Under the terms of art. 13 and 14 of EU Regulation no. 679/2016 (hereinafter "GDPR") concerning the protection of individuals with regard to the processing of personal data, and Legislative Decree no. 196/2003 as amended by Legislative Decree no. 101/2018, the processing of information concerning the User will be based on the principles of correctness, lawfulness and transparency, in order to ensure the security and confidentiality of the data.

We invite the User to read carefully the following information so that they may be aware of and mayexpress, where necessary, in an informed manner consent to the use of their personal data ("the Data").

We also inform you that any data belonging to third parties that should be communicated to the Data COntroller by the User, must be treated by the latter in compliance with the aforementioned legislation and that for any possible violation in this regard will be solely responsible for the User itself.

HOLDER OF THE PROCESSING

The Data Controller of the aforementioned data is: DAMIANI S.p.A. with registered office in Valencia(AL), Italy, Piazza D.G. Damiani n. 1, Tax Code and VAT No. 01457570065 (hereinafter, the "Data Controller"), owner of the trademark "BLISS" and owner of the website https://www.bliss.it/ (hereinafter referred to as the "Site").

This Site and any services offered through the Site are reserved to persons over the age of eighteen. Therefore, the Data Controller does not collect personal data relating to persons under the age of 18. At the request of the Users, the Data Controller will promptly delete all personal data involuntarily collected and related to minors.

Any request for information on the processing of data may be sent directly to the aforementioned addresses or to the following addrescontactbliss@damianigroup.com.

FONTE DEI DAT

I Datioggetto di trattamento saranno unicamente quelli forniti volontariamente dall’Utente al momento dell’acquisto dei prodotti del Titolare indicati sul Sito https://www.bliss.it/ ovvero della richiesta di Registrazione al medesimo, per l’accesso e l’utilizzo dell’area riservata.

SOURCE OF THE DATA

The following categories of User Data may be collected:

Contact details – information regarding the name, surname and email address;

Other personal data – information that the User provides voluntarily, by filling in the optional fields prepared by the Data COntroller (in the "MESSAGE" sections on the "CONTACTS" page of the Site) for the purposes specified below, such as your interests relating to the products of the Data Controller to which you are interested or the date of birth, level of education, professional situation, previous work experience. If the User intends to purchase the products on the Site, the Data Controller will process further data, such as bank details, to execute the User’s purchase request. If personal data are provided on behalf of third parties, the User must first ensure that the interested parties have read this Policy;

Curriculum Vitae – information that the User provides by attaching his curriculum vitae in the section "WORK WITH US" prepared by the Data Controller on the page "CONTACTS" of the Site;

Use of the website – information about how the User uses the Website, opens or forwards our communications, including information collected through cookies (see our specific Cookie Policy).

PURPOSE AND LEGAL BASIS OF PROCESSING

The Data of Users will be processed lawfully by the Data Controller in compliance with art. 6 of the GDPR for the following processing purposes:

1. Navigation of the site, in relation to the possibility of detecting User Data necessary at a technical level, such as eg. the IP address, while browsing the site. These User Data will be used by the Data Controller for the sole purpose of ascertaining the identity of the User (including through validation of the email address), thus avoiding possible fraud or abuse.

2. To provide the User with the requested information, with reference to the contact request sent by the User through the appropriate form on the page "CONTACTS", section "CONTACT BLISS" of the Site. In particular, the Data Controller will process the User’s data exclusively to comply with your request and send your reply to the e - mail address indicated by the User. This activity is exhausted, in case the User has not given consent to the processing of his personal data for other purposes (indicated in the "Additional Purposes" section of this policy), the data provided by the User will be deleted or otherwise rendered irreversibly anonymous.

3. To analyze the curriculum vitae sent by the User, with reference to the completion by the User of the form on the page "CONTACTS", section "WORK WITH US" of the Site. In particular, the Data Controller will process the User’s data exclusively to analyze his curriculum vitae and to evaluate the User’s application.

4. Contractual obligations and provision of the service in case of online purchases, o execute requests to purchase the products offered on the "e - commerce" section of the Site, according to the General Conditions of Sale freely available on https://www.bliss.it, that are accepted by the User during the online purchase phase, as well as to fulfill subsequent reports and requests of the User. The provision of Contact Data is mandatory to fulfil contractual obligations.

5. Administrative and accounting purposes in the case of online purchases, or for carrying out activities of an organisational, administrative, financial and accounting nature, functional to the management of the contractual relationship. The provision of the User’s Contact Data is mandatory to fulfil contractual obligations.

