This document describes how we use and manage your personal data, as well as all indications relating to the collection of personally identifiable information when using our website. Personally identifiable information refers to all data that can be related to you personally, such as your name, surname, address, email addresses or user behaviour. The protection of your personally identifiable information is very important to us. If you have any questions or would like more information about the protection of data collected or processed by KEYWE SRL with sole shareholder, please contact us at privacy@key-we.it Continuous technological developments, changes to our services or the legal situation, and other reasons may require corrections to our data protection notice. We therefore reserve the right to change this privacy policy at any time and ask you to keep yourself informed about any updates. 1 Data controller The Data Controller is KEYWE SRL, a single-member company, with registered office in Treviso, Piazza Francesco Crispi No. 7, Tax Code and VAT No. 04845420266, certified email (PEC): keywesrl@pec.it – email: contact@key-we.it 2 Collection of personal identification information while browsing our website If you are using the website for informational purposes only, i.e. without registering or otherwise providing us with information, we will only collect the personal identification information that your browser transmits to our server. If you wish to browse our website, we collect the following data, which we technically need to make our website viewable and to ensure its stability and security: IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, volume of data transferred in each case, website receiving the request, browser, operating system and related interface, language and browser software version, viewing, navigation and behaviour data. The following will also be collected:

• data relating to your PC, mobile phone, tablet or other device used for browsing;
• personal data collected from third parties, such as data that you agree to share with us on publicly accessible social networks (e.g. Facebook, Instagram, LinkedIn) and/or that we may collect from other publicly accessible databases.

3 Contact via email or contact form When you contact us by e-mail or via any contact form, you will be asked to provide the following information:

• email address;
• first name and surname;
• company name;
• registered office;
• telephone number;
• role in the company

This information is used to provide the following services:

• customer service;
• marketing and sales activities;
• communications to improve service management;
• market research;
• legal purposes;
• administrative compliance

We will delete the data collected in this context once it is no longer necessary to store it, or, if there are legal obligations to retain it, we will restrict its processing. 4 Use of social plug-ins This website uses social plug-ins from the provider INSTAGRAM – LINKEDIN. These plug-ins usually collect your data and transmit it to the respective provider's server. We have taken technical measures to ensure the protection of your privacy, thanks to which your data cannot be collected by the providers of the respective plug-ins without your consent. These will initially be deactivated when you visit a site linked to the plug-ins. The plug-ins will not be activated until you click on the respective symbol and, in doing so, consent to the transmission of your data to the respective provider. Once activated, plug-ins also collect personally identifiable information, such as your IP address, and send it to the respective provider's server, where it is stored. Activated social plug-ins also set a cookie with a unique identifier when you visit the respective website. This allows the provider to create a profile based on your user behaviour. This also happens if you are not registered with the respective provider's social network. If you are registered with the provider's social network and are logged in on the website during your visit, the data and information about your visit to the website can be linked to your profile on the social network. We have no influence on the exact extent to which data is collected by the respective provider. For more information on this, as well as on the nature and purpose of data processing and your rights and settings options for protecting your privacy, please refer to the data protection information for the respective social network provider. To do so, please visit the following addresses:

• Instagram
• Linkedin

5 Analysis For the purpose of analysing and optimising our websites, we use the various services described below. This allows us to analyse, for example, how many users visit our site, what information is most requested and how users find the website. The data we collect includes the websites from which the user arrives at another website (‘referrer’), which subpages of the website are accessed and how often, and the length of time for which a subpage is viewed. This enables us to develop and improve our website to make it more user-friendly. The data collected is not used to personally identify individual users. Anonymous or pseudonymised data will be collected. 5.1 Google Analytics This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, United States). This usage covers the operating mode of Universal Analytics. This allows data, sessions and interactions across multiple devices to be assigned to a pseudonymous user ID, enabling the analysis of a user's activities across all devices. Google Analytics uses cookies that enable analysis of your use of the website. The information generated by the cookie through your use of this website is usually transmitted to and stored on a Google server in the United States. However, if IP anonymisation is activated on this website, your IP address will be truncated beforehand within Member States of the European Union or in other contracting states that are parties to the Agreement on the European Economic Area. Only in exceptional circumstances will the full IP address be transmitted to a Google server in the United States and truncated there. The IP address transmitted by your browser in the context of Google Analytics will not be combined with other Google data. Google will use this information on behalf of this website operator to evaluate the use of the website so that reports on website activity and other services related to website and Internet use can be compiled for the website operator. Our legitimate interest in data processing is also justified for these purposes. The legal basis for the use of Google Analytics is Article 6(1)(f) of the GDPR. The data sent by us and linked to cookies, user information (such as user ID) and promotional IDs are deleted 14 months after the last use of our services. Data whose storage period has expired is automatically deleted once a month. Further information on terms and conditions of use and data protection can be found at this address and this address. You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being collected and processed by Google by downloading and installing the add-on. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across multiple devices, you must opt out on all systems you use. Set the opt-out cookie by clicking here: Opt out of Google Analytics 5.2 Google Tag Manager For reasons of transparency, we would like to inform you that we use Google Tag Manager. Google Tag Manager does not collect any personally identifiable information itself. Tag Manager facilitates the integration and management of our tags. Tags are small pieces of code that are used, for example, to measure traffic and user behaviour, record the effects of online advertising and social media channels, set up remarketing, focus on target groups, and test and optimise websites. If you have deactivated them, Google Tag Manager will take this into account. For more information about Google Tag Manager, please visit this link. 6 Existence of an automated decision-making process There is no automated decision-making process in relation to the Data. 7 Rights of the data subject At any time, the data subject shall have the right to:

• obtain confirmation from the Company as to whether or not your Personal Data is being processed and, if so, obtain access to the information referred to in Article 15 of the Regulation;
• obtain the rectification of inaccurate Data concerning you or, taking into account the purposes of the processing, the integration of incomplete Personal Data;
• obtain the erasure of their Personal Data, where one of the grounds referred to in Article 17 of the Regulation applies, where applicable;
• withdraw consent at any time where consent has been previously given. The withdrawal of consent shall not affect the lawfulness of processing based on consent given prior to its withdrawal;
• obtain the restriction of processing of his/her Data if one of the cases referred to in Article 18 of the Regulation applies;
• object to the processing of your Personal Data, for reasons related to your particular situation, where applicable;
• receive the Personal Data concerning you in a structured, commonly used and machine-readable format and transmit those Data to another data controller, in the cases and within the limits set out in Article 20 of the Regulation.

The Company may request further information before processing requests if it needs to verify the identity of the individual who submitted them. Under the GDPR, the Company is not authorised to charge fees for complying with any of the requests set out in this paragraph, unless they are manifestly unfounded or excessive, and in particular are repetitive in nature. In cases where a DATA SUBJECT requests more than one copy of their personal data or in cases of excessive or unfounded requests, the Company may (i) charge a reasonable fee, taking into account the administrative costs incurred in fulfilling the request, or (ii) refuse to fulfil the request. In such cases, the Company will inform the data subject of the costs before fulfilling the request. These rights may be exercised by sending:

• an email to the address: privacy@key-we.it

Without prejudice to any other administrative or judicial remedy, the data subject also has the right to lodge a complaint with a supervisory authority (for Italy: the Garante per la protezione dei Dati Personali, or Italian Data Protection Authority) if he or she considers that the processing of his or her data is in breach of the General Data Protection Regulation. Further information is available on the website: http://www.garanteprivacy.it. The Company undertakes to comply with all the obligations set out in this policy. Data subjects who decide to lodge the above appeals or complaints are invited to contact us.