COOKIE POLICY STATEMENT

What are cookies, what are they for and who installs them?Cookies are small text strings that websites you visit send to your device (PC, tablet, smartphone, etc.), where they are stored on and/or read by the browser. They enable the browser to send information to the entity that installed the cookies in order to optimise your browsing, produce statistics on your visits, and offer you personalised content and targeted advertising. Cookies are contained in various elements hosted on the site itself (advertising banners, images, videos, etc.).

You may receive on your device the following cookies when browsing this website:

• first-party cookies: these are cookies sent from the Data Controller of the website you are visiting.
• third-party cookies: these are cookies sent from a website other than the one you are visiting, which installs its cookies through the Data Controller’s website.

The Data Controller manages and bears responsibility for first-party cookies, but has no control over the activities of third-party cookies or any power to change them over time. With regard to third party cookies, the Data Controller acts as an intermediary and in this capacity makes reference to the third party's cookie policies, which are accessible via a special link next to each of the cookies in the relevant area in the banner or at the bottom of the page. Other tracking tools. Other tracking tools are being developed for the same purposes as cookies. These tracking tools can be categorised according to various criteria. However, the main criterion for this grouping is the purpose for which they are used: technical or commercial in nature.

a) What is the purpose of this Cookie Policy Statement?

In accordance with the provisions of applicable legislation on the protection of personal data (in particular Regulation (EU) 2016/679 on the protection of personal data, the “GDPR” and European and Italian legislation on cookies) we wish to inform you about the processing of your personal data which is collected using cookies (and possibly other comparable tracking tools) including third party cookies. Processing will be based on the principles of fairness, lawfulness and transparency, together with the protection of your confidentiality and of your rights.

b) Who is the Data Controller? How do I contact it?

The Controller of your personal data is OVS S.p.A. with headquarters at Via Terraglio 17, Mestre (Venice), postcode 30174, Tax and VAT Code: 04240010274 (hereinafter the Controller). The Controller may be contacted at the postal address indicated above or at the following email address: responsabileprotezionedati@ovs.it.

c) Which cookies does this website use? For what purposes, on what legal basis? Is it obligatory to provide data? What happens if I do not provide them?

The cookies used by this site can be classified according to the following categories: 1) Technical cookies, which are used to operate the website, and 2) profiling cookies, which are used to track Users’ behaviour for analysis, so that services can be offered based on your preferences. The details are as follows:

1. Technical Cookies, which do not require your consent

This category includes the cookies listed below, which are used for the following purposes:

• navigation or session cookies, which are used to facilitate normal browsing and use of the website (for example enabling you to make a purchase or to authenticate yourself to access restricted areas);
• anonymised analytics cookies, these are used to collect information in aggregate form, i.e. not concerning individuals, regarding the number of users on the most visited pages, the locations which they are connected from etc., in order to produce statistics on the service and use of the site. These may be third party cookies. In this case, however, the Data Controller must have made them anonymous (e.g. by anonymising the IP or masking part of it) and must not allow the third party to cross-reference information collected through the site with other information in its possession.
• functionality cookies, which allow the user to navigate according to a set of selected criteria (e.g. language, products selected for purchase) in order to improve the service provided to the user.
• Legal Basis. For navigation or functionality cookies, the legal basis lies in the provision of a service or contract or pre-contractual measures (Article 6.b of the GDPR) as they are necessary to make the site and the requested service usable for users. The use of such cookies does not require your consent. For anonymised analytics cookies however, the legal basis lies in the legitimate interest of the Controller to constantly improve the website and service required by users (Article 6.f of the GDPR). You have the right to object to the use of such cookies if you believe that your interests or your fundamental rights and freedoms override the legitimate interests of the Controller. The Controller will refrain from any further use of such cookies unless it demonstrates the existence of compelling and legitimate reasons that override your right to object or for the establishment or defence of a legal claim (Article 21 of the GDPR). To object to the use of such cookies, you must exercise your right under the GDPR by contacting the Controller at the address indicated above.

2. Profiling cookies which require your consent

Profiling cookies can be:

• First-party: installed directly by the Controller on its own website.
• Third-party: installed on the Controller’s website by a third party. With third-party cookies, the Controller has no control over the activities and objectives of the third party, or whether the third party changes them over time. The Controller is a mere intermediary in this respect. In this capacity, it refers to the third party's policy statement, which can be accessed via a link next to each of the cookies in the relevant area in the banner or at the bottom of the page. Profiling cookies enable the user’s behaviour during internet browsing to be monitored and tracked automatically. Their purpose is to create a profile of the user. They are used by the Controller or the third party to send the user personalised advertising content in accordance with the user's preferences and interests, as indicated by their web browsing. Profiling cookies include non-anonymised analytics cookies used by the third party, when the Controller has not anonymised them (e.g. has not anonymised the IP), or when it allows the third party to cross-reference information collected with other information in its possession.
• Legal Basis. Profiling cookies (including non-anonymised analytics) can only be used with your consent, which, as provided in Article 6.a of the GDPR, constitutes the legal basis for the processing of data collected with this type of cookies. You can give or withdraw your consent at any time, directly in the relevant area in the banner or at the bottom of the page.
• Requirement to provide data and consequences. 8Failure to provide data as a result of your refusal to consent to these cookies does not have any consequences for you for the purposes of browsing and using the website, but it does mean that you cannot be offered advertising messages for services and goods in accordance with your preferences and interests, as indicated by your web browsing.

d) How do I manage consent for cookies?

