Regulations under article 13 of Legislative Decree 196/2003 (personal data protection code)

Assumption: Legislative Decree 196/2003 Code (personal data protection code) disciplines the processing of the personal data, processing shall mean ‘any operation, or set of operations, carried out with or without help of electronic or automated means, concerning the collection, recording, organization, keeping, interrogation, elaboration, modification, selection, retrieval, comparison, utilization, interconnection, blocking, communication, dissemination, erasure and destruction of data, whether the latter are contained or not in a data bank’. Law foresees that the information stated in this communication is given to the interested person (data subject). The following information is regarding the use of the personal data which the interested person (data subject) will need to leave filling in the requested information form. In case data subject intends to use our services (even in the future), we will submit the ulterior information on the use of the personal data essential for the execution of the contract from both sides. A – Purpose of the process of the data to whom it is destinated The Owner of the Website (Data Controller) informs that the personal data given upon completing of the requested information form will be processed lawfully and fairly, relevantly, completely and not excessively:

1. To illustrate our services according to the needs specified by the data subject. MANDATORY DATA (i) It is mandatory to fill in the fields marked with a symbol * In case of absence (or error) of this data, the Owner could be not able to answer fully or satisfactory to the request. Once filled in, this data could be processed without a consent of the applicant as established in the article 24, co.1, lett.b) of Legislative Decree 196/2003 OPTIONAL DATA (ii) Filling in the data in the fields not marked with a symbol * will help the Owner to improve the quality of the service requested and to personalize the request. Filling in this data is optional. In case data is not given, the applicant will anyway receive the response to his request. In case of filling in the optional field data, the Owner will be able to use it only after having received previously an authorization from the applicant that could be found in the bottom of this communication ‘Agree to the use of my personal details’

2. In order to contact the applicant for the current or future offers which may be of his interest. The use of the data for this purpose is permitted only in case of acceptance of this communication in the bottom ‘Agree to receive additional information and/or promotions by e-mail from the Owner’ B – Data Processing Methods

1. Tools and logics For the purposes above, the data processing is performed by means of manual, IT and telematic tools, by applying referred logics that are strictly correlated to the purposes above, and in such a way so as to guarantee privacy and security.

2. Personal data conservation Personal data will be in use for the necessary period of time in order to fully process the request of the applicant. Such period of time is changeable depending on the type of request and on the actual date of the event. After this period of time the personal data will be conserved only in case the consent to do so was previously authorized by the applicant to be contacted for promotional purposes. Typology of the personal data used None of the requested personal data is recognized as a ‘sensible data’ or ‘judicial data’ of points d) and e) of the art. 4 of Legislative Decree 196/2003. In case such data is transmitted we will be responsible to delete it immediately. Only if this data is necessary for the correct process of the request , we would send a special form to be filled in and send back to us with authorization to use this sensible data, otherwise we won’t be able to use it (art.26, Legislative Decree 196/2003). ‘sensitive data’ shall mean personal data allowing the disclosure of racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade-unionist character, as well as personal data disclosing health and sex life’. In any case we would kindly ask not to leave this data if not absolutely necessary for your request. C – Category of the individuals in role of Responsible (data processors) with whom the personal data can be shared

1.The Owner of the Site (Data Controller) can transfer or make accessible personal data in his possession to the individuals in role of data processors for the appointed request or process.

2. Moreover, the Owner of the Site (Data Controller) can occasionally communicate personal data in his possession to the suppliers in case this is necessary for the better finalization of the request. If you would like to know the identity of the individuals with whom the personal data could be shared, this could be done with simple request to the Owner of the Site (Data Controller) identified in the point E of this communication. Personal data is not shared in any way with third parties. D – Rights of the data subjects Article 7 of Legislative Decree 196/2003 gives data subjects specific rights in relation to the use of personal data. Article 7 states:

1. Data subjects shall have the right to obtain confirmation as to whether or not personal data concerning them exist, even if the data have not yet been recorded, and communication of such data in intelligible form.

2. Data subjects shall have the right to information on : a) the source of the personal data; b) the purposes and modes of processing; c) the logic applied when the data is processed with the use of electronic instruments; d) the identity of the Owner, data processing officers and the representative designated pursuant to Article 5.2; e) the entities or categories of entities to which the personal data can be transferred or which can gain knowledge of them as designated representatives of the state, data processing officers, or data processors.

3. Data subjects shall have the right to obtain: a) the updating, correction or, should they be interested, additions to the data; b) the cancellation, transformation into anonymous form, or blocking of data processed in violation of law, including those that need not be retained for the purposes for which the data were collected or subsequently processed; c) certification that the parties to which the data have been transferred or disseminated have been notified of the operations specified in points a) and b), also regarding their content, except for the case where notification proves impossible or requires the use of means clearly disproportionate to the right being protected.

