Privacy Policy

1) Introduction Nicola's Art takes your privacy seriously and undertakes to respect it. This privacy policy ("Privacy Policy") describes the personal data processing activities carried out by Nicola's Art through the website www.nicolasart.it and the related commitments undertaken in this sense by the Company. Nicola's Art may process the user's personal data when they visit the Site and use the services and features on the Site. In the sections of the Site where the user's personal data are collected, specific information is normally published pursuant to art. 13 /15 of EU Reg. 2016/679. Where required by EU Reg. 2016/679, the user's consent will be requested before proceeding with the processing of his personal data. If the user provides personal data of third parties, he must ensure that the communication of the data to [Company Name] and the subsequent processing for the purposes specified in the applicable privacy information complies with EU Reg. 2016/679 and with the applicable legislation.

2) Identification details of the owner, manager and of the Privacy Officer Nicola's Art, Via Venzan 8, 38030 Panchià (TN)

3) Type of data processed Visiting and consulting the Site does not generally involve the collection and processing of the user's personal data except for navigation data and cookies as specified below. In addition to the so-called "navigation data"

(see below), personal data voluntarily provided by the user may be processed when the latter interacts with the features of the Site or requests to use the services offered on the Site. In compliance with the Privacy Code,

Nicola's Art could also collect the user's personal data from third parties in the course of its business.

4) Cookies and navigation data The Site uses "cookies". By using the Site, the user consents to the use of cookies in accordance with this Privacy Policy. Cookies are small files stored on the user's computer hard drive. There are two macro-categories of cookies: technical cookies and profiling cookies. Technical cookies are necessary for the correct functioning of a website and to allow the user to navigate; without them the user may not be able to view the pages correctly or to use some services. Profiling cookies have the task of creating user profiles in order to send advertising messages in line with the preferences expressed by the same while browsing. Cookies can also be classified as: 1) "session" cookies, which are canceled immediately when the browser is closed;

2) "persistent" cookies, which remain in the browser for a certain period of time. They are used, for example, to recognize the device that connects to a site, facilitating authentication operations for the user;

3) "own" cookies, generated and managed directly by the manager of the website on which the user is browsing; _ "third-party" cookies, generated and managed by subjects other than the manager of the website on which the user is browsing.

5) Cookies used on the site The site uses the following types of cookies: 1) own, session and persistent cookies, necessary to allow navigation on the site, for purposes of internal security and system administration;

2) third-party session and persistent cookies, necessary to allow the user to use multimedia elements on the Site, such as images and videos;

3) persistent third-party cookies used by the Site to send statistical information to the Google Analytics system, through which Nicola's Art can perform statistical analysis of accesses / visits to the Site. The cookies used pursue exclusively statistical purposes and collect information in aggregate form. Through a pair of cookies, one of which is persistent and the other session (which expires when the browser is closed), Google Analytics also saves a register with the start times of visits to the site and exit from the same. You can prevent Google from detecting data through cookies and subsequent data processing by downloading and installing the browser plug-in from the following address: http://tools.google.com/dlpage/gaoptout?hl=it 4) persistent third-party cookies used by the Site to include the buttons of some social networks (Facebook, Instagram) on its pages. By selecting one of these buttons, the user can publish the contents of the web page of the site he is visiting on his personal page of the relevant social network. The following table shows details of the cookies present on the site. it _utmz Anonymous statistics Third parties www.google.it _PHPSESSION Browsing session Before www.nicolasart.it

The Site may contain links to other sites (so-called third party sites). Nicola's Art does not perform any access or control over cookies, web beacons and other user tracking technologies that could be used by third party sites which the user can access from the Site; Nicola's Art does not carry out any checks on the contents and materials published by or obtained through third-party sites, nor on the relative methods of processing the user's personal data, and expressly declines any relative responsibility for such eventualities. The user is required to check the privacy policy of the third party sites accessed through the Site and to inform himself about the conditions applicable to the processing of his personal data. This Privacy Policy applies only to the Site as defined above.

6) How to disable cookies in browsers

it is possible to deactivate the cookies present on the websites by downloading special software such as Ghostery (https://www.ghostery.com) for the browser in use and disabling the use of individual cookies. Or you can activate the "anonymous browsing" mode: this is a function that allows you to browse without leaving a trace of browsing data in the browser. Alternatively, it is possible to disable/delete cookies by accessing the browser configuration panel.

7) Conservation of personal data Personal data are stored and processed through IT systems owned by Nicola's Art and managed by Nicola's Art or by third party suppliers of technical services; for more details, please refer to the “Scope of communication and data access” section below. The data is processed exclusively by specifically authorized personnel, including personnel in charge of carrying out extraordinary maintenance operations.

