Privacy Regulations: Privacy policy statement and consent to data processing (Legislative Decree No.196 of 30th June 2003) Dear Sir/Madam, Company, Agency Pursuant to Legislative Decree No. 196 of 30th June 2003 (“Personal Data Protection Act”), personal information regarding yourself may only be processed in accordance with the principles of correctness, lawfulness and transparency, protecting your privacy and your rights. Pursuant to art. 13 of Legislative Decree No. 196/2003 and in relation to the personal data which will come into our possession, we hereby inform you: 1. PURPOSE OF DATA PROCESSING The data you provide shall only be processed for the purpose of the correct and complete execution of the proposed service, requested by yourself. 2. PROCESSING METHODS The data shall be processed using manual, computerised and telecommunication tools based on reasons, closely connected to the provision of our services and so as to ensure the security and confidentiality of the data itself. 3. OPTIONAL DECISION TO CONSENT AND CONSEQUENCES OF REFUSAL TO PROVIDE INFORMATION The provision of data is optional. However, a refusal to provide this data will make it impossible to provide the proposed service, requested by yourself. 4. COMMUNICATION AND DIFFUSION LIMITS The personal data you provide shall be managed by data processors who are aware of the minimum security provisions regarding privacy under Legislative Decree No. 196/2003. The personal data provided may also be used to contact you about the proposed service, requested by yourself. Your data may only be provided to third parties for the sole purpose of providing the service you requested. 5. IDENTIFICATION DETAILS OF THE DATA CONTROLLER, THE DATA SUPERVISOR AND THE REPRESENTATIVE OF THE DATA CONTROLLER IN ITALY The data controller is: COOPHOTELS ROMA – A cooperative of hoteliers in Lazio offering collateral services complementary to the hotel and tourism business VIA PALESTRO,30 00185 ROMA RM Tel: 06.4464763 8. RIGHTS OF THE PARTY CONCERNED You may exercise your rights with the data controller at any time, pursuant to art. 7 of Legislative Decree 196/2003, which we have written out in full for your convenience: Legislative Decree No.196/2003 Art. 7 – Right to access personal data and other rights 1. The party concerned has the right to obtain confirmation of the existence or lack of personal data regarding him or herself, even if not yet registered, and to receive intelligible communication osaid data. 2. The party concerned has the right to obtain information about: a) the origin of the personal data; b) the purpose and methods of processing; c) the logic applied in the case of processing carried out using electronic tools; d) the identification details of the data controller the supervisors and the designated representative pursuant to article 5, paragraph 2; e) the subjects, or categories of subjects, to whom the personal data may be communicated or to whom it may be brought to the attention of as designated representatives in the country, supervisors or processors. 3. The party concerned has the right to obtain: a) updates, corrections or, when required, additions to his/her data; b) cancellation, transformation into an anonymous form or blocking of data processed in violation of the law, including data which does not need to be stored in relation to the scope for which the data was collected or subsequently processed; c) a statement that the operations in letters a) and b) have been brought to the attention, also with regards to their content, of those to whom the data was communicated or diffused, with the exception of cases in which this is impossible or requires the use of means clearly disproportionate to the right being protected. 4. The party concerned has the right to oppose, in full or in part to: a) the processing of personal data regarding him/herself, even if relevant to the scope for which they were collected, for legitimate reasons; b) the processing of personal data regarding him/herself for the purpose of sending advertising or direct sales material or for the completion of market research or commercial communications.