PRIVACY POLICY

Dear User, Riva Industria Mobili S.p.a. has great respect for the privacy of its Users. Any data communicated by the User to Riva Industria Mobili S.p.a. through the Website will be handled with maximum care and using all tools designed to guarantee security, in full compliance with current legislation intended to protect the confidentiality of data. We wish to inform you that the “Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data” (hereinafter “GDPR”) recognises the protection of natural persons in relation to the processing of personal data as a fundamental right. Pursuant to article 13 of the GDPR, we therefore inform you that:

• CATEGORIES OF DATA: Riva Industria Mobili S.p.a. shall process your personal data, including:

a. Data collected automatically. Information systems and applications enabling this website to function, during the normal course of their operation, acquire certain data (the transmission of which is implicit in the use of Internet communication protocols) that may potentially be associated with identifiable users. The type of data collected includes the IP addresses and domain names of computers used by users that connect to the site, the URI (Uniform Resource Identifier) addresses of requested resources, the method used to submit the request to the server, the size of the file received in response, the numeric code indicating the status of the response provided by the server (successful, error, etc.) and other parameters relative to the operating system, browser and computer environment used by the user, the name of the internet service provider (ISP), the date and time of the visit, the referral website and exit page.

b. Data voluntarily provided by the user. The voluntary and explicit sending of emails to addresses reported in the different access channels of this site do not involve a request for consent, but do involve the acquisition of the sender’s email address and data necessary to respond to requests, as well as any other personal data inserted in the message. Said data is intended as voluntarily supplied by the user at the time of the request for the service. By inserting a comment or other information, the user expressly accepts the privacy policy, and in particular consents to the free disclosure of the inserted contents, also to third parties. To the contrary, specific summary policies will be reported or displayed on pages of the site that offer special services by request (form). The user must therefore provide their express consent for use of the data reported in these forms in order to send the request.

c. Cookies. The site does not use/uses cookies. Data collected through the use of cookies may be needed to access parts of the site or for statistical purposes or to improve the browsing experience and make it more efficient in the future, in an effort to evaluate the behaviour of users and adapt the proposed offer of contents based on their behaviour. For more information, a dedicated cookie policy is available.

d. Plug-ins. The site does not incorporate/incorporates plug-ins and/or buttons for social networks, for the purpose of facilitating the sharing of contents on your preferred social networks. Said plug-ins are programmed in such a way as not to set any cookies when accessing the page, to safeguard the privacy of users. Cookies may be set, if so provided by the social networks, only when the user makes effective and voluntary use of the plug-in. Note that if the user browses when logged in to the social network, he/she will have already consented to the use of cookies conveyed by this site at the time of registration to the social network. The collection and use of information obtained by means of the plug-in is governed by the respective privacy policies of the respective social networks, to which reference must be made.

• SOURCE OF PERSONAL DATA: The personal data in the possession of Riva Industria Mobili S.p.a. is collected directly from the data subject.

• DATA CONTROLLER: The data controller is Riva Industria Mobili s.p.a., Via Milano, 137, 22063 Cantù (CO), VAT No. 01404340133, contactable via phone on 031.733094 or via email at privacy@riva1920.it

• PURPOSE AND LEGAL BASIS OF DATA PROCESSING: The purpose and legal basis for the processing of your data is:

For data collected automatically, the legal basis is the legitimate interest of the controller and the purpose is to guarantee and improve the web browsing experience.

For data voluntarily provided by the user, the legal basis is consent, and for the sending of emails to our addresses, the purpose is to be able to send replies to specific requests made by the user; for forms, the purpose is indicated in the specific privacy policy.

For cookies and plug-ins: see the specific cookies policy.

• DATA RECIPIENTS: Within the limits of the described purpose of processing, your data may be communicated to partners, consultancy firms, private companies, third-party suppliers of technical services, hosting providers, IT companies, communication agencies,…

• DATA TRANSFER TO THIRD COUNTRYYour data will not be transferred to third countries/This site may share some of the collected data with localised services outside the European Union. In particular with Google, Facebook and Microsoft (LinkedIn) through social plug-ins and the Google Analytics service. The transfer is authorised and strictly governed by article 45, sub-section 1 of the Regulation (EU) 2016/679 and therefore does not require specific authorisations. The above-listed companies guarantee their adhesion to the Privacy Shield. The Controller guarantees that data will never be transferred to Third Countries that do not comply with the terms set forth by article 45 and following of the Regulation (EU).

• STORAGE PERIOD: Based on the principle of storage limitation (art.5, GDPR), the obsolescence of stored data in relation to the purposes for which it was collected is periodically checked. In particular:

data collected automatically is processed, strictly for the necessary period of time, for the sole purpose of obtaining statistical information on use of the site and to check its regular operation, and also for the purposes of security or in accordance with expiration dates set forth by the law.

Data voluntarily supplied by the user will be stored for a period of time no longer than the fulfilment of the purposes for which it is processed or in accordance with expiration dates set forth by the law.

• DATA SUBJECT RIGHTS: The data subject always has the right to ask the Controller for access to his/her personal data, to request its rectification or cancellation, the restriction of processing or the possibility to oppose its processing, to request data portability, to revoke his/her consent for processing, exercising these and other rights granted by the GDPR by way of simple communication to the Controller. The data subject may also make a claim to a Data Protection Authority.

• OBLIGATORY OR DISCRETIONARY NATURE OF CONSENT: The provision of your personal data is obligatory when browsing our website in relation to points E.1 and E.2 of the above-described purposes, in order to allow the correct fulfilment of the service. The granting of consent for the processing of your personal data for points E.3 is optional and shall in no way compromise the fulfilment of the service.

• DATA PROCESSING METHODS: The personal data you provide shall be the object of processing operations in compliance with the above-mentioned legislation and obligation for confidentiality, which guides the Controller’s activities. The data is processed both using digital tools and on paper supports, as well as all other types of suitable supports, in compliance with appropriate security measures pursuant to art. 5 para. 1 lett. F of the GDPR.

• FINAL NOTES AND UPDATING METHODS: The privacy policy has been prepared for this website only and not for any other websites that may by consulted by the user by way of links included in this site. The privacy policy may be modified due to the introduction of new regulations on the subject. The user is therefore invited to check this page on a regular basis in order to be kept up to date on latest legislation. Previous versions of this privacy notice can be requested at any time from the Data Controller.