INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO THE EUROPEAN REGULATION 2016/679 (art. 13) AND THE NATIONAL LAWS IN FORCE

In fulfillment of the obligations established by the art. 13 of the REG. EU 2016/679 (hereinafter "GDPR") and the current national legislation on the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data, the companies listed below: Fashion District Mantova Srl, Fashion District Molfetta Srl, Frankie Retail Srl, Palmanova Propco Srl and Valdichiana Propco Srl (companies that own the areas and properties that host, respectively, the Villages of Mantova, Molfetta, Franciacorta, Palmanova and Valdichiana), Data Controllers separately from each other, who can be contacted for these purposes at the e-mail address : privacy@lof.it hereinafter jointly "the Data Controller", inform you that the personal data provided by the subjects to whom such data refers (hereinafter, in terms of GDPR, "data subject"), directly or indirectly, will be processed according to principles of lawfulness, correctness, transparency, minimization, accuracy, integrity and confidentiality, collected for specific, explicit and legitimate purposes and subsequently processed in a way that is not incompatible with these purposes, as well as stored in a form that allows the identification of the interested parties for a period of time not exceeding the achievement of the purposes for which they are processed, in the case of consent until revocation of the same by the interested party, unless conservation is necessary for a longer period, by legal obligation or by order of an authority.

Purpose of the processing

The personal data provided by the data subject are processed, where required, exclusively with explicit consent, the latter revocable at any time (see paragraph "Nature of data provision"), for:

1. purpose of providing the service offered by the Owner or requested by the interested party (e.g. browsing the site, participating in an event, registering for a loyalty program, registering for a competition, etc.)
2. direct marketing purposes, which can be achieved by sending promotional communications and advertising material via
   1. automated email and/or SMS sending systems, where a mobile telephone number has been provided upon registration for the “Land of Fashion” loyalty program
   2. notifications on the device where the “Land of Fashion” App was downloaded
3. profiling purposes and in particular the detection of tastes, preferences, habits and/or the degree of satisfaction, market research and other operations directly or indirectly attributable to marketing activities.

Treatment methods and times

The personal data provided will be processed, using automated methods using computer systems and/or on paper, by employees expressly designated by the Data Controller as Processors and/or authorized to process personal data.

The same will be processed for the time strictly necessary to fulfill the specific purposes, and in particular:

1. in the case of processing for the purpose of carrying out the service offered by the Controller and/or requested by the Data Subject: duration of use of the service, legal terms for regulatory compliance with conservation and/or for any legal requirements;
2. in the case of consent to processing for direct and/or indirect marketing purposes and in particular sending information on events, offers, promotional activities of the Data Controller, the data will be processed until the consent is revoked and in any case with a request for renewal within 10 years from the date of acquisition of the same;
3. in the case of consent to processing for the purpose of profiling and in particular for the detection of tastes, preferences, habits and/or the degree of satisfaction, market research and other operations directly or indirectly attributable to marketing activities, the data will be processed until consent is revoked and in any case with a request for renewal within 10 years from the date of acquisition of the same.

In case of revocation or opposition to the processing for purposes 2) and 3), the data will no longer be processed and therefore permanently deleted, without this leading to consequences or effects prejudicial to purpose 1).

In any case, the retention time may in any case be extended to fulfill a legal obligation, or a specific request from a public or supervisory authority, or to allow the carrying out of defensive investigations and/or judicial protection, where necessary.

Nature of the provision of data

The provision of personal data is to be considered mandatory for the purpose referred to in point 1) or participation in the event and consequently any refusal determines the impossibility of carrying out the aforementioned purpose.

The provision of personal data is to be considered optional for the purposes referred to in point 2) "direct marketing" and 3) "profiling", consequently any refusal does not entail any consequences regarding the purpose referred to in point 1).

Scope of communication and dissemination of data

It should be noted that, in relation to the purposes indicated, personal data may be communicated to third parties in a collaborative relationship with the Data Controller or for the fulfillment of legal obligations. These third parties are bound to the utmost confidentiality regarding any information they may become aware of and an example of this is given below:

• authorities, public administrations and supervisory and control bodies for their institutional purposes;
• third parties who collaborate with the Controller to achieve the purposes indicated above;
• third parties who provide management and maintenance services of the information systems through which the processing of personal data is carried out;
• consultants, communication agencies and professional firms.

In the event that some of the aforementioned third parties are located outside the EU, the Data Controllers ensure that such subjects are bound to comply with all the requirements and security measures envisaged in the processing of personal data. Personal data are in no case subject to dissemination activities.

Rights of interested parties

The Data Subjects have the possibility to exercise the right to access their data and to receive a copy of it, obtain rectification and/or integration where incomplete, cancellation and limitation when certain conditions apply, have it transferred to another owner, in format structured, commonly used and readable if technically feasible, not be subjected to a fully automated decision-making process, unless necessary, as well as oppose the processing for reasons related to your particular situation, in this case preventing further processing which will remain strictly limited to possible and proven existence of compelling and prevailing legitimate reasons of the Data Controller. If personal data are processed for direct marketing purposes, the Data Subject has the right to object at any time to the processing of personal data concerning him or her carried out for such purposes, including profiling to the extent that it is connected to such direct marketing, without giving any reason.

The exercise of the aforementioned rights can be carried out within the limits and under the conditions established by the articles. 15-22 GDPR, which can be consulted in full on the website www.garanteprivacy.it/regolamentoue , by contacting the Data Controller directly at the respective office indicated at the bottom or for this purpose by sending an email to privacy@lof.it, or by contacting the Data Protection Officer Data (“DPO”) appointed by the Data Controller pursuant to articles. 37-39 GDPR, Inprivacy Srl at the email address: info@inprivacy.it , without prejudice in any case to the right to lodge a complaint with the supervisory authority (Guarantor for the protection of personal data, Piazza Venezia n. 11 - 00187 Rome , www.gpdp.it - www.garanteprivacy.it , e-mail: garante@gpdp.it , Fax: (+39) 06.69677.3785 Telephone switchboard: (+39) 06.69677.1) and any other administrative or extrajudicial appeal available, as well as acting in court.

The Data Controller reserves the right to make changes to this Information at any time, with binding effects from the date of its publication, giving information on this page which therefore may be subject to updates over time, also in compliance with European and national regulations in matter. Users (Data Subjects) are therefore invited to constantly check the content of the Information in order to ensure that they agree with any changes (taking as reference the date of last modification indicated at the bottom of the same), being required to stop browsing the site web and respectively the use of the service provided through the Owner's other communication channels in the event of non-acceptance of the same.

Last edit 06 September 2022

Franciacorta Village Piazza Cascine Moie ½ Rodengo Saiano (BS) 25050 – Italy

Valdichiana Village Via Enzo Ferrari 5 Foiano della Chiana (AR) 52045 – Italy

Mantova Village Via M.Biagi, Bagnolo San Vito - 46031 Italy

Palmanova Village SP 126 Km 1.6 Joannis di Aiello del Friuli (UD) 33041 - Italy

Molfetta Village Via dei Portuali,12 Calderina area Molfetta (BA) 70056 - Italy