PRIVACY POLICY

DATA CONTROLLER INFORMATION

COMPANY NAME: JORGE REVILLA S.L. (hereinafter referred to as the "COMPANY" or the "DATA CONTROLLER").

VAT NUMBER: B09323510

ADDRESS: C/ LA PALOMA, 29 - 09003 BURGOS (Burgos)

PHONE: 947274040

EMAIL for Data Protection communications: info@jorgerevilla.com

APPLICABLE REGULATIONS: Our Privacy Policy has been designed in accordance with the General Data Protection Regulation of the European Union 2016/679 of the European Parliament and of the Council, dated April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights.

JORGE REVILLA S.L. may modify this Privacy Policy to adapt it to legislative, jurisprudential, or interpretive developments from the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy, and General Conditions that, if applicable, are collected for certain products or services, if such access implies any specialty in the protection of personal data.

PURPOSE OF PROCESSING PERSONAL DATA: At JORGE REVILLA S.L., we generally collect and process your personal information to manage the relationship we have with you. The main purposes are as follows:

Providing information related to the products and services offered by the DATA CONTROLLER, as detailed on this website or other spaces. The data collected through forms for inquiries, suggestions, or professional contact will be used to respond to them and send the information requested by the user through the website or data collection processes specific to the Data Controller.

Sending you news and updates about our organization by email and/or postal mail, as well as updates to our catalog of products and services, and sending advertising communications by the Data Controller.

Executing, supervising, and managing the contracted products and/or services through the acceptance of the corresponding estimate/purchase order and/or the signing of a contract. This also includes carrying out all contractual or pre-contractual procedures necessary with customers or potential customers.

Managing a commercial, business, or administrative relationship at all levels with our customers, potential customers, and suppliers, when necessary, also through the corresponding "customer area" or portal/tool designated for this purpose, conducting market studies, statistical analysis, etc.

Managing the interested party's application in the selection processes of the DATA CONTROLLER according to their professional profile that may arise in the future within the activities of the DATA CONTROLLER.

If applicable and with the prior consent of the interested party, publishing images in publications in which the interested party appears individually or in a group (or their legal representative, if applicable).

Regarding the cookies used (G), as specified in the section dedicated to cookies on this website.

LEGAL BASIS: The legal basis for processing your data for purposes (A), (B), (F), and (G) is the explicit consent provided through a positive and affirmative act at the time of providing us with your personal data or that of your legal representative.

For purpose (C), the legal basis is the execution of a contract or pre-contract in which the data subject is a party, in the case of contracting a product or service from the Data Controller, and the legitimate interest of the Controller in maintaining and managing commercial relationships, conducting market studies, statistical analysis, etc., for purpose (D), as well as compliance with applicable legal obligations of the Data Controller.

For purpose (E), the data you provide to us is necessary for the management and processing of the selection processes carried out by the Data Controller, and the failure to provide them would make it impossible to manage such selection processes. Therefore, the processing is based on the consent you have provided through a clear affirmative action at the time of providing your data. In the event that explicit consent has not been given, the processing of the data would be based on the pre-contractual relationship between you and the Data Controller, as well as the legitimate interest of the Data Controller in carrying out the necessary procedures to carry out the recruitment of personnel. Similarly, we understand that when you submit your resume, you reasonably expect your data to be processed for these purposes, so we consider that it is in line with your interests and respectful of your rights.

DATA CATEGORIES: We collect your personal information through different means, but you will always be informed at the time of collection through information clauses about the Data Controller, the purpose and legal basis of the processing, the recipients of the data, if applicable, and the retention period of your information, as well as how you can exercise your rights regarding data protection.

In general, the personal information we process relates to the category of identifying and contact data, such as: Name and Surname, ID, Telephone, Postal Address, Company, Email, as well as the IP address from which you access the data collection form. The data processed in the context of a contractual, pre-contractual, commercial, or business relationship may include, in addition to the above: Products or services contracted or supplied, payment or billing data, legal representative, banking data, manual or electronic signature, professional and academic data, etc.

The data collected for purpose (E) will be related to the professional and contact area: name, surname, telephone, email, CV, cover letter, and any other personal data associated with the Curriculum or professional profile.

