Who is the data controller?

GRUPO OSBORNE S.A.

C.I.F. (tax ID code): A-28318871

Address: C/Salvatierra, 6 – 28034 – Madrid

Telephone: 917283880

Email address for requests relating to personal data: rgpd@osborne.es

Why do we process your data?

GRUPO OSBORNE S.A. processes the data you provide for the following purposes:

- Managing the process of purchase, delivery, complaints and after-sales service to registered website users who buy OSBORNE products.

- To forward queries to the areas of the Osborne Group companies responsible for the request, query and/or complaint.

- Customer loyalty schemes: processing of personal data relating to management and customer service to offer benefits as a result of loyalty to the brand through regular purchases of Osborne products, which may lead to campaigns to encourage customer loyalty or to approach prospective customers to establish a close and lasting relationship with the brand.

- To send our newsletter and marketing information by physical and/or electronic means.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

What is the legal basis for processing your data?

The legal basis for processing the data is:

-  A contract or legal relationship for the management of product purchases, and related queries: Article 6(1)(b) of the EU General Data Protection Regulation.

-  Consent for loyalty schemes, preference profiling and browsing analytics: Article 6(1)(a) of the EU General Data Protection Regulation.

-  Consent to, and legitimate interest in, sending our newsletter and marketing information: Article 6(1)(a) and (f) and Recital 47 of the EU General Data Protection Regulation.

Who do we share your data with?

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, the Netherlands and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission.

How long will we keep your data?

-  Personal data strictly related to the purchase process, such as acquisition, purchase, delivery, returns and complaints, are retained for a period of six years from the sale, in accordance with the Spanish Commercial Code.

-  Personal data relating to the other purposes are retained until the data subject formally objects to, or requests cessation of, the relevant processing.

What are your rights when you provide us with your data?

-  Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, interested parties may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, interested parties may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website, www.agpd.es

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

Who is the data controller?

GRUPO OSBORNE S.A.

C.I.F.[Tax ID]: A-28318871

Address: C/Salvatierra, 6 – 28034 – Madrid

Telephone: 917283880

Email address for requests relating to personal data: rgpd@osborne.es.

Why do we process your data?

GRUPO OSBORNE S.A. processes the data you provide for the following purposes:

- To manage relationships with customers interested in OSBORNE's brand, products and services.

- To manage the registration process in our web channel, and to respond to queries sent using the contact channel provided on the website.

- To forward queries to the areas of the Osborne Group companies responsible for the request, query and/or complaint.

- To send our newsletter and commercial information by physical and electronic means.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

What is the legal basis for processing your data?

The legal basis for processing the data is:

- Consent for the main purpose of customer registration, consultation and contact and relations: article 6.1.a) of the European General Data Protection Regulation.

- Consent for the preparation of preference profiles and analysis of browsing: article 6.1.a) of the European General Data Protection Regulation.

- Consent and legitimate interest in sending our newsletter and commercial information: Article 6.1.a) and 6.1.f) of the European General Data Protection Regulation.

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required.
The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission .

How long will we keep your data?

- OSBORNE keeps personal data relating to the management of queries and contact details for one year from receipt.

- OSBORNE keeps personal data for six years from purchase, pursuant to the Commercial Code.

- Information relating to claims is kept until the claim process is definitively closed.

- OSBORNE keeps personal data relating to the sending of commercial information and monitoring and analysis of browsing until the person objects of asks for them to be deleted.

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, interested parties may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, interested parties may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es.

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website, www.agpd.es

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

Who is the data controller?

GRUPO OSBORNE S.A.

C.I.F.[Tax ID]: A-28318871

Address: C/Salvatierra, 6 – 28034 – Madrid

Telephone: 917283880

Email address for requests relating to personal data: rgpd@osborne.es.

Why do we process your data?

GRUPO OSBORNE S.A. processes the data you provide for the following purposes:

- Processing of personal data on subscribers and recipients of newsletters or digital publications ciruclated by email on a regular basis (daily, weekly, monthly, bimonthly or quarterly) with content aimed at people interested in the brand, potentially including offers or premium content.

- Manage invitations to events.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

What is the legal basis for processing your data?

The legal basis for the processing of data is the consent for the purposes indicated and / or legitimate interest in sending newsletters and marketing information and management of invitations to events: Article 6(1)(a) and (f) of the EU General Data Protection Regulation.

Who do we share your data with?

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required.
The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission.

How long will we keep your data?

- Personal data are kept until the data subject objects or unsubscribes.

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, interested parties may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, interested parties may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es.

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website, www.agpd.es

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

Who is the data controller?

GRUPO OSBORNE S.A.

C.I.F.[Tax ID]: A-28318871

Address: C/Salvatierra, 6 – 28034 – Madrid

Telephone: 917283880

Email address for requests relating to personal data: rgpd@osborne.es.

Why do we process your data?

GRUPO OSBORNE S.A. processes the data you provide for the following purposes:

- Processing of personal data generated on the website relating to alerts on availability of products for sale on the website about which the data subject has expressed interest and has requested to be informed when they become available.

