Information on the processing of personal data offered

This information is provided pursuant to Article 13 of Regulation (EU) 2016/679 (the "GDPR") in relation to the application of the company for which you are the contact person (the "Potential Bidder") for the launch of an equity crowdfunding campaign on the portal (the "Portal") managed by Mamacrowd S.r.l, with registered office in Milan, Via Timavo, n. 34, VAT no. 07464370969 ("Mamacrowd").

When filling out the application form, in addition to the data of the Potential Bidder that do not fall within the scope of the GDPR, you will be asked to release some of your personal data and it is for this reason that we would like to illustrate the purposes and methods with which such data are collected and processed, which categories of data are processed, what are the rights that are recognized to you as a data subject and how you can exercise them.

1. Data controller, data processors and persons in charge of processing

Mamacrowd, as identified above, is the data controller of the personal data collected through the application form as a potential bidder.

For certain processing operations, Mamacrowd makes use of employees, agents or collaborators, who are appointed to carry out processing operations under the authority of the Data Controller, as well as partner companies or professional firms located in the territory of the European Union, who are duly appointed as data processors pursuant to art. 28 of the GDPR.

The updated list of the data processors, as well as of the subjects that perform processing operations under the authority of the Data Controller, is kept at the Data Controller's registered office.

2. Categories of personal data

In order to allow you to fill in the application form on behalf of the Potential Bidder, Mamacrowd will need to acquire the following personal data

• personal data, such as name and surname;

• contact data, such as e-mail address and telephone number.

Such data will be processed exclusively for the purposes and within the limits indicated in the following paragraph.

3. Purpose and legal basis of processing

Mamacrowd will process your personal data to allow you to nominate the Potential Bidder for the launch of an equity crowdfunding campaign on the Portal. The provision of the data indicated in paragraph 2 above and their consequent processing are necessary to allow you to submit a candidacy on behalf of the Potential Bidder and to allow him/her to launch an equity crowdfunding campaign through the Portal; failing this, we will not be able to receive the Potential Bidder's candidacy. The processing is based on the need to follow up a pre-contractual measure taken at the request of the Potential Bidder, for which you are the contact person.

4. Period of data retention and duration of processing

Mamacrowd will process the personal data collected to allow you to complete the application form.

If the application is successful, your personal data will be processed by Mamacrowd for the entire duration of the negotiations and the contract that will subsequently be concluded between the Potential Bidder and Mamacrowd. Upon expiration of the contract, the data will be stored in encrypted form for the next 10 years for the fulfillment of legal obligations or for the protection of Mamacrowd.

Should the application be unsuccessful, your personal data will be kept by Mamacrowd, where not necessary for other purposes, for the 12 months following the application.

5. Rights of interested parties

Mamacrowd informs you that, in accordance with current regulations, you may exercise the following rights:

• to ask for and obtain information about the existence of your data / the availability of Mamacrowd and access to such data;

• for data subject to processing by automated systems, \request transfer to another data controller;

• request and obtain the modification and/or correction of your personal data if you believe them to be inaccurate or incomplete;

• ask for and obtain the cancellation - and/or the limitation of the processing - of your personal data if such data or information are not necessary (or no longer necessary) for the above purposes, therefore after the conservation period indicated in the paragraph above.

Such requests can be sent to the Owner by writing to privacy@mamacrowd.com or by registered letter with return receipt addressed to Mamacrowd s.r.l., Via Timavo, n. 34 - 20124 Milano (MI).

We also inform you that, pursuant to the regulations in force, you may lodge any complaints regarding the processing of your personal data with the Guarantor for the protection of personal data.

6. Changes

Mamacrowd reserves the right to modify or simply update the content of this information, in whole or in part. Mamacrowd will inform you of such changes as soon as they are introduced.