Foreword and information pursuant to art. 13 of Legislative Decree no. 196/2003 (Privacy Code)

For GGN s.r.l the protection of the privacy of its users is very important.

Our Privacy Rules contain the necessary information pursuant to Article 13 of Legislative Decree No. 196 of 30 June 2003 (Privacy Code), which transposes Directive 95/46/EC on the protection of personal data, as well as Directive 2002/58/EC on the protection of personal data in electronic communications. For more information on Italian privacy law, visit the official website of the Garante per la protezione dei dati personali.

In particular, we inform you that the “owner” of the treatment under the Privacy Code is GGN s.r.l DI GORGOGLIONE NICOLA , with registered office in VIA CALLANO 133-135 – 139 76121 BARLETTA (BT). The personal data that GGN s.r.l processes in order to provide its online services concern, in general: -Personal data; -Addresses; -Telephone numbers; -Email addresses; -Tax code; -VAT number; -Credit card number and bank account number; -Data concerning email traffic and related to access to the Site; -Data related to transactions concluded on krmsrl.net; -Data related to surveys.

For a more detailed list of your personal data processed by GGN s.r.l, see Section 2 of the Privacy Rules.

Your personal data is collected by GGN s.r.l when you register on the site and when using GGN s.r.l services. The collection of your personal data, marked with an asterisk, in the registration form or during the use of the services, is necessary to allow you to access the Community GGN s.r.l. and the features of the site. Your refusal to disclose such personal information will result in the inability to complete your registration and use GGN s.r.l. services. Your personal data are collected and processed using electronic and, in any case, automated tools. In some cases automatic collection tools, such as “cookies”, may be used to allow you to take advantage of certain personalized services. For an explanation about how we collect through such tools go to paragraph 3 of the Privacy Rules. Your data will be stored on our servers where it will be processed for the purpose of enabling you to take advantage of our services under the User Agreement and for the other purposes set out in these Privacy Rules (see paragraph 4).

The processing of your personal data, which is necessary to access the portal GGN s.r.l and use the related services, may be carried out by GGN s.r.l without your express consent also for the fulfillment of specific obligations under applicable laws, regulations and EU legislation. In addition, in cases identified by the Guarantor for the protection of personal data, to pursue a legitimate interest of GGN s.r.l or a third party, such as, for example, protection from fraud or other conduct contrary to the User Agreement, as well as to assert and defend a right in court.

Within the limits and for the purposes indicated in the Privacy Rules, some of your personal data may be disclosed by GGN s.r.l to third parties, public and/or private, such as: -State financial administration and P.A.; -Judicial authorities and police forces; -Banks and credit institutions, companies for debt collection, private risk centers; -Consultants of the Company and professional firms (legal, accounting, tax consultants, etc.); -Other companies of the group GGN s.r.l;

GGN s.r.l may process some of your personal data, such as user ID and email address, in order to send you periodically its Newsletter, which will keep you informed about news on the site and new services offered by GGN s.r.l and other Group companies (see paragraph 4 of the Privacy Rules).

It will be, instead, necessary the prior and express consent for the processing of your personal data for other purposes of a commercial nature and, in particular, for marketing purposes, market research, user loyalty activities, other commercial initiatives by companies of the Group GGN s.r.l. or third parties with which GGN s.r.l has entered into and/or will enter into commercial agreements. In these cases, consent to provide your personal data is optional. Any refusal to give consent for the processing of your personal data for these purposes may result in GGN s.r.l (or third party companies) being unable to provide you with certain personalized services (for more information you can refer to paragraph 6 of the Privacy Rules).

GGN s.r.l guarantees the maximum confidentiality of your personal data by applying the most appropriate technologies, in compliance with Italian and European standards on minimum security measures to prevent unauthorized access to its databases, possible loss and/or accidental destruction of data. For more information see paragraph 11 of the Privacy Rules.

Access to your personal data will be allowed to representatives of the Customer Service and Regulation and Security of GGN s.r.l who have been designated as “appointees” of the treatment in accordance with Article 30 of the Privacy Code to offer support to users in relation to the services offered by GGN s.r.l, to respond to requests from the Judicial Authority, to verify behavior that does not comply with the User Agreement and for billing needs.

For a detailed explanation of the rights that are granted to each user of the Site, pursuant to Article 7 of the Privacy Code, go to paragraph 10 of the Privacy Rules. For any request and/or communication regarding Privacy you may contact Customer Support by phone at +39 0883/334488 or by email at info@GGN s.r.l.it

Note for minors under 18 years of age and conditions for joining the service Minors under 18 years of age and those who do not have a VAT number inherent to our sector cannot use our services; The portal is intended exclusively for professionals in the sector.

