PRIVACY POLICY

Pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”)

Your privacy is important to us. Please read the following information.

In compliance with the GDPR, GranitiFiandre S.p.A., identified below as the Data Controller, provides information regarding the processing of any personal data provided by users who browse and/or interact with the website. This online Privacy Policy therefore applies only to information collected through our website and not to information collected offline.

Who is the Data Controller, who is the Data Protection Officer (DPO), and how to contact them

Company name: GranitiFiandre S.p.A.

Address: Via Radici Nord, 112 – 42014 Castellarano (RE), Italy

VAT No.: 01411010356

Tax Code: 01411010356  E-mail: info@granitifiandre.it

Phone: +39 0536 819611

Data Protection Officer (DPO): dpo@granitifiandre.it

What data do we process and why?

1. Browsing data The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is inherent in the use of Internet communication protocols. This includes data such as IP addresses, the type of browser used, and other parameters relating to the user’s operating system and IT environment.

These data may be processed by us and by our external service providers responsible for maintaining the company information systems. The processing of your personal data is lawful because it is necessary to provide you with access to and navigation of the website, pursuant to Article 6(1)(b) and (c) of Regulation (EU) 2016/679 on Data Protection. Refusal of this processing will make it impossible for us to provide the service.

Methods and logic of personal data processing

In relation to the purposes referred to herein, processing is carried out using manual, IT and telematic tools, according to logic strictly related to those purposes and, in any case, in a manner that ensures the security and confidentiality of the data.

How long do we retain your data?

For point 1, the data are retained for 10 years from the termination of the relationship or, in the event of regulatory changes or changes in case-law, for as long as retention is necessary to assert a right of either party. The obsolescence of the data is periodically reviewed.

What are your rights?

You have the right to request access to your personal data from the Data Controller using the contact details provided at the beginning of this page.

You have the right to request from the Data Controller the rectification / erasure / restriction of processing of your personal data using the contact details provided at the beginning of this page.

You have the right to object to the processing of your personal data by contacting the Data Controller using the contact details provided at the beginning of this page.

You have the right to receive the complete list of Data Processors (internal and external) by contacting the Data Controller using the contact details provided at the beginning of this page.

You have the right to lodge a complaint with a supervisory authority, such as the Italian Data Protection Authority: http://www.garanteprivacy.it/

Is there any automated decision-making, including profiling pursuant to Article 22(1) and (4) of Regulation (EU) 2016/679?

None

International data transfers

No international data transfers take place.

This Privacy Policy may be amended and supplemented over time; we therefore recommend that you review it periodically. In particular, in the case of ongoing relationships, we will make every effort to inform you promptly of any changes made.

Rev.01 of 03/06/2026