PRIVACY POLICY OF BOLBORETA INNOVA S.L.U.

In accordance with the principles of lawfulness, fairness and transparency, we make this Privacy Policy available to you.

1. Who is the data controller of your personal data?

2. For what purpose do we process your personal data?

At BOLBORETA INNOVA S.L.U., depending on the category of data subject concerned, we process the information you provide for the following purposes:

3. What is the legal basis for processing your data?

The legal basis for the processing of your personal data, depending on the category of data subject concerned, may be the following:

The data requested are adequate, relevant, and strictly necessary. You are not obliged to provide them; however, failure to do so may affect the purpose of the service or make it impossible to provide it.

4. How long will we retain your personal data?

Your data will be retained for the minimum period necessary for the proper provision of the service offered and to comply with any legal obligations that may arise therefrom.

5. To whom will your data be disclosed?

BOLBORETA INNOVA S.L.U. will not disclose your data to any third party unless expressly informed otherwise.

Additionally, certain data may be disclosed, in accordance with applicable regulations or the contractual relationship with BOLBORETA INNOVA S.L.U., to:

• Banks and financial institutions for the collection of contracted services and/or purchased products.
• Public authorities with competence in the areas of activity of BOLBORETA INNOVA S.L.U., where required by applicable law.

6. Are international data transfers carried out?

BOLBORETA INNOVA S.L.U. may carry out international data transfers from this Website derived from the acceptance of cookies.

Google LLC and Google Ireland Limited transfer data to the United States based on the user’s consent when accepting cookies.

By accepting cookies from these entities, the user consents to the transfer of personal data collected through the loading and reading of cookies to the United States, a country offering a level of protection comparable to that of the European Union, solely with respect to U.S. companies included in the EU–U.S. Data Privacy Framework (hereinafter, the “DPF”). If U.S. companies are not adhered to the DPF, they shall be deemed not to guarantee a level of protection equivalent to that of the EU.

If the user does not consent to this international data transfer to the United States, they must reject such cookies, and the related functionalities or services will not be provided.

You may obtain further information regarding international transfers carried out by third parties identified in the cookie policy by consulting their respective privacy policies.

7. What are your rights when you provide us with your data?

The data protection rights that data subjects may exercise, where applicable, are as follows:

Data subjects may exercise their rights by sending a written request to the registered office of BOLBORETA INNOVA S.L.U. at C/ General Palanca, 10. Bajo. 28045, Madrid, or by email to: LOPD@BOLBORETAINNOVA.COM.

You can use the following models to exercise your rights:

• Access to the template to exercise the right of access.
• Access to the template to exercise the right to rectification.
• Access to the template to exercise the right to erasure.
• Access to the template to exercise the right to object.
• Access to the template to exercise the right to restriction of processing.
• Access to the template to exercise the right to data portability.
• Access to the template to exercise the right not to be subject to automated individual decision-making.

More information on exercising your rights can be found on the official website of the Spanish Data Protection Agency (hereinafter, "AEPD"), at the following link.

8. Can I withdraw my consent?

You have the right to withdraw your consent at any time for any specific purpose, without affecting the lawfulness of processing based on consent prior to its withdrawal.

9. Where can I lodge a complaint if I believe my data are not being processed correctly?

If a data subject considers that their data are not being processed correctly by BOLBORETA INNOVA S.L.U., or that their rights requests have not been satisfactorily addressed, they may lodge a complaint with the competent data protection authority. In Spain, this is the Spanish Data Protection Agency (AEPD). More information is available at: www.aepd.es.

10. Security and updating of your personal data.

In order to safeguard the security of personal data, BOLBORETA INNOVA S.L.U. has adopted all necessary technical and organizational measures to prevent alteration, loss, unauthorized processing, or access, as required by law. However, absolute security cannot be guaranteed.

It is important that you inform us of any changes to your personal data so that they may be kept up to date.

11. Confidentiality.

BOLBORETA INNOVA S.L.U. informs you that your data will be processed with the utmost confidentiality by all personnel involved in any phase of processing. Your data will not be disclosed or communicated to third parties except where legally required or where you have expressly authorized such disclosure.