6. Obligations of law, or to comply with obligations provided for by law, by an authority, by a regulation or by European legislation to which the Data Controller is required to comply. The provision of User Contact Data is mandatory.

The provision of contact data and the User’s curriculum vitae is optional. However, failure to provide such data will make it impossible for the Data Controller to provide the User with the requested information or to evaluate the possible application of the User.

The relative legal basis of the processing is the execution of the service requested by the User or acontractual relationship or the execution of pre - contractual measures adopted at the request of the User, pursuant to article 6, paragraph 1, lett. b) of the GDPR or the fulfilment of legal obligations (pursuant to Article 6, paragraph 1, lett. c) of the Regulation).

We inform you that the Site exclusively markets the products expressly indicated and described in the relevant information sheets and does not regulate in any way the sale of products by parties other than the Data Controller that may be present on the Site through links, banners or other hyperlinks. The Data Controller is not responsible for any personal data that may be requested from the User by such third parties, the processing of personal data, if any, is autonomous and exclusively carried out by the same third parties as data controllers.

The User guarantees that the personal data provided to the Data Controller are truthful and undertakes to keep confidential the data provided to the Data Controller and not to transfer them to third parties. In any case, the Data Controller will not be responsible for the data provided by the User that may be related to third parties, against which the User will be solely responsible.

FURTHER PROCESSING PURPOSES: MARKETING (SENDING NEWSLETTERS, ADVERTISING MATERIAL AND COMMERCIAL COMMUNICATIONS).

With the free and optional consent of the User, the User’s Contact Data and any other Personal Data provided may be processed by the Data Controller also for marketing purposes and newsletters (sending of advertising material, direct sales, commercial communication, sending of newsletters containing information in relation to news relevant to the sector related to the activities of the Site), or so that the Data Controller can contact the User by mail, e - mail, telephone (fixed or mobile, with automated call systems or through the intervention of an operator), SMS/MMS to present to the User the products and services of the Data Controller, communicate invitations, promotions and commercial opportunities.

The provision of personal data is optional and, in the event of failure to consent, the ability to browse the Site or to use the above services offered by the Site will not be affected in any way.

The relative legal basis of the processing is any consent, freely expressed by the User, for the execution of the aforementioned marketing purposes pursuant to article 6, paragraph 1, lett. a) of the GDPR and Article 130 of Legislative Decree no. 196/2003

In case of consent, the User may at any time revoke the same, making a request to the Data Controller in the manner indicated in the paragraph "Rights of interested parties".

The User may also easily object to further sending of promotional communications and email newsletters by clicking on the appropriate link for the withdrawal of consent, which is present in each promotional email and newsletter. After the withdrawal of consent, the Data Controller will send the User an email to confirm the withdrawal of consent.

The Data Controller informs that, following the exercise of the right to object to the sending of promotional communications and newsletters by email, it is possible that, for technical and operational reasons, the User continues to receive some additional messages. If the User should continue to receive promotional messages and/ or newsletters, please report the problem to the Data Controller, using the contacts indicated in the paragraph "Rights of interested parties".

FURTHER PROCESSING PURPOSES: PROFILING

With the free and optional consent of the User, User Data (that is, Contact Data, Other Personal Data, Use of the website and information relating to the services to which the User has expressed his interest), may also be processed by the Data Controller for profiling purposes, or to reconstruct the tastes and consumption habits of the User, in order to be able to send the User commercial offers consistent with the profile identified.

The provision of personal data is optional and, in the event of failure to consent, the ability to browse the Site or to use the above services offered by the Site will not be affected in any way.

The relative legal basis of the processing is any consent, freely expressed by the User, for the execution of the aforementioned profiling purposes pursuant to article 6, paragraph 1, read. a) of the GDPR.

In case of consent, the User may at any time revoke the same, making a request to the Data Controller in the manner indicated in the paragraph "Rights of interested parties".

FURTHER COMMUNICATION: COMMUNICATION OF DATA TO THE DATA CONTROLLER’SPARTNERS

With the free and optional consent of the User, the User’s contact details may be communicated by the Data Controller to companies belonging to the same Group as the Data COntroller (the details of these companies can be viewed by clicking on the following link http://investorrelations.damiani.com/ITA/page/il_gruppo/organigramma_societario.php), s well as goods and services companies related to the Data Controller’s Group, including Venini S.p.A., or with those other companies with which the Data Controller may establish co - marketing relations (collectively, the "Partners of the Data Controller").

