PRIVACY DISCLAIMER

This information is provided pursuant to art. 13 of EU Regulation no. 2016/679 – GDPR
(“European General Data Protection Regulation”).
The JJ s.n.c. company Di Migliari D. and Toffano E., with registered office in Via Dell’ Artigianato 34 VAT number: IT01276540299,
in the person of Migliari D. and Toffano E, as Data Controllers (hereinafter, “Data Controller”), informs
pursuant to art. 13, of EU Regulation no. 2016/679 (hereinafter, “GDPR”) that your data will be processed with
the following methods and purposes:

Object of the treatment
The Data Controller takes care of the protection of your personal data and respects the legislation on the protection of personal data
applicable (GDPR 12016/679 and Legislative Decree 101/2018). Your personal data are treated confidentially and are
transferred to third parties solely as provided in this Policy, or with your consent. We process data
personal data that you provide to us while using the website and/or after registering on the website.
In particular, we deal with:
a) personal, identifying and non-sensitive data (in particular, name, surname, tax code, VAT number, e-mail,
telephone number – hereinafter, “personal data” or also “data”) directly provided by you, with the
registration on the site and/or the request to use the individual services offered; strictly nominal data for the
minor users.
b) data not directly provided by you – and in any case acquired within the limits of the provisions of the art. 14,
paragraph 5, GDPR – the transmission of which is connected to the use of Internet communication protocols (merely
by way of example, accesses to the page, amount of data transferred, status message upon access,
session ID numbers, IP addresses, URL addresses, etc.). This data allows us to reconstruct your path
visits to the site.

Purpose of the processing
Your personal data is processed:
A) without your express consent (art. 6, letter b), e), GDPR), for the following Service Purposes:

process a contract request or a pre-contractual request;
execute pre-contractual measures adopted at your request;
develop internal statistics;
fulfill tax obligations deriving from existing relationships;
fulfill the obligations established by law, by a regulation, by community legislation or by a
order of the Authority;
prevent or discover fraudulent activity or abuse harmful to the website;
pursue a legitimate interest of the Data Controller or third parties, within the limits and conditions
referred to in the art. 6, letter f), GDPR;
exercise the rights of the Owner, (by way of example, the right of defense in court);
B) Only with your specific and unequivocal consent (art. 7, GDPR), for the following Marketing Purposes:
send newsletters, commercial communications and/or advertising material on products and/or via e-mail
services, different and/or dissimilar from those already purchased, offered by the Owner.

Nature of the provision of personal data
The provision of your Data for the purposes described in point 2, letter. A), n. i and ii) is necessary in nature. In
If you do not provide your data, we cannot guarantee your registration on the Site, nor the possibility of proceeding
to your requests.
The provision of Data for the purposes described in point 2, letter. b), is instead optional in nature. So it can
decide not to provide any data or revoke the possibility of processing the data provided by us
previously. In this case, you will no longer receive our newsletters, but you will continue to receive our services
and will retain the right to register on the site.
Treatment methods
The processing of your personal data is carried out by means of the operations indicated in the art. 4, no. 2), GDPR e
precisely: collection, recording, organisation, conservation, consultation, processing,
modification, selection, extraction, comparison, use, interconnection, block, communication,
deletion and destruction of data. The processing of your data will be based on principles of correctness,
lawfulness and transparency and can also be carried out through automated methods designed to store them,
manage and transmit them and will take place using suitable tools, to the extent reasonable and state of the art,
to guarantee security and confidentiality through the use of suitable procedures that avoid the risk of loss,
unauthorized access, illicit use and dissemination.

Data retention period
The Data Controller will process your personal data for the necessary time:

for no more than 10 years from data collection to fulfill the above purposes;
for no longer than 2 years from data collection for marketing purposes.
After this retention period, the data will be destroyed or made anonymous.

Data access
The personal data processed by the Data Controller will not be disclosed, i.e. it will not be disclosed to individuals
indeterminate, in no possible form, including that of their making available or simple
consultation. However, they may be communicated to workers who work for the Data Controller and
to some external parties who collaborate with them. In particular, your data may be made accessible
to:

employees and collaborators of the Owner, consultants authorized to manage the site and supply the
related services (for example: customer services, IT department, etc.), in their capacity as
Internal managers and/or Persons in charge of personal data processing and/or System administrators;
third-party companies or other subjects (by way of example: credit institutions, professional firms,
consultants, insurance companies, etc.) who carry out outsourced activities on behalf of the
Owner, in their capacity as external managers and/or persons in charge of processing personal data;
Your data may also be communicated, to the extent strictly necessary, to authorized parties
to access it pursuant to legal provisions, regulations and community regulations.

