INFORMATION PURSUANT TO ART. 13 OF EU REGULATION NO. 2016/679

GENERAL DATA PROTECTION REGULATION (“GDPR”)

This information is provided in compliance with the legislation on the protection of natural persons with regard to the processing of personal data pursuant to EU Regulation 679/2016 (hereinafter referred to as the “Regulation” or “GDPR”) and K-SPORT WORLD S.R.L. with registered office at Via Annibale Mengoli, no. 23, 61122 Pesaro (PU), as Data Controller (hereinafter referred to as “K-SPORT” or the “Controller”), intends to provide information regarding the processing of Personal Data.

PERSONAL DATA PROCESSED

Name, surname, company details, telephone number, email address, comment content

OBBLIGATORIETÀ DEL CONFERIMENTO DEI DATI

Providing your data is mandatory to submit the request using the appropriate form. Failure to provide this data, or providing it partially or incorrectly, will make it impossible to complete the request.

DATA PROCESSING METHODS

The processing of the Data Subject’s Personal Data is carried out through the operations indicated in art. 4 no. (2) GDPR, namely: collection, recording, organization, storage, consultation, selection, extraction, comparison, use, communication, cancellation and destruction. The Personal Data are subject to both paper-based and electronic and/or automated processing.

STORAGE OF PERSONAL DATA

Regarding the retention period, Personal Data is retained only for the periods indicated above. At the end of these periods, Personal Data will be permanently deleted or otherwise irreversibly anonymized. This does not apply in cases where retention for a further period is necessary to address any disputes, requests from competent authorities, or pursuant to applicable law.

DATA RECIPIENTS

The data may be processed by external parties acting as data controllers, such as, for example:

• Supervisory and control authorities and bodies;
• Suppliers;
• Data Controllers (accountant, employment consultant, system administrator, software house that manages data and software development);
• Law firms.

The data may also be processed, on behalf of the Company, by external parties designated as data processors, who have been provided with appropriate operating instructions. These parties essentially fall into the following categories:

• companies that offer email sending services;
• companies that offer website maintenance services;
• companies that offer support in carrying out market research.

SUBJECTS AUTHORIZED TO PROCESS

The data may be processed by employees and collaborators of the company functions responsible for pursuing the purposes indicated above, who have been expressly authorized to process it and who have received adequate operating instructions.

TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION

The data collected by K-SPORT is stored in the European Economic Area countries where EU Regulation 679/2016 applies or in countries for which the Commission has adopted an adequacy decision. Further information can be found at the link https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

If personal data is transferred outside this scope, such personal data will be processed in accordance with the measures detailed in EU Regulation 679/2016 and through the prior implementation of a TIA – Transfer Impact Analysis.

RIGHTS OF THE INTERESTED PARTY – COMPLAINT TO THE SUPERVISORY AUTHORITY

Pursuant to EU Regulation 679/2016, the interested party has the right:

• access to Personal Data;
• to the rectification of Personal Data;
• to the deletion of Personal Data;
• to the limitation of the processing of Personal Data;
• to object to their treatment,
• to the portability of Personal Data.

By contacting the Company via email at (website@k-sport.tech), interested parties may request access to their data, its deletion, the correction of inaccurate data, the completion of incomplete data, the restriction of processing in the cases provided for by Art. 18 of the GDPR, and the right to object to processing in the event of the data controller’s legitimate interest.

Furthermore, if the processing is based on consent or a contract and is carried out using automated tools, interested parties have the right to receive the data in a structured, commonly used, and machine-readable format, as well as, if technically feasible, to transmit it to another controller without hindrance.

Data subjects have the right to withdraw their consent at any time for marketing and/or profiling purposes, as well as to object to the processing of their data for marketing purposes, including profiling related to direct marketing. Data subjects who prefer to be contacted for the aforementioned purposes exclusively through traditional means may object only to receiving communications through automated means.

Data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State in which they habitually reside or work, or in the State in which the alleged infringement occurred.

In particular, you may lodge a complaint with the competent supervisory authority against the processing of your personal data or any other decision by K-SPORT.

The responsible supervisory authority is the Italian Data Protection Authority; Address: Piazza Venezia 11, 00187, Rome; Telephone: +39 06.696771, Email: protocollo@gpdp.it; Certified Email (PEC): protocollo@pec.gpdp.it

DATA PROTECTION OFFICER

K-SPORT has appointed a Data Protection Officer pursuant to art. 37 GDPR in the person of Attorney Andrea Saverio Mezzetti, email: amezzetti@orrick.com .