PRIVACY NOTICE ON THE USE OF THE COOKIELESS TRACKING SOLUTION AND
THE PROCESSING OF PERSONAL DATA OF ONLINE USERS - COOKIE POLICYPURSUANT TO REGULATION (EU) 2016/679 (“GDPR”)
DATA CONTROLLER AND DATA PROTECTION OFFICER (DPO)The Data Controller is Indena S.p.A., having its registered office in Milan, Viale Ortles, n. 12, VAT Number 04411780150,
e-mail privacy@idbholding.com (“Company” o “Data Controller”).
The Data Protection Officer can be reached at the e-mail address: dpo@idbholding.com
COOKIELESS TRACKING SOLUTION AND FEATURESThe Data Controller has developed the Web Site by means of a tracking solution, which proposes pseudoanonymous andcookieless data collection.
The solution allows for statistics to develop and improve the Web Site, as well as the user experience of data subjects (e.g.,monitoring of the most viewed pages or those with the “404” error, monitoring of the most viewed videos, etc.).
Such a solution does not:• allow for the creation of unified user profiles because interactions - i.e., the browsing session - have an expiration
time of 30 minutes of inactivity by the user;• involve the use of cookies or other information storage technologies within the users' browsers.
The solution is implemented by default and - unlike cookies, the feature and placement of which is specified below - there isno need to obtain the consent of data subjects browsing the Web Site.
PERSONAL DATA PROCESSEDNavigation data.
WHAT ARE COOKIES
Cookies are data created by a server that are stored in text files on your computer's hard disk or on any device you use toaccess the Internet (smartphone, tablet) and allow us to collect information about your navigation on the website.
Cookies can be permanently stored on your computer and have a variable duration (so-called persistent cookies), but they
can also disappear when you close your browser or have a limited duration (so-called session cookies).
Cookies may be installed by the website you are visiting (so-called first-party cookies) or may be installed by other websites(so-called third-party cookies).
HOW WE USE COOKIES
1. Essential Cookies
a. session/navigation: The use of so-called session cookies (which are not permanently stored on the user's computerand disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting ofrandom numbers generated by the server) necessary to enable the safe and efficient exploration of the site and its
applications. The so-called session cookies used in the site avoid the use of other computer techniques potentially
prejudicial to the confidentiality of user navigation and do not allow the acquisition of personal identification dataof the user. They do not require your consent.
b. persistent cookies: persistent cookies remain on your device even after you leave the website, until you delete themor until they expire. The site creates these cookies and stores them on your device so that they can be read when
you visit the site again. This allows, for example, to find, even on subsequent visits to the site, the preferences set(e.g. wish list, shopping cart...). They do not require your consent.
2.

Analytics and Functionality Cookie: cookies installed to collect aggregate information of a mainly statistical nature(how long you stay on a web page, number of visitors to the site, etc.).
a. First party analytical cookies: similar to technical cookies as they are installed directly from the website you arevisiting to improve their usability. They do not require your consent.
b. Third-Party Analytical Cookies: analytical cookies created and installed by third parties in order to analyze users'
browsing in order to generate statistics on visits or to improve the offer of content, to show similar products andto place, if necessary, targeted advertising on web pages. The system used is Google Analytics, which is a web
analysis service provided by Google LLC ("Google"). Google Analytics, like other systems, uses "cookies" to help
the website analyze how users use the site. The information generated by the cookie about your use of the website(including your IP address) will be transmitted to and stored by Google on servers in the United States. Google
will use this information for the purpose of evaluating your use of the website, compiling reports on website
activity for website operators and providing other services relating to website activity and internet usage. Google
may also transfer this information to third parties where required to do so by law, or where such third parties
process the information on Google's behalf. Google will not associate your IP address with any other data held byGoogle. The user may refuse the use of cookies by selecting the proper settings on your browser, however please
note that if you do this you may not be able to use the full functionality of this website. Since the IP address isclear, the use of such cookies requires your consent. By clicking on the “ACCEPT SELECTED” button in thebanner, the user consents to the placement of selected analytics or functionality cookies; whereas, by clicking on
the “ACCEPT ALL” button the user consents to the processing data by Google in the manner and for thepurposes stated above.
COOKIE PREFERENCES MANAGEMENT
The consent to the use of cookies is given in one of the following ways:- by clicking on the “ACCEPT SELECTED” button in the banner containing the brief information, which appears
at the moment the user, on first access to the Site, consents to the placement of selected cookies (analytics,functionality or profiling);- by clicking on the “ACCEPT ALL” button in the banner, the user consents to the placement of all cookies used bythe Site;- by clicking on the “X” button, located at the top right of the banner, the user agrees to continue browsing with thedefault settings (essential cookies).
HOW TO CHANGE COOKIE SETTINGS
Most Internet browsers are initially set to accept cookies automatically. This means that the user has the possibility, at anytime, to set his browser to accept all cookies, only some of them, or to reject them all, disabling their use by the sites. Inaddition, the user can normally set his browser preferences so that he is notified whenever a cookie is stored on hiscomputer. Finally, at the end of each browsing session, the user can delete the cookies collected from the hard disk of hisdevice. If you wish to delete the cookies installed in the cookies folder of your browser, please note that each browser has
different procedures for managing the settings.
By selecting the links below the user can get specific instructions for some of the major browsers:
Microsoft Edge: https://support.microsoft.com/it-it/help/4027947/microsoft-edge-delete-cookies
Google Chrome: https://support.google.com/chrome/bin/answer.py?hl=en&answer=95647&p=cpn_cookies
Mozilla Firefox: http://support.mozilla.org/en-US/kb/Enabling%20and%20disabling%20cookies
Apple Safari: http://docs.info.apple.com/article.html?path=Safari/5.0/en/9277.html
If you do not want to receive Google Analytics cookies, you can do so by logging on to thepage: https://tools.google.com/dlpage/gaoptout/
If you want to know more about cookies in general you can visit the page http://www.allaboutcookies.org
If the user wants to know more about online behavioral advertising and privacy, he can visit the page
http://www.youronlinechoices.com
If you want to learn more about Google Analytics cookies you can visithttp://www.google.com/intl/it/analytics/privacyoverview.html
CookieIndena.com

Namedefault_language

PurposeEssential

First /third party
First party

Indena.com

indena_page

Essential

First party

Indena.com

indena_nutra

Essential

First party

Indena.com

indena_Essential

First party

Indena.com

popupConsent

Essential

First party

Indena.com

cookie_Analytics

Essential

First party

Indena.com

cookie_Essential

Essential

First party

Legal Basissaves the user's
preferredlanguage forbrowsing the site
pop-upmanagement on
the home page
pop-upmanagement on
the Nutraceuticalpage
optional pop-up
management on
the contact uspage
general cookie
preferences
management
tracking cookie
preferences
management
essential cookie

Duration

Further Information

sessionsessionsessionsession365 days
365 days
365 days

Google’s Privacy policy andthe use of Google cookies
are available at thefollowing links:
https://www.google.com/intl/it/policies/privacy/
https://www.google.com/i
ntl/it/policies/technologies/
It is possible to download aBrowser plug-in topermanently object toGoogle Analytics cookies at
the following link:
https://tools.google.com/dlpage/gaoptout?hl=it

Indena.com
GoogleAnalytics
GoogleAnalytics
GoogleAnalytics
GoogleAnalytics
GoogleAnalytics

cookie_Functionals

Essential

First party_gaAnalytical

Third party_gid

Analytical

Third party_ga_XXXXXXXXX
XAnalytical

FPID

Analytical

FPLC

Analytical

Third party
Third party
Third party

preferences
management
third-party
cookiepreferences
management
Consent (if theIP is clear)
Consent (if theIP is clear)
Consent (if theIP is clear)
Consent (if theIP is clear)
Consent (if theIP is clear)

365 days
365 days
1 day
365 days
365 days
1 day

MANDATORY DATA PROVISION
The personal data processed through the installation of technical cookies and first party analytical cookies are necessary toensure correct navigation within the website.
It is optional to give your consent to the installation of third-party analytical cookies. Your personal data will be processedby these cookies only with your express consent, as indicated above.
DATA RECIPIENTSThe data may be processed by external parties operating as independent data controllers such as, for example, supervisory
and control authorities and bodies.
The data may also be processed, on behalf of the Company, by external subjects designated as data processors, to whom
adequate operating instructions are given. These subjects are essentially included in the following categories:- companies offering e-mail services;- companies that offer services instrumental to the pursuit of the purposes indicated in this statement (IT suppliers,
companies that deal with the management and maintenance of the site ...)PARTIES AUTHORISED TO PROCESS DATA
Data may be processed by employees and/or collaborators of the Data Controller/Data Processor who have received
adequate operating instructions and who have been expressly authorized to process it by the Data Controller/DataProcessor.
PERSONAL DATA TRANSFERS OUTSIDE THE EUData may be processed by Data Processors located in extra-EU Countries, whose level of data protection has been deemed
adequate by the European Commission under Article 45 of the GDPR.
Your personal data may also be transferred as a result of signing the Standard Contractual Clauses (Standard ContractualClauses) provided for in Article 46(2)(c) of the GDPR.
DATA SUBJECTS’ RIGHTS – COMPLAINT TO THE SUPERVISORY AUTHORITY
With regard to the Tracking Cookieless solution, by contacting the Data Controller via e-mail at privacy@idbholding, datasubjects may request access to the Data concerning them, as well as object and/or restriction of processing whereapplicable. It should be noted that the rights to update, rectify or supplement may in practice only be exercisable during theduration of the session.
Data subjects have the right to lodge a complaint with the competent supervisory authority, pursuant to Article 77 of theGDPR, if they believe that the processing is contrary to applicable law.
With regard to the cookies used by the Web Site, by contacting, via e-mail at privacy@idbholding.com, data subjects can ask
the data controller for access to the data concerning them, their cancellation, correction of inaccurate data, integration ofincomplete data, limitation of processing in the cases provided for by art. 18 GDPR, as well as opposition to processing in
the case of legitimate interest of the data controller.
Furthermore, if the processing is based on consent or contract and is carried out by automated means, the data subjects
have the right to receive the data in a structured, commonly used and machine-readable format and, if technically feasible, totransmit them to another data controller without hindrance.

Data subjects have the right to withdraw the consent given at any time for marketing and/or profiling purposes, as well as
to object to the processing of data for marketing purposes, including profiling related to direct marketing. Withdraw theconsent does not affect the lawfulness of processing based on consent, prior to withdraw.
The data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State where
they habitually reside or work or in the State where the alleged infringement has occurred.