PRIVACY POLICY

In general, your personal data will be used to communicate with you and provide our services.

They may also be used for other activities, such as sending you advertising or promoting our activities.

Your personal data is necessary to communicate with you and provide our services. To this end, we will make a series of checkboxes available to you that will allow you to decide clearly and simply about the use of your personal information.

In general, only authorised staff of our entity will have access to the information we ask you for. Equally, entities that need access to your data in order for us to provide services to you may also have knowledge of your personal information. For example, our bank will know your details if payment for our services is made by card or bank transfer.

Likewise, public or private entities to which we are legally obliged to provide your personal data will also have knowledge of your information. For example, Tax Law requires us to provide the Tax Agency with certain information about economic transactions that exceed a certain amount.

If, beyond the cases mentioned, we need to share your personal information with other entities, we will ask for your permission in advance through clear options that will allow you to decide.

We will protect your data with effective security measures based on the risks involved in using your information. To this end, our entity has approved a Data Protection Policy and annual controls and audits are carried out to verify that your personal data is secure at all times.

Some countries are safe for your data and others are not. The European Union, for example, is a safe environment for your data. Our policy is not to send your personal information to any country that is not safe from a data protection point of view.

In the event that, in order to provide the service, it is essential to send your data to a country that is not as safe as Spain, we will always ask for your prior permission and apply effective security measures to reduce the risks of sending your personal information to another country.

We will keep your data for the duration of our relationship and for as long as required by law. Once the applicable legal periods have ended, we will delete them in a safe and environmentally friendly manner.

You may contact us at any time to find out what information we hold about you, to have it corrected if it is incorrect, and to have it deleted once our relationship has ended, where legally possible. You also have the right to request that your information be transferred to another entity. This right is called 'portability' and can be useful in certain situations.

To exercise any of these rights, you must submit a written request to our address, along with a copy of your ID document. Our offices have specific forms for requesting these rights and we are happy to assist you in completing them.

To find out more about your data protection rights, you can consult the website of the Spanish Data Protection Agency (www.agpd.es).

You may withdraw your consent if you change your mind about the use of your data at any time.

For example, if you were previously interested in receiving advertising about our products or services, but no longer wish to receive it, you can let us know by using the objection to processing form available at our offices.

If you feel your rights have been neglected by our entity, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) through any of the following means:

— Online: www.agpd.es — Postal address: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid — Phone: 901 100 099 / 91 266 35 17

Lodging a complaint with the AEPD is free of charge and does not require the assistance of a lawyer or solicitor.

Our policy is not to build profiles about users of our services. However, there may be situations where, for service, commercial or other purposes, we need to build information profiles about you. An example might be using your purchase or service history to offer you products or services tailored to your preferences or needs. In such cases, we will apply effective security measures to protect your information at all times from unauthorised persons.

Our policy is not to use your data for purposes other than those we have explained to you. If, however, we need to use your data for different activities, we will always ask for your prior permission through clear options that will allow you to decide.