B.L. MEDITERRANEO S.R.L.
WEB Disclosure GDPR 679/16 EU
All.C04

INFORMATION CONCERNING THE REGULATION AND THE PROTECTION OF THE TREATMENT OF PERSONAL DATA PURSUANT TO D. LGS. 196/2003, ADAPTED BY D. LGS. 101/2018 TO GDPR 679/16 EU

B.L. MEDITERRANEO S.R.L. with headquarters in BOLOGNA (BO) Galleria Cavour, 4, 40124 P. Iva 02598631204 CF 02598631204 as Data Controller - in accordance with Legislative Decree no. 196/2003 adapted from Legislative Decree 101/2018 to GDPR 679/16 EU with specific reference to article 13 GDPR 679/16 - provides the following information to the persons (hereafter defined as Concerned party) whose personal data they acquire and process. It is possible to contact the Data Controller by telephone at +39. 051.6606044 via e-mail address: amministrazione@bl-bagline.it, and via the web address: www.bl-bagline.it This privacy policy applies exclusively to the online activities of this site and is valid for users of the site. It does not apply to information collected through channels other than this website. The site complies with the regulations in force, concerning the protection of personal data both at National and at Community level.

1 Personal data may be processed for the following purposes:

a. For security purposes. The website uses log files that allow the acquisition of information collected in an automated and aggregate form. The owner can take actions to protect security by acting on the IP address (personal data) of the user when potentially harmful behavior occurs. No profiling activity or user identification is allowed. Data is acquired anonymously and may include:
- IP address
- Browser of use
- Date and time of connection,
- Page of origin or referral

b. In order to facilitate user navigation on the site.
Non-persistent technical cookies are not used to perform user profiling, but just storing in an automated way client information that can be reused during the same browsing session on the company website. This information will not be reused on subsequent accesses. Analytical cookies, while anonymously classifying the user, are used in order to monitor the reuse of the site at different times by individual users, always anonymously. The technical cookies of third parties are intended to facilitate the consultation of specific areas of the website.
Data is acquired anonymously and may include:
- Technical cookies
- Third-party cookies
- Analysis cookies
- Plugins social networks

c. In order to send information and commercial communications (i.e. - newsletters).
In this case, the communication of personal data is optional. The failure to communicate such data precludes the possibility of using the service. The data acquired is of a registry nature or non-personal business data that may include:
- Name and surname
- Role performed at the company on whose behalf the Concerned party works
- Telephone contact details, fax, e-mail,

Personal data for the aforementioned purposes is collected to a pertinent extent, relevant and limited to what is necessary, with respect to the purposes for which they are processed. The company policy can be consulted on the web at www.bl-bagline.it

2. Some data may be transferred to recipients located in countries outside the European Union. Some data are transmitted, through analytical cookies and plugins, to owners of services and social platforms such as Google, Facebook, Microsoft (Linkedin), and Google Analytics. The transfer of such data is authorized by the European and Italian institutions, with explicit reference to the decision 1250/2016 (Privacy Shield - here the information page of the Italian Data Protection Authority), to which the policies of third parties are compliant.

3. Types of data (Use of cookies):

• Definition of cookies:
Cookies are short fragments of text (letters and / or numbers) that allow the web server to store on the client (the browser) information to be reused in the course of the same visit of the site (session cookies) or later, even after days (persistent cookies). Cookies are stored, according to user preferences, by the single browser on the specific device used (computer, tablet, smartphone).

• Technical cookies.
Technical cookies are those used for the sole purpose of "transmitting a communication on an electronic communication network", and are not used for any other purposes. They are installed directly by the owner or operator of the website. They can be divided into navigation cookies or session ones, which guarantee the normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas); analytic cookies, similar to technical cookies, are used to collect information, in aggregate form, on the number of users and on how they visit the site;

• Third-party cookies.
By visiting the Website, the Concerned Party can receive technical cookies of "third parties", managed by other organization; these are parts of the visited page generated directly by the aforementioned sites and integrated into the page of the host site. Usage is aimed at the use of requested services. The presence of these plugins involves the transmission of cookies to and from all sites managed by third parties. The management of the information collected by "third parties" is governed by the relative disclosures to refer to. To ensure greater transparency and convenience, hereunder are listed the web addresses of the various disclosures and how to manage such cookies.

