Pursuant to the European Union General Data Protection Regulation (GDPR 2016/679, Article 13), as a visitor to the website www.torinooutletvillage.com (the "site"), we hereby inform you about how your personal data is processed.

Who is the Data Controller

The Data Controller of personal data is Torino Fashion Village S.R.L., subject to the management and coordination of Outlet JV Sarl, with registered office at Corso Matteotti no. 10 – Milan (MI), Tax Code and VAT no. 05481690484, in the person of its legal representative Mr. Anthony Patrick Halligan.

Who is the Data Protection Officer

The Data Controller has appointed a Data Protection Officer (DPO). You may contact the Data Protection Officer regarding any matters relating to the processing of your data at the following address: dpo@torinooutletvillage.com

What are Cookies?

Cookies are small text strings that the site sends and saves on your computer or mobile device, to then be re-transmitted to the same site on your next visit.

Thanks to cookies, the site remembers your actions and preferences.

In addition to the cookies sent by the site, while browsing you may also receive on your computer or mobile device cookies originating from other sites (so-called "third-party" cookies). Cookies may remain on your computer or mobile device for the duration of a session (so-called session cookies) or for longer periods (so-called persistent cookies).

Cookies are divided into technical cookies, analytics cookies (so-called statistical) and marketing cookies (so-called profiling).

Technical cookies are used to allow the site to function, for example to maintain your identification as a user of the site during the session, and are distinguished into necessary cookies (which ensure basic functionalities, such as page navigation and access to protected areas of the site) and preference cookies (which store information that affects the behaviour or appearance of the site).

Analytics cookies (so-called statistical) are used to collect information on the use of the site and may have a "reduced identifying power", not allowing your connection to be traced as they are masked (anonymous data).

Marketing cookies (so-called profiling) are used to track your browsing on the network and create profiles of your tastes, habits, choices, etc., so that advertising messages in line with your preferences and habits may be transmitted to your device.

How we collect your Personal Data

The site may acquire Personal Data concerning you through the use of cookies. The data will be processed using electronic and/or telematic tools.

What types of cookies we use and why we need them (category of personal data, purposes, legal basis of the processing, nature of the provision)

Technical Cookies

Category of data: data relating to technical cookies, preference cookies and analytics cookies with reduced identifying power, both first- and third-party;

Purpose of the processing and nature of the data: we need the aforementioned data to ensure the correct functioning of the site. The provision of the data is optional but, if cookies are disabled, the site may become unusable or difficult to use.

Legal basis: The legal basis for the processing of such data is the legitimate interest of the Data Controller in the correct functioning of the site.

Statistical Cookies

Category of data: data relating to first- and third-party analytics cookies;

Purpose of the processing and nature of the data: we need the aforementioned data to improve the site. The provision of the data through cookies is optional and disabling them will have no effect on the functionalities of the site.

Legal basis: The legal basis for the processing of such data is the data subject's consent to the processing;

Marketing Cookies

Category of data: data relating to first- and third-party marketing cookies;

Purpose of the processing and nature of the data: we need the aforementioned data to provide personalised content based on your profile. The individual profile is created through the processing, including automated, of your browsing habits, tastes and preferences. The provision of the data through cookies is optional and disabling them will have no effect on the functionalities of the site.

Legal basis: The legal basis for the processing of such data is the data subject's consent to the processing;

Which cookies we use and how long we retain them (cookie details and retention period)

https://www.torinooutletvillage.com/it/cookie-policy-eu/

To whom we disclose your data (transfer to third parties)

Your personal data is disclosed to third parties and/or recipients whose activity is necessary for the operation of the site and, where appropriate, to comply with specific legal obligations. Such third parties and/or recipients will process your personal data as Data Processors, acting under the authority of the Data Controller, solely for the purposes set out in this privacy policy.

The third parties and recipients who may receive disclosure of the data subject's personal data are:

• IT service and technical support provider;
• companies providing marketing services;
• Parties necessary and functional to the operation of the site;
• Companies of the Group to which the Data Controller belongs;
• Consultants and/or professionals (e.g. lawyers, notaries, auditors, consultants);
• Private bodies responsible for inspections of various kinds;
• Public bodies, the Judicial Authority, supervisory and control Authorities;

You may request the complete list of the parties acting as external Data Processors using the contact methods described in the paragraph "how you can contact us".

The personal data will be processed by the Data Controller's staff, expressly authorised to carry out the processing and provided with appropriate operating instructions.

To which countries we transfer your data (transfer of personal data to a third country)

Your personal data and the information collected through the installation and use of cookies on your device may be transferred abroad, in accordance with the applicable legislation, where the Data Controller pursues its own interests.

In such a case, the Data Controller hereby ensures that any transfer of data outside the EU will take place in accordance with Articles 44 et seq. of the Regulation and the applicable legal provisions, entering into, where necessary, agreements that guarantee an adequate level of protection.

What are your rights? (Rights of the data subject)

As a data subject, you may exercise the following rights:

• Right of access: you have the right to obtain confirmation as to whether or not your Data is being processed and, furthermore, to receive all information relating to such processing;
• Right to rectification: you have the right to obtain the rectification of the data we hold about you, where it is incomplete or inaccurate;
• Right to erasure: in certain circumstances, where the data is not necessary to fulfil legal obligations, you have the right to obtain the erasure of your data held in our archives;
• Right to restriction of processing: where specific conditions are met, you have the right to obtain the restriction of the processing of your data;
• Right to data portability: you have the right to receive your personal data in a structured, commonly used and machine-readable format, and you have the right to transmit it to another data controller without hindrance;
• Right to object: you have the right to object to the processing of your Data;
• Right to lodge a complaint: you have the right to lodge a complaint with the Supervisory Authority should your data be processed in breach of the GDPR;
• Right to withdraw consent: you have the right to withdraw your consent at any time for processing based on that legal basis. Withdrawal will not affect the processing carried out prior to the withdrawal.

Management, deletion and disabling of cookies

Browsers allow you to accept, control and disable cookies through their settings.

We refer you to the usage and support information provided by your browser provider; however, for your convenience, we provide below the steps to follow to manage cookies in the most common browsers:

• Cookie Settings for Microsoft Edge
• Cookie Settings for Firefox
• Cookie Settings for Chrome
• Cookie Settings for Safari

How you can exercise your rights

To exercise the aforementioned rights, you may use the contact methods described in the following paragraph "how you can contact us".

How you can contact us (contact details of the Data Controller and the Data Protection Officer)

You can contact us by e-mail at the following address: privacy@torinooutletvillage.com. Alternatively, you can contact us by registered mail at the following address:

• Torino Fashion Village S.R.L.
• Via Torino 160,
• 10036 Settimo Torinese (TO)

The Data Controller undertakes to respond to your requests within one month, except in cases of particular complexity, for which it may take up to 3 months. In any event, the Data Controller will explain the reason for the delay within one month of your request.

How we make changes to the Privacy Policy

We reserve the right to modify or simply update, in whole or in part, this Privacy Policy, including in the event of changes to the applicable legislation. We invite you to visit this section regularly to keep up to date with the most recent and updated version of the Privacy Policy.