Information pursuant to art. 13 EU Regulation no. 2016/679 (GDPR)

Dear Supplier,

Autogrill Italia S.p.A. ("Autogrill") in its capacity of data controller ("Data Controller") informs you that your personal data are processed with and without electronic instruments, according to logics and procedures consistent with the purposes indicated below and in compliance with the GDPR (collectively, EU Regulation No. 2016/679 and consolidated Legislative Decree 196/2003).

According to the above mentioned legislation, the processing of personal data will be based on the principles of fairness, lawfulness and transparency and in order to protect your confidentiality and your rights.

Pursuant to Article 13 of the GDPR, therefore, we provide you the following information:

1 - Purpose of processing

Your personal data will be processed for the following purposes:

A. Collection of pre-contractual information, including economic-financial evaluation; proper management of the future contractual relationship, related obligations as well as for purposes however strictly necessary and related to the fulfillment or non-fulfillment of the contract, management of mail, including e-mail;

B. Monitoring of users' access to the Service and proceeding to the selection of suppliers regarding participation in individual events;

C. Implementation of procedures strictly necessary for the aforementioned monitoring of access to the Service and selection of the Supplier through dynamic negotiation;

D. Verification of the fulfillment of legal, accounting, tax or any other mandatory obligations related to the above purposes;

E. Verification of the fulfillment of legal, salary, contribution and social security obligations with respect to employees;

F. Establishment and management of financing relationships related to the contracts, including the management of existing or already successful relationships, and verification of the fulfillment of the respective obligations;

G. Disclosures to Credit Institutions for the payment of the due amounts;

H. Management of litigation, both judicial and extrajudicial;

I. Periodic evaluation of the supplier for rationalization and achievement of cost-effectiveness and efficiency objectives.

2 - Legal basis for processing.

For the above purposes, the legal basis of processing is the execution of a contractual relationship between you and Autogrill.

3 - Personal Data Method of Processing.

The processing of personal data will be effected by using IT and electronic tools with logics strictly related to the above purposes and in any case ensuring the security and confidentiality of the data.

Your personal data may be shared with our service providers, e.g., for services of a technical and organizational nature that are functional to the purposes stated above. We only provide such parties with the data necessary to perform the agreed services and they act as data processors, following the the instructions received from Autogrill. Personal data may also be shared with individuals authorized to process data specifically appointed by Autogrill.

4 - Nature of provision and consequences of refusal

Providing personal data is necessary to enable the fulfillment of legal and contractual obligations.

Providing data is optional, but any refusal to provide your personal data will make it impossible to manage your contractual relationship with Autogrill and therefore will make impossible to enter into the contract.

5 - Communication of data

The Data may also be communicated to third parties, operating in the commercial sector, as well as to banks and insurance companies, which may process them only and exclusively for the same purposes as those set out in the contracts entered into between the parties.

These data may also be communicated to other parties for purposes strictly related to the performance of the contractual relationship, such as but not limited to: public or private entities such as commissioners of works, public entities to which the data must be provided to fulfill legal obligations, any authorities that legitimately request them.

6 - Personal Data Diffusion

Your personal data will not be disclosed in any way.

7 - Data Transfer

Your personal data will be processed within the European Union and will not be transferred to third countries.

8. Retention of Personal Data

Personal data are retained only to the extent necessary to execute the contract and for the fulfillment of contractual and legal obligations and for as long as necessary to pursue the purposes for which the data are collected.

Upon termination of the contract, the need to process the data will cease; personal data will be deleted or anonymized, with the exception of data that must be retained in execution of specific legal obligations.

9 - Data controller

The Data Controller is Autogrill Italia S.p.A., with registered office in Novara, via Greppi 2 and secondary office in Centro Direzionale Milanofiori, Strada 5 - Palazzo Z, 20089 Rozzano (MI). You may contact the Data Protection Officer (DPO) at any time at the following email address: dpo@autogrill.net.

10 - Rights of the data subject

You may contact the Data Controller or the Data Protection Officer at the contact details above to obtain an updated list of our data processors, the entities to whom the data are disclosed, and to exercise at any time the rights under Art. 15 ff. of the GDPR, e.g., to obtain confirmation of the existence or non-existence of your data, to verify its content, origin, accuracy, to request its supplementation, updating, rectification, deletion, anonymization, to request data portability, restriction of processing.

You have the right to object at any time to the processing of your personal data for legitimate reasons. Following objection Autogrill will no longer process your personal data, except in the case of compelling legitimate reasons, e.g., for the exercise or defense of rights in court.

You have the right to revoke your consent at any time, without affecting the lawfulness of the processing based on the consent before revocation, you may lodge a complaint with the Data Protection Authority as indicated on https://www.garanteprivacy.it/ and take appropriate legal action (Articles 77 and 79 GDPR).

Legal Disclaimer

Access to the pages of the Autogrill website implies for the user the acceptance of the following conditions:

The entire content of the web pages, including text and images, is the exclusive property of Avolta Group. All rights are reserved. Any reproduction, distribution, storage or other use is prohibited without Autogrill's prior written consent. Autogrill permits the user to store or print extracts from the web pages of this site solely and exclusively for personal use.

***

"Autogrill," the name of the products, and the logo are registered trademarks and distinctive signs owned exclusively by the Avolta Group.

***

The web pages of this site are periodically updated; however, Autogrill assumes no responsibility for the completeness and up-to-dateness of the information contained on the site. Autogrill also assumes no responsibility for any manipulation of the site by third parties.

***

All communications or messages sent by users via electronic mail will be considered by Autogrill as devoid of any confidential nature. Messages, communications or documents sent by users will become the property of Autogrill, which may use them for any commercial, communicational or other purpose.

***

Any risk associated with the use and exploration of the site is borne by the user. Autogrill assumes no liability in connection with any damage that may be caused to your computer equipment as a result of your access to, use of, or downloading of materials from these web pages.