Pursuant to Art. 13 of EU Regulation no. 2016/679 and Legislative Decree no. 196 of June 30, 2003, as amended and supplemented. Pursuant to Art. 13 of EU Regulation no. 2016/679 (hereinafter “GDPR 2016/679”) and Legislative Decree no. 196 of June 30, 2003, as amended and supplemented, containing provisions for the protection of individuals and other subjects with regard to the processing of personal data, we wish to inform you that the personal data provided by you will be processed in compliance with the aforementioned regulations.

1. Data Controller The Data Controller is ZEROMILLE SRL, in the person of its legal representative PAOLO VALLI, domiciled for the office in Borgo Maggiore (RSM) at Via Rive delle Seriole 4.

2. Purpose of processing The personal data provided by you are necessary for the fulfillments required by law, including any communications from RALLYLEGEND.

3. PROCESSING METHODS AND STORAGE Processing will be carried out in automated and/or manual form, in compliance with the provisions of Art. 32 of GDPR 2016/679 regarding security measures, by specifically appointed subjects and in compliance with the provisions of Art. 29 GDPR 2016/679. Please note that, in compliance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Art. 5 GDPR 2016/679, subject to your free and explicit consent expressed in this notice, your personal data will be stored for the period of time necessary to achieve the purposes for which they are collected and processed.

4. SCOPE OF COMMUNICATION AND DISSEMINATION We further inform you that the data collected will never be disseminated and will not be subject to communication without your explicit consent, except for necessary communications that may involve the transfer of data to public bodies, consultants, or other subjects for the fulfillment of legal obligations.

5. TRANSFER OF PERSONAL DATA Your data will not be transferred either to Member States of the European Union or to third countries outside the European Union.

6. SPECIAL CATEGORIES OF PERSONAL DATA Pursuant to Articles 9 and 10 of EU Regulation no. 2016/679, you may provide ZEROMILLE SRL with data qualifying as “special categories of personal data,” namely data revealing “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning health or a person’s sex life or sexual orientation.” These categories of data may only be processed by ZEROMILLE SRL with your free and explicit consent.

7. EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS, INCLUDING PROFILING ZEROMILLE SRL does not adopt any automated decision-making process, including profiling, as referred to in Article 22, paragraphs 1 and 4, of EU Regulation no. 2016/679.

RIGHTS OF THE DATA SUBJECT 8. AT ANY TIME, PURSUANT TO ARTICLES 15 TO 22 OF EU REGULATION NO. 2016/679, YOU MAY EXERCISE THE RIGHT TO:

• request confirmation as to whether or not your personal data exist;

• obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, where possible, the storage period;

• obtain the rectification and erasure of data;

• obtain the restriction of processing;

• obtain data portability, i.e., receive them from a data controller in a structured, commonly used, and machine-readable format, and transmit them to another data controller without hindrance;

• object to the processing at any time, including in the case of processing for direct marketing purposes;

• object to an automated decision-making process concerning natural persons, including profiling;

• ask the data controller for access to personal data and the rectification or erasure of the same, or the restriction of processing concerning you, or to object to their processing, in addition to the right to data portability;

• withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;

• lodge a complaint with a supervisory authority.

9. HOW TO EXERCISE YOUR RIGHTS You may exercise your rights with a written request sent to ZEROMILLE SRL, at the postal address of the registered office or at the email address info@rallylegend.com