Customer Privacy Notice

Pursuant to Articles 13 and 14 of EU Regulation No. 679/2016 (GDPR)

Data Controller

MILEO STEFANO, with registered office in Nonantola (MO) Italy, Via Golfiera 16, Tax Code/VAT No. IT 03957880366, as the Data Controller of personal data under Article 4 of EU Regulation 2016/679 (GDPR), hereby informs you, pursuant to Article 13 of the Regulation, that it will process your personal data manually and/or electronically for the purposes outlined below.

Types of Data Processed

Due to the establishment of a contract (including oral agreements) and during its execution, our organization will collect and process your personal data.
The data processed may include so-called “ordinary” data, such as (by way of example):

• Personal details (e.g., name, surname, date of birth);

• Residential address, phone number, email address;

• Data contained in identification documents;

• Tax code, VAT number, IBAN/BIC code.

Purposes of Processing

Your personal data will be processed for the following purposes:
a) Management of payments required by law or contract and the exercise of related rights;
b) Compliance with legal or contractual obligations and the exercise of related rights;
c) Fulfillment of tax, accounting, and administrative obligations, including communications to financial authorities.

Providing data for contractual, legal, or tax compliance purposes is mandatory. Your refusal (even partial) to provide such data will make it impossible to fulfill the contract or continue the existing contractual relationship.

Our organization will process your data strictly in compliance with applicable laws and guidelines issued by the relevant authorities. You are required to promptly notify us of any corrections, additions, or updates to the data provided.

Legal Basis for Processing

Your personal data will be processed:

• To execute a contract with you or for pre-contractual measures taken at your request;

• To comply with legal, regulatory, or EU obligations, including tax laws.

Marketing communications related to products/services similar to those covered by the contract will be sent based on the Controller’s legitimate interest.

Data Recipients

Your data may be disclosed to:

• Group companies, subsidiaries, or affiliates;

• Legal, administrative, tax, or labor consultancy firms;

• Third-party data processors (e.g., IT service providers, supervisory authorities);

• Authorized employees and collaborators within their assigned tasks.

An updated list of external data processors or authorized personnel may be requested via email at: staff@watchmontre.com.

Where necessary and in compliance with relevance principles, your data may also be disclosed to the following independent Data Controllers:

• Banks, credit institutions, and insurance companies;

• Factoring or debt collection agencies;

• Public administrations and financial offices;

• Notary offices;

• Entities entitled to access data under EU or national law;

• Audit firms.

The Company may also disclose your personal data to third parties:
(i) Where required by EU or member state law;
(ii) In legal proceedings;
(iii) In response to lawful requests from law enforcement;
(iv) To protect the Company’s rights, privacy, security, or property, or to investigate/prevent illegal activities or suspected fraud.

Data Retention Period

For compliance with accounting, administrative, and tax laws, data will be archived for 10 years after the termination of the contractual relationship. Longer retention may apply if required by competent authorities or applicable laws. After this period, data will be deleted, anonymized, or aggregated.

Data Transfers

The Data Controller does not transfer personal data to third countries or international organizations. However, cloud services may be used, in which case providers will be selected based on adequate safeguards under Article 46 of GDPR 679/16.

Data Subject Rights

Under Articles 13(2) and 15–21 of the GDPR, you may exercise the following rights:
a) Right of access – Obtain confirmation of processing and details (purposes, categories of data, recipients, etc.).
b) Right to rectification – Correct inaccurate/incomplete data.
c) Right to erasure (“right to be forgotten”) – Request deletion if data is no longer necessary, consent is withdrawn, or processing is unlawful.
d) Right to restriction of processing – Limit processing if data accuracy is contested or processing is unlawful.
e) Right to data portability – Receive your data in a structured, machine-readable format.
f) Right to object – Oppose processing based on legitimate interests or for direct marketing.
g) Right to lodge a complaint with the Italian Data Protection Authority (Garante) via www.garanteprivacy.it.
h) Right not to be subject to automated decision-making, including profiling (unless necessary for a contract or based on explicit consent).
i) Right to withdraw consent (where applicable).

Exercising these rights is free of charge and not subject to formal requirements.

How to Exercise Your Rights

You may exercise your rights by sending:

• A registered letter to: MILEO STEFANO, Via Golfiera 16, 41015 Nonantola (MO), Italy

• An email to: staff@watchmontre.com

Data Controller

The Data Controller is: MILEO STEFANO.

Last Updated: May, 22 2025