PRIVACY POLICY pursuant to art. 13 of EU Regulation 2016/679 (hereinafter, “GDPR”)

MASSIMO PERSONAL CHEF protects your privacy

for the processing of personal data acquired through the website www.MassimoPersonalChef.org

1. GENERAL INFORMATION Users, as individuals who access the website massimopersonalchef.com (hereinafter, also referred to as “data subjects,” ex. art. 4, para. 1 GDPR), are informed of the following general profiles, valid for all processing areas: 1.1 The Data Controller is MASSIMO PERSONAL CHEF, which can also be contacted at the following addresses: info@massimopersonalchef.com. 1.2 All user data, directly or indirectly related to natural persons, are processed lawfully, fairly, and transparently towards the data subject, in accordance with the general principles set out in art. 5 GDPR. 1.3 We have implemented specific security measures to prevent data loss, unlawful use, or incorrect access, and unauthorized access. 1.4 Through the website, only “common” data or information that does not include “special categories of data” (personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or a person’s sex life or sexual orientation) or “judicial data” (personal data relating to criminal convictions and offenses or related security measures) are collected via computer systems and media or paper (cf. printed copy of an electronic document). 1.5 The website hosting is provided by SiteGround Spain S.L., registered and existing under the laws of the Kingdom of Spain (registration number CIF: B87194171), with address: Calle de Prim 19, 28004 Madrid, Spain, a company appointed as an external data processor, processing data on behalf of the Controller, whose servers – for the purpose of managing the website – are therefore located within the European Economic Area; any transfers of data to sub-processors abroad will take place in accordance with Articles 45 and 46 of Regulation (EU) 2016/679 (hereinafter, “GDPR”). 1.6 The updated list of persons authorized to process data on behalf of the Controller as well as external data processors designated by MASSIMO PERSONAL CHEF is available at the Controller’s office. 1.7 Finally, the privacy policy of MASSIMO PERSONAL CHEF does not involve the processing of personal data of individuals under the age of 14 (ex art. 2-quinquies co. I Legislative Decree no. 196/03). Therefore, this website is not intended to intentionally collect personal information related to such minors. In case information about minors is inadvertently recorded, the Controller will promptly delete it, directly and/or at the request of users.
2. YOUR PERSONAL DATA The methods for managing personal data acquired through this website massimopersonalchef.com, which may involve interaction with the user, are described as follows:

• (2.1) browsing data • (2.2) contacts/chat • (2.3) newsletter • (2.4) cookies and social widgets

2.1 Browsing Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data, the transmission of which is implicit in the use of Internet communication protocols. These are not collected to be associated with identified data subjects, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user’s operating system and computer environment. Purpose and legal basis for processing (GDPR- art.13, para. 1, lett. c) This data is used solely to obtain anonymous statistical information about the use of the site and to check its correct functioning. The data may also be used to ascertain liability in the event of hypothetical computer crimes against the site (legitimate interests of the controller – GDPR recital no. 49). Scope of communication (GDPR- art.13, para. 1, lett. e, f) The data are processed by internal personnel of the Controller, duly authorized and instructed in processing (GDPR-art.29) as well as by external data processors duly appointed (see point 1.6). Data Retention Period (GDPR-art.13, paragraph 2, letter a) Data is retained until the eventual revocation of consent by the data subject, which can be freely done at any time by clicking on the “unsubscribe” link at the bottom of the newsletter, or by making a request to the Data Controller at the email address info@MassimoPersonalChef.org.

Provision (GDPR-art.13, paragraph 2, letter f) Failure to provide the email address and consent will result in the impossibility of obtaining the newsletter service.

2.4 Other Data Provided Voluntarily by the User. The optional, explicit, and voluntary sending of emails and/or ordinary mail to the other addresses indicated on this site (info@massimopersonalchef.com) entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the letter. The sender must refrain from sending information falling within the “special categories of data” or “judicial data” (see point 1.4 – General Information); in case of receipt, such information will be deleted, without being processed in any way by the Data Controller.

Cookies Cookies are small text strings that websites visited by the User send to their terminal (usually the browser), where they are stored to be transmitted back to the same sites upon the user’s next visit. During navigation on a site, the User may also receive cookies on their terminal sent by different sites or web servers (so-called “third parties”), on which certain elements (such as images, maps, sounds, specific links to pages of other domains) present on the site being visited may reside. There are two fundamental macro-categories, with different characteristics: “technical cookies” and “profiling cookies.” Technical cookies are generally necessary for the proper functioning of the website and to allow navigation; without them, you may not be able to view pages correctly or use some services. For example, a technical cookie is essential to keep the User logged in during the entire visit to a website or to store language settings, display preferences, etc… Profiling cookies are aimed at creating user profiles and are used to send advertising messages in line with the preferences expressed by the User while browsing the internet. Due to the particular invasiveness that these devices can have in the users’ private sphere, European and Italian legislation requires that users must be adequately informed about their use and express their valid consent. The cookies used on the domain massimopersonalchef.com are not used for user profiling activities. Technical cookies can be further distinguished into:

