Tata Italia Privacy and Cookie Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA EX ART 13 EU REGULATION 2016/679 SITE VISITORS www.tataitalia.com

1. Data controller

• Owner: TATA ITALIA Spa
• Data controller: S.P 231 km 5.2 70032 Bitonto (Ba), VAT number 05597220721
• Contact details: S.P 231 km 5.2 70032 Bitonto (Ba) EMAIL privacy@tataitalia.com PEC tataitalia@pec.it

2. DPO or RDP

The Data Controller has appointed a Data Protection Office (DPO or RPD), reachable at the following addresses:

• dpo@tataitalia.com
• - S.P 231 km 5.2 70032 Bitonto (Ba) - CA DPO

3. Purpose and legal basis of the processing

The personal data collected will be processed, using automated and non-automated methods, for the purposes indicated below according to the legal basis set out below. The provision of such data is necessary for the execution of the relationship or for the provision of the requested service.

Purpose: Fulfillment of legal obligations – Category of data: Personal data personal data (mainly navigation data) – Legal basis: Necessary to fulfill a legal obligation to which the owner is subject of the processing (art. 6, 1, c)

Purpose: Website management – Category of data: personal data (mainly navigation data) – Legal basis: Necessary for the execution of the contract or the execution of pre-contractual measures (art. 6, 1, b)

Purpose: Management of requests – Category of data: personal data (mainly personal data, contact data voluntarily provided by the user) – Legal basis: Necessary for contract execution or execution of pre-contractual measures (art. 6, 1, b)

Purpose: Dispute management – Category of data: personal data (mainly personal data, contact data, payment data) – Legal basis: Necessary for the pursuit of the legitimate interest of the owner of the processing or of third parties (art. 6, 1, f)

4. Categories of recipients

Within the scope of the purposes indicated above, the data collected may be communicated, in fulfillment of a legal or contractual obligation or for instrumental reasons, to the following subjects: Public bodies, bodies responsible for controls and checks, bodies assimilated to public bodies; Professionals, consultants or companies that work for the company; Other organizations that provide services to society (e.g. IT services, auditing firm); Parent company, subsidiaries or affiliates.

5. Dissemination of data

The data will not be disclosed.

6. Data transfer

The data controller may transfer personal data to a third country for reasons instrumental to the above purposes. If it is necessary to resort to subjects resident outside the territory of the European Union, we inform you that the precautions required by the Regulation will be adopted, basing the transfer on:

-adequacy decisions of the recipient third countries expressed by the European Commission;

-adequate guarantees expressed by the subject residing outside the territory of the European Union;

- binding corporate rules.

7. Data retention

The personal data collected will be kept for the time strictly necessary to perform the service or manage the request, as well as for the further period prescribed by regulations having the force of law. Some data may be retained for a longer period of time in the event of hypothetical computer crimes against the Site.

8. Rights of the interested party

In relation to the data provided, you can request to exercise the following rights: access, cancellation, rectification, limitation of processing, opposition to processing, portability of data, revocation of consent given when the processing is based on the consent itself. If you believe that processing violates Regulation (EU) 2016/679, you can also lodge a complaint with the supervisory authority of the member state in which you reside, work or where the violation occurred. To exercise your rights you can send a request to the Data Controller's contact details indicated in point 1.

COOKIE POLICY

Below, the Data Controller indicated above provides information on the use of cookies by this Site (hereinafter Site).

1.Characteristics and purposes of a cookie

Preliminarily, you should know that a cookie is a small file that sites store on users' computers and is capable of collecting various information during navigation. More specifically, it is the web browser that stores cookies. When you return to a site you have already visited, the latter is able to read this information and thus provide a personalized browsing experience. The purposes pursued can be multiple: computer authentication, session monitoring, storage of information on specific configurations regarding users who access the server, storage of preferences, advertising, etc.

2. Types of cookies

Cookies can be divided into different categories: first or third party, session or persistent, technical or profiling. Cookies are "first party", if managed directly by the site you are visiting, or "third party", if set by a website other than the one you are visiting (perhaps because the site you are browsing contains elements that reside on servers other than those hosting the visited site). They are then divided into "temporary", which expire at the end of a browser session (i.e. when the browser is closed), and "permanent", which remain stored even after the browser is closed (think of the sites that allow you to store the login credentials).

Then there are "technical" cookies, which are used to navigate or provide a service requested by the user and without which some operations could not be carried out or would be more complex and/or less secure (such as for example cookies that allow you to remain authenticated during online banking operations). From the latter, "profiling" cookies can be distinguished, which allow us to track the user's browsing on the internet and create profiles on his tastes, habits, choices, etc. (for example to provide you with advertising messages tailored to your tastes). Finally, analytical cookies are positioned between these last two categories. These are profiling cookies if they allow the user to be identified, vice versa they are similar to technical cookies when created and used directly by the first-party site to improve usability or when, although provided by third parties, they adopt tools that reduce the identification power of the cookie (for example by masking part of the IP address).

3. Cookies used by the site

Below we inform you about the cookies on our site.

• "Technical" cookies

The Site uses some cookies necessary for its proper functioning.

• "Profiling or advertising" cookies

The Site does not use specific cookies to manage its advertising campaigns, to provide advertising content based on interests, to display targeted advertisements after visiting the Site.

• "Analytical" cookies

The site is based on technology provided by a third party who may use cookies that fall into this category.

• Insert name and link to privacy policy
• Insert name and link to privacy policy

4. Social network buttons, widgets and other third-party cookies

The site may use services provided by third parties, i.e. organizations that are autonomous and distinct from the data controller indicated above.

The links are shown where the user can view the privacy information relating to the management of data by the suppliers of the respective services.

• -Youtube (Google) - http://www.google.it/intl/it/policies/privacy/
• -Instagram - https://help.instagram.com/519522125107875
• -Twitter - https://twitter.com/it/privacy
• -Facebook - https://it-it.facebook.com/policy.php

5. Options on cookies via the settings of the browser used

We also inform you that you can enable and disable cookies by accessing your browser settings. All you need to do is identify the name of the browser you use for browsing and follow the specific guides provided for each one. To facilitate this operation, we provide you with the link to the instructions provided by the programmers of the main browsers.

• -Internet Explorer
• -Google Chrome
• -Mozilla Firefox
• -Safari - Opera
• -Google Chrome (Android)
• -Safari for iOS (mobile devices)

You can in any case deactivate cookies using the opt-out tools provided by www.youronlinechoices.com (limited to the services registered by this platform).