FERRARI S.P.

A PRIVACY NOTICE FOR CLIENTS OF AUTHORISED DEALERS-IMPORTERS / SALES ACTIVITIES

1 − Personal data provided by the customer to Ferrari S.p.A. (hereinafter “Ferrari” or “Company”) in relation to commercial
relationships, pre-contractual negotiations and the execution of the agreement (hereinafter the “Data”) will be processed for the
following purposes:

a. purposes strictly related to the contractual relationship between the customer and Ferrari. Specifically, Ferrari will process the
Data as a data controller to: comply with contractual obligations and legal requirements related to warranties, products
safety (e.g. recall campaigns); perform after sales services through the dealer and service network; to reply and fulfil all
customer’s requests; to send technical and/or organizational communications; to perform customer satisfaction surveys
related to the quality of Company goods and services according to Ferrari’s legitimate interest;

b. subject to the customer’s consent, sending commercial communications as well as sending advertising on Company products
and services, or performing market researches (“Marketing”);

c. subject to the customer’s consent, analyzing the customer’s behaviors, habits and propensity to consume to enhance
products and services provided by Ferrari as well as satisfy the customer’s expectations (“Profiling”);

d. subject to customer’s consent, communicating Data to Ferrari N.V. subsidiaries and/or affiliates of Ferrari (“Ferrari Group
Companies”) so that they will process them to send commercial communications and/or advertising on such companies’
products and services, and perform market researches (“Ferrari Group Marketing”);

e. subject to customer’s consent, collecting and using customer’s images to enhance customer experience and customer
management.

The Data may be processed in hardcopy, by automated or electronic means including via mail or e-mail, phone (e.g. automated
phone calls, SMS, MMS), fax and any other mean (e.g. web sites, mobile apps).

2 − Submitting the Data is never mandatory. However, not providing the Data for the purposes provided in art. 1) sub (a) will cause
the impossibility to execute the agreement and/or to comply with the obligations arising out of the agreement since this processing
does not need the customer consent. On the other hand, not providing the Data for the purposes provided in art. 1) sub (b), sub (c),
sub (d), sub (e) will not prevent Ferrari from executing the agreement or providing the activities related or deriving from the
agreement.

3 − Data Controller is Ferrari S.p.A., with registered office in Via Emilia Est, N. 1163, Modena, Italy. The customer can contact Ferrari
for clarifications on this privacy notice and/or on privacy matters concerning the customer by writing to the Data Protection Officer
of Ferrari at the email address privacy@ferrari.com.

4 − For the purposes provided in art. 1) the Data may be processed by third parties acting on behalf of the data controller provided
in art. 3) and in compliance with contractual requirements, in Member States of the EU or in countries outside of the EU. The Data
may be communicated to third parties to comply with legal obligations, to execute Public Authorities orders or to exercise a Ferrari
rights before judicial authorities.

5 - Within its contractual relations Ferrari may transfer the Data in countries outside the European Economic Area (EEA), including
store them in databases managed by entities acting on behalf of Ferrari. Databases management and Data processing are bound to
the purposes of the processing and are carried out according to applicable data protection law. In case the Data are transferred
outside the EEA Ferrari will use any appropriate contractual measures to guarantee an adequate protection of the Data including –
among the others – agreements based on the standard contractual clauses adopted by the EU Commission to rule the transfer of
personal data outside of the EEA.

6- The Data processed in accordance with article 1 sub a) will be retained for the period deemed strictly necessary to fulfil such
purposes. However, the Data might be stored for a longer period of time in case of potential and/or actual claims and resulting
liabilities related to the purposes provided sub a). Data processed for Marketing and Profiling purposes will be kept by the
Company from the moment the customer gives consent until the moment the customer withdraws the consent. Once consent is
withdrawn, Data will no longer be processed for these purposes, although they may still be kept by Ferrari, in particular as may be
necessary to protect Company’s interests related to potential liability related to this processing unless further clarification are
 provided by the competent Supervisory Authority in this regard. Data retention in case of Marketing and Profiling is compliant with
the EU applicable law and with the decisions of the Italian Data Protection Authority.

7 − The customer is entitled to the following rights:

I. right to access means the right to obtain from Ferrari information as to whether the customer’s Data are being processed and, where
applicable, have access to them;
II. right to rectification and right to erasure means the right to obtain the rectification of inaccurate and/or incomplete Data, as well as the
erasure of Data when the request is legitimate;
III. right to restriction of processing means the right to request suspension of the processing when the request is legitimate;
IV. right to data portability means the right to obtain Data in a structured format, ordinary used and readable, as well as the right to transfer
Data to other controllers;
V. right to object means the right to object to the processing of Data when the request is legitimate, including when the Data are processed
for marketing or profiling, if applicable;
VI. right to lodge a complaint with a supervisory authority in case of unlawful processing of Data.

To exercise the abovementioned rights the customer can write to Ferrari S.p.A., via Abetone Inferiore 4, Maranello (MO), Italy or at the following e-
mail address: privacy@ferrari.com.
CONSENTS

The customer, with reference to the above privacy notice, declares:

To agree Not to agree

to the personal data being processed by Ferrari S.p.A. for the marketing purposes provided in art. 1) sub (b) of the privacy notice, in hardcopy, automated or electronic means
including via mail or e-mail, phone (e.g. automated phone calls, SMS, MMS), fax and any other mean (e.g. web sites, mobile apps).

To agree Not to agree

to the personal data being processed by Ferrari S.p.A. to analyze the customer’s preferences and for receiving customized commercial communications, as stated in art. 1 sub c) of
the privacy notice.

To agree Not to agree

to the personal data being communicated by Ferrari S.p.A. to other Ferrari Group Companies in order for such companies to process the personal data for the marketing purposes
provided in art. 1) sub (d) of the privacy notice, in hardcopy, automated or electronic means including via mail or e-mail, phone (e.g. automated phone calls, SMS, MMS), fax and
any other mean (e.g. web sites, mobile apps).

To agree Not to agree

To the customer’s images being processed by Ferrari S.p.A. as provided in art, 1 sub (e) of the privacy notice.

To agree Not to agree

to the personal data being communicated to third parties - other than Ferrari Group Companies - for such companies to process the data for own marketing purposes and/or other
purposes.

Please Note: Ferrari does not intend to transfer the Data to third parties other than Ferrari Group Companies.

Date Customer signature