NEWSLETTER PRIVACY NOTICE

on the processing of personal data pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”)

Pursuant to this privacy notice, the following companies of the L&S Group:

L. & S. Italia S.p.A. – Sole Shareholder Company
Viale L. Zanussi, 8 – 33070 Maron di Brugnera (PN), Italy
Tel. +39 0434 616611 – info@ls-light.com

LS Lightning (Shanghai) Co., Ltd. – Sole Shareholder Company
255, Longpan Rd., Malu Town, Jiading District, China

Tel. +86 021 6915 3825 – info.china@ls-light.com

L&S Lighting Corporation – Sole Shareholder Company
1505 Pavilion Place, Suite A, Norcross, Georgia, USA
Tel. +1 877 877 0757 – info.us@ls-light.com

L&S Deutschland GmbH – Sole Shareholder Company
Daimlerring, 34 Rödinghausen, Germany
Tel. +49 5223 87900 – info@ls-light.de

Visplay GmbH – Sole Shareholder Company
Charles-Eames-Straße 2, 79576 Weil am Rhein, Germany
Tel. +49 (0)7621 986 5800 – info@visplay.com

Visplay Ltd. – Sole Shareholder Company
32 Rivington Street, London EC2A 3LX, United Kingdom
Tel. +44 207 608 6200 – visplay-uk@visplay.com

Visplay Inc. – Sole Shareholder Company
c/o Cubework, 175 Cesanek Rd, Northampton, PA 18067, USA
Tel. +1 484 591 3600 – visplay-usa@visplay.com

Visplay SAS – Sole Shareholder Company
So Square Opéra, 5 Rue Boudreau, 75009 Paris, France
Tel. +33 788 095 291 – visplay-france@visplay.com

FLUX S.r.l. – Sole Shareholder Company
Via Armando Cingolani 13, 62019 Recanati (MC), Italy
Tel. +39 071 096 0074 – sales@fluxitalia.com

acting as Joint Controllers, provide data subjects with information on the processing of personal data in connection with the newsletter service.

The Joint Controllers jointly determine the purposes and means of the processing pursuant to Article 26 of the GDPR. An internal agreement has therefore been entered into to define the respective responsibilities with regard to compliance with the obligations arising from this Regulation. An extract of such agreement is available to Data Subjects at the following link: https://www.ls-light.com/hubfs/L-S/Corporate/policy/Joint_Controllership_Agreement.pdf

L. & S. Italia S.p.A. has appointed a Data Protection Officer (DPO), who can be contacted at the following address: rpd@legalmail.it.

Purpose, legal basis of the processing and nature of the data provision

The processing of the Data Subject’s common personal data (e-mail address) is carried out for the purpose of sending the promotional newsletter of the L&S Group companies, containing, by way of example, information and offers on marketed products, invitations to events and/or trade fairs, as well as other general, promotional and commercial information relating to the said companies.

The legal basis for the processing is the Data Subject’s consent, which is specific, optional and may be withdrawn at any time by using the dedicated unsubscribe button or by contacting the following address: privacy@ls-light.com .

The provision of data for newsletter purposes is optional and failure to provide such data shall not result in any prejudice to the Data Subject.

Data communication

Without prejudice to compliance with applicable laws, personal data may be communicated, exclusively for the pursuit of the purposes set out in this privacy notice, to:

• Subjects to whom it is necessary to communicate the data for the performance of a contract to which the Data Subject is a party or for the implementation of pre-contractual measures taken at the request of the Data Subject, as well as, more generally, for the pursuit of the purposes set out in this privacy notice;
• Subjects responsible for credit management, such as, by way of example, factoring companies, credit institutions, debt collection companies, credit insurance companies, and commercial information companies;
• In particular, subjects who carry out processing activities on behalf of the Controller in their capacity as Processors pursuant to Article 28 of the GDPR, such as, by way of example and not limited to, professionals and/or companies appointed to carry out administrative-accounting, legal, commercial, managerial, technical, and IT-related activities. The complete and updated list of Processors is available to entitled persons upon simple request at the Controller’s registered office;
• Subjects authorised to access the data under applicable law and/or to whom the data must be disclosed in order to comply with legal obligations.

Personal data may be processed by employees and collaborators assigned to the relevant offices of the Data Controller, who are expressly authorised to process such data pursuant to Article 29 of the GDPR and applicable national legislation.

Data transfers abroad

Data may be transferred to third countries outside the European Economic Area (EEA) (e.g. USA). In such cases, the transfer of Personal Data shall take place in accordance with the provisions of the GDPR, Title V, Articles 44 et seq. In particular, transfers shall be made to a third country deemed adequate pursuant to Article 45 of the GDPR, in accordance with the decision adopted by the Court of Justice of the European Union, or, for third countries not subject to an adequacy decision, transfers shall be carried out on the basis of the Standard Contractual Clauses pursuant to Article 46 of the GDPR, subject to verification that the third country ensures an adequate level of protection of personal data.

Data retention periods

Data are retained for a period of time not exceeding that necessary to achieve the purposes set out in this privacy notice.

In particular, the Data Subject’s e-mail address shall receive the Joint Controllers’ newsletter until a request for unsubscription (unsubscribe) is submitted. At any time, the Data Subject may request to unsubscribe from the newsletter service by using the dedicated unsubscribe button or by contacting the following address: privacy@ls-light.com . Contact details shall in any case be deleted in the event of prolonged inactivity (failure to open the newsletter) for at least 24 months.

With regard to the specific statutory limitation periods provided for by applicable law, data necessary for the establishment, exercise or defence of a right in judicial proceedings may be subject to longer retention periods.

The assessment of the obsolescence of stored data in relation to the purposes for which they were collected is carried out periodically.

Data Subject’s rights

The Data Subject has the right to obtain, in the cases provided for, access to their personal data and the rectification or erasure thereof, or restriction of processing concerning them, or to object to processing (Articles 15 et seq. of the GDPR), by contacting the Data Controller at the following e-mail address: privacy@ls-light.com

Right to lodge a complaint

If the Data Subject believes that the processing of personal data relating to them is carried out in breach of the GDPR, they have the right to lodge a complaint with the competent Supervisory Authority, as provided for by Article 77 of the GDPR, or to bring the matter before the competent judicial authorities (Article 79 of the GDPR).

L. & S. Italia S.p.A.