The website of Big Easy S.r.l. ("Company"), with its registered office in Rome (RM), at Via degli Aldobrandeschi 300 - 00163, as the Data Controller, provides this Cookies Privacy Policy ("Cookies Privacy Policy") pursuant to Articles 13 and 14 of European Regulation no. 679/2016. The Cookies Privacy Policy should be read together with the Privacy Policy available at the bottom of this website. This document contains the following information:
1) What Cookies are and their purpose. Consequences of a possible refusal.
2) Types of Cookies.
3) Privacy and Security on Cookies. What Cookies are and their purpose. Consequences of a possible refusal.

1. What Cookies are and their purpose. Consequences of a possible refusal.

1.1 Cookies are small text strings that the sites visited by the user send to their terminal (usually to the browser), where they are stored, to be then retransmitted to the same sites during the next visit by the same user.
1.2 While browsing a site, the user may receive cookies on their terminal that are sent by different sites or web servers ("third parties"), on which some elements (such as images, maps, sounds, specific links to pages of other domains) present on the site being visited may reside.
1.3 The cookies referred to in paragraph 2 are used for the purpose of: (i) improving navigation, (ii) saving already entered user preferences (username, password, etc.).
1.4 In line with the standard practices of many websites, the website of Big Easy S.r.l. may install Cookies on the user's computer. By using the Big Easy website, the user accepts their use.
1.5 The responsible and ethical policy with which Big Easy handles privacy aspects includes clear descriptions of how Cookies are distributed on the site. Most browsers have privacy settings functionality that provides different levels of acceptance of Cookies, expiration, and deletion after a user has visited a certain site. It is our intention to be transparent about the conditions and purposes of the use that the site makes of Cookies and other technologies.
1.6 If limitations are placed on their use, this will definitely affect the user's status during the consultation; blocking or removing them from the browser cache may result in incomplete use of the services offered by the web application.
1.7 It is expressly understood that the user can, at any time, reset the options regarding the use of cookies by the website www.bigeasy.com through their browser settings.

To learn more about cookies, we invite you to watch this short video created by the Data Protection Authority or to visit the site www.allaboutcookies.org orwww.youronlinechoices.eu.

2. Types of Cookies

2.1 Cookies are usually classified into the following categories:
First-party cookies: these are cookies set by the website visited by the user, for example those set by the Data Controller if you visit the site.
Third-party cookies: these are cookies set by a domain different from the website visited by the user. Session cookies: these are active only during a browser session. They allow the connection of all activities performed by the user during the browser session. Session cookies are deleted when the browser is closed.
Persistent cookies: these remain on the PC even after the browser session ends. They are reactivated during each subsequent visit to the site from which they originate and remain for a prolonged period on the terminal's hard drive. Persistent cookies can remain on the computer for days, months, or even years.
2.2 The cookies installed relate to preference saving and optimization activities and do not require explicit consent:

Cookie	Function	Duration
Cookie agreed	Cookie related to the acceptance of the short information notice	xx
Disclaimer accepted	Cookie related to the acceptance of the disclaimer of the Investor Relation section	xx
Has.js	Cookie that informs the content management system if JavaScript is enabled in the browser settings	Browser session

2.3 Regarding so-called "third-party" cookies:

Cookie	Function	Duration
_ga	Cookie Google Analytic	https://www.google.com/intl/it_ALL/analytics/index.html

How to change cookie settings?
The Internet browser allows you to change the cookie settings. These are usually found in the "Options", "Tools" or "Preferences" menus of your browser. You can also use the "Help" menu of your browser. Different browsers may use different mechanisms to disable cookies. More information on changing cookie settings is available at the following links:

Cookie settings for Internet Explorer
Cookie settings for Firefox
Cookie settings for Chrome
Cookie settings for Safari

3. Privacy and Security on Cookies

3.1 I Cookies non sono virus, sono solo file di testo che non vengono né interpretati dal browser né eseguiti in memoria. Di conseguenza, non possono duplicarsi, diffondersi in altre reti per essere replicati di nuovo. Poiché non possono svolgere queste funzioni, non rientrano nella definizione standard di virus. I Cookies però possono essere usati per scopi dannosi. Dal momento che grazie ad essi vengono memorizzate informazioni sulle preferenze, la storia delle azioni di un utente, la navigazione specifica tra più siti, i Cookies possono essere utilizzati per agire come una forma di spyware. Molti prodotti antispyware sono ben consapevoli di questo problema e di routine segnalano i Cookies come possibili minacce.
3.2 Since Cookies are transmitted between browser and website, a malicious user or an unauthorized person could intercept the data transmission and the information related to them. Although relatively rare, this can happen if the browser connects to the site using, for example, an unprotected WI-FI network. Other attacks based on Cookies involve server settings. If a website does not require the browser to use only encrypted connections (e.g., https), malicious individuals can exploit this vulnerability to deceive visitors by sending them personal information through insecure channels. Attackers then hijack personal data for unauthorized processing purposes.

OPTIONAL PROVISION OF DATA
Apart from what is specified for navigation data, the user is free to provide personal data in the forms, if present. Failure to provide such data may make it impossible to obtain what is requested.

METHOD OF PROCESSING
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access. The processed data will not be disclosed.

RIGHTS OF THE DATA SUBJECTS (ART. 15 et seq. Regulation (EU) 2016/679)
The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification. According to the same article, one has the right to request the cancellation, transformation into anonymous form, or blocking of data processed unlawfully, as well as to oppose in any case, for legitimate reasons, their processing. Requests should be sent by e-mail to the PEC address bigeasy@legalmail.it 

Regulation (EU) 2016/679: Art. 15 (Right of access by the data subject) 
1. The data subject shall have the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, access to the personal data and the following information:

a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
d) where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period;
e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) the right to lodge a complaint with a supervisory authority;
g) where the personal data are not collected from the data subject, any available information as to their source;
h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

2. Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.
3. The data controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.
4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.