- To send our newsletter and marketing information by physical and/or electronic means.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

What is the legal basis for processing your data?

The legal basis for processing the data is:

- Consent for the main purpose of alerting the data subject to availability of the product of interest: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent for the preparation of preference profiles and analysis of browsing: Article 6(1)(a) of the European General Data Protection Regulation.

- Consent and legitimate interest in sending our newsletter and commercial information: Article 6(1)(a) and (f) of the EU General Data Protection Regulation.

Who do we share your data with?

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission.

How long will we keep your data?

- Personal data relating to "in-stock" alert requests are kept until the time of the product availability alert.

- OSBORNE keeps personal data relating to the sending of commercial information and monitoring and analysis of browsing or profiling until the person objects of asks for them to be deleted.

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, interested parties may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, interested parties may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es.

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website www.agpd.es.

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

Who is the data controller?

GRUPO OSBORNE S.A.

C.I.F.[Tax ID]: A-28318871

Address: C/Salvatierra, 6 – 28034 – Madrid

Telephone: 917283880

Email address for requests relating to personal data: rgpd@osborne.es.

Why do we process your data?

GRUPO OSBORNE S.A. processes the data you provide for the following purposes:

- We process personal data to manage and provide services to people who ask to visit Bodega CINCO JOTAS.

- To send our newsletter and commercial information by physical and electronic means.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

What is the legal basis for processing your data?

The legal basis for processing the data is:

- A contract or legal relationship with the main purpose of the visit, represented by the purchase of a ticket: article 6.1.b) of the European General Data Protection Regulation.

- Consent for the preparation of preference profiles and analysis of browsing: article 6.1.a) of the European General Data Protection Regulation.

- Consent and legitimate interest in sending our newsletter and commercial information: Article 6.1.a) and 6.1.f) of the European General Data Protection Regulation.

Who do we share your data with?

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required.
The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission .

How long will we keep your data?

-  We will keep the personal data until the visit to the bodega.

-  OSBORNE keeps personal data relating to the sending of commercial information until the person objects of asks for them to be deleted.

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, interested parties may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, interested parties may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es.

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website, www.agpd.es

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

Who is the data controller?

GRUPO OSBORNE S.A.

C.I.F.[Tax ID]: A-28318871

Address: C/Salvatierra, 6 – 28034 – Madrid

Telephone: 917283880

Email address for requests relating to personal data: rgpd@osborne.es.

Why do we process your data?

OSBORNE RESTAURACIÓN S.L. processes the data you provide for the following purposes:

- We process personal data to manage online and telephone bookings at Osborne restaurants and any related customer service.

- Management of payment and complaints processes.

- Customer loyalty schemes to reward loyalty to the Osborne brand, which can give rise to campaigns to encourage customer loyalty or approach prospective customers to establish a close and lasting relationship.

- To send our newsletter and commercial information by physical and electronic means.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

- Surveys for quality and satisfaction.

What is the legal basis for processing your data?

The legal bases for processing the data are:

- Legal relationship underpinning the provision of catering and customer service: Article 6(1)(b) of the EU General Data Protection Regulation.

- Consent for the preparation of preference profiles and analysis of browsing: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent to, and/or legitimate interest in, sending our newsletter and marketing information: Article 6(1)(a) and 6(1)(f) of the EU General Data Protection Regulation.

Who do we share your data with?

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required.
The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission.

How long will we keep your data?

OSBORNE keeps personal data for six years from invoicing, pursuant to the Commercial Code.

Information relating to complaints is kept until the complaint process is definitively closed.

OSBORNE keeps personal data relating to the sending of commercial information, loyalty schemes and monitoring and analysis of browsing until the data subject objects or unsubscribes.

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, interested parties may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, interested parties may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es.

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website, www.agpd.es

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

Who is the data controller?

GRUPO OSBORNE S.A.

C.I.F.[Tax ID]: A-28318871

Address: C/Salvatierra, 6 – 28034 – Madrid

Telephone: 917283880

Email address for requests relating to personal data: rgpd@osborne.es

Why do we process your data?

GRUPO OSBORNE S.A. processes the data you provide for the following purposes:

- Processing of personal data for managing data subjects' involvement in competitions and prize draws organized by Osborne through social networks.

- Publication on websites and social networks of the full name of the winner and images of him/her collecting and/or enjoying the prize.

- To send our newsletter and commercial information by physical and electronic means.

- Osborne brand monitoring activity analysis.

- To analyse browsing habits and the usability of our website and identify the sales generated after sending out our newsletter, so as to determine consumer profiles and preferences and provide a more personalised service focused on the priorities of our customers. We also process the data to prepare statistics and detect weaknesses to improve our website processes.

What is the legal basis for processing your data?

The legal bases for processing the data are:

- Consent for entry in the competition and publication of the winner's details: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent for preference profiling and browser analytics: Article 6(1)(a) of the EU General Data Protection Regulation.

- Consent and legitimate interest in sending our newsletter and commercial information: Article 6(1)(a) and 6(1)(f) of the EU General Data Protection Regulation.

Who do we share your data with?

