Cookie Notice

HOW TO ENABLE AND DISABLE COOKIES

MANAGEMENT OF BROWSER SETTINGS

The Controller informs you that you may prevent the installation of any type of cookie through your browser settings.

However, if you choose to delete or reject strictly necessary cookies, the Data Controller will not be able, for technical reasons, to provide certain services available on the website.

We also inform you that it is always possible to delete cookies installed on your device through your browser settings. In order to verify how to prevent the installation of cookies or delete cookies already present on your device, the Controller invites you to view the instructions according to the browser used.

Google Chrome - >https://support.google.com/chrome/answer/95647?hl=it&p=cpn_cookies

Mozilla Firefox - https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie

Apple Safari - https://support.apple.com/it-it/guide/safari/manage-cookies-and-website-data-sfri11471/

Microsoft Internet Explorer - http://windows.microsoft.com/it-it/windows-vista/block-or-allow-cookies

Microsoft Edge - https://support.microsoft.com/it-it/help/4027947

Opera - https://help.opera.com/latest/web-preferences/#cookies

MANAGEMENT OF COOKIES THROUGH THE PRIVACY PREFERENCE CENTER (CONSENT MANAGEMENT TOOL)

You may select your cookie preferences (enable and disable cookies) through the dedicated dynamic banner upon first accessing the Site. Subsequently, you may always update your preferences by accessing the cookie notice available on the Company's website and the dynamic "Cookie Preferences" banner.

Cookie Preferences

DISCLOSURE OF DATA

The data relating to site browsing may be disclosed to:

a) all persons/entities to whom the right of access to such data is recognised pursuant to regulatory provisions;

b) employees, collaborators and suppliers of the Controller, within the scope of their respective duties and/or contractual obligations relating to the management and maintenance of the site; among the Controller's suppliers, by way of example, other companies in the corporate group of which Dolomiti Energia Holding S.p.A. forms part (identifiable on the website www.gruppodolomitienergia.it), which carry out activities under intercompany service agreements, and companies for the management and maintenance of the website are indicated.

The activity is carried out within the territory of the European Union and there is no intention to transfer the data outside the European Union or to an international Organisation. Any transfers of personal data to countries located outside the European Economic Area may take place pursuant to an adequacy decision for the country by the European Commission, through adherence to specific agreements or following appropriate contractual safeguards, including binding corporate rules and standard contractual clauses for data protection

For all information concerning the processing of personal data collected through third-party cookies by those third parties - including any transfers of personal data to non-EU Countries - please refer to the cookie notices of the third parties indicated in the tables above.

RIGHTS OF THE DATA SUBJECT

The GDPR grants the Data Subject the exercise of the following rights:

• access to personal data (the right to obtain, free of charge, information regarding the personal data held by the Controller and the related processing, as well as to obtain a copy thereof in an accessible format);

• rectification of data (we shall, upon notification by the Data Subject, correct or supplement his or her data - not expressing evaluations - that are incorrect or inaccurate, including where they have become so because they have not been updated);

• withdrawal of consent (where the processing is carried out on the basis of consent expressed by the Data Subject, the Data Subject may withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal);

• erasure of data (right to be forgotten) (for example, the data are no longer necessary in relation to the purposes for which they were collected or processed; they have been unlawfully processed; they must be erased in order to comply with a legal obligation; withdrawal of consent and no non-existence of another legal basis for the processing; objection to the processing);

• restriction of processing (in certain cases - contestation of the accuracy of the data, for the time necessary for verification; contesting the lawfulness of the processing with objection to erasure; need for use for rights of defence, while they are no longer useful for the purposes of processing; if there is an objection to the processing, while the necessary checks are being carried out - the data shall be stored in such a way that they may potentially be restored, but, in the meantime, shall not be accessible by the Controller except precisely in relation to the validity of the request for restriction submitted by the Data Subject).

• objection in whole or in part to the processing on legitimate grounds (in certain circumstances the Data Subject may in any event object to the processing of His or Her data; in particular, where the personal data are processed for direct marketing purposes, the Data Subject has the right to object at any time to the processing, including profiling to the extent that it is related to such direct marketing. Where personal data are processed for scientific or historical research purposes or for statistical purposes, on grounds relating to his or her particular situation, he or she has the right to object to the processing, unless the processing is necessary for the performance of a task carried out in the public interest);

•  data portability (where the processing is based on consent or on a contract and is carried out by automated means, upon request, the Data Subject shall receive, in a structured, commonly used and machine-readable format, the personal data concerning him or her and may transmit them to another Data Controller, without hindrance from the Data Controller to whom he or she has provided them and, where technically feasible, may obtain that such transmission be carried out directly by the latter).

• right not to be subject to an automated decision-making process: right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her;

Where the Data Subject considers that his or her rights have been infringed by the Controller and/or by a third party, he or she shall have the right to lodge a complaint with the Italian Data Protection Authority.

18 August 2022