Data Controller

Carlos García-Borés

Purpose of Processing

To manage your registration as a user of the website.

To send advertising from Carlos García-Borés, if you have expressly authorized it.

Legal Basis for Processing

Provision of express consent and execution of the voluntarily accepted registration relationship.

Recipients

• Only Carlos García-Borés and its contracted service providers will have access to your personal data.
• There will be no international data transfer under any circumstances.

Rights

• Access (access to your data)
• Rectification (completion or updating of your data)
• Objection (request that your data not be processed)
• Erasure (request that your data be deleted)
• Portability (request a copy of your data to transfer to another company)
• Restriction (request that your data be processed in a limited manner)

Along with a copy of your ID or passport: submit the request to Carlos García-Borés

Further information on the above points:

**a) Applicable Regulation:**
The collection of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, also known as the GDPR.

**b) Data Controller:**
Once your explicit consent has been obtained, your personal data will be included in the Carlos García-Borés database as the entity responsible for its processing.

**c) Types of data and purpose of use:**
The collected data will be used to manage your registration as a user of the website, as well as to send commercial communications from Carlos García-Borés if you have expressly authorized it by ticking the box provided for this purpose.

You may unsubscribe as a registered user at any time using the methods indicated both in the section above and in the section on exercising your rights.

Additionally, each commercial communication you receive via electronic means will include an option to unsubscribe.

**d) Legal basis for processing:**
Carlos García-Borés is authorized to process the data based on the explicit consent you have provided, which includes your data in the company’s database as a registered user of the website.

**e) Third-party data access:**
Carlos García-Borés may access certain data as it provides administrative services to its subsidiaries related to IT systems (managed centrally by the company). In no case will the company exploit your data or use it for its own benefit. The processing of data will be strictly limited to the purposes described in this clause. The company applies the same security and confidentiality standards to ensure the protection of the data.

Additionally, Carlos García-Borés may contract external service providers who, in the course of their services, may access our databases. These are what the GDPR refers to as data processors. Contracts have been signed with these providers to ensure the security and confidentiality of the data under our responsibility. Under no circumstances will the data be processed for their own benefit or for any purpose other than those stated above.

Likewise, please be informed that your data will not be shared with other companies nor transferred to third parties located in countries that do not offer data protection systems equivalent to those of the European Union, except where the user expressly authorizes it or the law requires it.

Carlos García-Borés will not use the data for any purpose incompatible with those stated above unless required by law or authorized by the user.

**f) Data retention period:**
Personal data will be retained for the duration of your relationship with Carlos García-Borés