Triboo Digitale S.r.l., sole-member company with legal offices in Milan, Viale Sarca 336, Edificio 16, Italy, shared capital euro 3.000.000,00 in, REA MI 1901658, VAT code and Registry of Businesses of Milan Monza Brianza and Lodi number 02912880966 - company subject to management and coordination activity of the parent company Triboo S.p.A., legal offices in Milan, Viale Sarca 336, Edificio 16, Italy, shared capital euro 28.740.210,00 in, REA MI 1906661, VAT code and Registry of Businesses of Milan Monza Brianza and Lodi number 02387250307

PRIVACY INFORMATION NOTE - Art. 13 Leg. Decree 196/2003

If you wish to complete the registration process and/or use the website services offered to those accessing the reserved areas (e.g make a purchase and instrumental activities to the same, including operations relating to administrative and tax obligations, sending of newsletters (where requested), please complete the fields below and accept this Information Note. Conferral of data pursuant to the registration form and/or the purchase of products is not compulsory. However, we must inform you that the aforementioned conferral is required to process your order and complete the contract formalities. Your refusal may make it impossible for us to complete the product purchase procedure and/or provide the requested services. All collected personal data shall be processed mainly using electronic systems and, only very occasionally, paper based systems.

The Data Controllers are:

Roberto Cavalli S.p.A., with registered office in via Mascani 14 - 20122, MIlan, Tax Code and VAT no. 7641940965, and Business Register no. 07641940965 – REA MI-1973431, ("Roberto Cavalli"); and

Triboo Digitale S.r.l. with registered office in Viale Sarca, 336 - 20126, Milan (MI) Italy, tax code, VAT number and Milan Business Register no. 02912880966, Share capital € 42,678.00, which is only responsible for managing the sales and transactions on then website, for instance, management of product orders, sales and deliveries, return and warranty management and all other activities related to the sales of products via the website.

To conduct such activities functional to the sale of products via the website, Triboo Digitale processes, in its capacity as co-Data Controller, and in accordance with the applicable privacy code, user data such as name and surname, residence and information on credit cards used by users (such as first and last name of the card holder, card number, expiration date, security code.

Please also be informed that Legislative Decree 196/2003 has a particular regime for the processing of sensitive data, i.e. all personal data that reveals the racial and ethnical origin, religious, philosophical or other beliefs, political opinions, memberships with political parties, trade unions, religious, philosophical or trade union associations or organizations, health conditions and sexual orientation; This data may only be processed after receiving the written consent of the Data Subject. In this regard, some purchases made in the Wellness & Health section may reveal information on the health conditions of the purchaser. In light of the above, if you make any purchases of such products, you may be requested to grant specific consent to allow us to process the data and complete the contract formalities.

Roberto Cavalli may also use your personal data to send emails advertising its products and services, similar to those purchases, unless you refuse this option by exercising your right of opposition as per the procedures below (art. 130 paragraph 4 Legislative Decree 196/2003.

Moreover, where express consent is granted, your personal data may also be processed for marketing purposes such as the mailing of promotional material on products and services different to those already purchased, news, promotions, and also third-party communications from our commercial partners.

Transfer of your personal data outside the European Union is not contemplated. Should the same become necessary, the Data Controller shall be accountable for requesting your specific consent.

This does not include the data relating to your Credit card, which is excluded for any purposes other than checking the existence of such payment means, the payment received and the management of payments further to claim management and contentious procedures. To this purpose, the data will also be processed by the Bank that provides the online payment service, further to the entity that issued the credit card you use to confirm your order.

At present, one of the Chief Data Processors designated to the processing of your personal data is Arcese Logistic S.r.l., who will process the data required to ship the merchandise and manage any returns you may make.Please contact the Customer Care service for a complete list of those designated to processing your Personal Data or send an e-mail to the following address privacy@triboo.it for Roberto Cavalli and privacy@triboo.it for Triboo Digitale.

The categories of those designated to processing the data for the aforementioned purposes, include staff assigned to website management, administration, customer care services, marketing activities (where consent is granted), IT systems and third parties who process data on our behalf (such as, for instance, IT service maintenance, couriers and carriers, legal advisers, enterprises assigned to the realisation and/or management of promotional campaigns, etc.); they can also be disclosed to the public entities authorised to receive the same.