The data processed for purpose (F) will be the image/voice of the data subject or their legal representative.

PROCESSED DATA AND OBLIGATION TO PROVIDE THEM OR NOT: The minimum data that will be requested to allow communication with a data subject are the name and surname, email address, or, depending on the communication medium used, the postal address, username, and/or telephone. In addition, in case of exercising a right by the data subject, a copy of an official identification document or the use of a digital signature will be requested. The data subject's refusal to provide this data may result in the rejection or return of the communication sent by the data subject and/or the non-attention or resolution of the request, suggestion, complaint, or other request from the data subject.

Additionally, all other categories of data that the data subject provides voluntarily during the communication or at the request of the Data Controller will be processed. In the latter case, at the time of requesting additional data, the Data Controller will inform the data subject whether or not they are essential requirements to attend and resolve

USER RIGHTS: Every person whose personal data is processed has the following rights:

Right of access: Allows the data subject to know whether their personal data is being processed, obtain information regarding the characteristics and scope of the processing, and receive a copy of the processed data.

Right of rectification: Allows for the correction of errors and modification of data that proves to be inaccurate or incomplete.

Right of erasure: Allows for the deletion of data, among other cases, when it is inadequate or excessive for the purpose of the processing, when the consent given is revoked, when there is unlawful processing, and provided that none of the legally prescribed exceptions to the right of erasure apply.

Right to object: Allows the data subject, under certain circumstances and for reasons related to their particular situation, to prevent the processing of their personal data. The right to object includes the possibility for the data subject to object at any time to the processing of their data for direct marketing purposes, including profiling.

Right to restriction of processing: Allows the data subject to request, in certain cases, the restriction of processing to data storage operations and processing operations consented to by the data subject, or that are necessary for the establishment, exercise, or defense of legal claims, the protection of the rights of other individuals or legal entities, or for reasons of public interest.

Right to data portability: Allows the data subject to request that their data, processed by automated means and based on their consent, be delivered in a digital format or directly transmitted to another data controller.

Right not to be subject to automated individual decisions (including profiling): Allows the data subject not to be subject to a decision based solely on automated processing of data that produces legal effects concerning them or similarly affects them significantly, except when the decision is necessary for the performance of a contract between the data subject and the data controller, is authorized by applicable regulations, or is based on the explicit consent of the data subject.

Right to withdraw consent: Allows the data subject to withdraw their consent to the processing of their data at any time. The data subject has the right to withdraw their consent at any time, without affecting the lawfulness of the processing carried out prior to the withdrawal.

Furthermore, if you believe that your rights have not been fully satisfied, you have the right to lodge a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency at the following address: C/ Jorge Juan, 6 - 28001 Madrid. (www.aepd.es).

Please clearly indicate "EXERCISE OF PERSONAL DATA RIGHTS" in the letter or email subject.

Please note that the data controller provides model request forms for exercising different rights, which can be requested by either of the two means provided for exercising rights, by telephone, or by providing a postal address or email to which they can be sent. The use of these forms is not mandatory.

The data subject can also voluntarily use the exercise of rights forms published by the Spanish Data Protection Agency, which can be downloaded from the following address:

https://www.aepd.es/reglamento/derechos/index.html

In any case, the data subject must attach a copy of their National Identity Document, passport, or another official identification document to the written request for the corresponding right. In the case of exercising the right by email, the data subject may choose to digitally sign the aforementioned request using any electronic signature that can be verified by the data controller.

Contact details for exercising your rights: JORGE REVILLA S.L. B09323510 | C/ LA PALOMA, 29 - 09003 BURGOS (Burgos) | 947274040 | gloria@jorgerevilla.com |

HOW WE PROTECT YOUR INFORMATION: At JORGE REVILLA S.L., we are committed to protecting

PURPOSES FOR WHICH DATA IS USED ON SOCIAL NETWORKS: The information and personal data voluntarily provided by the user through the COMPANY's social networks are processed for the following purposes:

Managing the user's registration, account creation, and use of the COMPANY's social networks.

Addressing any requests made by the user through the COMPANY's social networks.

Sending information and advertising from the COMPANY by any means, electronic or otherwise.

Understanding the user's opinions and evaluations, and keeping them updated on activities, news, special offers, and promotions of interest from the COMPANY.