The Partners of the Data Controller, as independent data controllers, will process the User’s personal data for their own marketing purposes and may contact the User via traditional methods (mail, telephone call with operator) or automated (e -mail, SMS/MMS).

The Partners of the Data Controller - pursuant to art. 14 of the GDPR - must send the User their information that contains, in addition to the elements provided for by art. 13 of the GDPR, including the origin of the personal data communicated to them, so that each interested party can also contact the person who collected and communicated them to oppose the processing under the Applicable Law.

MODALITIES OF DATA PROCESSING

The Data Controller will process the Personal Data of Users through manual and computer tools, with logic strictly related to the purposes themselves and, in any case, in order to ensure the security, protection and confidentiality of the data.

The data spontaneously provided are collected by electronic means directly by the Data Controller and/or through third parties expressly delegated, within the limits of current legislation, or specifically appointedas Data Processors, also through IT systems of Customer Relationship Management (CRM). The CRM is used by the Data Controller both to improve the management of customer data from an administrative and IT point of view, and to offer higher quality services and, if you give your consent, for marketing purposes both direct and profiled.

The personal data collected will be recorded in a safe environment, equipped with physical and computer protection.

The processing of your personal data may consist in their collection, registration, organization, storage, processing, modification, selection, extraction, comparison, use, cancellation or in the combination of two or more of these operations.

RETENTION OF DATA

The personal data of the Users will be kept for the time strictly necessary to fulfill the purposes for which they were collected, and until the consent is revoked by the User, and in any case this retention period will be in compliance with the provisions of the Applicable Law.

The data provided by the User by filling in the appropriate forms prepared by the Data Controller and present on the page "CONTACTS" of the Site, if the User has not given consent to their processing for other purposes (indicated in the "Additional Purposes" section of this policy), once the information requested or evaluated the application of the User (in case of submission of the curriculum vitae) will be deleted or otherwise rendered irreversibly anonymous.

The Contact Data provided by the User for the purchase of the products marketed on the Site will be kept for the period of time necessary in fulfilment of contractual obligations arising with the User, to fulfil tax obligations and for the protection in civil proceedings of the interests of both the Users and the Data Controller.

The personal data of Users acquired for marketing or profiling purposes will be stored in accordance with the Applicable Law as well as the provisions of the Guarantor Authority for the Protection of Personal Data in force.

SCOPE OF COMMUNICATION AND DISSEMINATION OF DATA

DAMIANI S.p.A. does not disclose the personal data collected.

The data provided by the User may be communicated to the companies belonging to the same Group of DAMIANI S.p.A. in order to allow the provision of the service requested by the User and may also be subject to communication in the cases and in the manner provided by the GDPR and Law to third parties, linked to DAMIANI S.p.A. by contractual relationships and in any case duly authorized to process personal data under the direct authority of the Data Controller.

The employees and/or collaborators of the Data Controller in charge of managing the Website may become aware of the Users' Data. These subjects, as "persons in charge of processing", will process the User’s data exclusively for the purposes indicated in this statement and in compliance with the provisions of the Applicable Law.

Third parties may also become aware of the Users' Data who may process personal data on behalf of the Data Controller as "External Data Processors" (such as, by way of example, IT and logistic service providers operating the Site, outsourcing or cloud computing service providers, professionals and consultants), operating under the direct authority of the Data Controller, from which they receive appropriate operational instructions, and which may have their place of operation both inside and outside the European Union.

Users have the right to obtain an updated list of the Data Processors appointed by the Data Controller, making a request to the Data Controller at the following address:contactbliss@damianigroup.com.

TRANSFER OF DATA

The transfer of the User’s personal data to third countries may take place if it is necessary for the provision of the service and in any case will be communicated only the data necessary for the pursuit of the purposes for which they were collected, in compliance with the provisions of current legislation.

In any case, the User’s personal data may only be transmitted to third countries that guarantee the conditions set out in art. 44 and ss. of Chapter V of the GDPR

In the event that the Data Controller should communicate the Data of the User to Data Processors operating, on behalf of the Data Controller and under specific contractual obligations, in EU or non - EU member countries (for which there is a decision of adequacy of the Commission pursuant to the provisions of art. 45 of the Regulation), the transfer will be limited to strictly necessary Data, bound to the purposes for which they were collected, and adopting in any case every measure appropriate to ensure an adequate level of data protection, in full compliance with the Applicable Law.