• Google Analytics
The website of BL Mediterraneo S.r.l. also includes certain components transmitted by Google Analytics, a web traffic analysis service provided by Google, Inc. ("Google"). Also in this case, these are third-party cookies collected and managed anonymously, to monitor and improve the performance of the host site (performance cookies). Google Analytics uses "cookies" to collect and anonymously analyze information on the use of the BL Mediterraneo Srl website. (including the user's IP address). This information is collected by Google Analytics, which processes it in order to prepare reports for the operators of BL Mediterraneo S.r.l. regarding the activities on the websites themselves. This site does not use (and does not allow third parties to use) the Google analysis tool to monitor or collect personal identification information. Google does not associate the IP address with any other data held by Google, nor does it attempt to link an IP address with the identity of a user. Google may also communicate this information to third parties where required by law or where such third parties process the information on Google's behalf. For further information, please refer to the link below: https://www.google.it/policies/privacy/partners/ The user can selectively disable the action of Google Analytics by installing the opt-out component provided by Google on their own browser. To disable the action of Google Analytics, please refer to the following link https://tools.google.com/dlpage/gaoptout

• Youtube cookies
Youtube is a platform owned by Google, for video sharing, which uses cookies to collect information from users and navigation devices. In most cases, cookies are released upon exclusive request for reproduction of content carried out by the user.

• Plugin social network
This site can also incorporate plugins and / or buttons for social networks, in order to allow easy sharing of content on social platforms. Cookies are set as required by individual social networks, normally only when the user makes effective and voluntary use of the plugin. The collection and use of information obtained by means of the plugin are governed by the respective privacy policies of such social networks, to which reference is made hereunder.
- Facebook - (cookie information link)
- Twitter - (cookie information link)
- LinkedIn - (cookie information link)
- Google+ - (cookie information link).

• Duration of cookies
The cookies (session cookies) remain active only until the browser is closed, or when the logout command is executed. Other cookies "survive" when the browser is closed and are also available in subsequent visits by the user. These cookies are called persistent and their duration is set by the server when they are created. In some cases a deadline is set, in other cases the duration is unlimited. However, by browsing the site, you can interact with sites managed by third parties that can create or modify permanent and profiling cookies

• Disabling cookies
The user can decide whether or not to accept cookies using the settings of his/her browser. The usability of public content is possible even when completely disabling the cookies.
The disabling of "third-party" cookies does not affect the navigability in any way. The setting can be defined specifically for different websites and web applications. In addition, the best browsers allow you to define different settings for cookies "owners" and those of "third parties".

Here are the links to the disabling tools of the main browsers:
-Mozilla Firefox - Windows Internet Explorer - Google Chrome - Opera - Apple Safari

4. The rights of the Concerned party (articles from 15 to 22) provide for the possibility to ask the Owner:

a) Access to personal data and information relating to the purposes of the processing, to the categories of personal data processed, to the recipients or categories of recipients to whom the data is communicated, to the retention period,

b) The correction of personal data

c) The cancellation of personal data in the following cases:
- if no longer necessary with respect to the purposes of the processing
- if the Concerned party has given consent for one or more specific purposes
- where there are no legitimate reasons prevailing over the rights and freedoms of the
Concerned party or for the assessment, exercise or defense of a right in court
- if the data is unlawfully processed
- where provided for by legal obligations that bind the Holder
- if the treatment interests minors under the age of 16

d) Limiting the processing of personal data in the following cases
- Imprecision of the data, for the period necessary for the holder to verify its accuracy
- Illicit treatment in an alternative way to cancellation
- Although the holder no longer needs it, personal data are necessary to the Concerned Party to establish, exercise, or defend in court.
- The Concerned party has opposed the treatment in the protection of his/her interests and fundamental freedoms, without prejudice to legal prevailing binding reasons.

• The Concerned party has the right to data portability pursuant to art. 20

The Concerned party has the right to receive - as long as this will not damage the rights or freedom of others, in a structured format, in common use and readable by automatic device - the personal data concerning him/her, provided to a data controller, and has the right to transmit such data to another data controller without hindrance by the data controller to whom he / she has provided them if:

a) The Concerned party has expressed consent to the processing of his/her personal data for one or more specific purposes

b) Personal data reveal the racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or do not constitute biometric data intended to uniquely identify the person concerned, data related to health or life sexual orientation or sexual orientation and have been provided with explicit consent.

c) The processing of personal data is necessary for the execution of a contract of which the Concerned party is a direct subject or for the execution of pre-contractual measures of the same.

d) The treatment is carried out by automated means

In case of request, by the Concerned party, the Owner undertakes to provide him/her, free of charge, the description of the execution of the requested actions within one month from the date of the request, where possible, by electronic means.

• The Concerned party has the right to oppose according to the art. 21

a) At any time, for reasons related to his/her particular situation with regard to the processing of personal data concerning him/her, if the data is necessary for the performance of a task carried out in the public interest, or if connected to the exercise of official authority vested in the holder of the processing (Article 6 Par e) or if the data are necessary for the pursuit of the legitimate interests of the data controller, or third parties (Article 6 Par f).

b) The Concerned party has the right to object to the processing of personal data when processed for direct marketing purposes. In this case, personal data will no longer constitute an object for these purposes.

• The Concerned party has the right to withdraw consent to the processing of personal data:
a) At any time, without prejudice to the lawfulness of the processing, based on consent given before the revocation

• The Concerned party has the right to lodge a complaint with a Supervisory Authority