Under art. 13, Legislative Decree 196 of 30 June 2003 (the “personal data protection code”), Arcadia informs you that data supplied will be processed mainly with the aid of electronic, automated and/or video recording means for: (a) functional requirements for the performing of its obligations, (b) relationship management requirements regarding sellers and buyers (e.g. such as administration of sale proceeds, invoices, shipments), (c) verifications and evaluations of sale at auction relations and connected risks, (d) for compliance with tax, accounting and legal obligations and/or provisions of public bodies, or (e) the sending by Arcadia of advertising materials and information using automated systems.
The provision of data for the purposes cited in art. 20, letters (a) – (d) inclusive is optional. However, any refusal will result in it being impossible to participate in an auction. Consent to processing of data for the purposes cited in letter (e) is optional. However, any refusal will result in it being impossible to receive advertising materials and information from Arcadia.
Data will be processed by Arcadia employees or associates as data officers or managers. Data may in addition be communicated to: (a) all parties (therein including public authorities) which have access to personal data under legislative or administrative provisions; (b) companies or third parties entrusted with printing, mailing services, shipping and/or delivery of purchased lots; (c) post offices, couriers or shippers entrusted with delivery of purchased lots; (d) companies, consultants or professionals which may be entrusted with the installation, maintenance, updating and, in general, management of Arcadia’s hardware and software, or which Arcadia uses, including the website; (e) firms or Internet providers entrusted with sending documents and/or information or advertising materials; (f) companies entrusted with creating and/or sending advertising materials and information on behalf of Arcadia; (g) all public and/or private parties, individuals and/or legal persons (legal, administrative and tax consulting firms, court offices, chambers of commerce, labour chambers and employment offices etc.), when such communication is necessary or functional for the proper fulfilment of Arcadia’s obligations. Your data will not be disclosed, other than in anonymous and aggregate form, for statistical or research purposes.
The Data Controller is Casa d’aste Arcadia S.r.l., headquartered at Corso Vittorio Emanuele II, 18 (00183), Rome, to which applications and requests related to the processing of data may be made. The data will be stored only for the necessary time to ensure proper fulfilment of Arcadia’s obligations, and in all cases within the limits allowed by law. Under art. 7 of the Privacy Code you are entitled to (a) obtain confirmation of the existence or otherwise of personal data concerning the requester and their communication in intelligible form; (b) obtain, from the data controller or data manager/managers: – statements on the origin of data, processing purposes and procedures, the logic applied for processing performed with the aid of electronic instruments; – statement of the identity of the data controller and data manager/managers, and possibly of the representative designated by a foreign party for the processing of data in Italy; – indications of the parties or categories of party to whom data may be communicated or who may become aware of them as representative designated on the state territory, managers or officers; (c) obtain: – updating, rectification or additions to your data; – cancellation, transformation to anonymous form or blocking of data processed unlawfully, including those for which storage is necessary for the purposes for which the data were gathered or subsequently processed; – certification that the operations cited in the above points have been notified, including as regards their content, to those to whom the data were communicated or disclosed, unless such compliance proves impossible or involves the use of means manifestly disproportionate to the protected right ; (d) object, wholly or in part: – for legitimate reasons, to processing of your data, even if pertinent to the purpose of their gathering; – to processing of your data, foreseen for purposes of marketing information or sending of advertising or direct sales materials or for market research or marketing communications.

CONSENT TO PERSONAL DATA PROCESSING
The undersigned states that they have received the complete policy in accordance with art. 13, Legislative Decree 196/2003, together with a copy of art. 7 of the same law, and consents to processing of their personal data, including when sensitive, authorised by the aforesaid law within the limits of and for the purposes stated in the policy.
They also authorise CASA D’ASTE ARCADIA S.R.L. to perform all the aforesaid processing for as long as the same company considers this useful and in all cases not beyond the undersigned’s request for cancellation from the database.

RIGHT OF ACCESS TO PERSONAL DATA AND OTHER RIGHTS
Art. 7, Legislative Decree 196/2003
1. The person concerned is entitled to obtain confirmation of the existence or otherwise of their personal data, even when not yet recorded, and their communication in an intelligible form.
2. The person concerned is entitled to obtain a statement:
a) of the origin of the personal data
b) of the processing purposes and procedures
c) of the logic applied for processing performed with the aid of electronic instruments
d) of the identity of the controller, managers and the representative designated under article 5, paragraph 2;
e) of the parties or categories of party to whom personal data may be communicated or who may become aware of them as designated representative in the State territory, managers or officers
3. The person concerned is entitled to obtain:
a) updating, rectification or, when they are interested, additions to data; b) cancellation, transformation to anonymous form or blocking of data processed unlawfully, including those for which storage is not necessary for the purposes for which the data were gathered or subsequently processed
c) certification that the operations cited in letters a) and b) have been notified, including as regards their content, to those to whom the data were communicated or disclosed, unless such compliance proves impossible or involves the use of means manifestly disproportionate to the protected right
4. The person concerned is entitled to object, entirely or in part:
a) for legitimate reasons to processing of their personal data, even if pertinent to the purpose of the gathering;
b) to processing of their personal data for the purpose of sending advertising or direct sales materials or for market research or marketing communications