Cookie and Privacy Policy

Cookie and Privacy Policy

This notice, which is intended for all persons browsing the website athttps://digitalarena.biessegroup.com/it/ (hereinafter, " Site"), is issued pursuant to Article 13 of European Regulation No. 2016/679 on the protection of personal data 679/2016 (hereinafter, "GDPR") and, with regard to cookies, in accordance with Article 122 of Italian Legislative Decree 196/2003 (hereinafter, "Privacy Code"), as well as in accordance with the Provision of the Italian Data Protection Authority, "Identification of the simplified methods for the provision of information and acquisition of consent for the use of cookies" of 8 May 2014, as supplemented by the "Guidelines on cookies and other tracking tools" of 10 June 2021 (hereinafter, "Provision").

1) Information on the Data Controller

The Data Controller is Biesse S.p.A., with registered office at Via della Meccanica, 16, Pesaro, Italy, phone number: +39 0721 439100, Tax Code and VAT number IT 00113220412 Companies Register Pesaro Urbino No. 1682(hereinafter referred to as "Biesse" or " Controller").

2) Types of data processed

2a) Browsing data

The IT systems and software procedures in place to ensure that the Website runs smoothly acquire, during their normal functioning, certain personal data which are implicitly sent when the Internet communication protocols are used. This information is not collected to be associated with identified Data Subjects, but instead consists of information which, by its very nature, when processed and associated with data held by third parties, could lead to the identification of the users. This data category includes the IP addresses or domain names of the computers used by those who connect to the Website, the URIs (Uniform Resource Identifiers) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters relative to the user’s operating system and IT environment. These data are used for the following purposes:

• to obtain anonymous statistic information about the use of the Website and to check that it is working properly;
• for the technical administration of the Website;
• to ascertain any liability in case of alleged computer crimes committed to the detriment of the Website.

This data is kept for 24 months.

2b) Data provided voluntarily by the user

On some sections of the Website it is necessary to provide your personal data to use certain services. In this case, you will be provided with a specific notice issued pursuant to Article 13 of the GDPR regarding the processing of the personal data requested in relation to the specific purposes being pursued.

2c) Cookies

Our website uses cookies.

What cookies are

Cookies (or markers) are small text files that are sent by the web server visited by the user to their device (usually to the browser), when the user accesses a specific website. Their purpose is to store and send information. They are memorised so that the device can be recognised the next time the website is visited. Indeed, at each subsequent visit, the cookies are re-sent by the user's device to the website.

Each cookie generally contains:

• the name of the server from which the cookie has been sent;
• the expiry and a value, usually a unique number generated randomly by the computer.

First-party and third-party cookies

Cookies can not only be installed by the manager of the website visited by the user (first party cookies), but also by a different website that installs cookies via the first website (third party cookies) and is capable of recognising them. This occurs because the visited website can host elements (images, maps, sounds, specific links to pages of other domains, etc.) that lie on different servers from the one on which it is hosted.

Technical, analytical and profiling cookies

Depending on their purpose, the cookies can be divided into technical cookies and profiling cookies.

Technical cookies are cookies used only to “ send a communication on a digital communication network or, to the extent strictly necessary, to the supplier of a service who has been explicitly asked by the subscriber or user to provide said service ”." (cf. Article 122, paragraph 1 of the Privacy Code, as amended by Italian Legislative Decree 69/2012). In particular, these cookies are normally used to enable users to navigate efficiently through the pages, memorise their preferences (language, country, etc.), perform digital authentications, manage the shopping cart or enable users to make purchases online, etc.

Technical cookies can be divided into browsing cookies, used to record data useful for normal browsing and use of the website on the user's computer (e.g. allowing preferred page size in a list to be remembered) and functional cookies, which allow the website to remember the choices made by the user to optimise its functionality (e.g. functional cookies allow the website to remember a user's specific settings, such as country selection and, if set, permanent access status). Some of these cookies (known as essential or strictly necessary) enable functions without which it would be impossible to carry out certain operations.

Pursuant to the aforementioned Article 122, paragraph 1 of the Privacy Code, user consent is not required for the use of technical cookies, but there is an obligation to inform the user of these.

