Suppliers and Consultants Privacy Notice

Pursuant to Articles 13-14 of European Regulation 679/2016 (GDPR)

Data Controller
MILEO STEFANO, with registered office in Nonantola (MO) Italy, Via Golfiera 16, Tax Code/VAT No. IT 03957880366, as the Data Controller of personal data under Article 4 of EU Regulation 2016/679, hereby informs you, pursuant to Article 13 of the Regulation, that it will process your personal data manually and/or with the aid of electronic means for the purposes outlined below.

Types of Data Processed
As a result of the contract (including oral agreements) and during its execution, our organization will collect and process your personal data.
The data processed may include so-called “ordinary” data, such as (by way of example):

• Personal details (e.g., name, surname);

• Residential address, phone number, email address;

• Data contained in identification documents;

• Tax code, VAT number, IBAN/BIC code;

• Professional qualification and training data.

Purposes of Processing
The personal data you provide will be processed for the following purposes:
a) Execution of the supply contract, including any pre-contractual phase and fulfillment of contractual obligations;
b) Management of payments required by law or contract;
c) Compliance with legal, regulatory, or EU obligations;
e) Fulfillment of tax, accounting, and administrative obligations;
f) Responding to your specific requests.

We clarify that our organization will process your data strictly within the limits and conditions imposed by applicable laws and guidelines issued by the relevant authorities.
You are required to promptly notify us of any corrections, additions, or updates to the data provided.

Providing data for the above purposes is optional. However, partial or total refusal to provide data may prevent us from properly managing contractual obligations, complying with legal and tax requirements, or responding to your requests.

Legal Basis
Your personal data will be processed:

• To execute a contract with you or for pre-contractual measures taken at your request;

• To comply with legal, regulatory, or EU obligations, including tax laws.

Data Recipients
Your data may be disclosed to:

• Other group companies, subsidiaries, or affiliates;

• Legal, administrative, tax, or labor consultancy firms;

• Third-party data processors appointed by the Controller (e.g., IT service providers, supervisory authorities);

• Our authorized employees and collaborators within their assigned tasks.

An updated list of external data processors or authorized personnel may be requested via email at: staff@watchmontre.com.

Where necessary and in compliance with relevance principles, your data may also be disclosed to the following categories of entities, who will act as independent Data Controllers:

• Banks, credit institutions, and insurance companies;

• Public administrations and financial offices;

• Notary offices;

• Entities entitled to access data under EU or national law;

• Audit firms.

The Company may also disclose your personal data to third parties:
(i) Where required by EU or member state law;
(ii) In legal proceedings;
(iii) In response to lawful requests from law enforcement;
(iv) To protect the Company’s rights, privacy, security, or property, or to investigate or prevent illegal activities or suspected fraud.

Data Retention Period
In accordance with accounting and administrative principles and potential dispute resolution needs, data will be archived for 10 years after the termination of the contractual relationship. Longer retention may apply if required by competent authorities or applicable laws. After this period, data will be deleted, anonymized, or aggregated.

Data Transfers
The Data Controller does not transfer personal data to third countries or international organizations. However, cloud services may be used, in which case providers will be selected based on adequate safeguards under Article 46 of GDPR 679/16.

Data Subject Rights
Under Articles 13(2) and 15–21 of the GDPR, you may exercise the following rights regarding your personal data:
a) Right of access: Obtain confirmation of processing and details such as purposes, categories of data, recipients, and storage periods.
b) Right to rectification: Correct or complete inaccurate/incomplete data.
c) Right to erasure (“right to be forgotten”): Request deletion if data is no longer necessary, consent is withdrawn, or processing is unlawful.
d) Right to restriction of processing: Limit processing if data accuracy is contested or processing is unlawful.
e) Right to data portability: Receive your data in a structured format or request direct transfer to another controller.
f) Right to object: Oppose processing based on legitimate interests or for direct marketing.
g) Right to lodge a complaint with the Italian Data Protection Authority (Garante) via www.garanteprivacy.it.
h) Right not to be subject to automated decision-making, including profiling, unless necessary for a contract or based on explicit consent.
i) Right to withdraw consent at any time (where applicable).

Exercising these rights is free of charge and not subject to formal requirements.

How to Exercise Your Rights
You may exercise your rights by sending:

• A registered letter to: MILEO STEFANO, Via Golfiera 16, 41015 Nonantola (MO), Italy;

• An email to: staff@watchmontre.com.

Data Controller
The Data Controller is: MILEO STEFANO.

Last Updated: May, 22 2025