Sending information, advertising, and commercial promotion of products, services, and activities in the field of the COMPANY's sector, by any means, including electronic means (email or equivalent media such as SMS, phones, mobile devices), provided that it has been explicitly and previously consented to by the interested party.

The information provided by the user through the COMPANY's social networks, including personal data, may be published depending on the services the user utilizes, thus becoming publicly available to other third-party users of the social networks. From the Profile of each social network, the user can configure which information they want to make public in each case, view the permissions granted, delete them, or deactivate them, as well as any third-party applications they no longer wish to use.

On social networks, the user can share texts, photos, videos, and other types of information or content, which they do freely, voluntarily, and knowingly. If they choose to do so, such content will be subject to the present policy as well as the Rules and Conditions of Access and Use of the corresponding social network. The user will be RESPONSIBLE for ensuring that all content they publish complies with the current legislation, this policy, and the corresponding legal notice. The user may only publish personal data, photographs, and information or other content that they own or for which they have the authorization of third parties.

The COMPANY reserves the right to unilaterally delete any content published by the user on this official page without prior notice or authorization from the user, in case the user violates or breaches the current legislation, the rules established in this policy, and/or those of the social networks.

LEGAL BASIS: The legal basis that legitimizes the processing for the indicated purposes is the user's own consent, which is given when establishing or accepting contact on the network, according to the terms and conditions of use and privacy policies of the corresponding platform.

DATA PROCESSED AND OBLIGATION TO PROVIDE THEM: The minimum contact data required to contact through social networks will be determined by their respective owners, usually the name and username. Supplying this information is an essential requirement to contact the network, and the refusal of the interested party to provide it will result in the impossibility of becoming a follower or contact of the RESPONSIBLE party's profile on the respective social network.

The rest of the data that may be processed by the RESPONSIBLE party will be determined by the interested party themselves through the privacy settings of their profile on the respective network, as well as by the data they voluntarily communicate individually to the RESPONSIBLE party or make fully or partially public on the network.

RECIPIENTS: No data will be disclosed to third parties unless, if applicable, to our service provider related to communication and press.

Additionally, the data you publish on different social networks will have multiple recipients (individuals or entities), depending on your privacy settings on those networks.

RIGHTS: The COMPANY informs the user about the possibility of exercising the following rights:

Right to request access to their personal data being processed and to receive that information in writing through the requested means.

Right to request the rectification of inaccurate personal data or, where appropriate, the erasure of such data when, among other reasons

RIGHTS: The COMPANY informs the user of the possibility to exercise the following rights:

Right to request access to their personal data being processed and receive such information in writing through the requested means.

Right to request the rectification of inaccurate personal data or, where appropriate, request their deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Right to request the limitation of the processing of their data.

Right to object to the processing of their personal data when applicable.

Right to data portability when the processing is based on consent and is carried out by automated means. In such cases, the data will be provided in a structured, commonly used, and machine-readable format.

Right to withdraw consent given.

Right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

You can exercise your rights by submitting a request to the address indicated above or by email to gloria@jorgerevilla.com (Ref. Data Protection), indicating the right you wish to exercise and attaching a copy of your ID card or equivalent official document proving your identity. Additionally, you have the right to seek the protection of the Spanish Data Protection Agency through its website www.aepd.es.

However, the exercise of the aforementioned rights will be defined by the functionality of the Social Network itself and the ability to access information from Users' profiles by the Controller, and they can only be exercised in relation to information that is under the control of the Controller.

HOW LONG WILL WE KEEP YOUR PERSONAL DATA? Minimum contact data will be kept until the status of follower or contact is unsubscribed either by the interested party or by the COMPANY, or for a longer period established by the corresponding platform.

The rest of the data shared on the network will be kept as determined by the owner of the respective platform. For these purposes, interested parties are informed that the COMPANY only processes their data through the platforms of each social network and does not separately incorporate them into its own information systems.

DATA OF MINORS OR PERSONS WITH DISABILITIES: Access and registration through the COMPANY's social networks are prohibited for individuals under 18 years of age. If the user is a person with a disability or incapacitated, the intervention of the parent or legal guardian of the user or their legal representative will be necessary, supported by a valid document accrediting the legal representation of the incapable user for access.