Pursuant to the Provision, so-called analytical cookies are treated the same as technical cookies - and, therefore, user consent is not required for their installation - if:

i) they are created and used directly by the first party website operator (and therefore without the intervention of third parties) for the purpose of optimising the website to collect aggregate information on the number of users and how they visit the website, as well as

ii) if they are created and made available by third parties, where:

a. they are used by the first party site for purely statistical purposes, if suitable minimisation measures are adopted in order to reduce their power to be used for identification purposes (e.g. by masking appropriate portions of the IP address), and used solely for the production of aggregate statistics and in relation - as a rule - to a single site or single mobile application, so as not to allow the tracking of the individual's browsing habits as they use different applications or visit different websites;

b. the third parties who provide the web measurement service to the site do not combine, enrich or cross-reference the data - even where this information has been minimised as above - with other information available to these third parties (e.g. customer files or statistics regarding visits to other sites), or transmit the data to other third parties.

Profiling cookies are used to track the user's browsing, analyse user behaviour for marketing purposes and create user profiles based on their tastes, habits, choices, etc. in order to send targeted advertising messages with reference to the user's interests and in line with the preferences expressed by the latter when browsing online. Pursuant to Art. 122 of the Privacy Code,, these cookies can be installed on the user's terminal only if they have given their consent with the simplified procedures identified by the Italian Data Protection Authority in the Provision (publication on the website of a "short" notice in a pop-up banner which appears immediately on the home page (or other page through which the user can access the website), which refers to an "extended" notice, which is accessed through a link that can be clicked by the user).

Persistent and session cookies

Based on their duration, cookies can be classed as persistent cookies, which remain memorised until their expiry on the user's device, unless the latter removes them, and session cookies, which are not persistently memorised on the user's device and disappear when the browser is closed.

Cookies used by this Website

Technical cookies

This website uses technical cookies, installed by the website itself to ensure and monitor the website operation, allow efficient browsing on the website and the use of the contents and services requested by the user.

These cookies, allow you to access to the website again without having to enter your data each time.

This type of cookie cannot be disabled and the prior consent of users is not required for their installation.

The name, purpose and duration of each technical cookie used are specified below.

Analytical and identification cookies used for marketing purposes

The Website uses analytical cookies created and made available by Google to statistically analyse accesses or visits to the Website itself, allowing the Owner to improve its structure, browsing logic and content and collect information on the use of the Website.

These cookies, appropriately anonymised (by masking significant parts of the IP address), allow aggregate information to be collected on the number of users and how they visit the website.

These cookies, where users have given consent on the registration form and/or on the contact form for processing for profiled marketing purposes, are also used - through the use of the "collect" Pixel Tracker (which allows the individual user to be identified) - for monitoring while browsing the Website, tracking and memorising preferences and thereby creating profiles allowing personalised messages to be sent in line with individual interests.

For more details and information, visit the following links: https://support.google.com/analytics/answer/1011397 e

https://support.google.com/analytics/?hl=it#topic=3544906.

The name, purpose and duration of each analytical and identification cookie used are specified below.

Profiling cookies

Profiling cookies are only installed where the user gives his or her consent to data processing for profiled marketing purposes, as indicated in more detail in the following paragraph.

The cookies of this type used by Biesse are specified in the table below.

Unclassified cookies

Unclassified cookies are those in the process of being classified, together with individual cookie providers.

Methods for giving and withdrawing consent for the installation of analytical and identification cookies used for profiling purposes, and for profiling cookies

The analytical and identification cookies used for profiling purposes, as well as profiling cookies, will be installed on your devices only with prior consent, given by selecting the OK button in the banner containing the short notice or by using the appropriate "cookie centre", where it is possible to manage cookies separately (both by selecting and deselecting them) for the purposes indicated above. The consent to the use of cookies is registered with a special "technical cookie".

However, you can also express your cookie preferences through your browser settings. Almost all web browsers are configured by default to automatically accept all cookies. However, it's possible to change this default configuration through your browser settings, which allow you to delete and/or remove all or some cookies, block the sending of cookies or limit it to certain websites. Deactivating/blocking or deleting the cookies could however preclude certain areas of the website from being used to optimum effect, prevent certain services from being used and slow down the browsing experience.

