I - Information on the Website's Privacy Policy

1. This section contains information on how the website https://sounded.com is managed with regard to the processing of user data.

2. This information is provided to Sounded users at https://sounded.com in accordance with Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as in accordance with Italian legislation on the protection of personal data, Legislative Decree 196/2003 and subsequent amendments, in particular those introduced by Legislative Decree 101/2018.

3. The information is provided solely for https://sounded.com and does not apply to other websites that users may access via the links contained therein.

4. The purpose of this document is to provide information regarding the methods, timing, and nature of the information that data controllers are required to provide to users when they connect to the website https://sounded.com, regardless of the purpose of the connection itself, in accordance with European legislation.

5. This information may be subject to change due to the introduction of new regulations in this area, which is why users are encouraged to check this page regularly.

6. If the user is under 16 years of age, they must, pursuant to Art. 8, para. 1 of Regulation (EU) 2016/679, legitimize their consent through the permission of their parents or legal guardian.

II - Data Processing

Data Controller

1. The data controller is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. They are also responsible for data security measures.

2. With regard to this website https://sounded.com, the data controller is: Sounded, with registered office at Werinherstraße 3, 81541 Munich, Germany. For any clarification or to exercise their rights, users may contact the data controller at the following email address: privacy@sounded.com

Data Processor

1. Pursuant to Article 28 of EU Regulation No. 2016/679, the data processor is the natural or legal person, public authority, agency, or other body that processes personal data on behalf of the data controller.

2. The data is stored on the servers of the hosting company Amazon AWS, through which the website https://sounded.com was created.

Data Protection Officer (DPO)

1. The Data Protection Officer is a person designated under Article 37 of Regulation (EU) No. 2016/679. He or she cooperates with the data protection authority and serves as the point of contact, including for data subjects, for questions related to the processing of personal data (Articles 38 and 39 of Regulation (EU) 2016/679) as well as for coordinating the implementation and maintenance of records of processing activities (Article 30 of Regulation (EU) 2016/679).

2. As provided for in Article 37(7) of Regulation (EU) No. 2016/679, the Data Protection Officer’s email address is: dpo@sounded.com

Place of Data Processing

1. Data is processed within the European Union. In the event that Sounded uses services in third countries, the company will verify in advance whether these countries provide adequate safeguards. Regarding the possible transfer of data to the United States, please refer to Section VI on data transfers to non-EU countries.

Disclosure of Data to Third Parties

1. User data collected while navigating the website may be disclosed to third parties who, as data processors or agents, process the transferred personal data on behalf of Sounded.

2. Sounded may disclose user data collected while browsing the website to the following parties: external technical consultants of Sounded; cloud service providers; payment system providers; and business partners involved in the delivery of physical books.

III - Cookies

Function of Cookies

1. Cookies are small text files used to store certain information relating to users, their preferences, or the device used to access the internet (computer, tablet, or mobile phone), and can be used for various purposes. A cookie consists, in particular, of a small data record transmitted from a web server to the user’s browser. It is not executable code and does not transmit viruses.

2. Cookies are categorized as first-party cookies when they are installed in the user’s browser by the website operator, and third-party cookies when they are sent by websites or web servers other than those visited by the user.

3. The website https://sounded.com uses cookies to make browsing easier and more intuitive for users, to monitor the number of visits to the website and how users interact with it, for statistical purposes, and for advertising purposes.

4. Cookies do not record personal information, and the data collected is not stored. If you wish, you can prevent some or all cookies from being stored. However, in this case, your use of the website and the services offered may be affected. To continue without changing the cookie settings, simply continue browsing.

Cookies Used

The website https://sounded.com uses technical cookies, analytical cookies, and third-party profiling cookies:

a) Technical Cookies

1. Technical cookies are installed on users’ browsers and are used for navigation, as well as to facilitate users’ access to and use of the website. They are necessary for the transmission of communications over electronic networks or for the provider to deliver the service requested by customers. The use of technical cookies enables the secure and efficient use of the website.

2. Technical cookies include: navigation or session cookies, which enable normal navigation and use of the website (e.g., to make a purchase or authenticate oneself to access restricted areas); functional cookies, which allow users to navigate according to a set of selected criteria (e.g., language, products selected for purchase) to improve the service provided.

3. No prior consent from users is required for the installation of technical cookies.

b) Analytical Cookies

1. The website https://sounded.com uses analytical cookies from Google Analytics and Facebook Pixel. These are cookies that analyze visitor traffic and monitor the number of visits for purely statistical purposes.

2. With regard to the installation of the aforementioned cookies, the website https://sounded.com acts solely as a technical intermediary between the third party and the users, as it is not obligated to provide users with the relevant information directly or to obtain users’ consent for the installation of cookies; rather, it suffices to provide the updated link to the information and consent forms published by the third parties. Sounded notes, in any case, that the use of the aforementioned tools may involve the transfer of data to the United States of America. For further information, please refer to Section VI regarding the transfer of data to non-EU countries.

3. Below you will find links to the pages containing detailed information and consent forms from third parties, where users can refuse to consent to the installation of cookies:Google Analytics: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=itFacebookPixel: https://www.facebook.com/policies/cookies/

4. Google Analytics and Facebook Pixel cookies are used by our website for technical purposes. However, it cannot be ruled out that Google and Facebook may engage in user tracking activities. Users are asked to review the additional information available via the links above.

User Rights

1. The settings for managing or disabling cookies may vary depending on the web browser used. The disabling or deletion of individual cookies can be managed or requested by changing the web browser settings. Such disabling may slow down or prevent access to certain parts of the website and may remove preferences that users have set for the website.