The COMPANY expressly disclaims any responsibility that may arise from the use of social networks by minors or incapable individuals. The COMPANY's social networks do not knowingly collect any personal information from minors; therefore, if the user is a minor, they should not register, use the COMPANY's social networks, or provide any personal information.

RESPONSIBILITY AND DATA QUALITY: The COMPANY is only RESPONSIBLE and guarantees the confidentiality, security, and processing of data in accordance with this policy. Regarding the personal data collected from registered users through their social network identifier, the COMPANY has no responsibility for the processing and subsequent use of personal data that may be carried out by the social network owner or third-party information society service providers unrelated to the COMPANY who may access such data in the course of providing their services or carrying out their activities, or by third parties establishing hyperlinks to the social network.

The COMPANY warns that no user may use another person's identity and/or communicate personal data of third parties without their prior authorization. Therefore, the user must at all times take into account that they can only provide personal data corresponding to their own identity and that are appropriate, relevant, current, accurate, and true. In any case, the user must respect the privacy of third parties, whether they are users of the COMPANY's social network or not.

POSTS: Once the user has joined the COMPANY's page, they may publish comments, links, images

USE OF COMPANY PROFILES ON SOCIAL MEDIA PLATFORMS

FACEBOOK

By clicking the "Follow" button, you will establish a connection with us and become a follower of this page. The connection will appear on your profile and wall, and your friends may receive a notification about it. Although you may appear in the list of "people who like this page" or in ads about it, we will not be able to see your profile or personal information. We can only see the identifying data that Facebook allows and that you share according to your privacy settings on that social network. We will not have access to the "news feed" section with information about your activity. However, we will be able to see the information that you have made available to "Everyone" on your profile, post content on your wall, or communicate with you through messages or regular status updates, which will also be posted on your wall.

By becoming a fan of this page, by clicking the "Follow" button on this page, you consent to:

The processing of your personal data in the Facebook environment in accordance with its privacy policies.

The company's access to the data contained in your environment and that you publish on our page.

Our published information appearing on your page or wall.

Receiving personal and individual messages through Facebook, for example, responding to a question or requesting information, as well as receiving status updates from this page, which will be posted on your wall.

Therefore, if you do not accept these conditions, please do not request to become a fan of this page.

If you wish to unfollow this page, you just have to click on the hyperlink that appears at the bottom left, "Stop following this page." To manage your privacy and block or unblock a page, follow the steps indicated at http://es-es.facebook.com/help/privacy/pages.

Remember that you can always control your connections, immediately delete content you no longer like, and restrict with whom you share your connections in your privacy settings at https://www.facebook.com/privacy/explanation.

In the context of this processing, you should be aware that the company can only view or unsubscribe your data as a fan. Any rectification of the data must be done through your user settings.

INSTAGRAM

Regarding the social network Instagram, it has been acquired by Facebook. You can review its privacy policy at the following link: https://help.instagram.com/519522125107875.

To the extent that you use this social network (for example, by commenting on photos), this entity may collect personal data. The responsibility for such data will no longer lie with the owner of this website and will be subject to other terms and conditions (we advise you to visit the website of the aforementioned link). As for us, unless otherwise notified, we will not create specific databases of users who follow us through this social network, and we will always process your data within the platform itself, for example, limiting ourselves to responding to comments made to us.

The user is responsible for all content posted on the social media profiles belonging to the company. If the publication of content does not comply with the current legislation, its publication is prohibited, and the user is solely responsible for such publication.

Below, we provide the links to the privacy policies of our social media profiles and other commonly used social media platforms:

Facebook: https://www.facebook.com/help/323540651073243/

Twitter: https://twitter.com/privacy

LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Flickr: http: https://www.info.yahoo.com/privacy/es/yahoo/eu/

Pinterest: https://about.pinterest.com/es/privacy-policy

Instagram: https://help.instagram.com/519522125107875

YouTube: https://www.google.com/intl/es

The user can contact the company through the internal messaging service of the social media platform or using the following contact information:

ADDRESS: C/ LA PALOMA, 29 - 09003 BURGOS (Burgos)

PHONE: 947274040

EMAIL for data protection communications: gloria@jorgerevilla.com