How the cookie management settings are configured depends on the browser used. Usually, the cookie settings can be adjusted from the "Preferences", "Tools" or "Options" menu.

The links to the cookie management guides for the main browsers are provided below:

• Internet Explorer: http://support.microsoft.com/kb/278835
• Internet Explorer [mobile version]: http://www.windowsphone.com/en-us/how-to/wp7/web/changing-privacy-and-other-browser-settings
• Edge: https://support.microsoft.com/en-gb/help/4027947/microsoft-edge-delete-cookies
• Chrome: http://support.google.com/chrome/bin/answer.py?hl=en-B&answer=95647
• Safari: http://docs.info.apple.com/article.html?path=Safari/5.0/en/9277.html
• Safari [mobile version]: http://support.apple.com/kb/HT1677
• Firefox: http://support.mozilla.org/enUS/kb/Enabling%20and%20disabling%20cookies
• Android: http://support.google.com/mobile/bin/answer.py?hl=en&answer=169022

For browsers other than those listed above, see the relevant guide for details on how to manage cookies.

3) Methods of processing

The processing of personal data is carried out with automated tools for the time strictly necessary to achieve the purposes for which the data was collected and, in any event, in compliance with current regulations on the matter.

4) Recipients and transfer outside the EU

Data may be disclosed to Biesse distributors who are assigned the country indicated by you on the form as an exclusive area, including those based outside the EU, who will process it, as autonomous data controllers, for their marketing purposes, if you have given your consent.

Data is processed by parties providing services Biesse, including those instrumental to the purposes noted in this policy. These parties are designated as data processors by Biesse, including those with registered offices outside the EU, and include: the Acanto Comunicazione S.r.l. company, which manages the Digital Arena website; sales agents; as well as the company that provides the CRM software (and in particular the Salesforce Services - i.e. Sales Cloud, Service Cloud, Chatter and Communities – and Marketing Cloud services), currently salesforce.com EMEA Limited, with registered office in UK.

Salesforce.com has adopted the Binding Corporate Rules ("BCR") for Processors to legitimise the transfer of personal data outside the European Union to companies within its group that process such data on behalf of Data Controllers established in a member state in their capacity as Data Processors and/or Sub-Data Processors.

Salesforce's Processor Binding Corporate Rules are available at the following link https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/misc/Salesforce-Processor-BCR.pdf.

For further information, please see the following links https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/EU-Data-Transfer-Mechanisms-FAQ.pdf e https://help.salesforce.com/articleView?id=000314281&type=1&mode=1 (“Where is my Salesforce instance located?”).

Your data may be communicated to independent data controllers such as supervisory and control authorities and bodies and, in general, public or private parties entitled to request/receive the data.

5) Your rights

With regard to the processing of the personal data as carried out by the Data Controller, you may ask the Controller to exercise the rights recognised under Articles 15-22 of the GDPR and in particular may request access to data concerning you and the information referred to in Art. 15 (processing purpose, categories of personal data, etc.), erasure of the data in the cases provided for by Art. 17, rectification of inaccurate data, integration of incomplete data and restriction of processing in the cases provided for by Art. 18, as well as the right to receive the data in a structured format, which is commonly used and readable by an automatic device (“right to data portability”).

To exercise your rights you can send a written request, addressed to the Data Controller, to the physical address above or the following email address privacy@biesse.com.

For information on selected or deselected cookies, specify the ID of the preferences you selected and the relative information that appears on this page.

Your current status:

The ID of the preferences you selected:

Date of selecting preferences:

Changing to your preferences

At any time, you have the right to lodge a complaint with the competent supervisory authority in the Member State where you habitually reside or in the Member State where the alleged infringement has occurred (Art. 77 GDPR), as well as taking appropriate legal action (Art. 79 GDPR).

6) Contact information for the Data Protection Officer (DPO)

Biesse has appointed a DPO who can be contacted at the following email address dataprotectionofficer@biesse.com .