Data communication
Without your express consent (art. 6 letter b), c), GDPR), the Data Controller may communicate your data for the purposes
indicated to Supervisory Bodies, Judicial Authorities as well as to all other subjects to whom the communication
is mandatory by law for the fulfillment of the aforementioned purposes.
Data transfer
The management and storage of personal data will take place on the servers of the Data Controller and/or third-party companies appointed
and duly appointed as Data Controllers, located within the European Union, i.e
in compliance with the provisions of the articles. 45 et seq., GDPR. The servers are currently located in the Union
European. The data will not be transferred outside the European Union. In any case it remains understood
that, if it becomes necessary to transfer the location of the servers, to Italy and/or the European Union and/or countries
outside the EU, this movement will always take place in compliance with the articles. 45 et seq., GDPR. In this case, however, the
The Data Controller hereby ensures that the transfer of non-EU data will take place in compliance with the provisions of the law
applicable by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or
adopting the standard contractual clauses provided by the European Commission.
Browsing data
The IT systems and software procedures used to operate the site may acquire, in the course
of their normal activity, some personal data whose transmission is implicit in the use of the protocols
Internet communication. This is information that is not collected to be associated with
identified interested parties, but who by their very nature could, through processing and associations with
data held by third parties, allow users to be identified (i.e. parameters relating to the operating system and
to the user’s IT environment). These data are used by the Data Controller for the sole purpose of obtaining
anonymous statistical information on the use of the Site and to check its correct functioning and are
deleted immediately after processing. This data can also be used for verification
of liability in case of hypothetical computer crimes against the Site.

Cookies
When you use our site, cookies are stored on your computer. Cookies consist of
small text files that are saved on your computer and provide us with certain information. I am
widely used in order to make websites work or work more efficiently for
improve the user experience, as well as to provide certain information to the owners of the site. The
Our site uses Cookies which remain on your computer for different times. Some expire at the end of each
session and some remain longer so that when you return to our Site, you can benefit from a
better user experience. Web browsers allow you to exercise some control over Cookies
through your browser settings. Most browsers allow you to block cookies or
block cookies from certain sites. Browsers can also help you delete Cookies when you close
the browser. However, you should keep in mind that this could mean any opt-outs or preferences
that you have set on the site will be lost. We invite you to consult the technical information relating to yours
browser for instructions. If you choose to disable the setting of Cookies or if you refuse to accept a
cookies, some parts of the service may not function properly or may be
noticeably slower.
Rights of the interested party
In your capacity as an interested party, you have the rights referred to in the articles. 16 – 21, of the GDPR and precisely the rights of:

obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet
recorded, and their communication in an intelligible form;
obtain indication of: a) the origin of the personal data; b) the purposes and methods of processing;
c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) gods
identification details of the owner, managers and representative designated pursuant to art. 3,
paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the personal data may be
communicated or who may become aware of it as a designated representative in the territory
of the State, of managers or appointees;

obtain: a) updating, rectification or, when interested, integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed in violation of
law, including those whose retention is not necessary in relation to the purposes for which the data
have been collected or subsequently processed; c) the certification that the operations referred to in letters a)
and b) have been brought to the attention, also with regard to their content, of those to whom
the data have been communicated or disseminated, except in the case where this proves impossible
or involves the use of means that are manifestly disproportionate to the protected right;
object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you,
even if relevant to the purpose of the collection; b) to the processing of personal data concerning you a
purposes of sending advertising or direct sales material or for carrying out market research
or commercial communication, through the use of automated call systems without
the intervention of an operator via email and/or traditional marketing methods
by telephone and/or postal mail. Please note that the interested party’s right to object
set out in the previous point b), for direct marketing purposes using automated methods yes
extends to traditional ones and which in any case remains without prejudice to the possibility for the interested party to exercise
the right to object even partially. Therefore, the interested party can decide to receive only
communications using traditional methods or only automated communications or
neither of the two types of communication.
Where applicable, you also have the rights referred to in the articles. 16 – 21, GDPR (Right of rectification, right to be forgotten, right to
limitation of processing, right to data portability, right to object), as well as the right to complain
to the Guarantor Authority.

Methods of exercising rights
You have the right to ask the Data Controller for access to the Data concerning you, their rectification or cancellation,
the integration of incomplete Data, the limitation of processing; to receive the Data in a structured format,
in common use and readable by automatic device; to revoke any consent given
regarding the processing of your sensitive data at any time and to object in whole or in part,
to the use of the Data; to lodge a complaint with the Authority, as well as to exercise the other rights recognized to you by
applicable discipline.
You can exercise your rights at any time by sending:
a registered letter with return receipt to Società JJ s.n.c. Di Migliari D. and Toffano E.,
with registered office in Via Dell’ Artigianato 34
or an e-mail to info@jjcaraudiotuning.it
Minors
If the person providing the data is under the age of 16, such processing is lawful only if and
to the extent that such consent is given or authorized by both holders of parental responsibility
for which the identification data are acquired.
Owner, manager and appointees
The data controller is the company JJ s.n.c. Di Migliari D. and Toffano E.,
with registered office in Via Dell’ Artigianato 34
The updated list of data controllers and data processors is kept at the Data Controller’s headquarters
of the treatment.
Changes to this Policy
This information may be subject to change. It is therefore advisable to check this regularly
Information and to refer to the most updated version.
Place and date
OCCHIOBELLO, 02/09/2022