Pursuant to art. 7 of L.Decree. 196/2003, you are entitled to obtain the updating, rectification or integration, erasure and anonymisation of the data. You can also oppose the processing of your personal data for marketing purposes or for sending commercial communications, by contacting Roberto Cavalli at the above indicated mailing addresses or by sending an email to privacy@triboo.it. The same procedures can be used to request the complete updated list of the Chief Data Processors.

INFORMATION NOTICE FOR THOSE INTERESTED IN THE COUTURE SERVICE

AND REQUEST INFORMATION USING THE CONTACT FORM

PERSONAL DATA PROTECTION CODE

UNDER ART. 13 OF LEGISLATIVE DECREE NO. 196 OF 30.06.2003

In accordance with the requirements and provisions of art. 13 of Legislative Decree no. 196 of 30 June 2003, the company Roberto Cavalli S.p.A., with registered office in (20122) Milan, in Piazza San Babila no. 3, in its capacity of Data Controller, hereby informs all Data Subjects on the scope and purposes of the processing of the collected personal data, the relative communication and dissemination, and the nature of their conferral.

PURPOSE OF THE PROCESSING

The personal, identifying data (name, surname, email and any other personal information provided by the Data Subject on the form) and electronic data collected from the DS and provided spontaneously by the same via the section of the corporate website called "contact us if you are interested in the COUTURE SERVICE", subject of the processing, are used by the Data Controller to correctly process the request forwarded by the DS and reply to the same.

Qualora l’interessato presti idoneo consenso, i suddetti dati potranno essere trattati per attività di marketing e comunicazione commerciale anche attraverso telefono, sms, mms, posta cartacea ed elettronica del titolare.

If the DS grants specific consent, the above-mentioned data may be processed for marketing activities and commercial communications of the Data Controller, also by telephone, sms, mms, printed and electronic mail.

PROCESSING OPERATIONS

Personal data is processed using electronic and telematic systems by specifically designated internal employees. In particular, the interested parties will be contacted by the Data Controller's VIP and Couture service managers. Data is stored in electronic archives whose security levels comply with the minimum measures endorsed by the legislature in force.

COMMUNICATION AND DISSEMINATION

The collected data will not be disseminated, sold or exchanged with third-parties without the express consent of the Data Subject, except for any communications to authorised third parties - committed to such confidentiality or appointed as Chief Data Processors under art. 29 of Legislative Decree no. 196/2003 - (e.g. IT support firms) and only where necessary to fulfil the purpose indicated in this Information Notice. Personal data may be communicated to competent authorities as required by the laws in force.

With the optional consent of the Data Subject, personal data may also be communicated to the companies in the Group that the Data Controller belongs to, both in Italy and abroad, for promotional and advertising purposes of the same.

RETENTION TIMES

Personal data is retained for the time required to interact with the Data Subject and exchange information.

RIGHTS OF THE DATA SUBJECT

You are entitled to execute your rights as illustrated in Arts. 7, 8, 9 and 10 of Legislative Decree no. 196 of June 30, 2003 by contacting the Data Processer. In particular, according to art. 7 you are entitled to obtain confirmation as to whether or not personal data concerning you exists, regardless of their being already recorded, and communication of such data in an intelligible form. The Data Subject has the right to obtain indications on: a) to receive information on the origin of the personal data; b) on the purpose and processing methods; c) on the logic used in the case where the data is processed using electronic equipment; d) on the personal data of the Controller, the persons in charge and the designated representatives pursuant to Art, 5 paragraph 2; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity as Designated Representatives for the Country or Persons in Charge of Processing. The Data Subject has the right to obtain: a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. The Data Subject is entitled to oppose, totally or partially: a) processing of personal data, for legitimate reasons, despite them being relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

DATA CONTROLLER, CHIEF DATA PROCESSOR AND PRIVACY COMMUNICATIONS

privacy@robertocavalli.com.

CONFERRAL OF DATA

The conferral of data is optional; however lack of consent to provide the same information will make it impossible for the Data Controller to process the requests submitted.

Conferral of personal data for marketing purposes and communications to third-parties for the above indicated marketing purposes, is optional and will not compromise the processing of the main request.

