BERNARDO GARCIA CRUZ informs the user that the data provided to us by browsing our website, using the contact form or by sending emails will be processed by BERNARDO GARCIA CRUZ and that said processing is recorded in the Register of Processing Activities managed by BERNARDO GARCIA CRUZ in accordance with the provisions of the GDPR. 2. WHAT ARE YOUR PERSONAL DATA USED FOR? At www.pitaber.com, when the user accepts our privacy policy, they authorise us to use and process the personal data provided to: • Send them the information and provide them with the service they request using the various forms available on our website. • Provide them with information about the offers, products and services requested. • Occasionally, BERNARDO GARCIA CRUZ may use your personal data to send you notifications by email. These notifications will be made to inform you about changes to our services or products or to our policies and legal conditions. • Send you commercial communications about offers, activities and promotions from BERNARDO GARCIA CRUZ and the sector that may be of interest to you by conventional or electronic means when you have checked the box that you wish to receive information. www.pitaber.com also collects information from website users not provided directly by them through cookies and DARD devices. The data collected through cookies and other devices will be used for statistical studies and profile analysis in order to provide a better service through our website, for which the GOOGLE ANALYTICS application will be used, which is a Google tool to help website owners analyze how their visitors interact with their properties. You can obtain more information about their privacy policy at https://www.google.es/intl/es_ALL/analytics/learn/privacy.html The tool we use for the advertising and commercial prospecting we carry out is GOOGLE ADWORDS. You can obtain more information about the privacy policy at https://policies.google.com/privacy?hl=es. Google, including all its tools, complies with the EU-US Privacy Shield Framework, in accordance with the provisions of the United States Department of Commerce regarding the collection, use and storage of personal information from member countries of the European Union. www.pitaber.com will always endeavour to establish appropriate mechanisms to obtain the User's consent for the installation of cookies that require it. When a user accesses our website, a pop-up appears informing them of the existence of cookies and that if they continue browsing our page, they consent to the installation of cookies. Acceptance of the installation of cookies entails acceptance of the storage of the IP address in the records of www.pitaber.com, together with the date of acceptance, for a period of one year, in order to demonstrate the consent given. You can obtain more information in our "Cookie Policy". 3. WHAT IS THE LEGITIMATION FOR THE PROCESSING OF YOUR DATA? The legitimacy for the processing of your data by BERNARDO GARCIA CRUZ is based on: • The execution of a pre-contract/contract to send you the information and provide the requested service, not being possible to carry it out otherwise. • The user's consent to the sending of commercial communications about the offers, activities and promotions of BERNARDO GARCIA CRUZ and the sector that may be of interest to you. The user may revoke the consent given at any time. 4. FOR HOW LONG DO WE KEEP YOUR DATA? The data to send you the information or provide the service you request through the various forms available on our website will be kept for as long as the contractual relationship is in force, and once it has ended during the legal prescription period. The data processed for sending the newsletter, to send commercial communications about offers, activities and promotions of BERNARDO GARCIA CRUZ and the sector that may be of interest to you, will be kept as long as the user does not revoke the consent given. The IP address obtained through cookies will be kept for a period of one year, in order to demonstrate the user's consent. Regarding the period of conservation of cookies, you can obtain more information on our website in the section "Cookie Policy" 5. WHAT TYPE OF DATA DO WE PROCESS FROM OUR USERS? BERNARDO GARCIA CRUZ processes the following categories of data: a) Data of users who fill out any of the available forms: The personal data that BERNARDO GARCIA CRUZ requests includes: • Identification data: name and surname, telephone number, postal and email address • Data relating to the request b) Data of users who browse our website: Data provided by cookies and by Google Analytics. Only those over 16 years of age may provide data through our website. If you are under this age, you must have the consent of your parents or legal guardians. The User guarantees the authenticity and currency of all data communicated to BERNARDO GARCIA CRUZ and declares that he or she is over 16 years of age, and will be solely responsible for any false or inaccurate statements made. The personal data processed by BERNARDO GARCIA CRUZ may be mandatory or voluntary. Voluntary information is that which the user is not obliged to provide in order to contact us. Fields marked with an asterisk (*) or with the word (required) in our forms must be completed. Failure to provide them will result in the impossibility of providing the service or responding to your request. In the event that you provide us with data from third parties, you declare that you have their consent and undertake to pass on to them the information that we provide you in this clause, exempting BERNARDO GARCIA CRUZ from any type of obligation. However, BERNARDO GARCIA CRUZ may carry out verifications to confirm that the third party has been informed by adopting the due diligence measures established in the data protection regulations. 6. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED? Data will not be transferred to third parties unless legally required or in the event that it is necessary to process your request. 7. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM? The user may exercise the following rights before BERNARDO GARCIA CRUZ: a) Access their personal data b) Rectify them when they are inaccurate or incomplete c) Request the deletion or cancellation of the data when, among other reasons, they are no longer necessary for the purposes for which they were collected d) Oppose their processing e) Request the limitation of the processing of their data when any of the conditions provided for in the regulations occur f) Request the portability of their data in the cases provided for in the regulations g) Prevent being the subject of automated decisions h) Revoke the consents granted To exercise their rights, the user must send a letter indicating the right they wish to exercise and attach a document proving their identity and postal or electronic address for notification purposes. This request can be made either by post to: BERNARDO GARCIA CRUZ Calle Finca Vista El Balo, 2 - Arico, 38592 - Icor, or by sending an email to: administracion@pitaber.com. BERNARDO GARCIA CRUZ must respond to the request to exercise your rights within one month of receiving the request. This period may be extended by another two months if necessary, taking into account the complexity and number of requests. We will inform you of any extension within one month of receiving the request, stating the reasons for the delay. Likewise, interested parties have the right to file a complaint with the competent Control Authority (Spanish Data Protection Agency) if they consider that BERNARDO GARCIA CRUZ has violated the rights recognized to them by data protection regulations at www.aepd.es 8. IS MY DATA SAFE? BERNARDO GARCIA CRUZ has a contract in force with the Hosting company Ionos by 1&1 for the hosting of its website. It is a European company and has the latest systems in security measures. BERNARDO GARCIA CRUZ guarantees the adoption of the appropriate measures to ensure the confidential treatment of your data given the confidential nature of the same. BERNARDO GARCIA CRUZ undertakes to keep said data secret, treating it with the utmost confidentiality, and declares that it has implemented in its information system the security policies corresponding to the type of data handled in accordance with the provisions of REGULATION (EU) 922768152 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data (RGPD). 9. LINKS TO OTHER WEBSITES If you choose to leave our website via links to other websites not belonging to our entity, BERNARDO GARCIA CRUZ will not be responsible for the privacy policies of said websites or for the cookies that they may store on the user's computer. Version: 2.1