2. For further information and support, you can also visit the relevant page for the web browser you are currently using: Internet Explorer: https://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookiesFirefox:  https://support.mozilla.org/en-us/kb/enable-and-disable-cookies-website-preferencesSafari: https://www.apple.com/legal/privacy/it/Chrome: https://support.google.com/accounts/answer/61416?hl=enOpera:

IV - Data Processing

Data Processing Methods

1. Like all websites, this website uses log files to store information automatically collected during users’ visits. The information collected may include the following:

• Internet Protocol (IP) address;

• Type of browser and device parameters used to navigate the website;

• Name of the Internet service provider (ISP);

• Date and time of the visit;

• the referring website and the exit page;

• the number of clicks, if applicable.

1. This information is processed automatically and collected exclusively in aggregated form to verify the proper functioning of the website and for security purposes. This information is processed in accordance with the legitimate interests of the data controllers.

2. For security purposes (anti-spam filters, firewalls, virus detection), the automatically collected data may also include personal data such as the IP address, which could be used in accordance with applicable laws to prevent attempts to damage the website itself or harm other users, or in any case to prevent harmful or criminal activities. This data is never used to identify users or create profiles, but only to protect the website and its users; this information is processed in accordance with the legitimate interests of the owner.

3. If the website allows the posting of comments, or in the case of specific services requested by users, the website automatically recognizes and stores certain user identification data, including the user’s email address. It is assumed that this data is voluntarily provided by users when requesting the service. By submitting a comment or other information, users expressly accept the privacy policy and specifically consent to the sharing of the submitted content with third parties. The data received is used exclusively for the provision of the requested service and only for the period necessary to provide the service.

4. The information that users of the website publish regarding the services and tools provided by the website is provided by users knowingly and voluntarily, thereby exempting this website from any liability for legal violations. It is the responsibility of users to verify that they have the authority to enter personal data of third parties or content protected by national and international regulations.

Purposes of Data Processing

1. The data collected by the website during navigation is processed by the data controller, the processors, and other authorized persons for the following purposes: Enabling navigation of the site; Conducting analyses of visitor traffic;Creating an account to access the reserved area and to perform operations related to that reserved area; Downloading purchased digital content; Issuing invoices; Sending newsletters and/or promotional content (where permitted).

2. The data collected by the website is used exclusively for the purposes listed above and is stored for the time strictly necessary to carry out the specified activities.

3. Data used for security purposes (blocking attempts to damage the website) will be stored for as long as strictly necessary.

Data provided by the user

1. As previously mentioned, the optional, explicit, and voluntary sending of electronic mail to the addresses listed on this website results in the collection of the sender’s address—which is necessary to respond to inquiries—as well as any other personal data contained in the message.

V - Users’ Rights

1. The website https://sounded.com wishes to inform users of their rights. In particular, the data subject has the right to request from the data controller information regarding the personal data (Art. 15 of EU Regulation 2016/679), rectification (Art. 16 of EU Regulation 2016/679), erasure, the so-called “right to be forgotten” (Art. 17 of EU Regulation 2016/679), data portability (Art. 20 of EU Regulation 2016/679), restriction of processing (Art. 18 of EU Regulation 2016/679), or to object to processing on legitimate grounds (Art. 21 of EU Regulation 2016/679).

2. Requests may be submitted informally to the Data Protection Officer or, alternatively, using the template provided by the Data Protection Authority, via email to: dpo@sounded.com

3. If the processing is based on Art. 6 (1)(a) of Regulation (EU) 2016/679—explicit consent to the use—or on Art. 9(2)(a) of Regulation (EU) 2016/679—explicit consent to the use of genetic data, biometric data, data concerning health, data revealing religious or philosophical beliefs or trade union membership, data revealing ethnic origin or political opinions—do users have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent given prior to the withdrawal.

4. Likewise, in the event of a violation of the law, users have the right to file a complaint with the data protection authority, which is the authority responsible for supervising processing in Germany.

5. For a more detailed examination of users’ rights, see Art. 15 et seq. of EU Regulation 2016/679.

VI - Data Transfer to Non-EU Countries

1. This website may share some of the collected data with services located outside the European Union and/or transfer data to countries that may not offer the same level of protection. For example, Google and Facebook via social plugins and the Google Analytics and Facebook Pixel services. Sounded specifically notes that the data exchanged with the aforementioned companies may be transferred to the United States and may be disclosed there upon request by authorities and/or stored and used for national security purposes, even if there are no adequate safeguards for the data subject and/or remedies available under European Union regulations. In fact, on July 16, 2020 (the so-called “Schrems II ruling”), the Court of Justice of the European Union declared invalid European Commission Decision No. 1250 of July 12, 2016, on the adequacy of the EU-U.S. Privacy Shield. The legal basis for data processing is to be found in the proper functioning of the website as a legitimate interest of Sounded and is based on the consent of the data subject.

2. Apart from the cases mentioned above, no data is transferred to third countries that do not meet the conditions set forth in Art. 45 et seq. of Regulation (EU) 2016/679.

VII - Security of Transmitted Data

1. This website processes users’ data in a lawful and proper manner and takes appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of the data. Processing is carried out using IT and/or telematics tools, whose organizational methods and logic are strictly limited to the specified purposes.

2. In addition to the data controller, in some cases categories of data processors involved in the organization of the website (e.g., administrative, sales, marketing, legal, and system administrators) or external parties (e.g., third-party technical service providers, postal carriers, hosting providers, IT companies, IT agencies) may also have access to the data.

VIII - Changes to this Document

1. This document, published at: https://sounded.com, constitutes the privacy policy of this website.

2. It may be subject to changes or updates. In the event of significant changes or updates, users will be notified.