PRIVACY POLICY

Mav arreda, Corso Lodi 2 - 20135 Milano, P.I. IT05919160969. is constantly striving to protect the online privacy of the users of the websites www.outlet.lago.it, www.mavarreda.it (hereinafter, unless otherwise jointly referred to as the "Site").

This document ("Policy") has been prepared to help you understand how your Personal Data, as defined below, will be processed when you use the Site. The Information Notice is intended to provide you with the information necessary for you to express your explicit and informed consent to the processing of your Personal Data through the Site, if you deem it appropriate.

In general, any information or personal data that you provide to Mav arreda through the Site, or that is collected in any other way through the Site, in the context of the use of the services offered (the "Services"), as better defined in Section 3 below, will be processed in accordance with the internationally recognized principles of lawfulness, fairness, transparency, purpose limitation and conservation, data minimization, accuracy, integrity and confidentiality.

INDEX

1. Data controller

2. The personal data being processed

a. Name, contact details and other Personal Data

b. Applications

c. Special categories of Personal Data

d. Data provided voluntarily by the data subject and data of minors

e. Navigation data

f. Cookies

3. Purpose of processing

4. Legal basis and obligatory or optional nature of processing

5. Recipients of personal data

6. Transfers of personal data

7. Retention of personal data

8. Rights of the data subject

9. Changes

1. Data Controller

Mav arreda, as identified at the beginning of the Information Notice, is the Data Controller for all Personal Data processed through the Site and can be contacted at the following address: info@mavarreda.it

2. The Personal Data being processed

As a result of browsing the Site, we inform you that Mav arreda will process your Personal Data, which may consist - also depending on your decisions on how to use the Services - of an identifier such as your first name, last name, tax code, province of residence, telephone number, e-mail address, an identification number such as customer code, an online identifier or one or more elements that are characteristic of your physical, physiological, psychological, economic, cultural or social identity that can make you identified or identifiable (hereinafter only "PersonalData "). PersonalData").

Your Personal Data may be collected either because you voluntarily provide it (e.g. when you fill in an online form in order to receive the Services offered) or simply by analysing your behaviour on the Site.

The Personal Data processed through the Site are as follows:

a. Name, contact details and other Personal Data

In various sections of the Site (for example, in the "Contact us" or "Contact us" sections of www.outlet.lago.it and www.mavarreda.it ) you will be asked to enter information such as your first name, last name, telephone number, e-mail address, etc.

In addition, if you participate in surveys or promotions that are made available through the Site, as well as when you communicate with Mav arreda through the contacts on the Site or Customer Service, Mav arreda may collect additional information that you choose to provide.

b. Special categories of personal data

Through the Site (for example, in the "Contact us" or "Contact us" sections of www.outlet.lago.it and www.mavarreda.it, palazzotrevisi.it) you may provide Mav arreda with certain information containing Personal Data.

As these fields are free, you may use them to communicate (voluntarily or involuntarily) some sensitive categories of Personal Data, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data concerning health or sex life or sexual orientation of the person.

Mav arreda invites you not to send such Personal Data unless strictly necessary. In fact, such special categories of Personal Data can be processed only with your explicit consent and in compliance with the law in force at the time. Mav arreda therefore stresses the importance of expressing your explicit consent to the processing of special categories of Personal Data, should you decide to share such information.

c. Data provided voluntarily by the data subject

As already mentioned above, through the Site you are allowed to communicate information of various kinds to Mav arreda, which may contain Personal Data of other people.

With respect to these hypotheses, you act as autonomous data controller, assuming all the obligations and responsibilities of law. In this sense, you grant Mav arreda the widest indemnity in respect of any dispute, claim, request for compensation for damages from treatment, etc.. that may be received by Mav arreda from third parties whose Personal Data have been processed through your use of the functions of the Site in violation of the rules on protection of personal data applicable. In any case, if you provide or otherwise process Personal Data of any third party in the use of the Site, you warrant as of now - assuming all related liability - that such particular case of processing is based on the consent of such third party or on another appropriate legal basis legitimating the processing of such information.

d. Browsing data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and/or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Site or third parties: except for this possibility, at present, data on web contacts do not persist for more than seven days.

e. Cookies

Information on the use of cookies is available in the Cookie Policy of the Site.

