INFORMATION NOTICE PURSUANT TO REGULATION (EU) 2016/679 and GDPR updated as of 12/05/2025. This update is made within a policy of constant review of information notices. Previous versions of the notice can be obtained by contacting the Data Controller.

1. General information: The undersigned Data Controller (Ge.co. Pannelli S.r.l., hereinafter referred to as the “Controller” or “Company”) informs you that, for the purposes indicated below, it will process your personal data provided via the form or following its submission. Only the data necessary for the achievement of the purposes set out in this notice will be requested and processed.

2. Purpose and legal basis: The data may be processed by the Controller:

A. In order to respond to your request for information and to take all necessary actions to comply with your request. The legal basis is your consent.

B. To comply with legal obligations under national or EU legislation. The legal basis is compliance with legal obligations.

C. For legitimate interests such as asserting or defending the Company’s rights. The legal basis is the pursuit of legitimate interests. These interests have been assessed not to override your fundamental rights or freedoms (evaluated through a Triple Legitimate Interest Assessment available by contacting the Company).

3. Data provision – mandatory or not: Providing data for the purpose in point 2A is optional, but failure to do so will prevent the Company from responding to your request. This consent is always free and revocable, but without it, the request cannot be fulfilled. Providing data for purposes under point 2B and 2C is necessary; failure to provide the data will prevent the Company from responding.

4. Categories of recipients: For the purposes referred to in point 2, letter A, the data may be communicated to shipping carriers should the sending of printed informational material be requested.

For the purposes referred to in point 2, letter B, the data may be communicated to public entities, judicial authorities, and law enforcement agencies.

For the purposes referred to in point 2, letter C of this privacy notice, the data may be communicated to lawyers/legal consultants, public entities, judicial authorities, and law enforcement agencies, as well as to postal services (as they may view the address for sending any written communications).

Only the data strictly necessary for achieving the specific purposes indicated in this notice will be communicated.

The data may also be processed on behalf of the Company by specifically authorized individuals (such as website managers, including external to the Data Controller, consultants, including external to the Data Controller- I.e. legal and IT consultants – web managers, including external to the Data Controller, internal personnel connected to the sector to which the request is addressed) and by data processors (always appointed by the Data Controller), such as companies for IT outsourcing and website management. The list of processors is always available upon request from the Data Controller.

5. Data retention: Data may be stored for the time necessary to fulfill the purposes indicated:

– For legal obligations, data will be retained for the duration required by applicable law;

– For 2A, data may be retained until the request is fulfilled, unless earlier deletion is requested by the user;

– In any case, data may be retained for up to 10 years after the request by Italian law to allow the Company to assert or defend its rights, unless ongoing disputes require longer retention.

6. Data Controller: GE.CO. PANNELLI S.r.l. Via Isonzo 40/42 33076 Pravisdomini (PN) ITALY Tel. +39 0434 644997 Fax +39 0434 645790 e-mail info@gecopannelli.it.

7. Your rights: We inform you that the GDPR provides the data subject the possibility to request from the Company (using the contact details provided above) access to personal data, correction of the data, deletion of the data or restriction of processing concerning the data subject, as well as data portability. The data subject also has the right, by contacting the Company, to object to the processing of personal data and to exercise the other rights provided in Chapter 3, Section 1 of the GDPR, including the right to withdraw consent where applicable. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8. Complaints: If you believe that your data has been processed in violation of the GDPR, you have the right to file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) as per Article 77 GDPR or take legal action (Article 79 GDPR). You may also contact the authority in your habitual residence or workplace. List available at: www.garanteprivacy.it/home/footer/link

9. Processing methods: Data may be processed in paper, manual, electronic and telematic form. It will be protected using appropriate security measures and handled in compliance with all relevant laws and principles (lawfulness, fairness, transparency, confidentiality, etc.). Data will be processed only as strictly necessary to achieve the purposes indicated. Storage will occur at the Company’s offices and/or data processors’ premises, as well as by the third parties mentioned in this privacy notice, to whom the data are communicated and who process them as independent data controllers. Data will also be organized in databases – including electronic databases.

10. CVs (Curriculum Vitae): Any CVs sent will be used solely for personnel selection purposes (by HR staff) and will not be disclosed externally. Sensitive data (e.g. health or religious beliefs) is not required and, if included, will be processed only if necessary and legally permitted (e.g. protected categories). CVs may be retained for one year, unless deletion is requested earlier.