RAMONDIN S.A. PRIVACY POLICY AND PERSONAL DATA PROTECTION

PERSONAL DATA PROCESSING

Pursuant to applicable data protection regulations, we hereby inform you that RAMONDIN S.A. will process your personal data as Data Controller and the purpose of said treatment being to provide the services requested by the user via our contact form. To do this, you must tick the box indicating acceptance of this policy; otherwise, we would not have your express consent and; therefore, we would be unable to respond to your request.

For correct provision of services offered by RAMONDIN S.A., the user must answer each and every one of the questions appearing on the forms on our website. Likewise, the user must also state he/she is over 18.

The purpose of processing the requested personal data is not only to send commercial information regarding products and services currently (and in the future) offered by RAMONDIN S.A., but also said information also includes advertising and promotional information via post, fax, email or any other means. In order to carry out said data processing, the user must tick the box provided to that effect on website form.

Given the personal nature of the data provided, RAMONDIN S.A. undertakes to process them with strict confidentiality, keeping the necessary secrecy. To this end, the entity has implemented appropriate security measures in accordance with the risk analysis carried out.

You are hereby informed your data will not be transferred to third parties or internationally, except when legally obliged or when solely and exclusively necessary for the provision of the requested service, in which case your consent will be requested.

RIGHTS

Collected and processed data will be stored for a limited time period, which is that necessary to comply with the legal obligations imposed on RAMONDIN S.A. by different applicable regulations.

The user, as the interested party, may at any time exercise the following rights via the address stated in the Legal Notice:

Right of access: the interested party may request the processed data from the Data Controller and, if affirmative, which specific personal data are processed.

Right to rectification: the interested party may request the Data Controller to correct his/her personal data should they be incorrect.

Right to erasure: the interested party may request the Data Controller to delete his/her personal data.

Right to object: the interested party may object to the Data Controller processing his/her personal data.

Right to restriction of processing: the interested party may request the Data Controller not to process his/her personal data temporarily in specific cases.

Right to data portability: the interested party may request the Data Controller for his/her automated data in a structured format that is easy to access and use.

Further information regarding your rights at: www.agpd.es.

Likewise, you are entitled to lodge a complaint with the Spanish Data Protection Agency (AEPD, by its Spanish initials).

COOKIES

The data each “cookie” will store are: language, date and time the user last visited our website, design of the contents the user chose on his/her first visit to our website, as well as security elements intervening in access control to restricted areas.

From this website, we study our users’ preferences (demographic characteristics, traffic patterns and other set of information to understand our users’ profiles and behavior). Tracking our users’ preferences helps us to improve both our Page and services.

To do this, we use Google Analytics (a Google tool for measuring Web Page traffic), which may store cookies on your computer to help us to collect information to be used exclusively for statistics and behavioral study of our website users. The information collected by the cookie (including the IP address) is stored and transmitted to Google servers in the US. Google uses said data to compile your activity on our site and generate reports to identify the use made of the site. Google may provide said information to third parties when requested by current legislation. Acceptance of this policy implies acceptance of Google’s use of the information collected by Google Analytics.

You can configure your browser to reject storage of the cookies on your computer. For further information, please refer to our Cookie Policy.

COMPLETE INFORMATION ON PERSONAL DATA PROCESSING

DATA CONTROLLER
Who is the data controller processing your data?
- Identity: RAMONDIN S.A.
- Postal Address: C/ La Paz 27-29 - 01300 Laguardia, Álava (Spain)
- Email: ramondin@ramondin.com

PURPOSE OF DATA PROCESSING
For what purpose do we process your personal data?
At RAMONDIN S.A. we process the information people provide us with for the following purposes:
- To manage and administrate the contractual relationship established with suppliers, clients and employees.
- To provide the interested parties with commercial information on products and services which might be of their interest.
- To carry out video surveillance of our premises should you access the same.
- To answer your queries and consultations should you ask us a question via our webpage.
- To assess your application for a future job vacancy, if you have provided us with your résumé.

How long do we store your data?
Personal data provided will be stored:
a) So long as there is a commercial relationship.
b) The interested party does not request its deletion.
c) Information, which by law must be stored for a specific period, will not be deleted until the legal deadline has expired.

LEGAL GROUNDS FOR DATA PROCESSING
What are the legal grounds for processing your data?

The legal basis for processing your data is as follows:
- Execution of the contract should you be an employee, client or supplier.
- Legitimate interest should you have been filmed by video surveillance cameras.
- Consent of the interested party if he/she has sent us his/her résumé.
- Legitimate interest when sending advertising mailings.

SUPPLIED DATA RECIPIENTS
To whom will your data be disclosed?
a) Data must be disclosed by law to: Social security bodies (in the case of employees) Public registers Professional Associations Tax Authorities (in the case of employees, suppliers and clients) Other public administration bodies (in the case of employees, suppliers and clients) The Spanish National Securities Market Commission The Spanish National Gaming Commission Law enforcement bodies (in the case of video surveillance) Compliance/non-compliance with monetary obligations Insurance companies (in the case of employees) Other financial bodies Health authorities Provision of telecommunication services Companies dedicated to publications or direct marketing Non-profit making associations and bodies Trade Unions and staff assemblies Public administration with competence in the field EU bodies
b) Data will be disclosed via contractual requirement to: Organizations/people related to the Data Controller Notaries and solicitors (in the case of services rendered to clients of attorneys) Banks, savings banks and rural savings banks
c) The data (IMAGES) of EMPLOYEES/CLIENTS/EVENTS/TRAINING SESSIONS will be disclosed due to your granted consent to the following social networks: Facebook Twitter LinkedIn YouTube * The transfers described in this section c) include international data transfer to the US, for which the party concerned gave his/her consent

d) The data will be disclosed to the following companies belonging to the ___________ group due to legitimate interest. _______________________ _______________________ _______________________

INTERESTED PARTY RIGHTS
What are your rights?
Any person is entitled to obtain confirmation as to whether RAMONDIN S.A. is processing personal data concerning them.
Right of access: the interested party may request the processed data to the Data Controller Manager and, if affirmative, which specific personal data are processed.
Right to rectification: the interested party may request the Data Controller to correct his/her personal data should they be incorrect.
Right of deletion: the interested party may request the Data Controller to delete his/her personal data, when, among other reasons, they are no longer necessary for the purposes they were collected for.
Right of objection: the interested party may object to the Data Controller processing his/her personal data.
Right to restriction of processing: the interested party may request the Data Controller not to process his/her personal data temporarily in specific cases.
Right to data portability: the interested party may request the Data Controller for his/her automated data in a structured format that is easy to access and use.

How can you exercise these rights? Via a letter addressed to RAMONDIN S.A., C/ La Paz 27-29 - 01300 Laguardia, Álava (Spain)

What are the complaint procedures? Should you feel your rights were not duly attended, you have the right to lodge a complaint with the Spanish Data Protection Agency at Agencia Española de Protección de Datos, C/ Jorge Juan, 6. 28001 -Madrid (Spain)