DATA PROTECTION OFFICER ("DPO")

The Data Protection Officer (DPO) appointed on a voluntary basis by the Data Controller may be contacted at the following addresses: Piazza D.G. Damiani n. 1 - 15048 Valenza (AL) - Italy; e - mail address: contactbliss@damianigroup.com.

REFUSAL TO PROVIDE DATA

The User may refuse to provide his personal data. If the processing of the data provided is necessary for the execution of pre - contractual and/or contractual measures adopted at the request of the User pursuant to art. 6, par. 1, lit. b) and is mandatory and essential for the Law and/or for the purpose of th e execution of the contract, the consequence of such refusal to provide them may preclude, in whole or in part, the Data Controller the possibility of:

1) provvedere all’erogazione del servizio derivante dal rapporto contrattuale in essere tra le parti;

2) to comply with legal obligations related to civil, tax and accounting provisions.

RIGHTS OF THE USER

At any time the User may exercise their rights against the Data Controller, in accordance with EU Regulation no. 679/2016. In particular, by contacting the Data Controller indicated below, the User may ask:

1. to know the existence of data processing that may affect him and, in this case, to obtain access to his personal data pursuant to art. 15 of EU Regulation n. 679/2016 and obtain without delay the communication in intelligible form of the same data and their origin, on the recipients or categories of recipients to whom the personal data are or will be communicated;
2. to obtain, without undue delay, the rectification or integration of personal data concerning him pursuant to art. 16 of EU Regulation no. 679/2016;
3. to obtain the immediate deletion of personal data if consent is revoked, they are no longer necessary for the purposes for which they were collected or otherwise processed or the legal basis for the processing has failed, have been treated unlawfully or this obligation is imposed by law or by the judicial authorities, pursuant to art. 17 of EU Regulation no. 679/2016;
4. to obtain the limitation of the processing of data concerning him if the User disputes the accuracy of the same or has opposed to their processing or the latter is illegal or although the Data Controller no longer needs it for the purposes of processing, the personal data are in any case necessary for the assessment, exercise or defence of a right in court, pursuant to art. 18 of EU Regulation no. 679/2016;
5. to use the right to the portability of their data, understood as the right to obtain from the Data Controller in a structured, commonly used and machine - readable format, the personal data concerning them, as well as to transmit such data to another data controller without hindrance pursuant to art. 20 of EU Regulation no. 679/2016

The User concerned can exercise these rights by simply sending a request via e - mail tocontactbliss@damianigroup.com.

We point out that any rectification or cancellation or restriction of processing carried out at the request of the User, unless this proves impossible or involves a disproportionate effort, will be communicated by the Data Controller to each of the recipients to whom the Personal Data may have been transmitted. The Data Controller will communicate such recipients if the User requests it.

RIGHT OF OPPOSITION

The User will also have the right to object at any time to the processing of personal data concerning him pursuant to art. 21 of the EU Regulation n. 679/2016 in the cases in which the treatment takes place pursuant to art. 6, par. 1, lett. e) or f) (or where processing is necessary for the performance of a task in the public interest or for the pursuit of a legitimate interest of the Data Controller or third parties).DAMIANI S.p.A. will refrain from further processing the User’s personal data unless there are compelling legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the User or for the exercise of a right in court.

With regard to the processing of personal data collected for direct marketing purposes, the User has the right to object at any time.

The User concerned can exercise their right to object by simply sending a request via e - mail to thecontactbliss@damianigroup.com.

WITHDRAWAL OF CONSENT

The User has the right to revoke the consent given at any time, without prejudice to the lawfulness of the processing based on the consent acquired before the revocation, pursuant to art. 7, par. 3 of EU Regulation no. 679/2016. Such revocation may result in the impossibility of giving further course to the provision of the service by the Data Controller and to pursue the purposes indicated above.

COMPLAINT TO THE SUPERVISORY AUTHORITY

If the User considers that the processing concerning him violates the GDPR or Legislative Decree. 196/2003 (as amended by Legislative Decree no. 101/2018), may lodge an appeal or complaint with the Guarantor for the protection of Personal Data (Garante per la protezione dei Dati Personali, Piazza di Monte Citorio n. 121 - 00186 Roma - Italia; E - mailgarante@gpdp.it).

****

"The User, having examined the information, consents to the processing of his personal data for the purposes expressly indicated in the information".