Information Notice pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)

Dear user,

C Consulting S.p.A. (hereinafter referred to as the "Company" or the "Data Controller") hereby provides the information required under Article 13 of Regulation (EU) 2016/679 (GDPR) regarding the processing of the personal data you provide by completing the form available in the "Contact Us" section.

Data Controller

The Data Controller of your personal data is C Consulting S.p.A., with its registered office in Genoa (GE), 16121, Via Giuseppe Macaggi No. 18, Tax Code/VAT No. 01155360991, represented by its legal representative pro tempore.

Contact Details of the Data Protection Officer (DPO)

The Data Protection Officer (DPO) may be contacted by e-mail at
dpo.privacy@eng.it.

Categories of Personal Data Processed

The Data Controller processes various categories of your personal data, including, by way of exampleand without limitation:

• Identification data (first name and last name);
• Contact details (e-mail address);
• The subject of your request.

Finalità del trattamento

The personal data you provide by completing the form on this website will be processed, including byelectronic and IT-based means, by the Data Controller for the purpose of responding to your request forinformation.

Purposes of the Processing

The personal data you provide by completing the form on this website will be processed, including byelectronic and IT-based means, by the Data Controller for the purpose of responding to your request forinformation.

Consequences of Failure to Provide Personal Data

Failure to provide your personal data will prevent the Company from responding to your request.

Data Retention Period

Your personal data will be retained for the time necessary to process and respond to your request for
information.

Data Recipients

Your Personal Data may be accessed by the Company's employees acting as authorized persons for
data processing where required by their job duties. Each authorized person has been specifically
designated, instructed and trained and acts in accordance with the instructions provided by the
Company regarding the purposes and methods of the processing.

Data Subject's Rights

The Data Controller informs you that, within the limits established by Regulation (EU) 2016/679, you
have the right to:

• obtain information regarding the processing of your personal data, including the categories of
  personal data processed, the purposes of the processing, the retention period and the recipients
  of the data (right of access);
• obtain the rectification or completion of inaccurate or incomplete personal data concerning you
  (right to rectification);
• obtain the erasure of your personal data where: (i) the personal data are no longer necessary for
  the purposes for which they were collected; (ii) you have withdrawn your consent where the
  processing is based on consent; (iii) you have objected to the processing and there are no
  overriding legitimate grounds for the processing; or (iv) the processing is unlawful. However, the
  Data Controller may lawfully retain your personal data where necessary to comply with a legal
  obligation or to establish, exercise or defend legal claims (right to erasure);
• obtain the restriction of processing where: (i) you contest the accuracy of the personal data, for
  the period necessary for the Data Controller to verify their accuracy; (ii) the processing is
  unlawful and you oppose the erasure of the personal data; (iii) the personal data are required for
  the establishment, exercise or defence of legal claims; or (iv) you have objected to the processing
  pending verification as to whether the legitimate grounds of the Data Controller override your
  own (right to restriction of processing);
• object at any time to the processing of your personal data (right to object);
• receive your personal data in a structured, commonly used and machine-readable format, where
  the processing is based on a contract or your consent, and/or request that such data be
  transmitted to another Data Controller, where technically feasible (right to data portability);
• not to be subject to a decision based solely on automated processing, including profiling, which
  produces legal effects concerning you or similarly significantly affects you. You also have the
  right to obtain human intervention by the Data Controller, express your point of view and contest
  any decision based on automated processing, including profiling.

You may exercise the above rights by contacting the Data Controller by e-mail at privacy@cconsulting.it or by ordinary mail addressed to: C Consulting S.p.A., Genova (GE), Via Giuseppe Macaggi n. 18, CAP 16121.

Right to Lodge a Complaint

If you believe that the processing of your personal data infringes Regulation (EU) 2016/679, you have
the right to lodge a complaint with the competent Data Protection Authority pursuant to Article 77 of
the GDPR (by e-mail to garante@gpdp.it, or by post to the Italian Data Protection Authority (Garante
per la Protezione dei Dati Personali), Piazza Venezia 11, Scala B, 00187 Rome, Italy), or to bring legal
proceedings before the competent judicial authorities pursuant to Article 79 of the GDPR.

Data Controller
C Consulting S.p.A.