3. Purposes of processing

Mav arreda will use your Personal Data, collected through the Site, for the following purposes

• to send you marketing communications, promotions and advertising, market research and surveys, by e-mail, sms, mms, app, traditional mail, telephone and/or through the official pages of Mav arreda on social networks; as well as to send you Mav arreda's newsletter and for other marketing activities in the broadest sense, including prize shows, games and contests, of products and/or services related to Mav arreda and/or third party products and/or services ("Marketing")

• to send you marketing communications by e-mail regarding products and services similar to those you have purchased through the Site ("Soft Marketing");

• to create a profile of you through the use of profiling cookies, where accepted, thus collecting and analysing information about the selections and choices you make through your use of the Site, as well as your general activities on the Site when you are a registered user, thus collecting information about your queries and browsing, and preferences expressed when you download content from the Site. This profile will be used to provide you with information on other products and/or services that Mav arreda believes may be of interest to you and to show you advertisements that may be relevant to your tastes. Targeted advertisements may also be carried out by cross-referencing the information collected by Mav arreda with that present on social media, in respect of which we invite you to consult their respective privacy notices to check their policies on the protection of personal data. All algorithms involved in this process are regularly tested to ensure that you are not offered products that do not interest you ("Profiling");

• comply with legal obligations that require Mav arreda to collect and/or further process certain types of Personal Data ("Compliance");

• prevent or detect any abuse in the use of the Site, or any fraudulent activity and thus allow Mav arreda to protect itself in court ("Abuse/Fraud").

4. Legal basis and mandatory or optional nature of processing

The legal bases used to process your Data, according to the purposes indicated in Paragraph 3 above, are the following:

• Provision of the Service: processing for this purpose is necessary in order to provide you with the Services and, therefore, for the performance of the contract with you. It is not compulsory to provide Mav arreda with your Personal Data for this purpose, but otherwise it will not be possible to provide you with any Service.

• Recruitment: the processing for this purpose is necessary for Mav arreda to consider your Application and, therefore, it is necessary to start the selection process in order to eventually offer you a job position. It is not compulsory to provide your Personal Data for this purpose, but otherwise we will not be able to consider your Application. If you wish to provide special categories of Personal Data (e.g. health data, religion, etc.), Mav arreda will need your specific consent.

• Marketing: processing for this purpose is based on your consent. You are not obliged to give your consent for this purpose and you are free to revoke it at any time without any consequence (except that you will no longer receive marketing communications from Mav arreda). You may revoke your previously given consent by following the instructions in Section 8 of this Policy.

• Soft Marketing: processing for this purpose is based on Mav arreda's interest in sending you marketing communications via e-mail regarding products and services similar to those you have already purchased. You can stop receiving these communications, without any consequence for you (other than the fact that you will not receive any further such communications from Mav arreda) by using the link at the bottom of each such email;

• Profiling: processing for this purpose is based on your consent. You are not obliged to give your consent for this purpose and you are free to revoke it at any time without any consequences (except for the impossibility of benefiting from the personalisation of the commercial offers you will receive). You may revoke your previously given consent by following the instructions in Section 8 of this Policy.

• Compliance: processing for this purpose is necessary in order to comply with any legal obligation. When you provide Personal Data to Mav arreda, it must be processed in accordance with applicable law, which may involve its retention and disclosure to the authorities for accounting, tax or other obligations.

• Abuse/Fraud: Information collected for this purpose will be used only to prevent and/or detect possible fraudulent activity or abuse in the use of the Site and thus allow Mav arreda to protect itself in court.