CONSENT

Pursuant to art. 23 of Legislative Decree no. 196/2003 and the correct processing of the request submitted via the "Contact Us" section of the corporate website, consent to the processing of the above data is necessary as the same are collected outside of any previous contractual agreements

Pursuant to art. 23 of Legislative Decree no. 196/2003, the consent to the processing of personal data is necessary for the marketing purposes illustrated in the "Purpose of the Processing" section. Please note, in accordance with Provision no. 330 of 4 July 2013 issued by the Guarantor for the Protection of Personal Data, that the consent granted for automated procedures also extends to traditional procedures. Without prejudice to the rights already illustrated in the Rights of the Data Subject" paragraph in this Information Notice.

Pursuant to art. 23 of Legislative Decree no. 196/2003 consent is required for the communication of the data to third parties for marketing purposes pursuant to the latter.

Please note that your consent is deemed freely granted when you tick the "I grant my consent" box.

INFORMATION NOTICE FOR THOSE REQUESTING INFORMATION USING THE CONTACT FORM

Personal Data Protection Code

UNDER ART. 13 of Legislative Decree no. 196 of 30.06.2003

PURPOSE OF THE PROCESSING

The personal, identifying data (name, surname, email and telephone number etc.) and electronic data collected from the Data Subjects and provided spontaneously by the same via the section of the corporate website called "contact us”, subject of the processing, are used by the Data Controller to correctly process the request forwarded by the DS and, where necessary, reply to the same.

PROCESSING OPERATIONS

Personal data is processed using electronic and telematic systems by specifically designated internal employees. Data is stored in electronic archives whose security levels comply with the minimum measures endorsed by the legislature in force.

COMMUNICATION AND DISSEMINATION

RETENTION TIMES

Personal data is retained for the time required to interact with the Data Subject and exchange information.

RIGHTS OF THE DATA SUBJECT

DATA CONTROLLER, CHIEF DATA PROCESSOR AND PRIVACY COMMUNICATIONS

The Data Controller is Roberto Cavalli S.p.A., with registered office in (20122) Milano (MI), in Piazza San Babila no. 3. Pursuant to art. 29 of Legislative Decree 196/2003 the Data Controller has appointed Triboo Digitale S.r.l. with registered office in Viale Sarca, 336 - 20126, Milan (MI) Italy, as the Chief Data Processor in charge of the processing of personal data for purposes related to the managing the sales and transactions on the websites www.robertocavalli.com and www.robertocavalli.it, for instance, the management of product orders, sales and deliveries, returns and warranty management and all other activities related to the sales of products via the Sites, in addition to the activities related to the creation, ordinary and extraordinary management, and maintenance of the Sites themselves. An updated list of the Chief Data Processors, appointed by the Data Controller under art. 29 of Legislative Decree no. 196/2003, is available at the registered office of the latter. For all communication under art. 7 et seq. of Legislative Decree no. 196/2003 as amended, please contact the Data Controller at privacy@robertocavalli.com.

CONFERRAL OF DATA

The conferral of data is optional; however lack of consent to provide the same information will make it impossible for the Data Controller to process the requests submitted.

CONSENT

Please note that your consent is deemed freely granted when you tick the "I grant my consent" box.

Consent for the processing of my personal data:

□ On reading the information notice under art. 23 of Legislative Decree no. 196/03, I hereby grant my consent for the data I have conferred to be used to process my request and receive a response from the same Data Controller Roberto Cavalli S.p.A.

INFORMATION NOTICE FOR USER WEBSITE REGISTRATION

Personal Data Protection Code

UNDER ART. 13 of Legislative Decree no. 196 of 30.06.2003

Under the provisions of art. 13 of Legislative Decree no. 196/2003 as amended, the company Roberto Cavalli S.p.A., with registered office in (20122) Milan, in Piazza San Babila no. 3, in its capacity as Data Controller, hereby informs all users requesting registration on the www.robertocavalli.com and www.robertocavalli.it websites, in their capacity as Data Subjects on the scope and purposes of the processing of the collected personal data, the relative communication and dissemination, and the nature of their conferral.

PURPOSE OF THE PROCESSING

1) Registration: the personal data and, more specifically, the data indicated on the registration form (name, surname, email address, telephone number, etc.) related to the Data Subject and provided voluntarily by the same during registration on the Roberto Cavalli S.p.A site, are processed pursuant to the request of the Data Subject to create a personal account and exploit the services provided by the Data Controller via the site and access the online portal. It should be noted that such data may also be used for purposes referred to as “soft spam”.

2) Access to services via the portal: the personal data acquired, including the computer related data (e.g. the IP address), are processed to allow access to the services provided by the Data Controller via the corporate website and reserved to registered users only; i.e. by way of example only, online shopping and payments as illustrated in full in the online platform Terms and Conditions available via the following link.

