Pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”)

Your privacy is important to us. Please read the following information carefully.

In accordance with the GDPR, GranitiFiandre S.p.A., as further identified below, acting as the Data Controller, provides information on the use of any personal data provided by users who browse and/or interact with the website. Accordingly, this online Privacy Notice applies solely to information collected through our website and not to information collected offline.

It also applies to data processed through our e-mail communications (newsletters), including data collected through tracking pixels, as described in section 3.

Who are the Data Controller and the Data Protection Officer (DPO), and how can they be contacted?

Company name: GranitiFiandre S.p.A.

Address: Via Radici Nord, 112 – 42014 Castellarano (RE)

VAT No.: 01411010356

Tax Code: 01411010356

E-mail: privacy@granitifiandre.it

Telephone: 0536 819611

Data Protection Officer (DPO): dpo@granitifiandre.it

What data do we process and for what purposes?

1. Data you submit through our website in connection with commercial enquiries or requests for information: we process this data in order to provide the most appropriate response to your enquiry. In addition to being processed by us, this data may be processed by our duly appointed external Data Processors responsible for maintaining our corporate and administrative information systems and managing supporting business services. The processing of your personal data is lawful insofar as it is necessary to provide the service you have specifically requested and therefore falls within the lawful basis set out in Article 6(1)(b) of Regulation (EU) 2016/679 on the protection of personal data. If you refuse such processing, we will be unable to respond to your enquiry; accordingly, the form cannot be submitted unless you tick the relevant checkbox.
2. Personal identification and contact data for sending newsletters (informational, educational and promotional newsletters), where you have independently, freely and knowingly chosen to subscribe to our newsletter by giving your explicit consent and ticking the checkbox on the relevant form. In addition to being processed by us, this data may be processed by third-party companies specialising in the management of commercial, IT and legal information, including the provider of the technological platform used to send e-mails (e-mailing service). All such external parties act as Data Processors duly appointed pursuant to Article 28 of the The processing of your personal data is lawful insofar as it is based on your explicit consent, pursuant to Article 6(1)(a) of Regulation (EU) 2016/679. By ticking the same checkbox, you also consent to the use of the tracking pixel in newsletters, as described in section 3: this constitutes a single, informed indication of your wishes, which may also be withdrawn in part. If you do not authorise this type of processing, there will be no adverse consequences for any other existing or requested relationship with us. You may withdraw your consent at any time by using the “Unsubscribe” link included in each newsletter, without affecting the lawfulness of processing carried out before its withdrawal.

3) Data relating to your interaction with our newsletters, collected through tracking pixels

The newsletters we send may contain a “tracking pixel”: a very small, invisible image hosted on the servers of our e-mailing service provider, which is downloaded by your e-mail application when you open the message, provided that automatic image downloading is enabled. The pixel contains an identification code that enables us to determine that you have opened the message.

Information collected by the pixel: whether the newsletter has been opened, the date and time of opening and the number of subsequent openings; clicks on links contained in the message; and technical data relating to the request, such as the IP address and the type of device or e-mail application used. The pixel does not read the contents of your mailbox or collect any other information stored on your device.

Purposes for which we use this data: marketing purposes, specifically to measure and improve the effectiveness of our campaigns (open and click-through rates), to assess your interest in the content provided and adapt the subject line, content and frequency of subsequent communications accordingly, and to discontinue communications that are repeatedly left unopened. [If applicable: opening and click data may be used to personalise subsequent communications based on the interests identified.]

Legal basis: your consent, sought pursuant to Article 122 of the Italian Privacy Code and Article 6(1)(a) of the GDPR. Consent to the use of the tracking pixel is obtained together with consent to receive the newsletter referred to in section 2, at the time of subscription, through a single checkbox constituting a single, informed indication of your wishes. Providing consent is optional: if you do not give it, you will not receive the newsletter, but this will have no effect on any other relationship with us.

How to withdraw consent to tracking, including in part: in the footer of each newsletter, next to the “Unsubscribe” link, you will find a “Preferences” link (available in Italian and English). On that page, you may choose to:

• disable only the tracking pixel, while continuing to receive the newsletter without any tracking tools and without any limitation of the service; or
• unsubscribe from the newsletter

You may also withdraw your consent by writing to the Data Controller using the contact details provided at the beginning of this Notice. Your choices are recorded and retained as evidence of your wishes pursuant to Article 7(1) of the GDPR. You may also configure your e-mail application not to download images automatically: in that case, the pixel, like any other image, will not be loaded.

Subscribers who registered before [publication date of this version]: if you subscribed to the newsletter before this date, you were informed of the use of tracking pixels in the first newsletter sent thereafter, and you may disable tracking at any time on the “Preferences” page or unsubscribe using the links included in the footer of each message.

Measures to protect your identity: the pixel uses an encoded, unintelligible and non-sequential identifier; the association between that identifier and your e-mail address is retained exclusively in a separate internal area of the mailing platform, so that your e-mail address is not transmitted over the network when the pixel is loaded.

Tools and methods used to process personal data

For the purposes set out herein, personal data is processed using manual, IT and electronic communication tools, in accordance with procedures strictly related to those purposes and, in all cases, in a manner that ensures the security and confidentiality of the data.

How long do we retain your data?

For the purposes set out in section 1, data is retained for a maximum of 6 months; for the purposes set out in section 2, data is retained until you unsubscribe from the newsletter.

Data collected through tracking pixels (openings, clicks and associated technical data) is retained for 18 months from the date of collection and, in any event, no longer than until consent is withdrawn or you unsubscribe from the newsletter; upon expiry of the applicable retention period, the data is erased or anonymised in aggregate form. Records of consent given and any subsequent withdrawals are retained for as long as necessary to demonstrate compliance with legal obligations.

What are your rights?

You have the right to request access to your personal data from the Data Controller using the contact details provided at the beginning of this Notice.

You have the right to request rectification / erasure of your personal data / restriction of its processing from the Data Controller using the contact details provided at the beginning of this Notice.

You have the right to object to the processing of your personal data by contacting the Data Controller using the contact details provided at the beginning of this Notice.

You have the right to withdraw your consent at any time (to the newsletter and tracking pixel), including separately, by using the “Unsubscribe” and “Preferences” links included in each newsletter or by contacting the Data Controller using the contact details provided at the beginning of this Notice. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You have the right to data portability in respect of the data you have provided to us and which we process on the basis of your consent.

You have the right to obtain the complete list of Data Processors (internal and external) by contacting the Data Controller using the contact details provided at the beginning of this Notice.

You have the right to lodge a complaint with a supervisory authority, such as the Italian Data Protection Authority (Garante per la protezione dei dati personali) http://www.garanteprivacy.it/

Is there any automated decision-making, including profiling as referred to in Article 22(1) and (4) of Regulation (EU) 2016/679?

We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you. Data collected through tracking pixels is used exclusively for the marketing purposes described in section 3 (measurement and adaptation of communications), subject to your prior consent, which may be withdrawn at any time.

International transfers of personal data

No personal data is transferred to third countries. Data collected through tracking pixels is processed on servers located

within the European Union by the provider of the mailing platform, which has been appointed as a Data Processor.

This Privacy Notice may be amended or supplemented from time to time; we therefore recommend that you review it periodically. In particular, where we maintain an ongoing relationship with you, we will make every effort to inform you promptly of any amendments.

Castellarano, Rev.02 19.10.2026