8) Data processing purposes and methods Nicola's Art may process the user's common and sensitive personal data for the following purposes: use by users of services and features on the Site, management of requests and reports from its users, sending of newsletters, management of applications received through the Site, etc. Furthermore, with the further and specific optional consent of the user, Nicola's Art may process personal data for marketing purposes, i.e. to send the user promotional material and/or commercial communications relating to the Company's services, at the addresses indicated, both through traditional methods and/or means of contact (such as paper mail, telephone calls with an operator, etc.) and automated (such as communications via the Internet, fax, e-mail, text messages, applications for mobile devices such as smartphones and tablets -cd. APPS-, social media accounts network -e.g. via Facebook or Twitter-, phone calls with automatic operator, etc.). Personal data is processed both in paper and electronic form and entered into the company information system in full compliance with EU Reg. 2016/679, including the security and confidentiality profiles and inspired by the principles of correctness and lawfulness of treatment. In accordance with EU Reg 2016/679, the data is kept and stored for 5 years.

9) Security and quality of personal data Nicola's Art undertakes to protect the security of the user's personal data and complies with the security provisions established by the applicable legislation in order to avoid data loss, illegitimate or illegal use of data and unauthorized access to the same, with particular reference to the Technical Regulations on minimum security measures. Furthermore, the information systems and computer programs used by Nicola's Art are configured in such a way as to minimize the use of personal and identification data; these data are processed only for the achievement of the specific purposes pursued from time to time. Nicola's Art uses multiple advanced security technologies and procedures designed to promote the protection of users' personal data; for example, personal data is stored on secure servers located in places with protected and controlled access. The user can help Nicola's Art to update and keep his personal data correct by communicating any change relating to his address, his qualification, contact information, etc.

10) Scope of communication and access to data The user's personal data may be communicated to: • all subjects to whom the right to access such data is recognized by virtue of regulatory provisions; • to our collaborators, employees, in the context of their duties; • to all those natural and/or legal persons, public and/or private when the communication is necessary or functional to the performance of our business and in the ways and for the purposes illustrated above;

11) Nature of provision of personal data The provision of some personal data by the user is mandatory to allow the Company to manage communications, requests received from the user or to recontact the user to follow up on his request. This type of data is marked with the asterisk symbol [*] and in this case the provision is mandatory to allow the Company to follow up on the request which, failing that, cannot be processed. On the contrary, the collection of other data not marked with an asterisk is optional: failure to provide it will not entail any consequences for the user. The provision of personal data by the user for marketing purposes, as specified in the section "Purposes and methods of treatment" is optional and the refusal to provide them will have no consequence. The consent given for marketing purposes is understood to be extended to the sending of communications carried out through both automated and traditional methods and/or means of contact, as exemplified above.

12) Rights of the interested party 12.1 Art. 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679 The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and the following information: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients from third countries or international organizations; d) the envisaged retention period of the personal data or, if this is not possible, the criteria used to determine this period; e) the existence of the right of the interested party to ask the data controller to rectify or cancel personal data or limit the processing of personal data concerning him or to oppose their treatment; f) the right to lodge a complaint with a supervisory authority; h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject. 12.2 Right pursuant to art. 17 of EU Reg. 2016/679 – right to cancellation (“right to be forgotten”) The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without unjustified delay and the data controller has the obligation to cancel personal data without unjustified delay, if one of the following reasons exists: a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) the interested party revokes the consent on which the treatment is based in accordance with article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), and if there is no other legal basis for the treatment;

c) the interested party opposes the treatment pursuant to article 21, paragraph 1, and there is no prevailing legitimate reason to proceed with the treatment, or he opposes the treatment pursuant to article 21, paragraph 2; d) the personal data have been processed unlawfully; e) personal data must be canceled to fulfill a legal obligation established by Union or Member State law to which the data controller is subject; f) the personal data have been collected in relation to the offer of information society services pursuant to article 8, paragraph 1 of EU Reg. 2016/679

12.3 Right pursuant to art. 18 Right to limitation of treatment The interested party has the right to obtain from the data controller the limitation of treatment when one of the following hypotheses occurs: a) the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; b) the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited; c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court; d) the interested party has opposed the processing pursuant to article 21, paragraph 1, EU Regulation 2016/679 pending the verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party. 12.4 Right pursuant to Article 20 Right to data portability The interested party has the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without hindrance from the data controller.

13. Withdrawal of consent to processing The interested party has the right to withdraw consent to the processing of your personal data by sending a registered letter with return receipt to the following address: Nicola's Art, Via Venzan 8, 38030 Panchià (TN) accompanied by a photocopy of his identity document. At the end of this operation, your personal data will be removed from the archives as soon as possible. If you wish to have more information on the processing of your personal data, or to exercise the rights referred to in point 7 above, you can send a registered letter with return receipt to the following address: Nicola's Art, Via Venzan 8, 38030 Panchià (TN). Before we can provide you, or change any information, we may need to verify your identity and answer some questions. An answer will be provided as soon as possible.

Panchià, 28 April 2023