COOKIE POLICY

Pursuant to and in accordance with the General Data Protection Regulation of the EU (GDPR 2016/679, Article 13), we inform you that while browsing our website, information may be collected through so-called Technical Cookies and Third-Party Cookies, as outlined below.

We use cookies to make our website more interesting and relevant to your preferences and to improve your browsing and purchasing experience, our product offerings, and our communication.

You can modify your cookie consent at any time in compliance with the provisions of the EU General Data Protection Regulation 2016/679 and in reference to the Guidelines for simplified information and obtaining consent for the use of cookies – May 8, 2014 (Official Gazette No. 126 of June 3, 2014) and subsequent Guidelines on cookies and other tracking tools of June 10, 2021 (Official Gazette No. 163 of July 9, 2021).

DATA CONTROLLER AND DATA PROTECTION OFFICER

The data controller for personal data is Compar S.p.A. (hereinafter also referred to as the Company or Controller), with its registered office at Via A. Volta 6 - 35010 Limena (PD), Tax Code and VAT number 00362520280.

The Company has appointed a Data Protection Officer pursuant to Articles 37 et seq. of the Regulation, who is domiciled at the Company's headquarters.

This person can be contacted for matters related to the processing of data subjects’ information at the following email address: it.dpo@bata.com.

PROCESSING METHODS

The Controller processes, stores, and handles personal data using electronic tools. The data will be stored on both digital and paper-based media, organized into databases, and on any other suitable media. The Controller ensures the utmost confidentiality in the processing of personal data, in accordance with the applicable national data protection regulations. Specific security measures are in place to prevent data loss, illegal or unauthorized use, and unauthorized access.

DATA ACCESSIBILITY & DISCLOSURE

The information collected through the installation and use of cookies on your device may be accessed by third parties and/or intermediaries as well as, within Compar S.p.A. (also referred to as the "Company"), the Data Processors and Authorized Personnel designated by the Company in the performance of their functions.

For the aforementioned purposes, the Company may also involve the following categories of entities who may likewise access the information collected through the installation and use of cookies on your device:

• Qualified entities providing the Company with services or functions instrumental to the above purposes, and entities or companies possibly involved in the management and/or maintenance of our websites and electronic or telematic tools. These entities are appointed as External Data Processors pursuant to Article 28 of the Regulation through a specific appointment document, outlining processing methods and security measures to be adopted for the management and storage of personal data for which the Company is responsible;
• Parent companies, subsidiaries, and/or affiliates for administrative and accounting purposes;
• Any other entity to whom data must be communicated by law.

DATA TRANSFER ABROAD

The information collected through the installation and use of cookies on your device may be transferred abroad, in compliance with applicable regulations, where the Company pursues its legitimate interests.

Your personal data may also be transferred abroad, including to non-EU countries, where the Company pursues its legitimate interests.

In such cases, the Controller ensures that any extra-EU data transfer will comply with Articles 44 et seq. of the Regulation and applicable laws by entering into agreements that ensure an adequate level of protection if necessary.

DATA RETENTION PERIOD

Your data will be stored according to one of the following criteria:

• For a period not exceeding the time required to achieve the purposes for which they are processed. Should you deny consent to some cookies, your data will be deleted;
• For a period not exceeding that required to fulfill legal obligations.

RIGHTS UNDER ARTICLES 15, 16, 17, 18, 20, AND 21 OF THE REGULATION AND ARTICLE 7 OF THE PRIVACY CODE

We inform you that, with respect to the data processed by the Company, you may exercise your rights at any time under Articles 15, 16, 17, 18, 20, and 21 of the Regulation.

In particular:

a. You have the right to obtain confirmation from the Controller as to whether or not personal data concerning you exists and, if so, access the following information:

• The purposes of the processing;
• The categories of personal data processed;
• The recipients or categories of recipients to whom personal data has been or will be disclosed, especially recipients in third countries or international organizations;
• The period for which the personal data is expected to be retained, or if not possible, the criteria used to determine that period;
• Where the data is not collected from the data subject, all available information regarding its origin;
• The existence of automated decision-making processes and, if applicable, meaningful information about the logic involved, as well as the significance and anticipated consequences of such processing for the data subject;
• The existence of adequate safeguards pursuant to Article 46 regarding the transfer to third countries or international organizations.

b. Additionally, you have the right to:

• Obtain the updating, rectification, or integration of your data; request the erasure of your data (within the limits permitted by law) or request that it be anonymized; restrict processing; and object, in whole or in part, for legitimate reasons, to the processing of personal data concerning you;
• Obtain the portability of electronically processed data provided on the basis of consent or contract;
• Withdraw your consent, where applicable;
• File a complaint with the Supervisory Authority.

To exercise these rights, please contact the Controller through the Privacy Office at the following email address: it.dpo@bata.com. The Company is committed to responding to your requests within one month, except in cases of particular complexity, for which it may take up to 3 months. In any case, the Company will explain the reason for the delay within one month of your request.

The User may refuse consent and/or modify their cookie preferences at any time via access to this Privacy Policy, which is linked from every page of this Website.