4. Data subjects shall have the right to oppose, wholly or in part: a) for legitimate reasons, the processing of their personal data even when it pertains to the purpose of collection; b) the processing of their personal data for the purpose of sending advertising or direct marketing material or to conduct market research or commercial communication surveys. E – Data controller Data controller of the personal data is Cindy Jennifer Salgado who can be contacted by e-mail addresses found on this page. Privacy Policy Private policy from the website www.elev8yourweddings.com Private policy – what is it? This document on policies for confidentiality of personal data Cindy Salgado (Data Controller) which operates the Internet site www.elev8yourweddings.com, intends to describe as accurately as the method for managing the processing of personal data of users and visitors to our site.

This is also a disclosure made in accordance with art. 13 of Legislative Decree No 30 June 2003 196 for service users of our site. The statement does not apply to other websites which may be accessed through our links, for which Cindy Jennifer Salgado is not responsible in any way. The guidelines given below are based on Recommendation No. 2 / 2001 of the Group of European Ombudsmen for the protection of personal data adopted May 17, 2001 pursuant to Art. 29 of Directive 95/46/EC concerning in particular the collection of personal data over the Internet and are intended to identify the minimum measures to be implemented in respect of the persons concerned to ensure the fairness and legality of such practices (in application of Articles 6 , 7, 10 and 11 of Directive 95/46/EC). RIGHTS OF THE DATA SUBJECTS According to the Article 7 of Legislative Decree 196/2003 data subjects shall have the right on information whether or not personal data concerning them exist, on updating, rectification or, where interested, integration of the data. Other than that the data subjects shall have the right to obtain erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed. Requests related to the Article 7 of Legislative Decree 196/2003 and concerning personal data given through our website, should be sent to an e-mail address:

cindy@cindysalgado.com PLACE AND METHOD OF THE PROCESS AND USE OF THE PERSONAL DATA The process of the data linked to the services offered by this web site is carried out in Florence office of the Owner (Data Controller), and is treated only by the employees, partners or collaborators who the Owner himself has appointed for this purpose. Or by technicians that could perform the maintenance. Web site and all the data collected is physically stored ‘in hosting’ at The Go Daddy Group, Inc., with a branch in Scottsdale (Arizona, U.S.A.),which guarantees privacy having adhered to the program Safe Harbor to secure an adequate level of the protection of the personal data transferred from Europe. Data is processed automatically. No data that comes from navigation from our site is communicated or spread, unless it is expected by the law. Specific means of security are used for preventing of data loss, illegal use or unauthorized access. TYPOLOGY OF THE DATA USED The computer systems and software procedures used to operate this website obtain, during normal usage, certain personal data the transmission of which is implicit in the use of internet communication protocols. This data is not collected to be referred or associated to the data subject, but for its nature through processing and connection with the data held by the third parties could identify the users. This category of data includes IP addresses or domain names used by the users who connect to the website, URI addresses (Uniform Resource Identifier) of the requested recourses, time of the request, the method used to submit a request to the server, the dimension of file received as a reply, a numeric code indicated the state of response by server (delivered, failed etc.) and other parameters related to the operation system and computing environment. This data is used only to gain anonymous statistics related to the use of the website and to its correct function and is deleted by the end of elaboration. Questionable data could be used for the assessment and determination of the responsibility in case of eventual cyber crime to our website: except of this eventuality, in general information regarding web contacts are not stored for more than 7 days. DATA PROVIDED VOLUNTARILY BY USERS The optional, explicit and voluntary forwarding of emails to the address given on this site, implies the acquisition of the email address, essential to reply to the requests, and of any other additional personal data in the communication. Personal data submitted by users voluntarily via web information request form will be handled according to the modality and purpose described in the communication below the request form itself. Following eventual contract establishment, customer will receive further and more specific information related to the customer’s personal data processing. COOKIES A cookie is an encrypted string of text stored on your computer only after authorization to do so. If access is allowed, text is downloaded into a file with small dimensions. Cookies make surfing smoother and improve display of most requested information by quantitative check-out of the web pages access and allows to send Web applications to the users. No personal data is used from the site. We do not use cookies to transmit information of a personal nature, nor are used c.d. session cookies and persistent cookies of any kind, or systems for tracing users. OPTIONS REGARDING PROVISION OF PERSONAL DATA With the exception of navigation data, the user is free to choose whether or not to furnish personal data where requested on certain the pages or sections of the site. Failure to furnish the requested information may make it impossible to obtain the requested service.