3) Sending of advertising materials, direct marketing, statistics and market research: when consent is granted, personal data, such as email address and telephone number, are also processed to send information messages and commercial and promotional communications on the activities and services provided by the Data Controller, via automated mechanisms (such as email and text messages) and also traditional methods (such as telephone contact with or without and operator), in full compliance with the principles of fairness and lawfulness and any provisions foreseen by the laws in force.

In any case, processing shall take place in accordance with the principle of fairness and lawfulness and the provisions of the laws in force.

PROCESSING OPERATIONS

The processed personal data is sent to the Data Controller's server or servers managed by third parties (appointed for the purpose as Chief Data Processors under art. 29 of Legislative Decree no. 196/2003 as amended). Personal data is processed using electronic and telematic systems by specifically designated officers and/or chief data processors inside and outside the company. Data is stored in electronic archives whose security levels comply with the minimum measures endorsed by the legislature in force.

In particular, for the purpose of sending advertising materials, direct marketing, statistics and market research, commercial and promotional communications on the activities and services provided by the Data Controller the same shall take place (again according to the provision of art. 130m par. 1 and 2 of Legislative Decree no. 196/2003 as amended) by means of:

- automated contact methods, using automated calling or call communication means without the intervention of an operator, email, facsimile, MMS- or SMS-type messages or other means for the purposes referred to therein;

- traditional methods (such as mailing of hard copies and/or operator controlled calls).

COMMUNICATION AND DISSEMINATION

No Personal data collected will be disseminated, sold, exchanged or communicated to third-parties other than the Data Controller without the express consent of the Data Subject. Dissemination to third-parties, other than the Data Controller, the Chief Data Processors, inside and also outside the corporate structure, and the Designated Officers assigned to the relative processing and appoint under arts. 29 and 30 of Legislative Decree no. 196/2003 as amended, is foreseen, where necessary to fulfil the above illustrated scope and purposes, to: individuals and third-party enterprises providing technical and IT support, marketing companies, who undertake to pursue the illustrated scopes and purposes in a correct and transparent manner. In any case, processing by third-parties shall only take place in accordance with the principle of fairness and lawfulness and the provisions of the laws in force.

RETENTION TIMES

Data shall be retained for the time required to process the purpose of the account created by the Data Subject to access the services provided by the Data Controller via the corporate website. In any case, the data shall be retained until the Data Subject requests the cancellation of the account, or until the same is closed by the Data Controller under the portal terms and conditions.

As regards the processing for purposes related to the sending of commercial and promotional communications on the Data Controller's services and the sending of information messages regarding its business activities, the data will be retained for a maximum of two years from first contact, unless the Data Subject opposes the processing of the same. The Data Subject may oppose the processing independently for one or the other sending methods (traditional or automatic), in particular, for telephone numbers included in phone books, opposition of such processing can be effected by referring to the Public Register of Oppositions, whilst for email addresses, opposition can be effected by cancellation via a specific link. In any case, the cancellation can be requested by email at the following address privacy@robertocavalli.com.

RIGHTS OF THE DATA SUBJECT

The Data Subject is entitled to execute his rights as illustrated in Arts. 7, 8, 9 and 10 of Legislative Decree no. 196/2003 as amended, by contacting the Data Processor. In particular, according to art. 7 you are entitled to obtain confirmation as to whether or not personal data concerning you exists, regardless of their being already recorded, and communication of such data in an intelligible form. The Data Subject has the right to obtain indications: a) on the origin of the personal data; b) on the purpose and processing methods; c) on the logic used in the case where the data is processed using electronic equipment; d) on the personal data of the Data Controller, the Chief Data Processors and the designated representative pursuant to Art, 5 paragraph 2; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity as designated representatives for the Country, Chief Data Processors or designated officers. The Data Subject has the right to obtain: a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. The Data Subject is entitled to oppose, totally or partially: a) processing of personal data, for legitimate reasons, despite them being relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

