Pursuant to Article 13 of the Code regarding the protection of personal data (Legislative Decree 30 June 2003, n. 196) we inform you that the processing of personal data provided at the time of conclusion of the rental contract, aimed solely at the correct management and the execution of the contract, as well as the compatible and tax-related operations / activities, will take place at the operational / administrative headquarters, through the use of procedures, including computerized ones, in the ways and within the limits necessary to pursue the aforementioned purposes. The provision of personal data is necessary for the management and execution of the contractual relationship and their failure to indicate it makes it impossible for Wonderland s.a.s. to fulfill the legal obligations as well as those deriving from the contract. Interested parties are granted the rights referred to in Article 7 of the aforementioned code, which we reproduce in its entirety for your convenience.

1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in intelligible form.

2. The interested party has the right to obtain the indication: a) of the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the case of processing carried out with the aid of electronic instruments; d) of the identification data concerning the data controller, data processors and the designated representative pursuant to Article 5, paragraph 2; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or appointees.

3. The interested party has the right to obtain: a) updating, rectification or, when interested, integration of data; b) the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including data which does not need to be kept for the purposes for which the data was collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the event that such fulfillment occurs it proves impossible or involves a manifestly disproportionate use of resources with respect to the protected right.

4. The interested party has the right to object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning him for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication.

5. For each request referred to in paragraph 1, letter c), number 1, the interested party may be asked, if the existence of data concerning him / her is not confirmed, an expense contribution, not exceeding the costs actually incurred, according to the procedures and within the limits established by the regulation referred to in article 33, paragraph 3. 6. The rights referred to in paragraph 1 referring to personal data concerning deceased persons may be exercised by anyone who has an interest. 7. In exercising the rights referred to in paragraph 1, the interested party may grant, in writing, delegation or power of attorney to individuals or associations. 8. The rules on professional secrecy of journalists, limited to the source of the news, remain valid.