7. Data Retention Period or Criteria
With regard to the personal data processed, such data will be retained, in compliance with the principle of proportionality, for the time necessary to pursue the purposes described above or, in any case, for no longer than 10 years from the date of collection, or until the specific consent is withdrawn by the data subject, if earlier.

8. Exercise of Data Subject Rights
At any time, as a data subject, you may exercise the rights provided for under Articles 15 to 22 of the GDPR by contacting the Data Controller. In particular, you may exercise the right to:
• request confirmation as to whether or not personal data concerning you exist;

• obtain information concerning the purposes of the processing, the categories of personal data, and the recipients or categories of recipients to whom the personal data

• have been or will be disclosed and, where possible, the applicable retention period;

• obtain the rectification and erasure of your data;

• obtain restriction of processing;

• obtain data portability, i.e. receive your personal data from a Data Controller in a structured, commonly used and machine-readable format and transmit it to another Data Controller without hindrance;

• object to the processing of your data at any time, including where the processing is carried out for direct marketing purposes;

• lodge a complaint with the supervisory authority, the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures and instructions published on the Authority's official website at [www.garanteprivacy.it](http://www.garanteprivacy.it).

Where processing is based on consent, the Data Controller informs the data subject that they have the right to withdraw such consent at any time, without affecting the lawfulness of processing based on consent given prior to its withdrawal.

9. Procedures for Exercising Rights
The data subject may exercise their rights by submitting a written request to the postal address of the registered office or by email to [domenico.muliere@gmail.com](mailto:domenico.muliere@gmail.com)