PRIVACY AND COOKIE NOTICE

In the following data protection and cookie notice ("Data Protection Notice") we inform you about the collection, use and processing of your personal data when you use the website of Autogrill Schweiz AG and its individual companies and branches in Switzerland.

Your trust is important to us. We take your right to data protection seriously and ensure appropriate security and compliance with applicable legal provisions, including, where applicable, the EU General Data Protection Regulation (GDPR) and the Swiss Federal Data Protection Act.

In this data protection declaration we describe the collection, processing and use of your personal data by Autogrill Schweiz AG when you use our website and our contact form, register for our newsletter, take part in competitions and our customer loyalty programs and surveys, as well as when you use restaurant services. or book/reserve hotel services and order our products online or offline. We do not currently use automated individual decision making.

If you give us data about other people, such as: If you provide information such as family members, employees, etc., we will assume that you are authorized to do so and that the relevant data is correct. If you share information about other people with us, you acknowledge this. Please ensure that these individuals have been informed of this Privacy Policy.

1. SCOPE AND PURPOSE OF DATA PROCESSING

1.1 When you visit our website www.loro-di-napoli.ch

When you visit our website www.loro-di-napoli.ch, the following access data - the navigation data - is recorded and deleted by us after 12 months at the latest:

• Your IP addressDate and time of accessThe name and URL of the file accessedThe website from which the access takes placeThe operating system of your computer and the browser used

Your data is collected and processed for the purpose of enabling you to use our website, ensuring system security and stability, enabling the optimization of our website offerings, for statistical purposes and to defend against attacks on our network infrastructure. We process the data based on our legitimate interests in accordance with applicable law.

The transmission of the above-mentioned navigation data is necessary to enable you to use the website.

If you do not give your consent by clicking on the "Decline" button located in the corresponding banner, or if you do not choose at all, the "default settings" will remain and allow navigation on the website without cookies.

We also use cookies when you visit our website; see Section 2 below for further details.

1.2 Contact and communication by email or via our contact form

If you contact us via email, we will collect your email address and other personal information that you provide to us.

If you contact us via the website contact form, you may provide voluntary information that we will collect:

• Your email address, your name, your address and your telephone number

in order to be able to answer your contact request. We do this based on the consent you gave us when you provided us with this data and on the basis of our legitimate interests.

1.3 Newsletter

Your registration is necessary if you would like to subscribe to our newsletter. For this purpose, we require at least the following information for data processing:

• First name and last nameEmail address

By registering, you agree that we may process the data you provide for the regular sending of the newsletter to your address as well as for the statistical evaluation of user behavior and to optimize our newsletter.

This consent is our legal basis for processing your address and other voluntary additional information in accordance with applicable law.

You have the option to revoke your consent to receive the newsletter and the processing of your email address at any time. You will find a corresponding link at the end of each newsletter. Your personal data will be deleted after you unsubscribe from the newsletter.

We commission third parties to create, send and evaluate user behavior for our newsletter and transmit your data for this purpose.

We would also like to point out that we evaluate your user behavior when sending the newsletter. Our newsletter may use web beacons or tracking pixels or similar technical aids for this purpose. We record when you read our newsletter and which links you click on.

We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We pay attention to the proportionality and reliability of the results and take measures against the misuse of these profiles.

To disable tracking pixels, you can turn off the display of images in your email program by default. When the newsletter is deleted, the tracking pixels are also deleted.

1.4 Participation in competitions, loyalty or customer loyalty programs and customer satisfaction surveys

We regularly offer you the opportunity to take part in competitions online or offline as well as in loyalty or customer loyalty programs and carry out customer satisfaction surveys. You have the opportunity to participate voluntarily. If you participate, we will need some or all of the following personal data from you, depending on the competition or customer loyalty program

• Title and/or companyFirst name and last nameEmail addressAddressPhone numberAgeDriving license (category/number)ProfessionInformation about your preferences or experiences with our products and services

We will provide the data that is absolutely necessary. If this information is not provided, participation in competitions or customer loyalty programs or customer satisfaction surveys will not be possible.

