In terms of article 13 of Legislative Decree 196/2003 regarding privacy protection of the persons and other subjects in respect of data processing, Provincia BAT hereby informs you that personal data shall be processed lawfully and fairly and by respecting the rights and privacy of natural persons. Provincia BAT hereby also informs you that Legislative Decree 196 of 30 June 2003 (Privacy Protection Code) establishes the protection of persons and other parties in respect of the processing of the personal data needed to respond to an information request. The data controller (Provincia BAT) hereby informs you that your personal data will be processed by the company's staff pursuant to the purposes and methods indicated in this disclosure. Purposes for processing data: Your data will be processed for the following purposes: 1. to consult, process and then respond to your information request; 2. to fulfil any obligation established or provided for in current laws, regulations or related standards and commercial uses, especially in terms of taxes; 3. to be able to monitor trends in the relations with the interested parties (to improve these relations). B Data processing methods. Your personal data will mainly be processed using computerised means and will be stored both in paper copy and in the company's electronic database in order to fulfil the obligations and purposes indicated in point A) of this disclosure. The data stored in the aforementioned automated computer system will be processed using suitable security measures pursuant to Article 31 of Legislative Decree 196/03 so as to minimise the risk of the data being destroyed or lost, of unauthorised access and of processing that does not comply with the purposes for which the data was collected. C Nature of granting consent and results of refusing to do so. We would like to inform you that communicating these data is indispensable but not obligatory. The refusal to grant the required permission does not have any consequences, but it will mean we are unable to reply to your request. D Data communication. Personal data shall be communicated to other subjects only if the data subject gives his express consent. E Data subject rights. The data subject has the right, at any time, to receive confirmation about the existence of his/her data and the details, including the origin, of any data that does exist. He or she also has the right to verify that the data is correct and to request that it be added to, updated, adjusted or deleted. At any time, you may exercise your rights in respect of the data controller, as set forth in Article 7 of Legislative Decree 196/2003, including the right to object, for legitimate reason, to the processing of the data. The aforementioned article, containing the details of the rights granted to the data subject by law, is included in full below. Article 7, Legislative Decree 196/2003 - Right of access to the personal data and other rights 1. Data subjects shall have the right to obtain confirmation as to whether or not personal data concerning them exist, even if the data have not yet been recorded, and communication of such data in intelligible form. 2. Data subjects shall have the right to information on: the source of the personal data; the purposes and modes of processing; the logic applied when the data is processed with the use of electronic instruments; the identity of the data controller, data processing officers and the representative designated pursuant to Article 5.2; the parties or categories of parties to which the personal data can be transferred or which can gain knowledge of them as designated representatives of the State, processing officers, or processors. 3. Data subjects shall have the right to obtain: the updating, correction or, when they are interested, additions to the data; the cancellation, transformation into anonymous form, or blocking of data processed in violation of law, including those that need not be retained for the purposes for which the data were collected or subsequently processed; certification that the parties to which the data have been transferred or disseminated have been notified of the operations specified in points a) and b), also regarding their content, except for the case where notification proves impossible or requires the use of means clearly disproportionate to the right being protected. 4. Data subjects shall have the right to oppose, wholly or in part, for legitimate reasons, the processing of their personal, even when it pertains to the purpose of collection, and the processing of their personal data for the purpose of sending advertising or direct marketing material or to conduct market research or commercial communication surveys.