Foreword

Subsequent to the provisions laid down by Italian legislative decree (d.lgs.) 196/03 "Personal data protection act" (hereinafter referred to as the "Act"), below we provide information on Pagin Prefabbricati SpA's use of personal data obtained in connection with existing contractual relations (or relations that may exist in the future) with Customers, Suppliers and with any other type of contact.

Source of personal data

Data we hold, obtained in connection with contractual relations, are collected directly from the data subject. All data collected shall be handled in compliance with the regulations in force and, in all cases, with due confidentiality.

Purpose of data handling.

The sole purpose for which personal data are collected, that is, handled, is to properly fulfil the obligations associated with performing the economic activities of our business, and more specifically to: meet requirements with a view to entering into a contract; fulfil contractual obligations to the data subject by taking an action, a number of actions or performing a series of operations required to fulfil said obligations; deal with any public or private body to perform obligations connected with or instrumental to the contract; comply with legal obligations.

Handling practice

With reference to said purposes, personal data shall be handled using manual, computer and online means based on logic that is strictly connected to said purposes and, whatever the case, in such a way as to assure the security and confidentiality of the data in question in compliance with the above-mentioned act.

Nature of data collection

For the purpose of entering into and performing contracts, the collection of personal data is also of a compulsory nature since there are legal and fiscal obligations to be fulfilled, meaning that refusal to supply said data shall make it impossible to establish relations with the company. Relevant data handling does not require the consent of the data subject.

Communication and disclosure

Personal data and their handling shall be shared with companies for the performance of economic activities (sales, managerial, IT system management, insurance, bank and non-bank brokerage, factoring, shipment management, mailing) or for the performance of legal obligations (accounting practices, lawyers). Data shall not be disclosed to other parties.

Knowledge of your data may be gained by the person in charge of data handling and the following categories of parties delegated the task of handling data: purchasing, administration.

Rights of data subjects

Data subjects may contact the Privacy Department c/o the data controller to check their data and have them added to, updated or corrected and/or to exercise their rights as laid down in art. 7 of the Act (attached hereto).

Data controller

The data controller is Pagin Prefabbricati SpA, based in Via Frattina 51-53 – Reschigliano di Campodarsego (PD) Italy and the Data Manager is Pellizzaro Silvia, whose domicile, for the purpose of performing duties in this capacity, is that of the data controller.

Art. 7 Italian legislative decree (d.lgs.) 196/03 (Right of access to personal data and other rights)

1. The data subject is entitled to obtain confirmation as to whether personal data are being held on him/her or not, including data not yet registered, and to ask for a copy of them in intelligible form.

2. The data subject is entitled to enquire as to:

a) the source of personal data;

b) the purposes of handling and the handling practices employed;

c) the logic applied in the event of processing carried out with the aid of electronic instruments;

d) the particulars of the data controller, the data managers or processors and the designated representative in accordance with article 5, subsection 2;

e) the parties or categories of parties that personal data may be communicated to or the parties that may otherwise gain knowledge of the data during the course of their activities as designated representative in the region of the country, or as those in charge of data processing or their delegates.

3. The data subject is entitled to ask for:

a) data to be updated, corrected or, if so desired, added to;

b) data handled in violation of the law to be erased, transformed into anonymous form or blocked. This shall include any data whose storage is not necessary for the purposes for which the data were originally collected or subsequently handled;

c) a statement attesting that the operations mentioned under letters a) and b) have been made known (including their contents) to all parties to/with which data have been communicated or shared, except the case in which it proves impossible to comply or would entail a use of means clearly disproportionate to the right protected.

4. The data subject is entitled to object, either fully or in part:

a) to the handling of personal data held on him/her, for legitimate reasons, even where said data are relevant to the purpose of collection;

b) to the handling of personal data held on him/her for the purpose of sending advertising material or direct sales or for the purpose of carrying out market research or sending sales announcements.