In some cases, the data you provide will be passed on to third parties, particularly if we run competitions or customer loyalty programs or customer satisfaction surveys together with partners or suppliers. These partners or suppliers are carefully selected by us and are obliged to follow our instructions. If these partners or suppliers are third parties who pursue their own purposes with the data, these will be announced on a case-by-case basis in connection with competitions and customer loyalty or loyalty programs.

You have the right to withdraw your consent to the processing of your personal data at any time by sending an email to privacy.ch@autogrill.net or via the relevant website. If your revocation occurs before the competition or the customer loyalty program or the customer satisfaction survey has been completed, your revocation also means a revocation of your participation. However, the revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation.

1.5 Reservations and bookings of restaurant or hotel services, ordering goods

It is possible to make reservations and bookings on our website or on the websites of our individual companies, in particular restaurants or hotels.

It is also possible for you to order goods via our online shop.

Depending on the type of service you use, we may need to collect your personal data that we need to make your reservation/booking or process your order.

Depending on the type of service you request, the following information will be required in particular:

• TitleFirst name and last nameEmail addressAddressPhone numberAgeCredit card information

The mandatory information is always specifically marked; additional information is voluntary. We may also ask for health-related information, such as: B. for information about an allergy that we should know.

The legal basis for data processing is the fulfillment of the reservation and/or services requested by you or the performance of the contract in accordance with applicable law.

If you have given us your consent as part of the reservation/booking or ordering process, we may also process the data you provide in order to send you further marketing information, in particular information about special offers or new products, either electronically (via newsletter, Email, SMS, social media) or by post. You have the right to withdraw your consent to this further use of your data to send you marketing information at any time. You will find a corresponding link in all marketing information sent to you in this way.

In any case, your data will be forwarded to our company in Switzerland, which is responsible for providing the services, unless the company has collected the data itself. We may also pass on the personal data to external service providers commissioned to provide the services, such as: B. Reservation service providers, IT service providers, payment service providers to ensure the payment process, including banks.

Due to legal requirements, we are obliged to store contract-relevant data for 10 years.

2. COOKIES

In addition to the data mentioned above, cookies, i.e. small text files, are automatically stored on your computer when you use our websites. Cookies cannot run programs, transmit viruses to your computer and cannot transmit personal data to us.

The purpose of cookies is to make your visit to our website easier and more pleasant. They enable us to better tailor the information, offers and advertising displayed to your individual interests and to recognize your computer when you visit our website again.

We use both session cookies, which are automatically deleted when the browser is closed, and persistent cookies, which are only deleted after a certain period of time. You can influence this via your browser's cookie settings.

Cookies can be used by the website you are visiting (first-party cookies) or by other websites (third-party cookies).

Further details about cookies can be found at the end of this privacy policy.

3. TRANSFER OF DATA TO THIRD PARTIES

We sometimes use external service providers to process your data for the purposes set out in this privacy policy, such as: E.g. payment service providers, reservation service providers, email service providers, cloud service providers, IT service providers, advertising agencies, etc. and to provide our services. These are carefully selected and commissioned by us, are subject to our instructions and are monitored to ensure data security.

In addition, we may pass on your personal data to companies belonging to the Autogrill group and to third parties if

• You have agreed to this;We organize newsletters, competitions, customer loyalty and loyalty programs together with our partners;This is necessary for the processing of a reservation, booking, order or payment or other contractual services on which we work with partners or other service providers;This is necessary is to assert our claims arising from your relationship with Autogrill Schweiz AG and its companies based in Switzerland and to protect our legitimate interests in the event of a dispute; this is necessary for the analysis of your user behavior on our website, or there is a legal obligation to do so

4. INTERNATIONAL TRANSFER OF YOUR PERSONAL DATA

We usually store and process personal data in Switzerland and/or Italy and other EU/EFTA states. However, some of our service providers, partners or other providers commissioned by us as well as other companies in the Autogrill Group to whom we may pass on personal data for the aforementioned purposes are located abroad. Your data can therefore also be processed outside of Switzerland. This includes countries within the European Economic Area as well as other countries abroad. If the recipient of the personal data is located in a country without an adequate level of data protection, e.g. USA, we will use contractual clauses, usually EU standard contractual clauses, or take other measures that are necessary to comply with the applicable Swiss and/or EU data protection regulations. An exception may apply, for example, in court proceedings abroad, but also in cases in which there is an overriding public interest or if the fulfillment of a contract requires the transfer, if you have given your consent or if your data has been made generally available and you are subject to processing have not contradicted.

