Privacy Policy

This Privacy Policy (hereinafter — "Policy") regulates the procedure for the collection, storage, processing and use of personal data of users of the monteminerale.com website (hereinafter — "Website"), owned by MONTE MINERALE (hereinafter — "Company").

By using the Website, the User confirms their consent to the terms of this Policy. If the User does not agree with the terms of the Policy, they must cease using the Website.

The Company reserves the right to make changes to this Policy without prior notice to the User. The current version of the Policy is always available on this page.

The Company may collect the following categories of Users' personal data:

• First and last name provided when filling out feedback forms or contacting support; • Email address provided for newsletter subscription or for communication;

Personal data is used exclusively for the purposes specified at the time of collection: processing requests, sending informational materials, improving service quality and fulfilling obligations to Users.

The Company does not collect biometric data, health data or other special categories of personal data through the Website.

The Website uses cookies to ensure proper operation, improve user experience and analyse traffic. Cookies are small text files that are saved on the User's device when visiting the Website.

The Website uses the following types of cookies:

• Essential cookies — ensure basic Website functionality (navigation, access to protected sections); • Analytics cookies — collect anonymous information about how Users use the Website (which pages they visit, how long they spend on the Website); • Functional cookies — remember the User's choices (e.g. language) to personalise the experience.

The User may manage cookies through their browser settings, including blocking or deleting cookies. However, disabling essential cookies may affect Website functionality.

The Company does not sell, transfer or disclose Users' personal data to third parties, except in the following cases:

• With the explicit consent of the User; • Upon request of legislation or within the framework of legal procedures (court order, court ruling); • To partners and contractors providing services to the Company (hosting, technical support, mailing), provided that such partners are obligated to maintain the confidentiality of the transferred data;

All third parties receiving access to personal data are required to comply with confidentiality conditions no less strict than those established by this Policy.

The Company takes technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure or destruction. These measures include:

• Use of SSL/TLS encryption for data transmission between the User's browser and the server; • Restricted access to personal data — only authorised Company employees have access to data necessary for performing their duties; • Regular software updates and security monitoring; • Data backup and recovery procedures.

In the event of a personal data breach that may result in a violation of citizens' rights and freedoms, the Company shall notify the relevant authorities and affected Users in accordance with applicable legislation.

In accordance with applicable data protection legislation, Users have the following rights:

• Right of access — to request information about stored personal data and obtain a copy thereof; • Right to rectification — to request correction of inaccurate or incomplete personal data; • Right to erasure — to request deletion of personal data subject to the conditions of applicable legislation; • Right to restriction of processing — to request restriction of personal data processing in certain cases; • Right to withdraw consent — to withdraw consent to personal data processing at any time.

To exercise the aforementioned rights, the User may submit a request to the following email address: info@monteminerale.com. The Company will review the request and provide a response within the timeframes established by applicable legislation.

Personal data is retained for the period necessary to achieve the purposes of its processing, or for the period established by applicable legislation, whichever is longer.

Upon achievement of the processing purposes or expiration of the retention period, personal data shall be deleted or anonymised, except in cases where data retention is required by applicable legislation.

For inquiries related to the processing of personal data and this Policy, the User may contact the Company at the following details:

Email: info@monteminerale.com

Effective date: 1 January 2025

Last updated: 1 January 2025