This document describes the management methods of the website www.qualitybeeracademy.it (SITE), with reference to the processing of personal data of users who consult and use it as Customers, availing themselves of its services. This information is provided pursuant to Articles 13 et seq. of EU Regulation 679/2016 (“GDPR”), to all those who visit the Site and/or communicate with it. The information is provided only for the Site and not for other websites that may be consulted by the Customer via links present on it.

1. Data Controller

The Data Controller is RADEBERGER GRUPPE ITALIA S.P.A., with headquarters in Genoa, Via Renata Bianchi 40, Tax Code and VAT No.: 00276790102, in the person of its pro tempore legal representative (VAT No. 00276790102), telephone 010 6509459, e-mail: info@radeberger.it, PEC: radeberger@pec.it, website: www.radeberger.it.

2. Data Subjects

Visitors and users of e-commerce services.

3. Purposes of the processing for which personal data are intended

The processing is aimed solely at the correct and complete execution of the relationships arising and currently in place with Radeberger Gruppe Italia. The provision of such data is necessary in order to complete, with mutual satisfaction, the aforementioned execution of such commercial relationships between us and You, and they are briefly described below: promotion and wholesale and retail marketing of beer, gadgets, sale of tickets for promotional and tasting events, as well as activities related to such promotion and marketing, tax and legislative fulfillments related to the economic management of the relationship, information exchanges and delivery of documents via e-mail or shipment via ordinary mail. Your data, including those relating to the shipping address of the goods and/or services purchased, may therefore be transferred, in the application of the agreed service, to Training Centers, Accountants – Tax/accounting consultants, Law firms, Call Centers, Delivery Service Companies, Data Processing Companies that may use tracking systems for statistical purposes of accounting movements, HW and SW Assistance Companies, Financial intermediaries, and other companies that collaborate with the Data Controller. Your data, including those relating to the shipping address of the goods and/or services purchased, may be transferred, in the application of the agreed service, for the purposes of credit protection and rights relating to the existing commercial relationship, to Financial intermediaries, debt collection companies, credit insurance, and law firms. Your personal data, including those relating to the shipping address of the goods and/or services purchased, will not be subject to transfer abroad, with the clarification referred to in point 7 below. Below is a summary of the processing operations and their purpose and legal basis: 1) Registration on the portal: registration on the portal is necessary for Your correct identification, in anticipation of and following a purchase. Your data will be processed to guarantee the available functionalities, including the management of the shopping cart, both for the selection of one or more items and to store the contents of the cart from the last time you connected, and other accessory and functional services to facilitate your choice of items, for the subsequent purchase, commercial transactions with the payment methods you have chosen, logistics for transport, delivery, and possibly for after-sales activities. The legal basis for processing is pre-contractual and contractual in terms of data processing for operations preliminary to the purchase and the purchase itself. 2) Marketing: e-mail reception service, newsletter. In particular, Your data will be processed, subject to Your free consent, for the receipt of e-mails and newsletters, by selecting/checking the appropriate box indicating “subscription to newsletters” in the registration form. The legal basis for processing is the consent of the data subject. 3) Profiling: in order to improve the search for products that may satisfy you, we would like to use Your data to define Your profile, analyze habits or consumption choices, so as to suggest, in multiple ways, offers related to Your preferences, whether through e-mail, newsletters, banners or messages dedicated to You. The legal basis for processing is the consent of the data subject.

4. Consent and refusal of the data subject: purposes

Consent and therefore the provision of data on the site for the purposes referred to in point (1) of the previous article (Registration on the portal), is necessary for the use of the e-commerce service. Failure to communicate such data does not allow the Site Owner to process the data. Therefore, such information is considered mandatory. The provision of data for the purposes referred to in points (2) and (3) of the previous article (Marketing and Profiling) is optional. Any refusal to process does not compromise the continuation of the relationship or the adequacy of the processing itself; in any case, the right to withdraw consent can be exercised even subsequently, either through the e-mails received or by requesting it through the Controller’s contacts. You have the right not to proceed with the communication of Your data but, any refusal, entails the impossibility of fulfilling the activities referred to in the previous points.

5. Types of data processed

Navigation data The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified subjects, but which by its very nature could allow users to be identified. This category of data includes: a) the IP addresses or domain names of the computers used by users who connect to the Site, b) the URI (Uniform Resource Identifier) notation addresses of the requested resources, c) the time of the request, d) the method used to submit the request to the server, e) the size of the file obtained in response, f) the numerical code indicating the status of the response given by the server (success, error), g) other parameters relating to the operating system and the user’s computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and are deleted immediately after processing. Cookies For the processing of data via cookies, please view the relative policy, available at the following link: h#ps://www.qualitybeeracademy.it/docs/QBA_Cookies.pdf. Data provided voluntarily by the User and/or communicated by third parties: a. The optional, explicit and voluntary sending of e-mails to the e-mail address indicated on the Site involves the acquisition and processing by the Controller of the data and any other information contained in such communications; b. The sending of a purchase proposal by the User involves the processing of data such as name, surname, address, e-mail address, telephone number and data relating to the transaction; c. Filling in the form, available in the relative section, involves the processing of the e-mail address entered by the User; d. Consent to the sending of personalized offers involves the processing of data relating to the User’s purchasing preferences.