DATA CONTROLLER, CHIEF DATA PROCESSOR AND PRIVACY COMMUNICATIONS

The Data Controller is Roberto Cavalli S.p.A., with registered office in (20122) Milano (MI), in Piazza San Babila no. 3. Pursuant to art. 29 of Legislative Decree 196/2003 the Data Controller has appointed Triboo Digitale S.r.l. with registered office in Viale Sarca, 336 - 20126, Milan (MI) Italy, as the Chief Data Processor in charge of the processing of personal data for purposes related to the managing the sales and transactions on the website www.robertocavalli.com and www.robertocavalli.it, for instance, the management of product orders, sales and deliveries, returns and warranty management and all other activities related to the sales of products via the Sites, in addition to the activities related to the creation, ordinary and extraordinary management, and maintenance of the Sites themselves. An updated list of the Chief Data Processors, appointed by the Data Controller under art. 29 of Legislative Decree no. 196/2003, is available at the registered office of the latter. For all communication under art. 7 et seq. of Legislative Decree no. 196/2003 as amended, please contact the Data Controller at privacy@robertocavalli.com.

CONFERRAL OF DATA

Conferral of data is optional, but essential, as refusal to such conferral will make it impossible for the Data Controller to create the personal account required to provide the services provided by the latter via the corporate website and reserved to registered users.

As regards the conferral of data for marketing purposes, this is optional and refusal to such conferral will not effect or compromise the main processing operations, although it will be impossible for the Data Processor to perform the ancillary operations.

CONSENT

Under art. 23 and 24 of Legislative Decree no. 196/2003 as amended, the consent to the processing of personal data to create a personal account so as to exploit the services provided by the Data Controller via the corporate website reserved to registered users, is not required as the same is collected to process the obligations arising from the contract that the Data Subject has entered into.

Under art. 23 and 24 of Legislative Decree no. 196/2003 as amended, the consent to the processing of personal data for the sending of commercial and promotional communications on the services provided by the Data Controller and the sending of information messages regarding the activities of the same, is however required. Under the Guidelines regarding promotional and anti-spam activities, the Guarantor for the protection of personal data clearly states that no consent is required for what is referred to as “soft spam”.

Please note that your consent is deemed freely granted when you tick the "I grant my consent" boxes.

Woman

Ready to wear

Bags and Accessories

Shoes

Fragrances

NEW ARRIVALS

Man

Ready to wear

Bags and Accessories

Shoes

Fragrances

BRANDS

ROBERTO CAVALLI

JUST CAVALLI

ROBERTO CAVALLI COUTURE

CAVALLI CLASS

RC JUNIOR

RC HOME

CAVALLI CLUB

CAVALLI CAFFE'

TENUTA DEGLI DEI

RC VODKA

RC CHOCOLATE

Woman

Ready to wear

Bags and Accessories

Shoes

Fragrances

NEW ARRIVALS

Man

Ready to wear

Bags and Accessories

Shoes

Fragrances

BRANDS

ROBERTO CAVALLI

JUST CAVALLI

ROBERTO CAVALLI COUTURE

CAVALLI CLASS

RC JUNIOR

RC HOME

CAVALLI CLUB

CAVALLI CAFFE'

TENUTA DEGLI DEI

RC VODKA

RC CHOCOLATE

SMALL POCHETTE IN AYERS PYTHON PRINT WITH STUD LOGO

LEATHER DOCUMENT HOLDER

LEATHER BACKPACK WITH STUDS

MEDIUM POCHETTE WITH STUDS

MEDIUM POCHETTE WITH STUDS

LEATHER SHOULDER BAG WITH “TECHNO SCALE” PRINT

LEATHER DOCUMENT BAG

LEATHER BIFOLD WALLET WITH ROBERTO CAVALLI LOGO

LEATHER BACKPACK WITH ROBERTO CAVALLI LOGO

LEATHER BIFOLD WALLET WITH ZIP AND ROBERTO CAVALLI LOGO

LEATHER BACKPACK WITH “TECHNO SCALE” PRINT

HIDE BELT WITH ROBERTO CAVALLI LOGO BUCKLE

HIDE BELT WITH TIGER’S EYE BUCKLE

HIDE BELT WITH ROBERTO CAVALLI LOGO BUCKLE

METAL ROBERTO CAVALLI KEY RING

METAL CUFFLINKS WITH ROBERTO CAVALLI LOGO AND TORCHON LACE FRAME

SNAKE RING WITH SWAROVSKI

METAL HORN BRACELET WITH SWAROVSKI

PYTHON PRINT LEATHER BRACELET WITH SWAROVSKI METAL DETAIL

HORN-SHAPED ENAMELLED METAL CUFFLINKS WITH CRYSTALS

Products

Legal Area

Customer Care