The personal data we collect GGN s.r.l provides for the collection of your personal data for purposes related to the provision of its services. At the time of registration you will be asked for the following identifying data: -First and last name or company name -Address -Telephone number and/or cell phone number -Fax number -Tax code and VAT number -Email address

These fields are required for registration and to create your account on GGN s.r.l may ask you to “optionally” provide a number of additional personal data such as: -Questions about how you learned about GGN s.r.l -Interest in participating in surveys promoted by GGN s.r.l -Data identifying your bank account

These data, if freely provided by you, will be processed by GGN s.r.l in an anonymous and aggregate form to create general profiles of service users in order to better meet their needs and requirements. If you request the service for payment by bank account or credit card debit, additional information may be collected, such as the address to which the payment should be sent, the number and expiration date of your credit card and information related to the processing of checks and money orders, as well as your bank details. If you post messages in the GGN s.r.l Forums, this information will be public. For the defense of GGN s.r.l users from the unauthorized sending of unsolicited commercial emails (spamming), Customer Support may process data related to email traffic sent through GGN s.r.l services such as personal data of the sender and recipient, date and time of sending, type of email sent, IP address of the user. The processing will take place exclusively for the performance of internal investigative activity.

Use of “cookies” and “sessions” On some pages of GGN s.r.l, automatic data collection methods such as, for example, “cookies” and “sessions” are used. “Cookies” (like “sessions”) are small files saved on your hard drive. GGN s.r.l mainly uses “sessions” that are automatically deleted at the end of each “user session” of access, more specifically when the browser is closed or terminated. These are used by GGN s.r.l to allow you to: -Take advantage of certain personalized services -Avoid the need to enter your password several times -Provide you during browsing with targeted information according to your interests -Improve the security of the site, including through the prevention of illegal activities -Realize, in an anonymous and aggregate form, research on the interests and behavior of our users

The following personal data about you will be temporarily stored in the cookies: -The URL of origin (whether the URL is on GGN s.r.l, or on other sites) -The IP address

If your browser allows it, you can always and freely refuse “cookies” and/or “sessions”, but in this case you may be prevented from using some GGN s.r.l services and perhaps you will be asked to enter your password several times, during the same session. You may also find “cookies” or other similar automatic personal data collection procedures placed by third parties on some pages of the site. For more information about the use of “cookies” and “sessions” write to info@krmsrl.net. Processing of personal data GGN s.r.l processes the personal data you provide for the sole purpose of enabling you to access the KRM.net portal and use its services. GGN s.r.l may also process some of your personal data in the activity of verifying your behavior that does not comply with the User Agreement, or to settle disputes, resolve problems and enforce the rights referred to in the Agreement. GGN s.r.l may use your email address to periodically send you the Newsletter containing information about GGN s.r.l services and your best use of the site. You may in any case deny your consent to receive the Newsletter of GGN s.r.l either during registration, or later by responding to the email received with the indication “unsubscribe” or by removing the selection from the relevant option on the Notification Preferences page by accessing your personal area on krmsrl.net.

Retention of your personal data Most of your personal data will be kept on the servers of GGN s.r.l until the termination of the contractual relationship to enable you to take advantage of all the services you have requested. However, this activity will take place in accordance with the principle of proportionality: GGN s.r.l will delete after 90 days the data whose retention is not necessary for the provision of the services you have requested.

Following the final suspension of the account, all your personal data in our possession will be deleted. The exceptions are: -Personal data whose retention is necessary to comply with a specific request of the competent Judicial Authority (see paragraph 6); -Identifying data of a user suspended indefinitely for violations of the User Agreement (including data related to internal investigative procedures), retained to protect the interests of GGN s.r.l and its Community and prevent the suspended user from re-registering; -Data necessary for billing.

These data will be kept by GGN s.r.l exclusively for the above purposes for a period of 5 years or such longer period as may be imposed by law.

Scope of communication of your personal data GGN s.r.l informs you that some of your personal data may be communicated to third parties in compliance with applicable laws. We do not transfer for any reason, nor do we disclose to third parties the personal data of our users for purposes other than those indicated in our Privacy Rules. Below we describe some of the instances in which we may disclose your personal data to third parties.

Community GGN s.r.l On the site you will be recognizable by a user ID or pseudonym. Your user ID may be used to identify both you and your activities on the site.

External Service Providers There are a number of services offered on GGN s.r.l by external providers that facilitate your use of the site (e.g., partner sites, escrow, authentication, mediation and arbitration service providers). If you choose to take advantage of such optional services, directly disclose your personal information to such providers and/or give them consent to collect personal information about you, that information will be processed by those providers in accordance with their privacy policies. Upon your express authorization, GGN s.r.l may provide some of your personal information directly to the external service provider. In any case, before GGN s.r.l discloses your personal data to the external provider, you will be able to check which of them are about to be disclosed and you will have the opportunity to deny your consent. In this case, you will not be able to use the relevant service. Since the privacy rules of such third-party service providers are beyond our control, it will be your responsibility to evaluate these rules before deciding whether or not to avail yourself of their services.