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- The identity details of the winner of the competition will be published on social networks and on the website.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union to assist with this processing, adhesion to the European Union-United States The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission European Commission.

How long will we keep your data?

- The personal data will be kept until the end of the process, with the delivery of the prize.

- Personal data relating to the other purposes are kept until the data subject objects or unsubscribes.

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, interested parties may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, interested parties may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website, www.agpd.es.

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

Who is responsible for processing your data?

GRUPO OSBORNE S.A.

C.I.F.[Tax ID]: A-28318871

Address: C/Salvatierra, 6 – 28034 – Madrid

Telephone: 917283880

Email address for requests relating to personal data: rgpd@osborne.es.

Why do we process your data?

Why do we process your data? GRUPO OSBORNE S.A. processes the data provided to respond to requests from people to exercise the rights established by the European General Data Protection Regulation.

What is the legal basis for processing the data?

The legal basis for processing the data is compliance with a legal obligation applicable to parties responsible for processing data, as set down in article 6.1.c) of the European General Data Protection Regulation.

Who do we share your data with?

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission.

How long will we keep your personal data?

- We keep the data for one year after the end of the process of exercising rights and once any final ruling is handed down by the control authorities.

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, interested parties may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, interested parties may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es.

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website, www.agpd.es.

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

Who is the data controller?

GRUPO OSBORNE S.A.

C.I.F.[Tax ID]: A-28318871

Address: C/Salvatierra, 6 – 28034 – Madrid

Telephone: 917283880

Email address for requests relating to personal data: rgpd@osborne.es.

Why do we process your data?

GRUPO OSBORNE S.A. processes the data you provide for the following purposes:

- Managing communications with people in the public and private sectors.

- Managing the sending of information about activities, products and services.

- Managing invitations to and participation in events promoted or hosted by OSBORNE.

What is the legal basis for processing your data?

The legal basis for the processing of data is the "legitimate interest" referred to in Article 6(1)(f) of the EU General Data Protection Regulation.

Who do we share your data with?

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required.
The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the European Commission.

How long will we keep your personal data?

We keep the data until the data subject objects to data processing or requests erasure of the data.

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them

- Data subjects are entitled to access their personal data and request the rectification of any inaccurate data, or erasure of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es.

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the Spanish Data Protection Agency, at the postal or electronic address given on its website, www.agpd.es.

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.

Who is the data controller?

GRUPO OSBORNE S.A.

C.I.F. (tax ID code): A-28318871

Dirección:c/ Salvatierra, 6 – 28034 – Madrid

Teléfono: 917283880

Email address for requests relating to personal data: rgpd@osborne.es

Purpose

Why do we process your data?

GRUPO OSBORNE S.A., hereinafter OSBORNE, processes the data provided in order to manage the process of purchase, delivery, complaint and after-sales service to purchasers of OSBORNE products through the website without prior registration on the site.

What is the legal basis for processing your data?

The legal basis for such processing is the legal relationship established with the product purchase.Article 6(1)(b) of the EU General Data Protection Regulation.

Who do we share your data with?

- The personal data are only assigned to the OSBORNE Group companies to which the request by the person relates, and as necessary for compliance with legal obligations and to support services related to this data processing and the purposes thereof.

- In the event that provision of the services requires data to be shared with service providers inside and outside the European Union that assist in the administration of this processing, adhesion to the European Union-United States Privacy Shield or adequate compliance with guarantees of the confidentiality and security of the data processing is required. The provision of these processing services requires use of the Salesforce IT customer-management platform, which is subject to Binding Corporate Rules that enable personal data to be exported to entities outside the Salesforce group located outside the European Economic Area that have been approved by the data protection authorities of France, Holland and Bavaria, Germany. The Salesforce platform is signed up to the US Privacy Shield platform. OSBORNE and Salesforce have signed standard contractual terms and conditions on the basis approved by the ( European Commission).

How long will we keep your data?

- Personal data strictly related to the purchase process, such as acquisition, purchase, delivery, returns and complaints, are retained for a period of six years from the sale, in accordance with the Spanish Commercial Code.

What are your rights when you provide us with your data?

- Everybody is entitled to obtain confirmation of whether OSBORNE is processing personal data that affects them.

- Interested parties are entitled to access their personal data and request the rectification of any inaccurate data, or deletion of the data when, among other things, they are no longer necessary for the purposes for which they were collected.

- Under certain circumstances, data subjects may request limitation of the processing of their data, in which case the data will only be held for the exercise or defence of claims.

- Under certain circumstances, data subjects may object to the processing of their data for reasons related to their specific situation. In this case, OSBORNE shall cease to process their data, except for overriding legitimate purposes and for the exercise or defence of claims.

- Interested parties may request data portability to obtain the data they have provided to OSBORNE, in a structured and commonly-used format for mechanical reading, to be downloaded by themselves or transmitted by OSBORNE to another entity.

- A data subject may exercise his/her rights by writing an e-mail to rgpd@osborne.es

- If you are dissatisfied with the exercise of your rights, you can file a complaint with the competent Data Protection Agency, at the postal or electronic address given on its website, www.agpd.es

- Your data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent unauthorised access, alteration, loss or processing.