<p>The Chinese Visa Application Service Center accepts the consensus signed in original (Italian version only). The English and the Chinese versions can be used for consultation only.</p><p>PRIVACY PROTECTION Information pursuant to art. 13 of Privacy Code D. Lgs. 30 June 2003, n. 196 ======CHINA BRIGDE (ITALY) S.R.L. - the Company - fully respects your right to privacy with regard to the processing of your data. Any data and/or information supplied by You will be 'treated with the utmost security and confidentiality', in accordance with the national laws and Community laws and/or international law in the field. CHINA BRIGDE (ITALY) S.R.L. will use Your personal information only to provide the requested service and, in any case, for legitimate purposes. We Will not disclose Your information outside of our Company without your consent, except in cases of requests received by public authorities (whether - as an example - judicial; regulatory and / or tax) or in case of legal claims, even contentious nature. If, at any time, You decide to leave Your personal information no more in our use, or if the personal information is not updated, kindly let us know, and we will delete it or will correct the information as soon as possible (where not already implemented). Subject to the foregoing, we wish to inform You, in accordance with the above legislation, the following information: Source of personal data Your personal data in our possession and/or subject of future assignment are provided directly by the interested party or from third parties entitled (such as when other legitimate parties provide information in relation to claims made in the name and on behalf of those). The personal data, in particular, are inherent to the reports on the fulfilment of tasks of administrative practices and related activities; the data itself is covered by our data processing, and/or manuals, as defined by art. 4 l. a) D.Lgs. n. 196 del 30 june 2003, in accordance to principle of fairness, legality and transparency for the purposes exposed below. Aims of treatment  "Purposes related to the services requested" i. carry out the request of the services related to administrative practices concerning the request’s receipt, education and delivery with the relevant documents required to, consequential, obtain the competent Consular Authority's resolution, of entry visas on the grounds provided by the international law and Chinese Law (a.e. tourism, study, work; family visits; business/business etc..) the issue of which is exclusively competence of the entities authorized by the Government of the People's Republic of China; ii. processing of contractual and pre-contractual documents; iii. the performance of obligations under applicable laws or regulations; iv. the protection of CHINA BRIGDE (ITALY) S.R.L. rights in court;</p><p> "Purposes strictly connected and instrumental to the execution of the services and the management of relationships with customers/interested"</p><p>1 | P a g e The Chinese Visa Application Service Center accepts the consensus signed in original (Italian version only). The English and the Chinese versions can be used for consultation only.</p><p> v. relating to the communication of data to subjects which are interrelate with the company for the proper execution of administrative procedures (a.e. Consulate General of the People's Republic of China in Milan) Methods of treatment The data will be treated primarily with electronic instruments and computer and stored both on computer and/or electronic media and paper and any other kind of support, in compliance with the minimum security measures under the Technical Regulations on minimum security measures, Annex B of the Privacy Code. With reference to the processing of identification data as part of the services rendered by CHINA BRIGDE (ITALY) S.R.L., the production and the collection of copies of identification documents can occur in accordance with the application of existing legislation, or, at least, under certain assumptions need to be able to demonstrate that they have identified as necessarily accurate manner and uniquely the person concerned. Mandatory and/or voluntary consent. Revocation and changeability of consent. All the data required for the purposes referred sub (i; ii: iii e iv) are mandatory required, in order to ensure a correct supply of the service or services requested. We collect and process Your personal data, as data where the processing is required by law (art. 24 l. a) D.Lgs. 196/2003) that is needed to carry out the tasks given to us (art. 24 l. b) D.Lgs. 196/2003), or from public registers, lists, acts or documents available to anyone (art. 24 l. c) D.Lgs. 196/2003) falling outside the exclusion of the request for consent pursuant to art. 24 D.Lgs. 196/2003. The provision of data for the purposes mentioned sub (v) – purposes strictly related and instrumental to the execution of services and management of relationships with customers/interested – it is not mandatory, but the refusal to supply may make impossible to provide the service required by the person concerned. Subject to the provisions for cases of mandatory consent and exemptions from the manifestation of the same, in all other cases, the agreement is optional and can be, subsequently, cancelled and/or modified by notice delivered to the company (Data Controller) and/or Data Processor. In particular, as regards the "sensitive" data is provided as hereinafter specially highlighted. Sensitive Data For the formulation of the request and in the services rendered by CHINA BRIGDE (ITALY) S.R.L., they can be communicated sensitive data as defined by art. 4 D.Lgs.196/2003 (i.e. the personal data that are directed to state or can reveal the state of health - including previous illnesses or the person concerned passed -, sex life, that is inherent to racial and ethnic origin, religious convictions, philosophical or other , political opinions, membership of parties, unions, associations, organizations of religious, philosophical, political or trade union). In such cases, the Bank shall proceed in such operations only with the written consent of the person concerned. Consequences of refusal to provide data and consent In case of refusal to disclose one or more required fields you will not have access to the service or services requested.</p><p>2 | P a g e The Chinese Visa Application Service Center accepts the consensus signed in original (Italian version only). The English and the Chinese versions can be used for consultation only.</p><p>In case of refusal to issue the consent of the data referred sub (from i to iv included), consent is required mandatorily and You do not need the manifestation of consent as strictly relevant for the execution of the requested service. As far as the strictly connected and instrumental purposes and the implementation of services and customer relationship management are concerned (as stated in the article v), the consent is necessary in order to implement the service required. If the consent is not provided, then the services required shall not be implemented.