Rainbow

Rainbow S.r.l. wants to inform you that Legislative Decree Nr 196 of 30 June 2003 ('Code regarding the protection of personal data') provides for the protection of persons and other subjects regarding the processing of personal data necessary to respond to its request for information.

The data controller wishes to inform you that the use of your personal data by Rainbow's staff will follow the purposes and the procedures indicated in this statement.

The controller is identified in the person of Luca Bagnoli.

A. Aims of processing data:

The processing of your data will be for the following purposes:

1. for consultation, development and the subsequent response to your requests for information;
2. to fulfill any kind of obligation contemplated and provided for by existing laws, regulations, standards and related commercial uses, in particular, relating to tax/fiscal matters;
3. for necessity of monitoring the progress of relations with the interested parties (to improve these relationships);
4. to send promotional information about our activities and those of our partners.

B. Methods of data processing.

Your personal data will be handled primarily by computer and will be stored in an archive in paper and electronic database of the company, to fulfill the obligations and objectives set out in paragraph A) of this statement. The data contained in that automated information system are processed using appropriate security measures in accordance with Art. 31 of Legislative Decree 196/03, in order to minimize the risk of destruction or loss, unauthorized access or treatment for any purpose of the collection.

C. Nature of the contribution and consequences of the refusal to answer.

We also declare that disclosure of information is essential but not mandatory and possible refusal has no effect, but involves the inability to respond to your request for information.

D. Data communications.

The personal data collected for the purposes specified in paragraph A shall not be disclosed to third parties without your express consent.

E. Rights of the concerned person.

You have the right at any time to obtain confirmation of the existence of their data and to know the content and origin, verify its accuracy or request its integration or updating, correction or deletion. In addition, you can always exercise all other rights granted to you by art. 7, D. Decree 196/2003, including in particular, to oppose, for legitimate reasons, the treatment itself. The text of this article contains a list of rights recognized by law the person is still fully quoted below.

Art 7. D. Decree 196/2003 'Right to Access Personal Data and Other Rights'

1. The individual has the right to obtain confirmation of the existence of personal data concerning him, even if not yet registered, and their communication in an intelligible form.
2. The individual has the right to be informed:
   1. the source of personal data;
   2. the purposes and processed;
   3. the logic applied in case of processing with the use of electronic means;
   4. identification of the owner, managers and the representative appointed under Article 5, paragraph 2;
   5. the people or categories of persons to whom the data may be distributed or who may become aware as designated representative in territory of the State, managers or agents.
3. The individual has the right to:
   1. the updating, correction or, if interested, the integration of data;
   2. the cancellation, transformation into an anonymous form or block of data processed in violation of law, including those which are not required to be held for the purposes for which the data were collected or subsequently processed;
   3. confirmation that the operations in letters a) and b) have been notified, including as related to their content, to those whose data were communicated or disclosed, except where this is impossible or involves a manifestly disproportionate to the protected right.
4. The individual has the right to object, in whole or in part:
   1. for legitimate reasons, the processing of personal data, even if pertinent to the purpose of collecting;
   2. the processing of personal data for the purpose of sending advertisements or direct sales or for carrying out market research or commercial purposes.