Dear User,

C-WAY S.r.l. Unipersonale hereby communicates the information pursuant to Article 13 of EU Regulation 2016/679 (GDPR) regarding the processing of personal data provided by you when filling out this form.

Data Controller

The Data Controller is C-WAY S.r.l. Unipersonale, VAT and Tax ID 03789020108, with registered office in Genoa, Ponte Degli Spinola Sn, ZIP code 16128 (GE), represented by its legal representative pro tempore (hereinafter referred to as "Company" or "Controller").

Data Protection Officer

The Data Protection Officer (DPO) can be contacted at the email address: dpo@c-way.it or by regular mail at the Company's office, addressed to the same.

Categories of Data Subject to Processing

The Controller will process various types of your personal data, including, but not limited to:

• Personal data (first and last name)
• Contact details (email address)
• Content of the message related to the requests you have made.

Purpose of Processing

Your personal data will be processed, including through IT and electronic tools, in order to respond to your request for information.

Legal Basis for Processing

The legal basis justifying the aforementioned processing for the stated purpose is Article 6, paragraph 1, letter b) of the GDPR, which states that processing is necessary for the performance of a contract or for the purposes of entering into a contract.

Consequences of Not Providing Personal Data

Failure to provide your personal data for the aforementioned purpose will result in the Company's inability to respond to your information requests.

Retention Period for Personal Data

Your personal data will be retained, for the aforementioned purpose, for the period necessary to fulfill your request for information.

Data Recipients

Access to your personal data will be granted to the website manager of the Company, who operates as the Data Processor appointed by the Controller pursuant to Article 28 of the GDPR.

A complete list of appointed Data Processors, which is inherently variable, is available in an always updated version upon request to the Controller by writing to privacy@c-way.it at any time.

Additionally, employees of the Company, defined as authorized processors, may also have access to your personal data if their job role requires it. Each authorized processor is specifically identified, authorized, and trained, and acts based on specific instructions provided by the Company regarding the purposes, methods of processing, and security measures to be adopted for the protection of personal data.

Rights of the Data Subject

The Controller informs you that as a Data Subject, you have the right, under Articles 15 and following of EU Regulation 2016/679, and within the limits prescribed therein, to:

• Obtain data and information about the processing, in particular regarding the type of personal data processed, the purposes for which the personal data are processed, the duration of the processing, and the parties to whom the data are communicated (the so-called right of access);
• Obtain rectification or completion of inaccurate personal data concerning you (the so-called right of rectification);
• Obtain the deletion of personal data concerning you in the following cases: (i) the personal data are no longer necessary for the purposes for which they were collected; (ii) you have revoked your consent to the processing of personal data if they are processed on the basis of such consent; (iii) you have objected to the processing of personal data concerning you if they are not processed for a legitimate interest of the Controller; (iv) the processing of personal data is not compliant with the law. However, the retention of your personal data by the Controller is lawful if necessary to allow the Controller to comply with a legal obligation or to ascertain, exercise, or defend a right in court (the so-called right to erasure);
• Obtain that personal data concerning you are only retained without further use in the following cases: (i) you contest the accuracy of the personal data, for the period necessary to allow the Controller to verify the accuracy of such personal data; (ii) the processing of personal data is unlawful and you oppose the deletion of the personal data by the Controller; (iii) the personal data are necessary for the ascertainment, exercise, or defense of a right in court; (iv) you have opposed the processing and are awaiting verification regarding the potential prevalence of the legitimate reasons of the Controller over your reasons (the so-called right to restriction);
• Object at any time to the processing of personal data (the so-called right to object);
• Receive in a commonly used, machine-readable format, the personal data concerning you, if they are processed on the basis of a contract or your consent, and/or request to transfer the data to another data controller, where feasible (the so-called right to data portability).

The aforementioned rights may be exercised upon your request by sending an email to the dedicated address privacy@c-way.it or by writing via regular mail to C-WAY S.r.l. Unipersonale, in Genoa, Ponte Degli Spinola Sn, ZIP code 16128 (GE).

You also have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to Lodge a Complaint

If you believe that the processing of your personal data by the Controller occurs in violation of the provisions of EU Regulation 2016/679, you have the right to lodge a complaint with the Privacy Authority, as provided by Article 77 of EU Regulation 2016/679 (by email to: garante@gpdp.it or by mail to the Privacy Authority for the protection of personal data, located in Rome (Italy), Piazza Venezia 11, Scala B, ZIP code 00187), or to take appropriate legal action, as provided by Article 79 of EU Regulation 2016/679.

The Managing Directori

C-WAY S.r.l. Unipersonale