A. Processing of personal information

1. Controller

The controller is P.I.

2. Purpose of processing (purpose and legal basis)

As part of its online sales website, P.I. implements the processing of personal information, the purpose of which is as follows:

- Perform operations relating to customer management concerning the creation of a customer account; contracts; the controls ; deliveries; invoices; accounting and in particular the management of customer accounts; the loyalty program within one or more legal entities, excluding programs common to several companies; monitoring the customer relationship such as conducting satisfaction surveys and managing after-sales service complaints;

- Carry out operations relating to prospecting;

- The development of audience measurement statistics;

- Management of requests for the right of access, rectification and opposition;

- The management of people's opinions on products, services or content.

The legal grounds for processing are as follows:

Features

Foundations

Manage orders: Prepare and ship customer orders / Receive and process customer returns

Performance of the contract

Legitimate interest

Exercise of customer rights (access, rectification, opposition, etc.)

Legal obligation

Manage customer relationship:

- Management of customer requests

- Litigation and litigation management

- Processing of customer reviews

- After-sales service processing of a customer request

- Management of exchanges with the client

Performance of the contract

Legitimate interest

Accounting treatment: customer invoicing

Legal obligation

Performance of the contract

- Audience measurement (Google Analytics), advertising and functional

- Required

Consent

Legitimate interest

Newsletters

Consent

3. Categories of data and retention periods

P.I. processes the following personal information:

· Identity, address and contact details: title, surname, first name, address, delivery and billing address, email address, telephone number

This information is kept until the account is deactivated or after 3 years of inactivity;

· Order data: transaction number, purchase details, purchase amount, purchase history, invoice payment data, product returns.

This information is kept until the account is deactivated or after 3 years of inactivity. However, the invoice is kept for 10 years in accordance with the legal obligations in this area. ;

· Data relating to the means of payment: bank card number, expiry date of the bank card, visual cryptogram (which is immediately erased).

These data are not kept by P.I. ;

· Cookies: 13 months.

4. Data recipients

Are exclusively recipients of the information within the limits of their respective attributions:

· public bodies, exclusively to meet legal obligations;

· legal assistants and ministerial officers as part of their debt collection mission;

· financial institutions and professional account holders;

· the payment provider, the delivery provider.

5. Transfer to a country without an adequate level of protection

We inform you that your personal information is transferred to countries that do not have an adequate level of protection considered as such because their level of protection is not equivalent to that provided for by Monegasque legislation. The countries whose level of protection is considered adequate are mentioned on a list published on the website of the Commission for the Control of Nominative Information

Please note that for transfers to countries whose protection is not considered adequate, we rely either on a legal derogation listed in article 20-1 of law 1.165, applicable to the situation, and/or on the implementation of one of the appropriate guarantees, recognized by the Commission for the Control of Personal Information and after authorization issued by the latter, to ensure the protection of your personal data.

To obtain a copy of these security measures or to find out how to access them, you can send a written request in accordance with Section B hereof.

The transfers concerned are described below:

Data relating to orders: transaction number, purchase details, purchase amount, purchase history, data relating to the payment of invoices, product returns.

Transfer of data for statistical purposes from Google Analytics to Google Inc. based in the United States

The transfer concerns “google analytics” cookies to the company operating this module, namely Google Inc., located in Mountain View (United States). You will find the more detailed description of this transfer in part C “Cookies Policy” below.

B. Existence of a right of opposition, access and rectification with regard to information concerning you

Pursuant to Law no. 1.165 of December 23, 1993 relating to the protection of personal information, you have a right of opposition, access and rectification with regard to information concerning you.

To exercise these rights, we invite you to send a letter to:

P.I.

You can also send an email to the following address: hello@exyacht.it

Your letter or e-mail must specify your request and be accompanied by a copy of one of your valid identity documents in order to allow us to verify that you are indeed the issuer of the request. Said copy must be in black and white and crossed out, in accordance with deliberation no. 2015-113 of November 18, 2015 of the Personal Information Control Commission.

C. Cookies Policy

A cookie is a very small text file that the websites visited by the user send to the user's computer or mobile device.

EXYacht processes different types of cookies, in addition to the aforementioned functional cookies:

· Necessary cookies: these are cookies necessary for the operation of our site and the essential services that form an integral part of it. They allow you to use the main features of our site.

· Advertising cookies: these are cookies used to present advertisements or send you information tailored to your areas of interest on or off our site.

· Functional cookies: these are cookies that allow us to provide you with certain non-essential functionalities for access to the service but which significantly improve your visit experience.

· Analytical cookies: these are cookies that allow us to understand the use, volumes of visits and use as well as the performance of our site.

With regard to necessary cookies, in accordance with the regulations in force, your consent is not required.

With regard to advertising, functional and analytical cookies, your consent is required and can be withdrawn at any time.

Regarding analytical cookies, we inform you that:

· We use the "google analytics" module, which involves a transfer of information to the company operating this module, namely Google Inc., located in Mountain View (United States);

· The information processed is the Internet user's IP address, internet domain name, the pages visited and their number, the number of views per page, the time spent on each page, the number of clicks, the name and version of the Internet user's web browser, the Internet user's operating system, the timestamp of access to the site and the pages visited on the site.

Analytical cookies will only be activated and used on the site if you give your consent to their use via the banner that is presented when you arrive on the site's home page.

In any case, you can modify your preferences for the use of cookies on your Internet browser, in accordance with the instructions relating to each of them whose links are available below:

Internet explorer: http://windows.microsoft.com/en-us/windows7/block-enable-or-allow-cookies

Safari: http://support.apple.com/kb/PH19255?viewlocale=en_UK

Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=fr&hlrm=en

Opera https://help.opera.com/en/latest/web-preferences/#cookies

Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

In this regard, you can refuse the use of Cookies by modifying the settings of your Web browser as follows:

– On Internet Explorer:

1. Go to Tools & Internet Options

2. Click on the privacy tab

3. Click on the advanced button, check the box “Override automatic cookie management”

– On Firefox:

1. At the top of the Firefox window, click the Firefox button (Tools menu in Windows XP), then select Options

2. Select the Privacy panel

3. Set up Retention rules: to use custom settings for history

4. Uncheck Accept cookies

– On Google Chrome:

1. Click on the Chrome menu menu icon

2. Select Settings

3. Click Show advanced settings

4. In the “Privacy” section, click on Content settings

5. Select “Prohibit all sites from storing data”

You can choose to accept only technical cookies, to accept all cookies or to modify your choices and consents, when you wish in the Cookie Center, by clicking on the corresponding buttons in the banner that appears at the bottom from the home page during your first visit to the Site.

We remind you that you can exercise your rights under the conditions and according to the methods provided for in article B “Existence of a right of opposition, access and rectification with regard to information concerning you” herein.