Information Notice Pursuant to Article 13 of EU Regulation 679/2016

Pursuant to Article 13 of EU Regulation 679/2016 on privacy and with regard to the personal data you provide to DJUNGLE S.R.L. through the website www.djungle.io, which will be subject to processing,

We hereby inform you of the following:

Personal data (hereinafter referred to in this Policy as "Data" or "Your Data") refers to any information or set of information from which we can identify you, either directly or indirectly, particularly by reference to a specific identification number or code (including, by way of example, name and surname, email address, phone number, etc.).

1) Data Controller

The data controller is DJUNGLE S.R.L., Tax Code and VAT number 11759750018 – Via Modena 55 – 10153 TORINO, Italy.

Djungle has appointed a Data Protection Officer (DPO) who can be contacted via email at: djungle_dpo@digitalcontest.it

2) Purposes of Data Processing

This Privacy Policy covers how we collect and use your Data, for example, when you:

• visit or use our websites, applications, and social media channels aimed at consumers and clients;

• purchase and use our products, services, systems, or applications;

• subscribe to our newsletters;

• provide us with your products or services;

• attend our business events;

• or otherwise interact with us as a consumer, business client, partner, or any other party engaged in a commercial relationship with us.

3) Processing Methods

Your personal data is processed through the operations listed in Article 4(2) of the GDPR: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction. Data processing may be performed in both paper and electronic/automated formats. These operations are carried out in a way that guarantees the logical, physical, and confidentiality security of your data.

4) Nature of the Personal Data

We process your common personal data as necessary to perform the aforementioned activities. For any sensitive or health-related data, we ensure minimization—collecting, using, protecting, and storing such data only when strictly necessary and relevant, and only with your informed and explicit consent.

5) Mandatory or Optional Nature of Data Provision

Except for navigation data, you are free to provide personal data. Failure to do so may prevent access to certain services (e.g., access to restricted site areas or exclusive content).

You may refuse to provide browsing data by disabling cookies, following your browser’s instructions (as per the separate cookie policy). Disabling cookies may negatively impact the browsing experience and site functionality.

6) Data Disclosure and Sharing

We disclose your Data to third parties only in the following cases:

• During events, the participant list (containing only name, surname, and company, excluding other contact info like email or phone) may be shared to ensure proper event funding and commercial success, in line with our legitimate interest. This information may also be published via our website or other communication channels (e.g., printed and online magazines, press releases, news agencies, etc.);

• Upon request from public authorities.

Any such data sharing is done under confidentiality obligations and solely for the purposes for which the data was collected.

7) Data Processing Location and Transfer to Third Countries

Personal data will be managed and stored on servers located within the European Union. No data will be transferred outside the EU.

8) Data Storage Duration

The Controller will store personal data for the following periods:

• 10 years for accounting documentation, as per Art. 2220 of the Italian Civil Code;

• 10 years for marketing purposes, unless consent is withdrawn or data deletion is requested.

9) Data Subject Rights (Art. 15 GDPR)

You have the right to obtain confirmation from the Controller as to whether or not personal data concerning you is being processed, and, if so, access to the following:

• the purposes of the processing;

• the categories of personal data;

• the recipients or categories of recipients to whom the data have been or will be disclosed, especially in third countries or international organizations;

• the expected retention period or the criteria used to determine that period;

• the existence of the right to request correction or deletion of personal data, or restriction of processing, or to object to such processing;

• the right to lodge a complaint with a supervisory authority;

• the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and expected consequences of such processing.

10) Withdrawal of Consent

Pursuant to Article 6 of the GDPR, you may withdraw your consent at any time.

11) Other Data Subject Rights

In accordance with the GDPR, you may exercise your rights under:

• Art. 16 “Right to rectification”

• Art. 17 “Right to erasure”

• Art. 18 “Right to restriction of processing”

• Art. 20 “Right to data portability”

• Art. 21 “Right to object to automated processing”

You can exercise your rights by:

• Sending a registered letter to the Controller at the address above;

• Or by sending a certified email (PEC) to: djunglesrl@pec.it

12) Complaints

You have the right to file a complaint with the supervisory authority of your country of residence.

13) Automated Decision-Making Processes

The Controller does not use any automated decision-making processes that significantly affect data subjects. The only automation used relates to content filtering to offer users information tailored to their interests.

14) Additional Information Not Contained in This Policy

Further information regarding the processing of Personal Data can be requested from the Data Controller using the contact details provided above.

15) Changes to This Privacy Policy

The Controller reserves the right to modify this privacy policy at any time, publishing updates on this page. We encourage you to check this page regularly and take note of the date of the last update. If you do not accept the changes, you should stop using the website and may request the Controller to delete your personal data.

16) Children’s Privacy

Our website is intended for a general audience and does not offer services directed at children. If we discover that a minor has provided us with personal data without parental or guardian consent, we will delete such data immediately.

17) External Links

If pages on our website or sections of our apps contain links to other sites, they are not governed by this Privacy Policy. We recommend reviewing the privacy policies of those external sites to understand how your data is collected, used, and shared.

18) Legal Defense

Your personal data may be used by the Controller in legal proceedings or in the preparatory stages of such proceedings, to defend against misuse of this website or related services by users.

In case of legal summons, judicial orders, or other legal processes; to establish or exercise our legal rights; or to defend against legal claims. You acknowledge that the Controller may be required to disclose your Data upon request by public authorities.

19) Legal References

This privacy notice is provided in compliance with the GDPR 679/2016, Article 10 of Directive 95/46/EC, and Directive 2009/136/EC regarding cookies.