INFORMATION ON THE PROCESSING OF PERSONAL DATA pursuant to art. 13 EU Reg. 2016/679

Below we provide the information pursuant to art. 13 of EU Regulation 2016/679 (hereinafter "Regulation") relating to the processing of personal data collected so that the Data Controller, as indicated below, can inform you about the publication of the new website and the launch of the new loyalty program. More specifically, by filling in the specific form attached to this information, you request to be informed when the Data Controller publishes the new website and launches the new loyalty programme.

1. Data controller

Owner: TOP SPORT SRL A SU

Owner data: VAT number 03775980729, CASAMASSIMA (BA) CAP 70010 - SS 100 KM.17,500 - THE BARICENTRO LOT 20/B MOD. 4/5/6

Contact details: Registered office: CASAMASSIMA (BA) CAP 70010 - SS 100 KM.17,500 - IL BARICENTRO LOTTO 20/B MOD. 4/5/6 PEC: topsportsrl@pec.it EMAIL: privacy@topsportitalia.it

2. Purpose and legal basis of the processing

a. The personal data collected will be processed, with and without automated methods, for the purposes indicated below according to the legal basis indicated below. The provision of such data is necessary for the management of the request, so that in the event of failure to provide such data, the Data Controller will not be able to contact you again and inform you about the publication of the new website and the launch of the new loyalty program.

a.1 Fulfillment of legal obligations - Data category: Personal data (mainly personal data, contact details, reference point of sale) - Legal basis: Necessary to fulfill a legal obligation to which the data controller is subject (art. 6, 1, c, Regulation).

a.2 Management of the request - Data category: Personal data (mainly personal data, contact details, reference point of sale) - Legal basis: Necessary for the execution of the contract or for the execution of pre-contractual measures (art. 6, 1, b , Regulation).

a.3 Litigation management - Data category: Personal data (mainly personal data, contact details, reference point of sale) - Legal basis: Necessary for the pursuit of the legitimate interest of the Data Controller or of third parties (Article 6, 1, f, Regulation).

b. Furthermore, some data will be processed, with automated and non-automated methods, for the following purposes, of an optional and additional nature. These additional purposes are pursued with your consent and failure to provide consent does not affect the provision of the requested service.

b.1 Periodic newsletter to be received by e-mail – Data category: Personal data (mainly personal data, contact data, such as e-mail address) – Legal basis: Consent (art. 6, 1, a, Regulation);

b.2 Marketing and commercial information, to be received by e-mail, SMS, instant messaging – Data category: Personal data (mainly personal data, contact data) – Legal basis: Consent (art. 6, 1, a , Regulation);

3. Categories of recipients

Within the scope of the purposes indicated above, the data collected may be communicated, in the fulfillment of a legal obligation or pre-contractual measures or for reasons of an instrumental nature, to the following subjects: Public bodies, bodies responsible for controls and checks, bodies similar to bodies public; companies specializing in IT and telematic services; professionals; consultants; companies that carry out marketing and communication activities for the Data Controller; other organizations that provide services for the Data Controller.

4. Dissemination of data

The data will not be subject to disclosure.

5. Data Transfer

The Data Controller may transfer personal data to a third country for reasons instrumental to the aforementioned purposes. If it is necessary to resort to subjects residing outside the territory of the European Union, the Data Controller informs that the precautions required by the Regulation will be adopted, basing the transfer on: adequacy decisions of the recipient third countries expressed by the European Commission; adequate guarantees expressed by the subject residing outside the territory of the European Union; binding corporate rules.

6. Data Retention

The Data Controller keeps personal data for a limited period of time, which varies according to the purposes for which they are collected. Once this period has expired, the data will be kept for other purposes or, if they cannot be used for other purposes, they will be definitively canceled or irreversibly anonymised. The personal data collected will be kept: (i) for the time strictly necessary to manage the request, as well as for the additional period prescribed by rules having the force of law for the purposes referred to in point 2.a, or up to 10 years ( ten) from the last registration; (ii) until the expiry of the terms for the judicial protections and/or appeal actions for the purposes referred to in point 2.a.3; (iii) for 24 (twenty-four) months from the provision of consent for the purposes referred to in points 2.b.1 and 2.b.2 (unless consent is revoked).

7. Rights of the interested part

In relation to the data provided, you can ask to exercise, where applicable, the following rights: access, cancellation, rectification, limitation of treatment, opposition to treatment, data portability, withdrawal of consent when the treatment is based on consent. To exercise the rights, you can send a request to the contact details of the Data Controller indicated in point 1.

Finally, if you believe that a treatment violates Regulation (EU) 2016/679, you can lodge a complaint with the supervisory authority of the member state in which you reside, work or in which the violation occurred (in Italy, the Data Protection Authority Personal data).