• navigation or session cookies, which guarantee the normal navigation and use of the website;
• analytics cookies, similar to technical cookies only where used directly by the site manager to collect, in aggregate form, information about the number of users and how they visit the site itself;
• functionality cookies, which allow the User to navigate based on a series of selected criteria in order to improve the service provided to them. The Data Controller (www.massimopersonalchef.com) uses:
• technical cookies (session, analytics, and functionality), used for site management and improved user navigation, namely the following: Cookie Name Functionality Duration cookieconsent_status technical – to save acceptance of the cookie policy 12 months 3feb9e53635712af0ad9809c02ee288b session – to keep the login session open for the registered user the duration is limited to the time the user is connected, so once the browser is closed, the cookie is deleted

To see how it is possible to disable cookies, depending on the browser used (Internet Explorer, Mozilla, Safari, Chrome, Opera), you can visit the website: http://www.aboutcookies.org/default.aspx?page=2 where you can find many useful explanations, or at the following addresses on the websites of the respective providers: Mozilla Firefox https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences Google Chrome https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=en Internet Explorer https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies Safari (iOS) https://support.apple.com/en-us/HT201265 Safari (Mac) https://support.apple.com/en-us/guide/safari/sfri11471/mac Opera https://help.opera.com/en/latest/web-preferences/#cookies If your browser is not listed above, you can request more information by sending an email to info@imaginationdesigncoaching.com. We will provide you with the necessary information for anonymous and secure browsing. Note: Disabling all or part of the technical or third-party cookies may affect the use of some features of the site.

Social Network Buttons and Widgets: This site may also incorporate plugins and/or buttons for social networks, in order to allow easy sharing of content on your favorite social networks such as Facebook, Twitter, Instagram, YouTube, and LinkedIn. These plugins do not set a cookie, but if one is already present on the visitor’s computer, they can read and use it according to its settings. The collection and use of information by these third parties are governed by their respective privacy policies, to which reference should be made. The following are the web addresses of the various privacy policies and methods for managing these third-party cookies:

Facebook Like Button and Social Widgets (Facebook, Inc.) The Facebook Like button and social widgets are services for interacting with the Facebook social network, provided by Facebook, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy.

Instagram Button and Social Widgets (Instagram) The Instagram button and social widgets are services for interacting with the Instagram social network, provided by Instagram Inc. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy.

Twitter Tweet Button and Social Widgets (Twitter, Inc.) The Twitter Tweet button and social widgets are services for interacting with the Twitter social network, provided by Twitter, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy.

LinkedIn Button and Social Widgets (LinkedIn Corporation) The LinkedIn button and social widgets are services for interacting with the LinkedIn social network, provided by LinkedIn Corporation. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy.

YouTube Button and Social Widgets (Google Inc.) The YouTube button and social widgets are services for interacting with the YouTube social network, provided by Google Inc.. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy.

Your Rights You may freely exercise the following rights regarding the processing of data by MASSIMO PERSONAL CHEF: a) Obtain confirmation as to whether or not data concerning you is being processed and, if so, access the data and information relating to the processing. b) Request the correction of inaccurate data. c) Request the deletion of data if, among other reasons, it is no longer necessary for the purposes for which it was collected; in this case, MASSIMO PERSONAL CHEF will cease processing the data, except where they are necessary for the establishment, exercise, or defense of legal claims. d) Request the application of the limitation of data processing, in which case the data may only be processed with the consent of the data subject; exceptions include the retention of the data itself and its use for the establishment, exercise, or defense of a legal right or for the protection of the rights of other natural or legal persons or for reasons of significant public interest of the European Union or of a Member State.

1. e) Object, in whole or in part, for legitimate reasons to the processing of your data, in which case, MASSIMO PERSONAL CHEF must cease processing the data, except where they are necessary for defense against possible claims.
2. f) Receive, in a structured, commonly used, and machine-readable format, the data provided to MASSIMO PERSONAL CHEF or request that it be transferred directly to another controller where technically feasible.
3. g) Withdraw the consent given, if applicable, for the purposes specified in the previous point 2 without prejudice to the legitimacy of the processing based on the consent given prior to the withdrawal.

3.2 The aforementioned rights of access, rectification, erasure, restriction, objection, and data portability may be exercised directly by the data subject or by their legal or voluntary representative, by making a request to MASSIMO PERSONAL CHEF using their contact details by sending an email to the address info@massimopersonalchef.com. The data subject has the right to lodge a complaint with the competent supervisory authority.

1. POLICY UPDATE Please note that this information may be subject to periodic revision, also in relation to the relevant regulations and jurisprudence. In the event of significant changes, appropriate notice will be given on the homepage of the website for a reasonable period. However, users are encouraged to periodically consult this policy. This is an information document, provided in accordance with Art. 13 of the GDPR, valid exclusively for the website www.massimopersonalchef.com and not for any other websites that may be consulted by the user via links.