You can manage your consent to individual categories of cookies by indicating it directly in the relevant area in the banner Personalize or at the bottom of the page.

e) How do I deactivate all cookies with the browser?

Another option to limit the use of cookies is to change the settings on your browser. Most browsers offer the option of indicating your choices on the use of cookies by websites. The following paragraphs outline the procedure for changing the cookie settings to reflect your choices and provide links to the relevant pages of the main browsers.

a) Google Chrome – Select the Chrome menu icon > Select Settings > At the bottom of the page, select Show advanced settings > In the “Privacy” section, select Content settings > Select Allow data to be saved locally > Select Finish. For further information, see https://support.google.com/accounts/answer/61416?hl=it.

b) Safari – To set Safari to block cookies in iOS 8, tap Settings > Safari > Block cookies and choose “Always allow”, “Only allow from websites I visit”, “Only allow from current website” or “Always block”. In iOS 7 or newer versions, choose “Never”, “Third-parties and advertisers” or “Always”. For further information, see https://support.apple.com/it-it/HT201265

c) Firefox – Click the menu button and select options > select the Privacy panel > under History settings: select Use custom settings > to activate cookies, mark Accept cookies from sites; to deactivate cookies, unmark the item. See https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie.

d) Edge – Click the Tools button and then click Internet Options > Click the Privacy tab and in Settings, move the slider up to block all cookies or down to allow all cookies and then click OK. See http://windows.microsoft.com/it-it/windows7/block-enable-or-allow-cookies.

f) Is Personal Data transferred outside of the European Union (EU)? Some of the data collected by cookie may be transferred abroad to locations outside the European Union. This transfer will in any case be carried out in compliance with the guarantees prescribed by the GDPR for this type of activity (articles 45 to 49). These include: transfers to businesses located in countries deemed to have adequate data protection laws equivalent to those set down in the GDPR (White List countries); transfers to businesses subscribing to specific contractual clauses for the protection of personal data and approved by the Privacy Authority, or to binding company regulations approved by the Privacy Authority; or transfers made based on specific derogations. For further information you can contact the Data Controller, as indicated in the point below entitled “What are your rights as a data subject”.

g) How long is the data stored? The retention period for data collected through cookies is indicated in the lists of cookies used by this website, which is available in the relevant area in the banner or at the bottom of the page.

h) Who can access your data? Who do we communicate them to? Data collected by cookies may be used by collaborators authorised by the Controller, such as, for example, persons responsible for site maintenance and management, marketing and administration. They may also be used by any third parties (service, infrastructure and IT systems providers and similar entities involved in the management and supervision of the site) that operate on behalf of the Controller and have been duly appointed as data processors pursuant to Article 28 of the GDPR. With your consent, data may also be used by third parties that install their cookies on the Controller’s website.

i) What are my rights as a data subject?

The GDPR grants you the following rights in relation to your personal data, which you may exercise within the limits and in accordance with the provisions of the legislation:

• the right of access to your personal data (Article 15),
• the right of rectification (Article 16),
• the right of erasure (right to be forgotten) (Article 17);
• the right to restriction of processing (Article 18),
• the right to data portability (Article 20);
• the right to object (Article 21): the data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her based on legitimate interest, including profiling on that basis. The Controller will refrain from processing unless it can demonstrate compelling legitimate grounds for processing that take precedence over the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defence of legal claims;
• the right to object to a decision based solely on automated processing (Article 22);
• the right to revoke the consent given, at any time, without prejudice to the lawfulness of processing based on consent given before revocation. Revocation of consent may be given by sending a written request addressed to the Data Controller at the postal address or by email, as indicated above. You are also entitled to lodge a complaint with the Italian Data Protection Authority if you believe that the processing of your data is contrary to the legislation in force (Article 77), or to take legal action (Article 79).

j) How are personal data protected?

Personal data will be processed using technical and organisational security measures appropriate for the nature of the data, to ensure integrity and confidentiality and to protect them against risks of unlawful intrusion, loss, alteration, or disclosure to third parties not authorised to process them.

k) Updates

The Controller reserves the right to amend and update this policy statement at any time. Any variations will apply as of their notification or publication. It is therefore necessary that you regularly check the policy statement currently in force.

l) Further information

For further information on the processing of your personal data, see the privacy policy statement on this website. For further details of the cookies used, consult the relevant area in the banner or at the bottom of the page.

EDITION OF 6 SEPTEMBER 2023.