INFORMATION ON COOKIES

In compliance with the provisions of Articles 13 and 122 of Legislative Decree of 30 June 2003, and with the provisions of the general Ruling of the Italian Data Protection Commissioner of 8 May 2014, DEKA M.E.L.A. S.r.l., with headquarters in (50041) Calenzano (FI), via Baldanzese no. 17, the Data Controller, informs users of the website www.monalisatouch.com of the type of cookies used by it and of the uses to which the information obtained is put, also providing information that can facilitate the selection/deselection of individual cookies.

DEFINITION AND PURPOSE OF COOKIES

A “cookie” is a small text file created by certain websites on the user’s computer when he or she accesses a particular site, whose purpose is to store and transmit information. Cookies are sent from a web server (which is the computer that runs the website visited) to the user’s browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and are stored on the user’s computer; they are then re‐sent to the website when the user subsequently visits that site.

Some operations cannot be performed without the use of cookies, which thus makes them technically necessary in certain cases. In other cases, the site uses cookies to facilitate and assist navigation by the user or to allow him or her to access services that are specifically requested.

Cookies may also remain in the system for long periods of time and may also contain a unique identification code. This enables sites that use them to keep track of the user’s navigation inside the site, for statistical or advertising purposes i.e. in order to create a customised profile of the user based on the pages that user has visited and, hence, to show and/or send the site visitor targeted ads (so‐called Behavioural Advertising).

WHICH COOKIES ARE USED BY THE WEBSITE AND FOR WHICH PURPOSES

This website uses various types of technical cookies, but not profile cookies.

The Data Controller ‐ following the directions provided by the Italian Data Protection Commissioner in the general Ruling of 8 May 2014 ‐ details below the specific categories of cookies used, as well as the purpose thereof and the results of their deselection:

 TYPE OF COOKIES PURPOSES DURATION OF RETENTION EFFECTS OF DESELECTION

Navigation cookies

These allow normal navigation and use of the website

Valid for the browsing session

Browsing would not be possible if these were deactivated, which makes these cookies necessary

Analytics cookies

These gather information in aggregate form on navigation by users to optimise the experience of navigation and the services themselves.

Established by third parties, reference is made to the privacy notice referred to below

It would not be possible for the Data Controller to obtain the information in aggregate form

Functionality cookies

These facilitate navigation and the service rendered to the user based on a series of criteria selected by the latter.

Retained to preserve functionality for 30 days.

It would not be possible to retain the selections made by users during navigation

THIRD PARTY COOKIES

Third party cookies also operate on this website i.e. cookies created by a website other than the one that the user is currently visiting.

Based on the provisions of the Ruling of the Italian Data Protection Commissioner of 8 May 2014, the Data Controller is bound to provide the updated link to the privacy notices and consent forms of third parties with whom special agreements have been stipulated for the installation of cookies through its own website.

Third party cookies are:

Anonymous third party cookies

The use of anonymous third party cookies is provided for; these cookies facilitate the anonymous gathering and recording of information on pages of the website that have been accessed, without allowing the visitor to be identified, and they are not combined in any way with other information. Such data are used exclusively to track and examine the use of the sites by users, to compile statistics based on information gathered anonymously and by using data in aggregate form.

In particular, users are informed that the web analytics service that issues cookies used by the Data Controller is “Google Analytics”, described below.

Google Analytics is a web analytics service provided by Google, Inc. (“Google”) that uses “cookies” placed on the user’s computer to enable the website visited to analyse how it is used by users. The information generated by the cookie about the use of the website visited (including the IP address) will be sent to Google and stored on Google servers in the United States. Google will use this information in order to track and examine the user’s use of the website, compile reports on the website’s activity for website operators and provide other services relating to the website’s activity and to internet usage. Google may also transfer this information to third parties if legally required to do so, or where the third parties process the aforementioned information on Google’s behalf. Google will not associate the user’s IP address with any other data held by Google. The user may at any time refuse the use of cookies by selecting the appropriate setting on his or her browser.

To consult Google’s privacy policy in relation to the Google Analytics service, see the website http://www.google.com/intl/en/analytics/privacyoverview.html.

SOCIAL BUTTONS

In the site www.monalisatouch.com special “buttons” (called “social buttons/widgets”) can be found that represent the social network icons (for example, Facebook). These buttons allow users navigating on the site to interact with a “click” directly with the social networks represented. In these circumstances the social network acquires the data relating to the user’s visit, whilst the Data Controller does not share any navigation information or data relating to the user acquired through its own sites with the social networks accessible thanks to the Social buttons/widgets.

PROCESSING METHODS

The data processing is carried out by suitably assigned employees using computer and electronic means. The data are stored in electronic files and the minimum security measures envisaged by law are fully guaranteed.

COMMUNICATION AND DISSEMINATION

The data gathered will not be disclosed or disseminated. Disclosure to third parties other than the Data Controller and the data processing operators identified and appointed pursuant to Articles 29 and 30 of Legislative Decree no. 196/2003, as amended, is allowed insofar as necessary for the aforementioned purposes, in respect of third parties (such as computer supply and support companies that guarantee the proper operation of the portal) whose activities involve the proper pursuit of the purposes described. Data processing by third‐party subjects, in any case, shall occur properly and in compliance with applicable legal provisions.

RIGHTS OF THE DATA SUBJECT

The data subject may assert his or her rights as set out in Articles 7, 8, 9 and 10 of Legislative Decree no. 196 of 30 June 2003, by contacting the Data Controller. In particular, according to Article 7, the data subject has the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form. The data subject has the right to be informed: a) of the source of the personal data; b) of the purposes and methods of the processing means; c) of the logic applied to the processing, if the latter is carried out with the help of electronic means; d) of the identification data of the Data Controller, Data Supervisors and of the representative designated as per article 5(2); e) of the entities or categories of entity to whom/which the personal data may be communicated and who/which may come to know said data in their capacity as designated representative(s) in the State’s territory, Data Supervisors(s) or Data Processing Operator(s). The data subject has have the right to obtain: a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed; c) certification that the operations as per letters a) and b) have been notified, also as regards their contents, to the entities to whom/which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right to be protected. The data subject has the right to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning him/her, although relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where done for the purpose of sending advertising materials or direct selling, or for market or commercial communication surveys.

DATA CONTROLLER, DATA SUPERVISOR AND PRIVACY NOTIFICATIONS

The Data Controller DEKA M.E.L.A. S.r.l., with headquarters in (50041) Calenzano (FI), via Baldanzese no. 17.

For any communication made pursuant to Articles 7 et seq. of Legislative Decree no. 196/2003, as amended, the Data Controller makes available the following email address monalisatouch@monalisatouch.com.

DURATION OF RETENTION

The data are retained for the period of time specified in the above table in this document, and in any case until such time as the data subject has exercised his or her right to make objections, as relevant.

DESELECTION AND ACTIVATION OF COOKIES

By accessing the website and going beyond the introductory banner containing the short privacy notice, the user consents to the use of the technical cookies specified in this document. This consent may always be revoked by pressing the button “I do not consent” at the foot of the page.

Individual cookies may be freely selected or deselected using this system, but this may also be done by using one’s web browser (selecting the settings menu, clicking on internet options, opening up the privacy tab and selecting the desired level for blocking cookies)