5. DATA SECURITY

In order to protect your data against manipulation, partial or complete loss and against unauthorized access by third parties, we take appropriate technical and organizational security measures. These are continuously improved in line with technological developments.

Our security measures also include the contractual integration of our employees and contractual partners (e.g. service providers and external service providers, etc.).

6. STORAGE OF YOUR DATA

We only store personal data for as long as is necessary for the purpose of processing or due to legal retention obligations and to the extent that our legitimate interests in documentation and preservation of evidence require it or the storage is technically necessary. The duration varies depending on the type of data.

7. YOUR RIGHTS REGARDING YOUR PERSONAL DATA

You have the following rights in relation to your personal data:

• The right to information about whether and which personal data about you is stored by us and how it is processed. The right to correct incorrect or complete incomplete data. The right to delete your personal data, unless there is a statutory retention requirement or a legally permissible reason , which authorizes us to process the data, is contrary to the right to request the restriction of data processing, the right to object to the processing of your personal data, provided that certain conditions are met, the right to withdraw the consent given to us for data processing if our processing is based on your consent , and the right to data portability, i.e. the right to receive the data you provide in a common file format

To exercise your rights, you can contact us at the following email address: privacy.ch@autogrill.net or dpo@autogrill.net.

In order for us to prevent misuse, we need to identify you (e.g. with a copy of your ID card if identification is not possible otherwise).

Please note that these rights are subject to conditions, exceptions or limitations under applicable data protection law (e.g. to protect third parties or trade secrets). We will inform you accordingly if necessary.

If you reside in a country in the EEA, the United Kingdom or Switzerland, you also have the right to lodge a complaint with a data supervisory authority about our processing of your personal data at any time.

8. RESPONSIBLE/DATA PROTECTION OFFICER

Autogrill Schweiz AG, Neuhardstrasse 31, 4601 Olten, is the operator of this website and the person responsible for the collection, processing and use of your personal data in accordance with applicable laws.

Please contact our data protection officer if you have any concerns or questions about data protection:

Dieter Gruber, Head of the Compensation & Pension Fund Department, dieter.gruber@autogrill.net

Data protection officer: at the email address dpo@autogrill.net

9. OTHER TECHNICAL DETAILS ABOUT COOKIES

This site uses cookies. We use cookies to personalize content, provide social media features and analyze our traffic. We also share information about your use of our site with our social media and analytics partners who may combine it with other information they have received from you or that they have collected from your use of their services.

Cookies are small text files that can be used by websites to make the user's experience more efficient.

This website uses different types of cookies. Some cookies are set by third party services that appear on our sites.

The law states that we may store cookies on your device if they are strictly necessary for the operation of this website or for certain functions. For all other types of cookies we need your consent.

When you access the home page of our website for the first time, you will immediately see a banner where you can enter your consent or refusal to the processing of personal data through cookies or express your own preferences.

You can change or withdraw your consent or your preferences at any time in the Cookie Statement on our website on the Privacy page. You can access your current settings here - for example in the following common browsers

Firefox: https://support.mozilla.org/de/kb/cookies-informationen-websites-auf-ihrem-computer

Chrom: https://support.google.com/chrome/answer/95647?co=GENIE.Platform=Desktop&hl=de

Edge: https://support.microsoft.com/de-de/windows/microsoft-edge-browserdaten-und-datenschutz-bb8174ba-9d73-dcf2-9b4a-c582b4e640dd

Explorer: https://support.microsoft.com/de-de/windows/löschen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac