Extensive web privacy declaration

Who is responsible for processing your data?

For what purpose do we process your personal data?

In accordance with the provisions of EU Regulation 679/2016 and Organic Law 3/2018 of December 5 on the protection of personal data and the guarantee of digital rights, we inform you that the personal data you provide us and those generated during the development of our relationship with you are processed for the following purposes:

• To respond to your requests.
• To provide you with information about PROQUINORTE SA products, with your consent to receive commercial communications by email or any other equivalent means of electronic communication (such as SMS) that you have provided to us.
• To allow your participation in raffles and/or commercial promotions.
• If you send us a CV, your candidacy will be considered in the selection processes for Personal data.
• The sending of communications by any means you have provided, related to the activities carried out by the entity and that may be of interest to you.
• The response to queries, complaints, and suggestions, and the implementation of all types of communication actions.
• The accounting, tax, and administrative management of the entity.

How long will we retain your data?

The personal data provided will be retained as long as its deletion is not requested by the interested party, or whoever legally acts as their legal representative, and this is appropriate, and as long as it is necessary—including the need to retain it during the applicable limitation periods—or relevant for the purpose for which it was collected or recorded.

The retention of the data will be subject to the legal obligation that PROQUINORTE SA has to retain it. After these deadlines, the data will be destroyed or erased, and the deletion, elimination, or destruction will be carried out in such a way that the information contained on the media cannot be recovered.

Legitimacy

The legal basis for processing your data is the consent given by the data subject. This is obtained expressly and unequivocally by completing and, where appropriate, submitting the paper or electronic documents and forms in which your data is collected. All of the entity's documents used to collect data for various purposes contain information clauses in accordance with data protection regulations, and consent is expressly expressed through the interested party's signature or by submitting the forms on the website.

Processing is also legitimate when it is necessary for the execution of a contract, or the provision of a service provided to the interested parties, to which they are a party, or for the application, at their request, of pre-contractual measures (Art. 6.1.a and b GDPR).

PROQUINORTE SA is also legitimate to process your data in order to comply with the legal obligations to which it is subject and for the satisfaction of legitimate interests, provided that these are not overridden by the interests or fundamental rights of the interested parties.

Regardless of the legitimate grounds, consent may be revoked. at any time.

To which recipients will your data be communicated?

Your data will not be transferred to any entity without your consent, except for the transfers provided for by law. In this regard, your express consent will be requested for the transfer of your data to any other entity.

As a result of the management of the authorized purposes, your data may be communicated to entities or individuals directly related to PROQUINORTE SA and the services it provides. Likewise, your personal information will be available to public authorities, judges, and courts to address potential liabilities arising from the processing, provided that these transfers are protected by law.

Your data may also be transferred to companies that provide us with some type of consulting, IT maintenance, marketing, training, or auditing services. These entities only have access to the personal information necessary to carry out these services. They are required to do so through a "data processing contract" that maintains confidentiality, prohibits the use of the information for other purposes, and adopts measures to guarantee its integrity and availability.

International transfers of data outside the European Union or to entities that do not comply with the data protection standards established by EU Regulation 679/2016 are not planned.

Where does your data come from?

The personal data processed by PROQUINORTE SA is provided by the data subject or obtained from publicly accessible sources.

What categories of data does PROQUINORTE SA process?

PROQUINORTE SA will process the data you provide to us. These may fall into the following categories:

• Identification and contact information;
• Academic and professional information
• Employment details
• Economic, financial, and insurance information
• Commercial information

What are your rights?

Anyone has the right to obtain confirmation as to whether or not PROQUINORTE SA is processing personal data that concerns them.

Data subjects have the right to access their personal data and to obtain a copy of the personal data being processed, to update it, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. PROQUINORTE SA will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible legal claims.

Also in certain circumstances, provided for in Article 18 of the GDPR, data subjects may request the Restrict the processing of your data, in which case PROQUINORTE SA will process them, with the exception of storage, with the data subject's consent or for the establishment, exercise or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.

Where applicable, as a result of the application of the right to erasure or to object to the processing of personal data in the online environment, data subjects have the right to be forgotten according to the case law of the Court of Justice of the EU.

Under the right to portability, data subjects have the right to obtain the personal data concerning them in a structured, commonly used and machine-readable format and to transmit those data to another controller.

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly affects him or her. significantly similar, except for the exceptions provided for in Article 22.1 GDPR.

The data subject has the right to have their data deleted if the purpose for which it was processed or collected ceases to exist, if consent is revoked when it is legitimate for processing, or for any other reasons set forth in Article 17 GDPR. Deletion will be carried out by means of a high-level deletion of the data contained in automated media and the physical destruction of non-automated media.

How can these rights be exercised?

By means of a written request, always accompanied by a copy of the data subject's ID or other document proving the identity of the data subject, addressed to the addresses indicated in the heading.

What avenues for filing a complaint are available?

If you consider that your rights have not been properly respected, you have the right to file a complaint with the Spanish Data Protection Agency, whose contact details are: Telephone: 901 100 099 - 91 266 35 17 Postal Address: C/ Jorge Juan, 6 Madrid.