Notice on personal data protection. Legislative Decree 30 June 2003, No. 196

The following notice is provided to describe the methods of processing personal information provided by users of our services to allow for the expression of free and informed consent.

We remind you that, according to the Privacy Code, personal data processing means any operation or set of operations, carried out with or without the aid of electronic tools, concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation, and destruction of data, even if not recorded in a database.

The data processing carried out by Virtual Solution srl will be based on the principles of fairness, lawfulness, and transparency to offer the best protection of the client's confidentiality and rights.

Purpose of data processing

The personal data provided by users will be processed by our company for the following purposes:

• To execute the contractually agreed service and any additional requested services;
• To comply with legal, accounting, and tax obligations;
• To protect the rights of our company and its representatives and/or appointees in court.

Navigation data

For the correct functioning of the Virtual Solution srl website and the services provided, computer systems and software procedures are necessary, which, during their normal operation, acquire certain personal data whose transmission is implicit in the use of internet communication protocols.

This data is not collected to be associated with identified subjects, but due to its nature, it could, through processing and associations with data held by third parties, allow for the identification of users (e.g., IP addresses).

Such data is used only for anonymous statistical information related to the use of the service and to verify its correct functioning, and it is deleted immediately after processing in accordance with current regulations.

Cookies

Access to the site www.server.it (or part of the network) may involve sending, from our servers to the user's PC, so-called "cookies," i.e., files that allow information to be obtained about the pages visited to make the use of the various services faster.

The use of cookies is limited to the duration of the session and in no way allows the acquisition of personal data identifying the user. The acquired data will not be stored but will be deleted when the browser is closed.

The user can choose at any time to disable cookies simply by changing the settings of the navigation browser; however, we remind you that disabling cookies may slow down or prevent access to some sections of the site.

Data controllers and processors

The data controller is Virtual Solution srl, located at Via San Mama 113 – 48121 Ravenna (Ra).

The updated list of data processors, if appointed, is available at the address indicated above.

The customer can contact the data controller at any time to exercise their rights as provided for in article 7 of the code.

Data retention and security measures

Data will be retained for the periods established by applicable law on the servers of Virtual Solution srl.

In any case, the data retention period will equal the duration of the contractual relationship between the customer and the data controller.

If the customer deletes their account and ceases to use the services, the data will be deleted, except for the need to fulfill contractual, administrative, tax, accounting, or legal obligations after the termination of the service. Once these obligations have been met, the data will be deleted in any case.

Secure data deletion

With the provision of October 13, 2008 (G.U. No. 287, December 9, 2008), the Data Protection Authority provided some recommendations for the proper reuse, recycling, or disposal of electrical and electronic equipment, followed by the December 12, 2008 information sheet containing operator recommendations for secure data deletion. Virtual Solution srl, aware that "data destruction or deletion" is fully within the scope of processing operations provided by the Privacy Code, carries out data deletion using the wiping technique, done with automatic tools.

Right to access personal data and other rights

The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning them, even if not yet recorded, and its communication in an intelligible form.

The data subject has the right to obtain information on:

• The origin of personal data;
• The purposes and methods of processing;
• The logic applied in case of processing carried out with the help of electronic tools;
• The identification details of the controller, processors, and the designated representative pursuant to article 5, paragraph 2;
• The subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as designated representatives in the territory of the State, processors, or appointees.

The data subject also has the right to obtain:

• The updating, rectification, or, when interested, integration of data;
• The deletion, anonymization, or blocking of data processed in violation of the law, including data that is unnecessary for the purposes for which it was collected or subsequently processed;
• The confirmation that the operations referred to in points 1. and 2. have been brought to the attention, also with regard to their content, of those to whom the data has been communicated or disseminated, except in cases where such fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right.

The data subject has the right to object, in whole or in part:

• For legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of the collection;
• To the processing of personal data concerning them for the purpose of sending advertising material or direct sales or for market research or commercial communication.