[Information pursuant to the requirements of article 13 of decree D.Lgs.196/2003 which implements European Council Directive 95/46/EC concerning personal data protection, and Directive 2002/58/EC concerning the protection of personal data in electronic communications]

Foreword

Moellhausen’s website is a customer/supplier interface implemented in relation to the achievement of the following goals:

• To disseminate awareness of the structure, activities and corporate policy of Moellhausen S.p.A.;
• To make raw materials easily traceable and comparable on the basis of extensive technical information;
• To simplify technical-commercial relations for the procurement of raw materials;
• To develop and promote products and services that are commensurate with market requirements, starting from real data concerning the requirements and characteristics of individual customers.

Definitions / conventions with regard to the vocabulary used

To aid the comprehension of this document and for the sake of brevity , the following definitions / conventions concerning the vocabulary used will prove helpful
Website: the expression “Website” conventionally refers to the Moellhausen corporate website.
Public contents of the Moellhausen site: contents of the Website that are not reserved for personnel within the company.
Site access UserID and Password: data required for unrestricted access to all public contents of the Moellhausen Website.
Site registration: filling in and transmitting the “Registration form” in order to receive personal authentication parameters (UserID and Password for the log in the Website) for unrestricted access to all public contents of the Moellhausen Website.
Data subject: natural person and/or legal entity whose privacy must be protected.
Informed Consent: explicit permission for the collection and processing of personal data in compliance with decree D.Lgs196/2003; this is construed as Informed Consent when it is expressed by an individual who has read and understood the following documents:

• Data Protection Policy [Information pursuant to the provisions of Art.13 decree D.Lgs 196/2003 ]
• Rights of the natural person or legal entity whose data are to be protected [Rights of the Data Subject - Art.7 of decree Lgs.196/2003 ]

Data collected and purpose of collection

The data collected by Moellhausen through the Website are as follows:

• Standard information sent by the user’s browser to each website visited, such as IP address, type of browser and language, access times and addresses of reference sites;
• Personal data provided by the site user at the time of registration;
• Information on visits to the Website by registered users, including pages viewed, click-throughs on links and the main actions performed on the Website.

The foregoing data are collected and/or processed for the following purposes:

• Provision of the services to which access is provided by means of the IT tools of the Website;
• Management of communications and correspondence related to raw materials of potential interest to the customer;
• Marketing surveys designed to establish market requirements in terms of products and services.

N.B. – Without explicit informed consent, Moellhausen will refrain from any form of collection or processing of personal data.

Processing of data and parties to which the data can be disclosed, scope of dissemination

All information supplied to Moellhausen through the website is construed as strictly confidential and as such is processed in a manual and/or semiautomatic manner utilising electronic and other media, by Moellhausen S.p.A. Marketing, Customer Service, and Sales personnel.
Moellhausen does not loan, sell or share the information gathered via its Website with other parties or companies (other than Moellhausen subsidiaries), with the exception of the cases necessary to provide the requested services and products.
Moellhausen implements procedures and systems designed to safeguard and protect against improper use of the personal data with which it is provided. Although the company cannot provide any guarantees concerning the possible loss, erroneous modification, or improper use of the personal data communicated to it, as far as possible it takes all the necessary measures to protect such data against all such negative circumstances.
The data collected by Moellhausen will be retained for no longer than strictly necessary in relation to the purposes for which such data were collected.

Informed Consent

Consent for the collection and processing of personal data in compliance with decree D.Lgs.196/2003 [the Legislative Decree that implements the provisions of European Council Directive 95/46/EC concerning data protection, and Directive 2002/58/EC concerning the protection of data in electronic communications] is explicitly given at the time of registration for use of the Moellhausen website; said consent is an essential requirement for registration, and if it is not provided Moellhausen will refrain from collecting personal data by means of its Website.
In giving consent for the processing of personal data, the data subject confirms its awareness of the specific rights awarded by Article 7 of decree D.Lgs.196/2003

Data controller

The data controller is MOELLHAUSEN S.p.A., with registered office in via Freguglia n. 2, Milan (Italy).
Any applications pursuant to the terms of art.7 of decree D.Lgs.196/2003 must be addressed to Company management at the following address:
MOELLHAUSEN S.p.A. – Head Office
Via Torri Bianche, 9 - 20059 Vimercate (MI) - Italy
Italy
Tel. +39 039.685.6262
Fax +39 039.685.6263
E-mail (Applications ex Art.7, decree D.Lgs.196/2003): w.admin@moellhausen.com

Definitions / conventions with regard to the vocabulary used

To aid the comprehension of this document and for the sake of brevity, the following definitions / conventions concerning the vocabulary used will prove helpful.
Data subject: natural person and/or legal entity whose data must be protected.

1. The data subject is entitled to obtain confirmation of the presence or absence of its personal data, even if not yet recorded, and their communication in an intelligible format.
2. The data subject is entitled to obtain information concerning:
   1. the source of the data;
   2. the aims and methods of data processing;
   3. the logic applied in the case of data processing performed with the aid of electronic tools;
   4. the identification details of the data controller, the data processing managers and designated representative pursuant to the terms of article 5, subsection 2;
   5. the parties or categories of parties to whom the data may be disclosed or who may come into possession of the data in their role of the designated representative in the territory of the state, data processing managers or data processors.
3. The data subject is entitled to obtain information concerning:
   1. updating, correction or, when of interest to the data subject, addition to the data;
   2. deletion, transformation into anonymous form or blocking of data processed in an unlawful manner, including those for which retention is not necessary in relation to the aims for which the data were collected or subsequently processed;
   3. an attestation confirming the fact that the operations as at letters a) and b) have been communicated, also with reference to the relative contents, the parties to which the data were disclosed or diffused, except when said action is impractical or requires the employment of means that are manifestly disproportionate in relation to the protected right.
4. The data subject is entitled to resist, either entirely or partially:
   1. for legitimate reasons, to the processing of the personal data of which it is the subject, even though such data may be pertinent in relation to the aims of the data collection;

to the processing of its personal data for the purpose of transmission of advertising or direct sales material or for the execution of market surveys or commercial communications.