Internal service providers GGN s.r.l may use internal service providers to whom some of your personal information may be provided. In some cases, disclosure is necessary for the provision of GGN s.r.l services under the User Agreement or support services you request. Access and use by internal service providers of your personal data, which GGN s.r.l provides to them, is done lawfully and only for the purposes related to the provision of the service. The communication will take place in accordance with the legislation on the protection of personal data as well as contractual obligations of confidentiality and privacy. In other cases, the internal service provider may collect information directly from you (as is the case when an internal service provider conducts market research on behalf of GGN s.r.l). In such cases you will be informed of the involvement of the internal service provider and the disclosure of your personal information to the internal service provider will be strictly voluntary. If you provide additional information directly to an internal service provider, their use will be governed by their privacy policy.

Other companies in the GGN s.r.l Group GGN s.r.l shares information and your personal data, with other companies in the KRM s.r.l Group for the purpose of meeting your online commerce needs and optimizing services related thereto. The information and data communicated to these companies, will be treated with the equivalent levels of protection adopted, by these companies, for the treatment of their users’ personal data. It is possible that the companies of the GGN s.r.l Group may merge, purchase or be acquired by a third company. If this happens, GGN s.r.l reserves the right to share some or all of the information about you so that we can continue to provide you with the services covered by the User Agreement.

Legal Requests GGN s.r.l cooperates with public authorities to ensure compliance with the law and the rights of other users and third parties, with particular reference to intellectual property rights. Therefore, in case of formal request and in compliance with the laws governing the matter, your personal data may be disclosed to the judicial authority or other public administration for the needs of defense and state security, prevention, detection or repression of civil, criminal and administrative offenses. These public entities, moreover, are competent to request and obtain personal information about you, if this is necessary or appropriate for investigations or assessments related to the commission of fraud, computer fraud, violation of intellectual property rights, acts of hacking or other illegal activities, which could expose GGN s.r.l. or our users to legal, civil or criminal liability. Upon formal request of the aforementioned authorities, GGN s.r.l may disclose your user ID, name, address, telephone number, email, name or company name, to participants in GGN s.r.l’s Property Rights Verification Program (VeRO) if it is necessary or appropriate in connection with investigations, inquiries and inquiries regarding the alleged infringement of their intellectual property rights.

Marketers GGN s.r.l reserves the right to collect in aggregate form certain personal data of users and disclose it in anonymous form, for industry studies and market research, to marketers and other marketers.

GGN s.r.l Password By registering with GGN s.r.l you agree not to disclose your password to third parties. If you decide to provide your user ID, password, or information to a third party, you will be responsible for all acts performed using them. If for any reason your password is compromised, we recommend that you change it immediately as indicated at in our Security Space.

Access, control and change your personal information After registration, you can control and change the information you provide during registration, including: -Your user ID or pseudonym -Your email address -Your registration information such as, for example, your name, company, social security number, -Your address, city, nationality, zip code, phone numbers, fax numbers, etc…

Please update the information promptly in case of any changes.

In addition, in accordance with Article 7 of the Privacy Code you are granted the rights mentioned below.

The right to obtain confirmation of the existence or non-existence of personal data concerning you, even if not yet registered, and their communication in an intelligible form.

The right to be informed: -Of the origin of the personal data concerning you; -Of the purposes and methods of the processing; -Of the logic applied in the event of processing carried out with the aid of electronic instruments; -Of the identification details of the data controller, data processors and the representative designated in accordance with -Article 5, paragraph 2 of the Privacy Code; -Of the subjects or categories of subjects to whom the personal data may be communicated or who -May become aware of them in their capacity as designated representative in the territory of the State, data processors or persons in charge of processing.

The right to obtain: the updating, rectification or, when you have interest, the integration of data;

the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;

certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.

You also have the right to object, in whole or in part: on legitimate grounds, to the processing of personal data concerning you, even if pertinent to the purpose of collection;

to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.

In order to exercise the above rights, please contact Customer Service at the telephone number +39 0125564815 or at the email address info@krmsrl.net Security The security standards used by GGN s.r.l to make your personal information private and confidential, including “firewalls” and data transmission through SSL (Secure Socket Layers), are the highest in the state of the art. In addition, specific techniques are used to protect this data from unauthorized access by third parties. The minimum security measures indicated by the Privacy Code and subsequent amendments are, in any case, guaranteed.

Prior Notice In the future, GGN s.r.l reserves the right to make changes to these Privacy Rules. These will be effective after 15 (fifteen) days from their publication on the Notice Board and after sending an e-mail message to users who have chosen this communication option.