PRIVACY POLICY

In order to disclose the general lines of the Data Protection Policy adopted by BONMATI ASESORES, S.L.P. upon the implementation of the General Data Protection Regulation, the following disclaimer is added to the Firm’s website www.bonmatiasesores.com.

To this end, the following points are noted concerning the responsible for the processing of the personal data provided to the Firm to develop and provide the services contracted, and to respond to the queries and requests for information made through this website.

1. RESPONSIBILITY FOR THE DATA PROCESSING

1.1. Who is responsible for the data processing?

Bonmatí Asesores S.L.P, with Tax Identity B84500875, and registered office C/ Guzmán el Bueno 133 5ºB, 28003, Madrid-Spain, and e-mail address clientes@bonmatiasesores.com.

1.2. Is there a Data Protection Officer I can contact?

Yes, the interested parties can contact the Data Protection Officer (DPO) at the following e-mail address dpo@bonmatiasesores.com

2. PURPOSES OF THE PROCESSING AND LEGAL BASIS

2.1. PURPOSES

2.1.1 What is the purpose of the processing of your personal data and what is our legal basis?

BONMATI ASESORES will process the personal data provided by its clients in conformity with its commitment, according to the laws and regulations in force on data protection and to the highest standards of professional ethics.

BONMATI ASESORES will process the personal data supplied by its clients for the purpose of achieving the following objectives:

• Provision of the professional services contracted. This processing is legitimised by the performance of a contract.
• Report on the legal/tax developments that might be of interest to its clients. This processing is legitimised by legitimate interests.
• Information request from a client via the form available for that purpose on the website. This processing is legitimised by the consent given by the data subject.
• CV sent for future selection processes that may arise in the company, legitimation of the processing based on the consent of the data subject.

2.1.2. What personal data do we process?

The personal data that BONMATI ASESORES will collect from its clients to establish the professional relationship, and to issue the corresponding order form and fee budget that shall govern the relationship between them, are the following:

• Name, surname and ID number of the physical person or representative of the legal person.
• Address for contracting purposes.
• Telephone number and email address of the physical person or representative of the legal person.

These data shall be provided by the client, with his free and explicit consent, upon the signing of the corresponding professional order-budget.

The client is solely responsible for providing accurate and truthful personal data, thereby BONMATI ASESORES shall not be liable for any damages arising from the user’s fraud and/or bad faith as a consequence of the provision of false or falsified information.

2.1.3. Do we make automated decision-making, and/or profiling, which produces legal effects concerning you or similarly significantly affects you?

No, we don’t.

2.1.4. How long will we process your data?

The personal data provided will be stored for the time required to achieve the purposes for which it is processed and to meet the legal obligations.

3. RECIPIENTS OF THE PERSONAL DATA

3.1. Do we communicate your personal data to other companies/entities?

No, except where required by law.

4. INTERNATIONAL PERSONAL DATA TRANSFER

4.1. Will your personal data be transferred to third countries or international organisations?

No, they will not.

5. RIGHTS OF THE DATA SUBJECT

5.1. What rights do you have relating to the processing of your personal data?

Any data subject has the right to obtain a confirmation to know whether we are actually processing their personal data.

The General Data Protection Regulation also establishes the following rights for data subjects:

• Access your data
• Request the rectification or erasure of your data
• Request the restriction of the processing of your data
• Data portability
• Object to the processing of your data

5.2. When will we respond to your request?

We will respond to your requests as soon as possible and, in any case, within one month from the receipt of your request. This period may be extended for another two months if necessary, taking into account the complexity and number of applications. We will inform you of the extension within the first month of the application.

5.3. Do you have the right to withdraw your consent?

The data subject has the right to withdraw his consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

5.4. Who should you contact to exercise your rights?

To exercise his rights recognised, the data subject can contact us via e-mail at clientes@bonamtiasesores.com or by sending a letter to Calle Guzman el Bueno 133, 5b, 28803, Madrid-Spain.

5.5. Do you have the right to lodge a complaint?

Yes, the data subject has the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), which is the supervising and monitoring authority for data protection in Spain.

Prior to lodging such a complaint with the Agencia Española de Protección de Datos, you can contact the Data Protection Officer (DPO) at the following e-mail address dpo@bonmatiasesores.com

6. PRIVACY NOTICE

The personal data provided to BONMATI ASESORES will be treated with the strictest confidentiality, BONMATI ASESORES undertakes to keep secrecy regarding the same.

7. DATA PROTECTION UPDATE

BONMATI ASESORES reserves the right to modify this data protection policy as a consequence of legislative changes, case law reviews and regulatory authority’s decisions which apply directly, indirectly or sectorally to it.

As a result, BONMATI ASESORES recommends that www.bonmatiasesores.com website users access and read, on a regular basis, this policy, without prejudice to such modifications being notified to them on the website or, as the case may be, by e-mail to the address provided by the client or data subject.