“Villestone It informs website users of its policies regarding the processing and protection of user and customer personal data, which can be collected by browsing, purchasing products, or purchasing services through its website. In this regard, "Velestone" ensures compliance with the current personal data protection regulations reflected in Organic Law No. 15/1999 of December 13 on personal data protection, Royal Decree No. 1720/2007 approving the Personal Data Protection Regulations on December 21, and General Data Protection Regulations 2016/679.

Safety measures

According to current data protection legislation, users are informed that technical and organizational measures have been taken in accordance with the aforementioned regulations in "Velestone". The personal data collected in the table is only processed by the staff of "Velestone" or the processing personnel specified here. Appropriate security measures have been taken for the provided data, and all means and technical measures have been taken to prevent the loss, abuse, modification, unauthorized access, and theft of the data provided.

Authenticity of data

The customer or user represents that all data provided by them is true and correct, and promises to update these data by reporting any modifications to them to "Velestone". Users are responsible for the authenticity of their data and are fully responsible for any conflicts or lawsuits that may arise due to their falsification. Importantly, in order for us to maintain the latest personal data, users will notify 'Velestone' whenever they make any modifications to it. Otherwise, we cannot be responsible for its authenticity.

Exercise rights

LOPD and RGPD allow stakeholders to exercise a range of rights related to the processing of their personal data. As long as users' data is processed by 'Velestone', they can exercise their rights. To achieve this, users must send an email to Info@canteraselcerro.com Either notify us in writing of the address specified in the legal notice. The communication must reflect the following information: the user's name, application form, address, and supporting data.

The exercise of rights must be carried out by the user themselves. However, it can be executed by the authorized person as the legal representative of the authorized person. In this case, proof of such statements by the relevant personnel must be provided.

Users can request the exercise of the following rights:

• Request access to personal data.
• The right to request correction (if incorrect) or deletion.
• Request to limit their right to treatment, in which case "Velestone" only reserves the right to exercise or defend the claim.
• Right to object to processing: "Velestone" will stop processing your data unless it is necessary to continue processing for legitimate reasons or to exercise or defend potential claims.
• Data portability rights: If you wish your data to be processed by another company, "Velestone" will facilitate the portability of your data to the new responsible person.

If agreed for certain specific purposes, Users have the right to withdraw their consent at any time, without affecting the lawfulness of the treatment based on the consent prior to its withdrawal.

If a user considers that there is a problem with the way "VELESTONE" is handling their data, they can direct their claims to the Security Officer or the appropriate data protection authority, the Spanish Data Protection Agency being the one indicated in the case of Spain.

CONSERVATION OF DATA

The disaggregated data shall be preserved without delay. As for the Customer data, the retention period of the personal data will vary according to the service that the Customer contracts. In any case, it shall be the minimum necessary, and may be maintained until:

• 4 years: Law on Infractions and Penalties in the Social Order (obligations regarding membership, high, low, contribution, payment of wages ...); Arts. 66 and sig. General Tax Law (books of accounts ...)
• 5 years: Art. 1964 Civil Code (personal actions without special time)
• 6 years: Art. 30 Code of Commerce (books of accounts, invoices ...)
• 10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.

Users of mailing lists or those uploaded by "VETONEK" to RRSS pages or profiles will be retained until the user withdraws their consent.

Candidate Data (C.V.), if any: If the candidate is not selected, "VELESTONE" may keep his/her curriculum stored for a maximum of two years to be incorporated in future calls, unless the candidate manifests otherwise.

PRODUCTION AND TREATMENT OF DATA

"VELESTONE" has the duty to inform users of its website about the collection of personal data that can be carried out, either by sending e-mail or by filling in the forms included in the website. In this sense, "VELESTONE" will be considered responsible for the data collected through the means described above.

In turn "VELESTONE" informs the users that the purpose of the treatment of the data collected includes the attention of requests made by the users, the inclusion in the agenda of contacts, the delivery of products or services and the management of the commercial relationship. Operations, procedures and technical procedures that are performed in an automated or non-automated manner and which enable the collection, storage, modification, transfer and other actions on personal data, are considered to be the processing of personal data.

The "VELESTONE" Web Site has an SSL encryption, which allows the User to send their personal data securely through the contact forms of the website.

"VELESTONE" makes available to users a series of telematic mechanisms for the collection and processing of their personal data, with the intended purposes previously. The personal data provided in a telematic manner, either through email, from the contact forms of this website or online hiring will be used for the commercial and administrative management of the clients and users of the company. This data will be processed through servers managed by https://www.factoriadigital.com/, which is also the company's email service provider, and, which will have the consideration of Treatment Charge.

For your part, the mail and name data will be incorporated into a database for the sending of commercial communications and to manage the subscription to the services requested by the client or user, managed through the servers of https://acumbamail.com/, which will also have the consideration of Charge of Treatment. You may be unsubscribe at any time by clicking on the link you will find in our communications, or by directing an application to exercise your right to the company Encharged with the Treatment or to "VELESTONE".

As set out in the LSSIS, "VELESTONE" undertakes not to send commercial communications without identifying them as such. For these purposes, the information sent to customers for the maintenance of the existing contractual relationship will not be considered as commercial communication.

In any case, only precise data will be obtained in order to be able to perform the contracted service, or to be able to respond appropriately to the request for information made by the user.

On occasion, personal data will be provided through links to third-party websites. In this case, at no time will the staff of "VELESTONE" have access to the personal data that the Customer provides to such third parties.

COMMUNICATION OF INFORMATION TO THIRD PARTIES

"VELESTONE" shall not give or communicate to any third party your data, except in the cases legally provided for or where the provision of a service implies the need for a contractual relationship with a processor, and always in accordance with the general conditions approved by the user prior to the contract. Thus, when hiring our services, the user accepts that any of the same may be, in whole or in part, subcontracted to other persons or companies, who will have the consideration of Treatment Charged, with which the corresponding contract of confidentiality has been agreed, or adhered to their privacy policies, established in their respective web pages. It also accepts that some of the personal data collected are provided to these Treatment Entrates, when necessary for the effective performance of the contracted service. The user may refuse the transfer of your data to the Charms of the Treatment, by written request, by any of the means previously referenced.

CONFIDENTIALITY

The information provided by the client will, in any case, be considered confidential, without it being used for other purposes than those related to the contracted services or products purchased from "VELESTONE". "VELESTONE" is required not to disclose or disclose information about the client's claims, the reasons for the advice requested or the duration of its relationship with the client.

VALIDITY

This privacy and data protection policy has been drafted by LOPDPRO, data protection company, as of 06 December 2019, and may vary according to the changes in regulations and case-law that are occurring, with the responsibility of the data holder being the reading of the updated document, in order to know its rights and obligations in this respect at any time.