Dear Customer,

:name, born on :birthdate, resident in :address

in this document, we inform you of the characteristics of the processing of your personal data (by way of example and not limited to; name, surname, identification document details and copy of the same, telephone number, email address) carried out by Mereu Rent (hereinafter the \"MEREU RENT\").

In particular, information is provided here about:

1) Who is the Data Controller?

2) How to contact the Data Protection Officer?

3) On what legal bases and for what purposes does MEREU RENT process your data?

4) Who can the data be disclosed to?

5) Can data be transferred to countries outside the European Union?

6) How long is the data kept?

7) What are your rights?

8) How does the marketing profiling activity take place?

1) Who is the Data Controller?

The Data Controller of your personal data is MEREU RENT-Autoscuola Mereu srl, with registered office in Via Paolo Dettori 50/b-07021- Arzachena (SS), tel.078982222 pec: autoscuolamereu@pec.it

2) How to contact the Data Protection Officer?

The owner has appointed a Data Protection Officer (hereinafter also "RPD" or "DPO - Data Protection Officer"), who you can contact to exercise your rights, as well as to receive any information relating to them and/or to this Information, by writing to:

• email address: mereurent@gmail.com

• postal address: Autoscuola Mereu srl Via Paolo Dettori 50/b-07021-Arzachena SS)

3) On what legal bases and for what purposes does MEREU RENT process your data?

The processing of your personal data is carried out by MEREU RENT exclusively in the presence of at least one of the following conditions:

a) fulfillment of legal obligations;

b) execution of the contract you entered into with MEREU RENT and pre-contractual activities;

c) consent for specific purposes;

d) legitimate interest of MEREU RENT.

The treatment, therefore, is carried out in compliance with the conditions of lawfulness provided for by the Regulation and is limited to what is necessary for the performance, by MEREU RENT and/or third parties on behalf of the same, of activities connected and instrumental to:

a) fulfill legal obligations in the fields of taxation, accounting, anti-money laundering, anti-fraud, etc.;

b) execute the contract and pre-contractual measures, including the management of judicial and extrajudicial disputes and authorizations to operate on relationships registered to other parties;

c) if you have given your consent:

I. keep the documentation of the pre-contractual activities (e.g. estimates, request for products and services) that did not end with the signing of the contract);

II. carry out activities aimed at the continuous improvement of the service offered, such as:

• detection of the degree of satisfaction with the quality of services rendered;

• the preparation of studies and market research;

• the marketing activity of products and services of MEREU RENT and/or third parties;

d) pursue the legitimate interest of MEREU RENT in offering products and services that best meet the needs of customers. For this activity, MEREU RENT identifies the recipients of the commercial offer through non-invasive criteria (e.g. age, residence, etc.). MEREU RENT carries out a preventive assessment of the impact of this activity on the rights, interests and freedoms of the recipients . Furthermore, MEREU RENT allows them not to benefit further from this service through the option of unsubscribing from the list at each opportunity of contact. Within the limits of the specific purposes indicated above, the processing of your personal data is carried out using manual, IT and telematic tools. MEREU RENT adopts appropriate organizational and technical measures to guarantee the security and confidentiality of your personal data.

4) To whom can the data be communicated?

MEREU RENT may communicate your data to third parties belonging to the following categories:

a) for compliance with legal obligations:

• subjects who take care of the auditing and certification of the financial statements;

• authorities and supervisory bodies;

• public entities in the context of communications required by law (eg the Revenue Agency);

• fraud prevention support company;

• other companies belonging to MEREU RENT;

b) for execution of the contract of which you are a part and pre activities contracts requested by you:

• entities that manage debt collection or provide professional consultancy services and tax and legal assistance;

• entities that support the credit investigation, assessment, disbursement, collection and insurance activities;

c) to carry out optional activities you have consented to:

• marketing and market research company;

• company MEREU RENT-AUTOSCUOLA MEREU SRL controlled or associated pursuant to art. 2359 of the Italian Civil Code.

5) Can data be transferred to countries outside the European Union?

B-RENT does not transfer your data to countries outside the European Union.

6) How long are the data kept?

We will keep your personal data for the time necessary to achieve the purposes for which they were collected and for the period necessary to ensure the exercise or defense of rights. In particular for the purpose referred to in point 3, your personal data will be kept for a period of ten years in order to comply with legal obligations.

7) What are your rights?

We inform you that you, as a subject affected by the treatment, can exercise specific data protection rights, listed in the following list:

a) right of access: right to obtain confirmation from the Data Controller as to whether or not personal data is being processed and, in this case, to obtain access to personal data and detailed information regarding the origin, purposes, the categories of data processed, recipients of communication and/or data transfer and more;

b) right to rectification: right to obtain from the Data Controller the rectification of inaccurate personal data without unjustified delay, as well as the integration of incomplete personal data, also by providing a supplementary declaration;

c) right to cancellation ("oblivion"): right to obtain from the Data Controller the cancellation of personal data without unjustified delay in the event that:

I. personal data are no longer necessary with respect to the purposes of the processing;

II. the consent on which the treatment is based is revoked and there is no other legal basis for the treatment;

III. the personal data have been processed unlawfully;

IV. personal data must be deleted to fulfill a legal obligation;

d) right to object to processing: the right to object at any time to the processing of personal data whose legal basis is a legitimate interest of the Data Controller and/or to processing for marketing purposes, including profiling. In case of opposition to the treatment for marketing, the personal data are no longer subject to treatment for these purposes;

e) right to limitation of treatment: right to obtain from the Data Controller the limitation of processing, in cases where the accuracy of personal data is contested (for the period necessary for the Data Controller to verify the accuracy of such personal data) , if the processing is unlawful and/or the interested party has opposed the processing;

f) right to data portability: the right to receive personal data in a structured, commonly used and automatically readable format and to transmit such data to another Data Controller, only for cases in which the treatment is based on consent or on the contract and only for data processed by electronic means;

g) right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial appeal, the interested party who believes that the processing that concerns him violates the Regulation has the right to lodge a complaint with the supervisory authority control of the Member State in which he habitually resides or works, or of the State in which the alleged infringement occurred. We also inform you that you have the right to revoke any consent given to specific optional activities at any time, without prejudice to the lawfulness of the processing carried out prior to the revocation. To exercise your rights, you can forward your request to the following address: mereurent@gmail.con MEREU RENT provides you with information relating to the action taken regarding your request without undue delay and at the latest within one month of receiving it.

8) How does the marketing profiling activity take place?

Your personal data may also be processed, subject to the release of your free, specific, informed and unequivocal consent, for profiling purposes, functional to the promotion and sale of products and services of Mereu Rent or of third-party companies to carry out searches for market and surveys of the degree of customer satisfaction on the quality of the services rendered and on the activity carried out, offer products and services specifically identified through the processing of personal data relating to preferences, habits, consumption choices, etc ... and can be performed by mail, including electronic mail and messages (eg. SMS) and push notifications. Consent to data processing and communication to the subjects indicated below for the aforementioned purposes is optional and may be directly revoked by the customer at any time, by writing to the contact details indicated in this information.

Contact us