6. Processing methods

The processing is carried out by means of operations, or a set of operations, such as: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation or destruction of data. The operations can be carried out with or without the aid of electronic or otherwise automated tools. The processing is carried out by the controller and/or by the persons in charge of processing under the supervision of the Data Processor.

7. Communication of data

Subject to Your consent, personal data, including those relating to the shipping address of the goods and/or services purchased, may come to the knowledge of the persons in charge of processing and may be communicated, for the purposes referred to in the previous points, to external collaborators, subjects operating in the same sector in which Radeberger Gruppe Italia operates and, in general, to all those public and private subjects to whom communication is necessary for the correct fulfillment of the purposes indicated in point 3, including subjects in charge of the transport and delivery of the products and/or services purchased.

8. Disclosure of data

Personal data, including those relating to the shipping address of the goods and/or services purchased, are not subject to disclosure, except as specified in point 3 above.

9. Transfer of data abroad

Personal data, including those relating to the shipping address of the goods and/or services purchased, may be transferred to European Union countries and to third countries outside the European Union within the scope of the purposes referred to in point 3.

10. Data retention period

Personal data, including those relating to the shipping address of the goods and/or services purchased, will be kept even after the termination of the contract for the fulfillment of all possible obligations connected or deriving from the contract, for the duration period prescribed by the laws in force from time to time and according to the limitation period of the rights arising from the contract itself.

11. Rights of the data subject – Art. 7, par. 3 – Art. 13, par. 2, paragraph a) et seq – Art. 21 – par. 1, 2, 4

In relation to the processing of Your personal data, you have the right to ask RADEBERGER for: • access: you can request confirmation as to whether or not processing of data concerning you is in progress, as well as further clarification regarding the information in this Notice, and to receive the data itself, within the limits of reasonableness; • rectification: you can ask to rectify or supplement the data you have provided to us or otherwise in our possession, if inaccurate; • erasure: you can ask that your data acquired or processed by RADEBERGER be deleted, if they are no longer necessary for our purposes or where there are no disputes or controversies in progress, in case of withdrawal of consent or your opposition to processing, in case of unlawful processing, or if there is a legal obligation to delete; • restriction: you can request the restriction of the processing of your personal data, when one of the conditions referred to in art. 18 of the GDPR occurs; in this case, your data will not be processed, except for storage, without your consent except for what is explained in the same article in paragraph 2. • objection: you can object at any time to the processing of your data based on our legitimate interest, unless there are our legitimate reasons to proceed with the processing that prevail over yours, for example for the exercise or our defense in court; your objection will always and in any case prevail over our legitimate interest in processing your data for marketing purposes; • portability: you can ask to receive your data, or to have them transmitted to another controller indicated by you, in a structured, commonly used and machine-readable format. Furthermore, pursuant to art. 7, par. 3, GDPR, we inform you that you can exercise your right to withdraw consent at any time, without prejudice to the lawfulness of the processing based on the consent given previously. Finally, we inform you that you have the right to lodge a complaint before the Supervisory Authority, which in Italy is the Garante per la Protezione dei Dati Personali. Your data, including those relating to the shipping address of the goods and/or services purchased, will be kept as long as the conditions described below are present: – there is a legal obligation for retention, – there are contractual obligations that require retention. Should the aforementioned requirements fail, You will have the right to request the deletion of Your personal data and, consequently, the writing Company is released from the retention constraint. Likewise, the Company, should the aforementioned requirements fail, can autonomously decide to delete such data. It is Your right to know the company names of the external processors to whom the data may be transferred. To exercise these rights, a written or oral request to the following references is sufficient: info@radeberger.it, RADEBERGER GRUPPE ITALIA S.P.A. / TEL 010.6509459 / FAX 010.650.94.72

12. Right to lodge a complaint

Your right to lodge a complaint with a supervisory authority, by contacting the competent bodies in the matter, remains unaffected. In this case: http://www.garanteprivacy.it/

13. Automated Decision-Making Processes – Profiling

In RADEBERGER GRUPPE ITALIA S.P.A., no automated decision-making processes or profiling of personal data are carried out, except as provided for in the previous art., paragraph 3.