Privacy Notice

CESINE is committed to protecting and respecting your privacy. This privacy statement sets out the basis on which we process personal information that we collect about visitors to our website, our premises, or our customer contact point, as well as customers, suppliers, or other business partners. Please read it carefully.

1. Information We Collect About You

We may collect and process the following information about you:

1. Information you provide to us. This is information about you that you provide to us yourself in the following ways:
   1. Completing forms on our website (or other forms we ask you to complete).
   2. Giving us a business card (or similar).
   3. Communicating with us by phone, post, email, or other means.

   This may include, for example, your name, address, email address and phone number; information about your relationship with CESINE; and information about your job title, background, and interests.

2. Information about you collected by our website and other systems.
   1. When you visit our website, certain information about you and your visit is collected automatically, for example the Internet Protocol (IP) address used to connect your device to the internet and other data such as browser type and version, and the pages of our site that you visit.
   2. Our website may also download “cookies” to your device, which is described separately in our cookie statement.
3. Additional information. We may also collect information from other sources. For example:
   1. If we have a business relationship with the organisation you represent, your colleagues or other professional contacts may provide us with information about you, such as your contact details or your role in that relationship.

2. How We Use Your Information

1. We may use your information for the following purposes:
   1. To operate, administer and improve our website and our premises, as well as other aspects of how we conduct our operations.
   2. To comply with our legal and regulatory obligations, and to bring or defend legal proceedings.
   3. To conduct, manage, develop and promote our business and, in particular, our relationship with the organisation you represent (if applicable) and related transactions (for example, for marketing purposes).
   4. To protect our business from fraud, money laundering, disclosure of confidential information, cyber-attack, theft of private content and other financial or business crimes.
2. From time to time, we may review the information about you that we hold in our systems, including the content and other data from your communications with us by email or other means, to ensure compliance and to protect CESINE’s activities, as described above.
3. These reviews may be intended to reveal information relevant to legal proceedings or may affect records relevant to internal or external regulatory or criminal investigations.
4. To the extent permitted by applicable law, such reviews will be carried out in a reasonable and proportionate manner and approved at an appropriate management level. Ultimately, they may involve the disclosure of your information to government bodies and parties involved in legal proceedings, as described below.
5. On occasion, your emails and other communications may be seen by people other than the staff member to whom they were addressed for ordinary business management purposes (for example, where necessary because a staff member is out of the office or has left CESINE).
6. We will process your personal information only to the extent necessary for the purposes described above and, in all cases, we will ensure that such processing is not so detrimental to you or your privacy as to override our legitimate interest in achieving these objectives.
7. In exceptional circumstances, we may be legally required to disclose or process your personal information. When we request personal information, we will tell you whether it is mandatory to provide the requested information to meet a legal obligation or whether it is voluntary and there will be no consequences if you refuse to do so. In all other cases, you should assume that we need the information for our operations or to comply with regulations (as described above).
8. If you have any doubts about the need for CESINE to obtain the information we request, please contact the CESINE representative using our Contact details to make your enquiry.

3. Disclosure and International Transfer of Data

1. With your consent or, where appropriate, under the corresponding legal exemptions for a legitimate purpose, your personal information may be disclosed to the following recipients:
   1. Service providers that host our website or other information technology systems, or that store or process your information on our behalf as data processors, under strict confidentiality and security conditions.
   2. In exceptional cases:
      • A competent court or government authority, or parties involved in legal proceedings, in any country or territory.
      • Any recipients required by law.

4. