Communication in reference to art. 13 of EU Regulation 2016/679 and other applicable regulations  In accordance with art. 1 of EU Regulation 2016/679 (“Regulation”), and of all applicable Privacy regulations, BASICNET S.p.A. con Socio Unico, as Processing Controller of your personal data, informs you that the personal data provided by you or acquired when registering for the BasicCard fidelity scheme (“BasicCard”) will be processed according to current legislation and standing principles of propriety, legitimacy, transparency and discretion. Processing purposes Data processing will be carried out to achieve the following aims: Legal basis for processing The legal basis for processing rests on the concerned party’s consent. Nature of data provision Data provision is optional for purposes listed above at the letter a, but it is necessary and essential to issue a BasicCard: in its absence it is impossible for the concerned party to receive a BasicCard. For purposes listed above at the letter b) and c) data provision is optional and refusal to provide consent results in the impossibility for the Controller to carry out marketing and profiling activities as specified, but does not prevent the concerned party from obtaining a BasicCard and accessing the services this entails. Data processing procedures Personal data will be processed with paper-based and/or digital tools, and with security measures adequate at guaranteeing the safety and privacy of your personal data, as well as regarding profiling, protect your rights, freedom, legitimate interests, and in particular to protect your right to require human intervention on behalf of the Controller, to espress your opinion and oppose the decision. Data communication and sharing Personal data gathered will be processed for the purposes listed above on the Italian territory.  Personal Data will be processed by employees of the Controller explicitly appointed and authorized. The data provided will not be shared or communicated to third parties. However the data may be made available to: Data retention In accordance with the principles of proportionality and necessity, the data will not be stored for periods longer than those essential to achieve the aims listed above. Rights of concerned parties The subjects personal data refers to have the right to obtain at any moment confirmation whether data regarding them is being processed, and if that is the case may access the data and information referred to in art. 15 of Regulations, to obtain a copy of said data or relative rectification (art. 15 and 16). Subjects concerned may also request data deletion, processing limitation, mobility and to complain to overseeing authority and oppose, for legitimate reasons, their processing (art.17). These rights may be exerted via written communication to be sent to: basiccard@basicbank.net Processing controller The Processing controller is BASICNET S.p.A. based in Largo Maurizio Vitale, 1, 10152 Torino TO. A list of external processing supervisors has been published on the Controller’s website.