5. Recipients of Personal Data

Your Personal Data may be shared with the parties listed below (the "Recipients"):

• subjects that typically act as data processors, i.e.: i) persons, companies or professional firms that provide assistance and advice to Mav arreda in accounting, administrative, legal, tax, financial and debt collection matters related to the provision of Services;
• subjects with whom it is necessary to interact for the provision of Services (e.g. suppliers of platforms for sending e-mails, real estate agencies, etc.);
• persons delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks);
• persons authorised by Mav arreda to process Personal Data necessary to carry out activities strictly related to the provision of Services, who have committed themselves to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees);
• persons, entities or authorities to whom it is mandatory to communicate your Personal Data for the purposes of Compliance, Abuse or Fraud, or by order of the authorities.

6. Transfers of Personal Data

Some Personal Data may be shared with recipients outside the European Economic Area. Mav arreda ensures that processing of Personal Data by these recipients is done in accordance with applicable law. Indeed, transfers may be based on an adequacy decision or on Standard Contractual Clauses approved by the European Commission. More information is available by writing to info@mavarreda.it

7. Retention of Personal Data

Personal Data processed for the purpose of the Provision of Services shall be kept for as long as strictly necessary for that purpose (e.g. for contract management). However, as this Personal Data is processed to provide you with the Services, Mav arreda may keep it for a longer period, in particular as may be necessary to protect its interests from possible claims related to the Services.

Personal Data processed for Recruitment purposes will be kept for as long as the position for which you have applied is open or for 24 (twenty-four) months, whichever is shorter. Mav arreda reserves the right to contact Candidates before the expiry of this period to ask them to extend the retention period of their Personal Data or to request an update of the Application. In case of no reply, the Personal Data collected will be deleted.

Personal Data processed for Marketing and Profiling purposes will be retained until such time as you revoke the consent(s) provided for such purposes. Once your consent is revoked, Mav arreda will no longer use your Personal Data for such purposes, but may still retain it, in particular as may be necessary to protect its interests from possible claims based on such processing.

The Personal Data processed for Soft Marketing purposes will be retained until you object to such processing through the link at the bottom of each Soft Marketing e-mail.

Personal Data processed for the purpose of Compliance will be kept for the period required by specific legal obligations or applicable legislation.

The Personal Data processed for the purpose of preventing Abuse/Fraud will be kept for the time strictly necessary for the aforesaid purpose and therefore until the moment when Mav arreda will be obliged to keep it in order to protect itself in court and communicate it to the competent Authorities.

8. Rights of the interested party

You have the right to ask Mav arreda, at any time

• access to your Personal Data, (or a copy of such Personal Data), as well as further information on the ongoing processing of your Personal Data;
• the rectification or updating of your Personal Data processed, where it is incomplete or out of date
• the deletion of your Personal Data from Mav arreda's databases;
• the restriction of the processing of your Personal Data by Mav arreda;
• to obtain in a structured, commonly used and machine-readable format the Personal Data concerning you;

as well as you can:

• object to the processing of your Personal Data (e.g. Soft Marketing and Profiling);
• withdraw your consent for Marketing purposes.

When requesting the Services, you may have selected through which communication channels you wish to be contacted for Marketing purposes (i.e. e-mail, sms, mms, app, traditional mail, telephone and/or through Mav arreda's official pages on social networks).

You may revoke your consent for Marketing related to each of these communication channels through the modalities indicated below.

You may also revoke your consent to Marketing sent by e-mail, including the newsletter, and stop receiving Soft Marketing by using the appropriate link at the bottom of each e-mail received.

Consent to Profiling via cookies may be revoked in the manner set out in the Cookie Policy indicated in Section 2.f above.

In addition to the above, you may also exercise your rights by writing to Mav arreda at the following address: info@mavarreda.it

In any case, you always have the right to lodge a complaint with the competent Supervisory Authority (Garante per la Protezione dei Dati Personali) if you believe that the processing of your Personal Data is contrary to the legislation in force.

9. Changes

This privacy policy is in force from 13/07/2021. Mav arreda reserves the right to modify or simply update its content, in part or completely, also due to changes in applicable legislation. Mav arreda will inform you of such changes as soon as they are introduced and they will be binding as soon as they are published on the Site. We therefore invite you to regularly visit this section to become aware of the most recent and updated version of the privacy policy so that you are always up to date on the data collected and how it is used.