Pursuant to Article 13 of Legislative Decree No. 196 of June 30, 2003, and referring to the content of Article 4 regarding satellite tracking systems, BU SRL informs that data relating to the Client and/or User of the vehicles (as indicated by the Client) that will come to its knowledge in relation to the general conditions of vehicle lease without a driver or corporate fleet management and/or each order, will be processed in compliance with the aforementioned legislation and based on principles of correctness, lawfulness, transparency, and privacy protection. The data provided by the Client and, through them, by the User, will be processed for the following purposes: A) for purposes connected, inherent, or instrumental to the establishment and management of the contractual relationship or the execution of obligations arising from these general conditions of vehicle lease without a driver or corporate fleet management and/or each Client's order, or to comply, before the execution of an order, with specific requests from the Client and/or the same User; B) for purposes related to credit risk protection, to carry out checks to verify the accuracy of the provided data and the reliability/solvency of the Client; C) to send information and commercial proposals, marketing; for market research; for economic and statistical analyses; for loyalty initiatives; for prize events; for market surveys and to measure customer satisfaction. All data provided for the purposes indicated in the aforementioned letters will be processed in compliance with the prescriptions of the Authority for the Protection of Personal Data. a: 1. subjects who can access the data under the provision of law, regulation, or community legislation, or by order of the Judicial Authority, within the limits set by these norms or provisions; 2. employees, collaborators, and consultants of BU SRL, who may come into contact with personal data as “Data Processors” or “Data Handlers”; 3. assistance centers, mechanical workshops, car rental companies, and general business partners, such as vehicle suppliers and outsourcing service companies, legal and tax consultants, bodies responsible for detecting violations of the Road Code, sector and/or category associations; 4. insurance companies and insurance brokers and other entities in the insurance sector such as, for example, claims handlers, insurers, co-insurers, reinsurers; agents, and other channels for acquiring insurance contracts (such as Banks or Car Dealerships); 5. companies specialized in: billing management of fees; assessing financial risks and preventing fraud (in particular databases established to assess credit risk, managed by private entities and accessible by many subjects); debt recovery; credit card issuing companies; management of traffic fines; vehicle recovery; issuance and management of fuel cards; management of administrative or legal procedures involving vehicles; 6. companies that install and manage satellite and/or radiofrequency systems with geolocation functions and/or position detectors on their own but on behalf of BU SRL; 7. Entities that provide electric power supply services and/or charging of electric vehicles; 8. in general, subjects who need access to data for auxiliary purposes to the existing contractual relationship, and/or for the provision of personalized and value-added services or for statistical purposes (examples include but are not limited to: banks and credit institutions, postal entities or other companies providing similar services, security institutes). D) The data collected are stored, with adequate security measures and in compliance with the provisions of the Privacy Code and its annexes, and the Client and/or User can request its deletion at any time, upon written request. The data may be transferred, for the purposes referred to in letters A), B) and Article 4 points c) and d) both to European Union countries and to third countries outside the European Union, to the same categories previously indicated. The subjects belonging to the categories referred to in the previous points 1, 3, 4, 5, 6, 7, 8 process the data as independent “Data Controllers”, unless they are appointed as external Data Processors by BU SRL. The subjects belonging to the aforementioned categories process the data as independent “Data Controllers”. For all the purposes of this notice, the Client's data may also be communicated to controlled, affiliated, participating, and controlling companies of the Client. Due to the close and inextricable instrumental connection between the execution of contracts concluded with the Client by PRIME and the purposes listed in the aforementioned letters A), B) and Article 4 points c) and d), the failure to provide data by the Client and/or User and/or the failure to communicate their data to third parties for the aforementioned purposes will make it impossible to establish a contractual relationship with the Client. The Data Controller is BU SRL. To exercise their rights, the Client and/or User may contact BU SRL, and, in particular, the internal Data Processors.