</p><p>Persons to whom the data may be disclosed personal data Personal data is communicated to the Embassy of the People's Republic of China in the Republic of Italy and the Consulate General of the People's Republic of China in Milan Personal data relating to the treatment in question may also be disclosed to persons who have been granted the right and interest to access your personal information by law or secondary legislation and/or Community. It can also be disclosed to the consultants in the fields of tax accounting, administrative and social security, computer science and computer technology, banks and financial institutions as well as subjects appointed to protect the interests of our company in jurisdictional, administrative and extra-judicial and the collect receivables and bodies in charge of shipments and the company control. They will finally be disclosed to our correspondents in order to provide a proper service. For a complete and updated list of the categories and the names of persons to whom the data may be disclosed, please also refer to a "current list" available at the headquarters of the "data controller".</p><p>Duration of treatment The period of treatment and storage of personal data is strictly limited to what is relevant for the purposes for which the service is required and determined according to the law provisions and / or regulations, from time to time, applicable.</p><p>Data disclosure and Data Communication (to a Non UE Country) Personal data are subject to communication and aren’t subject to a general disclosure/widespread. it should be noted that the process and the transfer of the personal data, during the execution of the purposes for the requested service, shall be communicated to a non-EU country (Art. 43 D. Lgs. N. 196/2003 ), which is the People’s Republic of China. The Data Treatment, to the extent applicable and in accordance with the authorization procedures as referred to the Visa entry request for a Non-EU Country, will be in full compliance with the Laws of that foreign State and in accordance with specific instructions as given to the Authorities of that country that the processing of the communicated data, shall be submitted to treatment only on behalf of Data Subjects and in accordance with legislation on data protection for the duration of the treatment. In particular, the data may be disclosed to third parties (Non Ue too) as belonging to the following categories: • suppliers of services for the IT system used and telecommunications networks (including email) of CHINA BRIGDE (ITALY) S.R.L.; • persons who perform activities in customer service (i.e. Call center, help desk, etc.). • persons companies providing assistance to delivery services(i.e DHL) ;</p><p>3 | P a g e The Chinese Visa Application Service Center accepts the consensus signed in original (Italian version only). The English and the Chinese versions can be used for consultation only.</p><p>• persons providing control, review, and certification of the activities performed by CHINA BRIGDE (ITALY) S.R.L.; • competent Authorities for the fulfillment of the law obligations and / or provisions, on request; The subjects belonging to the above categories are qualified as Data Supervisor or independ Data Controller. The list of these subjects is constantly updated and available at the premises of the Data Controller. Any further communication will be subject to your explicit consent as Data Subject.</p><p>Rights of the Party Interested Concerning to the Personal Data Treatment, according to the art. 7 (Right of access to personal data and other rights) Privacy Code, the Party interested has the right to: 1. obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in intelligible form; 2. obtain information about: a) origin of personal data; b) the purposes and methods of treatment; c) the logic applied in case of processing with the aid of electronic instruments; d) the recipients or categories of recipients to whom the data may be communicated or who can learn about them as appointed representative in the State, managers or agents. The Party interested has the right to obtain: a) updating, rectification or, when interested, integration of data; b) cancellation, anonymization or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed. The party interested has the right to oppose, in whole or in part: a) for legitimate reasons the processing of personal data, pertinent for collection purposes; b) to the processing of personal data for purposes of sending advertising materials or direct selling or for carrying out market research or commercial communication.</p><p>Data Controller The data controller is: CHINA BRIGDE (ITALY) S.R.L. with offices in Via . Regina Margherita 279, Roma, partita iva. 10710251009, telefono. 0283201385, email: [email protected], recorded to CCIAA Registro delle Imprese della Provincia di Roma.</p><p>Data Supervisor Data Supervisor is Mr/Mrs. Liu Feng regarding to Milan’s Office and Mr/Mrs. Li Xia regarding to Roma’s Office. To exercise Your rights under art. 7 of the Privacy Code, as listed above, included the inherent data protection, the party interested must make a written request to CHINA BRIGDE (ITALY) S.R.L., Via Federico Confalonieri 29, Milano, mail: [email protected] to the K/A of the Data Supervisor. </p><p>4 | P a g e The Chinese Visa Application Service Center accepts the consensus signed in original (Italian version only). The English and the Chinese versions can be used for consultation only.</p><p>The present disclosure, in the updated format, is also available in the premises of the company and published at the web: http://www.visaforchina.org/MIL_IT/ (Milan), http://www.visaforchina.org/ROM_IT/ (Rome). Taking note of the above and published on the company website CHINABRIDGE SRL, with particular regard to the rights recognized me from art. 7 d.lgs n. 196/2003, I give my consent:  to treatment, including the communication of data, by the Owner and/or the Data Processor same for the purposes and within the limits indicated in the foregoing statement, attached to the application form for a visa for the Republic of China; also  consent the possible transfer of data abroad in particular to Non UE Country and especially to the People's Republic of China, within the limits indicated in this document, solely for the purposes referred to therein.  I Agree  I do not Agree Read, confirmed and signed (Place) ...... (Date) lì ...... Interested Party Signature...... (The parent or guardian shall sign on behalf of a minor under 18 years of age)  For the purposes referred to "Purposes strictly connected and instrumental to the execution of the services and the management of relationships with customers/interested" (cfr. finality sub v)  I Agree  I do not Agree Read, confirmed and signed (Place) ...... (Date) lì ...... Interested Party Signature...... (The parent or guardian shall sign on behalf of a minor under 18 years of age) For "Sensitive Data"  I agree  I do not Agree The processing of "sensitive data", their communication to the subjects belonging to the categories indicated and their related treatments, knowing that, in the absence of such consent, cannot be carried out and/or services that require these processes and/or communications. Read, confirmed and signed (Place) ...... (Date) lì ...... Interested Party Signature...... (The parent or guardian shall sign on behalf of a minor under 18 years of age)</p><p>5 | P a g e</p>