Art. 13 Reg. EU 679 of 27 April 2016 Pursuant to of article 13 of the “European Regulation 2016/679 relating to the protection of individuals with regard to the Processing of Personal Data, as well as to the free circulation of such data” (from now on “GDPR”), ARAG S.r.l. (hereinafter ARAG) with registered office in Via Palladio 5 / a - 42048 Rubiera - (RE), as owner, is required to provide users connecting to the domain www.aragnet.com (regardless of the purposes of the link) some information relating to the processing of personal data made there. This document constitutes the "Privacy Policy" (subject to future updating) of this site. For the purposes of this information, without prejudice to the definitions all referred to in art. 4 of the GDPR means: Domain aragnet.com/: the domain, reachable through the internet world wide web service, at www.aragnet.com, consisting of data, applications, technological resources, human resources, from organizational rules and by the procedures assigned to the acquisition, storage, processing, exchange, retrieval and transmission of information.

The processing of personal data will apply the principles of lawfulness, fairness and transparency. Personal data will be collected for purposes determined, explicit, legitimate (purpose limitation) and will be adequate, relevant and limited with respect to the purposes for which they are processed (data minimization). They will always be up to date and accurate and kept for a period of time not exceeding what is necessary for the purpose of executing the Contract, except for the fulfillment of legal and fiscal obligations that fix more time long storage (conservation limitation). Personal data will be processed by taking all appropriate security measures to ensure its integrity, confidentiality and unavailability by unauthorized third parties (integrity and confidentiality). If not expressly indicated, the conferment of personal data through the collection points present on the site is reserved for those of age.

The processing operations, which we will explain to you in detail below, have their legal basis in the rules governing your right to the protection of your personal data, your right to privacy, and finally in those that allow you to express or revoke , at any time, yours

informed consent to processing operations, namely: the Regulation General EU 679 of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data; Informed consent, expressed in accordance with the current legal provisions (Art. 6 GDPR). Fulfillment of obligations or orders which the Data Controller is bound by law or by order of the Authority (Article 6 GDPR).

III.1. - The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the site pages set up for particular services on request. In any case - where provided for by the law - you will be required from time to time to consent to the processing of your personal data.

Exclusively after your consent, where necessary, the following categories of personal data concerning you will or may be processed for the purposes indicated.

(a). - Common personal data, identification data.
As for example First and last name, Year of birth, Gender, Address, City, Province, E-mail address, Telephone number, C.A.P. 

(b). - Technical treatments.
The IP number and the type of browser you use for the connection to the www.aragnet.com domain (non-identifying data), automatically recorded by the logical devices for protection and access control to the domain (LOG FILES). Such personal data will be

used exclusively for the purpose of controlling network traffic to the sistemae.it domain. This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow you to identify users. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this possibility, at present, the data on web contacts do not persist for more than seven days.

(c). - Cookies.
In addition, ARAG processes the data anonymously and analyzes data relating to the pages of the domain www.aragnet.com you visit, encountered through cookies files. Through these technologies (which allow you to understand your browsing preferences, checking the areas) of the domain http://www.aragnet.com/ already visited previously) ARAG can customize its services to your needs, without making unnecessary registrations. (A cookie consists of a series of data that a website sends to the browser. The aforementioned data can also be stored on the computer via an anonymous tag that identifies the computer but not the user. Some ARAG pages use cookies, sent by ARAG or third parties, and other technologies to offer a better navigation of the website. It is possible to set the browser to receive a warning before receiving a cookie, thus offering the possibility to accept it or not. It is also possible to completely disable cookies. Disabling cookies some websites may not work properly). For more detailed information on use of cookies on the site www.aragnet.com you can consult the Cookies Policy. Available here.

(d). - Special categories of personal data.
In the event that the collection of special categories of personal data pursuant to art. 9 Reg. EU 679/2016, you will be previously informed and enabled to express - in the ways provided by law - the relative consent.

The provision of your personal data is not normally mandatory but, in some cases, it is necessary, and therefore mandatory, to allow you to benefit from the services and features of the site.

IV.1. - Data whose conferment is necessary.

IV.1.1. - The provision of certain personal data is necessary, and therefore obligatory, to give course to your specific requests; you are always free not to provide your personal data, but in this case it could be impossible for the Data Controller to satisfy your requests, meet your needs or have them use, in their entirety, all the functions available on the site - Such identification data will be processed both on paper and electronic media, and will be kept by ARAG only for the time necessary. After these storage times have elapsed, personal identification data will be automatically deleted.

IV.1.2. - Data Sources. We will collect your data, directly from you, through your interactions with the site www.aragnet.com

V. Purpose of the Treatment.

ARAG, in addition to the processing required in relation to legal, regulatory, or deriving from the Authority, will carry out, with your consent only, if necessary, the operations necessary to allow you to benefit from the services and features of the site www.aragnet.com and the services indicated in them.

In relation to all the purposes indicated in the preceding paragraphs, your personal data will be processed electronically and in paper form and processed by specific IT procedures in order to personalize the services that ARAG is able to offer you. The data will be processed in such a way as to guarantee their logical and physical security and confidentiality, and can be carried out using manual, IT and telematic tools designed to memorize, transmit and share the data. The logic of the processing will be strictly related to the aims pursued.

VI.1. - Security and data retention.

VI.1.1. - Your personal data will be stored within the European Union, the related security policies are reviewed in accordance with the relevant Best Practices.

VI.1.2. - Profiling, automated decision making.

Beyond what is necessary to enable us to perform the services that allow you to use the services offered on the site, with the exception of what is specified in our cookie policy, we do not perform profiling operations in relation to the data collected through this website.

Personal data, as referred to in this statement, may become aware of data as Data Processors or Trustees: within ARAG, qualified personnel, each limited to their own skills and duties and based on the tasks assigned and instructions given . outside of ARAG, third parties, also specially designated as Managers or in charge of processing - of which ARAG uses for various services and exclusively to perform these services - each limited to their own skills and duties and on the basis of the tasks assigned and instructions given.

ARAG, for the ordinary management, accounting and administrative activities, will be able to communicate your personal data, after acquiring your consent in accordance with the law, where provided, in compliance with security measures, to third-party service providers for the sole purpose of performing the services you request, such as: - postal service companies, - law and notary offices, - consultants, also in associated form, - other service companies, as well as to other subjects in compliance with possible legal obligations (such as insurance institutions, police forces, judicial authorities, etc.). The list of such subjects to whom the data may be communicated is available at the headquarters of the Data Controller.

ARAG does not transfer personal data abroad on its own initiative. However, some third parties, service providers, may have their servers physically located abroad (as in the case of email providers).

In such cases, the transfer of data abroad will take place exclusively within the framework of and in compliance with EU Reg. 679/2016 Art. 44 et seq.

Under no circumstances may personal data be disclosed.

Articles 15 to 22, GDPR grant interested parties the exercise of specific rights. Article. 15 GDPR recognizes those concerned with the right to access their personal data and to obtain a copy. The right to obtain a copy of the data must not affect the rights and freedoms of others. With the access request, the interested party has the right to obtain confirmation from ARAG whether or not personal data is being processed and to know the purposes and categories of data processed, the third parties to whom the data is communicated and if the data is transferred to a non-EU country with adequate guarantees. The interested party also has the right to know the storage time of their personal data and has the right to request the rectification of inaccurate data and the integration of incomplete data, the cancellation (right to be forgotten) under the conditions indicated by the art. . 17, GDPR, the limitation of the processing, the revocation of the consent, the portability of the data and the right to object, at any time and without having to provide justifications, to the processing for direct marketing purposes. The rights may be exercised by e-mail at ARAG's address, or by ordinary post at the address indicated below. The Owner may need to identify the Interested party by requesting to provide a copy of his identity document. The interested party who considers that the processing of his personal data violates the provisions of the GDPR or of the internal legislation regarding the protection of personal data has the right to lodge a complaint with the Italian Data Protection Authority based in Rome art. 77 GDPR and / or to refer to the judicial authority. For the exercise of these rights, or to obtain any other information regarding them and, more generally, to the processing of personal data, requests may be sent by e-mail to the following address: privacy@aragnet.com; - by ordinary mail to ARAG S.r.l., Via Palladio 5 / a - 42048 Rubiera - (RE).

