PRIVACY NOTICE

1. Notice pursuant to Article 13 of EU Regulation No. 2016/679

Pursuant to Article 13 of EU Regulation No. 2016/679 (hereinafter “GDPR 2016/679”), which provides for the protection of individuals with regard to the processing of personal data, we would like to inform you that the personal data you provide will be processed in compliance with the aforementioned regulation and the confidentiality obligations of “Mareka Srl”.

Mareka Srl is committed to protecting the privacy of its users and customers. This Privacy Notice describes how we collect, use, and protect the personal data you provide through our website www.wallafishing.com.

We invite you to carefully read the following.

2. Data Controller

The data controller of your personal data is MAREKA SRL, with its registered office in Italy, Corso di Porta Vittoria, 17 - CAP 20122 Milan (MI), VAT and Tax Code 13000060965 - Registration Number in the Milan Monza Brianza Lodi Chamber of Commerce. R.E.A. MI-2697534, reachable at the email address info@wallafishing.com.

3. Data Protection Officer (DPO)

The data protection officer (DPO) is Mareka Srl, and can be contacted at the email address info@wallafishing.com.

4. Types of Data Collected

We collect various types of personal data, including:

• Identifying data: Name, surname, shipping and billing address, phone number, email.

• Payment data: Information necessary for purchases (e.g., credit or debit card numbers, processed securely).

• Browsing data: IP address, site usage data, device information, operating system, browser type, cookies.

• Purchase preferences: Information about products purchased or viewed.

5. Purposes of Data Collection

The personal data you provide are necessary for compliance with the GDPR 2016/679. In general, data are processed for the provision of the services available on our website wallafishing.com. We use personal data for the following purposes:

• Order management: To complete, deliver, and invoice your purchases.

• Service communications: To send you notifications related to your orders or account.

• Request management: Technical, commercial inquiries, order status updates, and general information requests.

• Payment management, including fraud prevention when paying by credit/debit card (in this case, data provided during the purchase process will be sent to the responsible party for fraud prevention).

• Direct marketing: With your consent, to send you offers, promotions, and updates via email or other electronic and telematic channels (email, SMS) or traditional means (postal mail, phone). We remind you that the data controller may use data to send you marketing emails about its own products and services similar to those you have already purchased, unless you opt out of this use.

• Profiling: With your consent, to improve your browsing experience and propose commercial offers aligned with your interests. Profiling may be done through third-party cookies. We invite you to read our Cookie Policy.

• Customer assistance: To respond to your inquiries and provide support.

• Legal compliance: To fulfill legal or fiscal obligations.

6. Legal Basis for Processing

The processing of your personal data is based on:

• Contract execution: To manage your order or provide requested services.

• Consent: For marketing and profiling activities (you can withdraw consent at any time).

• Legal obligations: To comply with applicable laws.

• Legitimate interest: To prevent fraud, improve our services, and ensure the security of the site.

7. Sharing Data with Third Parties

Your personal data may be shared with third parties in the following cases:

• Service providers: Such as couriers, payment platforms (e.g., PayPal), hosting providers, or marketing tools, only for performing the requested services.

• Competent authorities: In case of legal obligations or judicial requests.

• All parties (including public authorities) with access to personal data by virtue of legal or administrative provisions.

• Companies or third parties responsible for printing, packaging, shipping, and/or delivery of products purchased through the site.

• Postal offices, couriers, or shipping agents tasked with delivering products purchased through the site.

• Banks and companies managing national or international payment systems used for online payments for products purchased through the site.

• Companies, consultants, or professionals possibly tasked with installing, maintaining, updating, or generally managing the hardware and software of the company or services the company uses for service provision.

• External companies responsible for sending advertising communications on behalf of the company.

• Payment transaction handlers.

• Public and/or private entities, individuals and/or legal entities (legal, administrative, fiscal consultants, judicial offices, Chambers of Commerce, Labor Offices, etc.), if communication is necessary for the fulfillment of legal obligations.

Your data will not be disseminated, except in anonymous and aggregated form for statistical or research purposes.

Third parties will process your data as “data processors”, ensuring protection and security.

8. Data Protection

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, alteration, or disclosure:

• SSL encryption: For all financial transactions.

• Controlled access: Only authorized personnel may access personal data.

9. Processing and Storage Methods

Processing will be carried out both automatically and manually, in compliance with Article 32 of GDPR 2016/679 and Annex B of Legislative Decree 196/2003 (Articles 33-36 of the Code) on security measures, by specifically appointed personnel, in accordance with Article 29 of GDPR 2016/679.

We inform you that, in compliance with the principles of lawfulness, purpose limitation, and data minimization under Article 5 of GDPR 2016/679, with your explicit and voluntary consent at the bottom of this notice, your personal data will be stored for the time necessary to achieve the purposes for which they were collected and processed.

10. Data Retention Period

We retain your personal data for the time strictly necessary for the purposes of processing:

• Order data: Retained for [specific duration] in compliance with tax and accounting obligations.

• Marketing data: Until consent is revoked or for a maximum of [specific duration].

11. Contacts

For any questions regarding this Privacy Notice or to exercise your rights, you can contact us at:

Mareka Srl, Registered Office in Italy

Address: Corso di Porta Vittoria, 17 - CAP 20122 Milano (MI) Italy

Email: info@wallafishing.com

Phone number: +(39) 351 3878045 from Monday to Friday, 9 AM to 6 PM (excluding Saturdays, Sundays, and holidays).

12. Changes to the Privacy Notice

We reserve the right to update this Privacy Notice. Any changes will be communicated to users via our website. We recommend periodically reviewing this page for updates.

13. User Rights

At any time, you may exercise your rights against the data controller under Articles 15 to 22 of the GDPR, which we summarize for your convenience:

• Right of access (Article 15 GDPR): The right to request verification of data use and obtain a copy.

• Right of rectification (Article 16 GDPR): The right to request correction of inaccurate personal data.

• Right to erasure (Article 17 GDPR): The right to request the deletion of data when required by law or if processing is unlawful.

• Right to restriction (Article 18 GDPR): The right to limit processing.

• Notification obligation in case of rectification, erasure, or restriction of data (Article 19 GDPR).

• Right to data portability (Article 20 GDPR): The right to obtain your data in a structured, commonly used, and machine-readable format for transmission to another data controller.

• Right to object (Article 21 GDPR): The right to object to processing when the data should no longer be processed for the original purposes.

• Right not to be subject to automated processing, profiling, or direct marketing (Article 22 GDPR).

You can exercise your rights by contacting us at info@wallafishing.com.

14. Scope of Communication and Dissemination

We also inform you that the collected data will never be disclosed or communicated without your explicit consent, except for communications necessary for fulfilling legal obligations.

15. Transfer of Personal Data

Your data will not be transferred to countries outside the European Union or to non-EU countries.

16. Special Categories of Personal Data

Pursuant to Articles 26 and 27 of Legislative Decree 196/2003 and Articles 9 and 10 of EU Regulation No. 2016/679, you may provide personal data that qualifies as “special categories of personal data,” such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a person, health data, or data.