Privacy Policy

INFORMATION ON THE PROCESSING AND PROTECTION OF PERSONAL DATA

1. DATA CONTROLLER AND DATA PROCESSOR

The Data Controller is Casillo Partecipazioni S.p.a. in the person of its Legal Representative, with registered
office in Corato at Via Sant'Elia, industrial area. The Personal Data Processor is Mr Vito Maurogiovanni.

2. PURPOSE AND LEGAL BASIS OF THE PROCESSING

a) to manage relations aimed at the performance of services and/or supply of services for which you have
made a request and which are indicated in the documentation attached to this letter;
b) to fulfil the consequent administrative, accounting, or fiscal legal obligations;
c) to manage statistics with reference to the above documentation;
d) for eventual contacts (by telephone, fax, ordinary mail, e-mail, etc.), aimed at the fulfilment of the
purposes listed in points a, b, c;
e) for the acquisition of data by means of audio-visual instruments (e.g. images, videos, etc.), related to the
above-mentioned documentation
f) to submit to you, in the future, information and/or proposals and/or requests for satisfaction and/or
send you documentation relating to our activities or activities of third parties to whom your data may be
provided.

3. CATEGORIES OF DATA PROCESSED

Casillo Partecipazioni S.p.a. processes personal data collected directly from you, or from third parties,
including, by way of example, personal data (e.g. name, surname, address, date and place of birth) and
information aimed at the performance of services and/or supply of requested activities.

Casillo Partecipazioni S.p.a. may process particular data of its customers in order to carry out operations
and specific services required by the related documentation.

Casillo Partecipazioni S.p.a. specifies that, in the absence of consent to the processing of the minimum data
necessary for the fulfillment of the purposes referred to in paragraph 2, a - b - c, it will not be able to
proceed with the requested treatments.

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA

Your data may come to the attention of all the companies involved in the activities mentioned above, the
natural and legal persons who hold these positions at Casillo Partecipazioni S.p.a., in their capacity as Data
Processors and as persons authorised to process personal data, or connected to it, in relation to the data
necessary for the performance of the tasks assigned to them, natural persons belonging to the following

categories: any employees of Casillo Partecipazioni S.p.a. or seconded to it, temporary workers, interns,
consultants and employees or other associated companies, possibly appointed as Data Processors.

The data may be communicated
i) to those persons to whom such communication must be made in fulfilment of an obligation laid down by
law, regulation or EU legislation. More information in this regard can be found on the website of the
Garante per la protezione dei dati personali (www.garanteprivacy.it).
ii) to subjects identified as autonomous Data Controllers, to whom the transfer must be authorised (third
parties) for specific autonomous purposes.

5. RIGHTS OF THE DATA SUBJECTS

The General Data Protection Regulation ("Regulation 679/2016/EU") gives individuals, sole proprietorships
and/or self-employed professionals ("Data Subjects") specific rights, including the right to know what
personal data Casillo Partecipazioni S.p.a. holds about them and how these data are used (Right of Access),
to obtain their updating, rectification or, if interested, integration, as well as their cancellation,
transformation into anonymous form or restriction (GDPR Articles 15-21).

Data subjects and legal persons, entities and associations may at any time revoke, where granted, their
consent to data processing.

Casillo Partecipazioni S.p.a. points out that, in the event of revocation, it will only take effect for the future.

6. PERIOD OF DATA STORAGE AND RIGHT TO CANCEL (i.e. RIGHT TO OBLIGATION)

Casillo Partecipazioni S.p.a., for the purposes referred to in points 2, a - b - c - d, processes and retains your
personal data for a minimum period of 5 years, for the execution of the inherent and consequent
fulfilments, for compliance with applicable legal and regulatory obligations, as well as for its own or third
parties' defensive purposes, without prejudice to the possible extension in case of legitimate needs.

For the purposes of point 2, e, we process and retain your personal data for a minimum period of 2 years,
for the performance of the inherent and consequent obligations, for compliance with applicable legal and
regulatory obligations, as well as for our own or third party defence purposes.

At the end of the storage period, personal data referring to the Data Subject will be deleted or stored in a
form that does not allow the identification of the Data Subject (e.g. irreversible anonymisation), unless
consent to their further processing is renewed.

7. MODALITIES FOR EXERCISING RIGHTS

Each interested party to exercise the rights referred to in paragraph 6 may apply to: Casillo Partecipazioni
S.p.a. with registered office in Corato (BA) at Via Sant'Elia, industrial area, by contacting the D.P.O. through
the contact details indicated in paragraph 10.

The exercise of the rights is, in principle, free of charge; Casillo Partecipazioni S.p.a. reserves the right to ask
for a contribution in case of manifestly unfounded or excessive (even repetitive) requests.

Casillo Partecipazioni S.p.a. has the right to ask for information necessary to identify the applicant.

8. COMPLAINT OR REPORT TO THE GUARANTOR FOR THE PROTECTION OF PERSONAL DATA

Casillo Partecipazioni S.p.a. informs you that you have the right to lodge a complaint or report to the
Guarantor for the Protection of Personal Data or alternatively appeal to the Judicial Authority. The contacts
of the Guarantor for the Protection of Personal Data can be consulted on the website
http://www.garanteprivacy.it.

9. CONTACT DETAILS

Casillo Partecipazioni S.p.a. informs that the contact data of its D.P.O. are the following:
[email protected]