If you have questions or would like more information on the processing of your personal data or to exercise the rights referred to in the previous n. VI, you can send an e-mail to the administrator of the ARAG website, by writing to privacy@aragnet.com. You can also contact us at the same address to get answers regarding information management by ARAG. Before ARAG can provide you or change any information, you may need to verify your identity and answer some questions. Our own Answer will be provided as soon as possible.

The data controller is ARAG S.r.l. with headquarters in Via Palladio 5 / a - 42048 Rubiera - (RE).

ARAG has appointed the Personal Data Protection Officer (DPO) in the person of Mrs. Cifarelli Giulia email: dpo@aragnet.com

XI.1. - Data processors.
The complete list of Data Processors is available at the headquarters. This mandatory information is subject to updating, depending on any changes to the applicable legal provisions.

Dear Visitor, According to and for the effects of the Regulation (EU) 2016/679, concerning the use of cookies, we inform you, with reference to the domain of ARAG Srl, reachable on the web service of the internet starting from the www.aragnet.com, according to what follows. In Informatica, cookies are classified as "technical or session" cookies, "persistent or profiling cookies" and "third-party" cookies. Cookies - which may be present in users' browsers in large numbers and sometimes with characteristics of wide temporal persistence, can be used for example for execution of authentication operations, the monitoring of sessions, the storage of information on specific configurations of users who connect with the server that hosts the site they intend to view, etc. - are text strings contained in small files that the sites visited by the user, or those of third parties connected with them, send to the terminal that he uses for the connection, where they are stored, to be then, eventually, retransmitted, to the same sites, at the next visit by the same user. Although they are generally used to evaluate the use of a website, its efficiency and to simplify its use and navigation, and are not associated with personal data, cookies can also be configured to personalize the consultation experience of a website, associating them with a user's preferences or personal information. Because cookies allow you to take advantage of certain functions of the websites, we suggest you not to disable them. If you activate the block, disable or do not accept cookies, you will not be able to authenticate on the ARAG S.r.l. website and some web pages may not be displayed correctly.

Session cookies, stored in the temporary memory and deleted when the browser is closed, used exclusively to "transmit a communication on an electronic communication network, or as strictly necessary for the provider of a information society service explicitly requested by the subscriber or user to provide this service ”, allow the use of the website efficiently, keeping track of of the visualization of the pages that compose it so as not to request the information already acquired and / or released by the user's browser during the same connection session. These cookies can be further subdivided into navigation or session cookies, which guarantee the normal consultation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas); analytics cookies, similar to technical cookies when used directly by the site manager to collect information, in aggregate form, on the number of users and how they visit the site; functional cookies, which allow the user to browse according to a series of pre-selected criteria (for example, the language, the products selected for purchase) at order to improve the service rendered to the same. For the installation of technical or session cookies the prior consent of the interested parties is not required, without prejudice, however, to the obligation for the Data Controller to issue,

pursuant to Regulation (EU) 2016/679, this mandatory information, which the site manager, if using only such devices, may provide in the manner he deems most appropriate. The technical or session cookies used by ARAG Srl, allow to avoid re-entering the same information several times during the visit such as user name and password, to analyze the use of the services and content provided to optimize the experience of navigation and services offered.

ARAG S.r.l. use the following cookies.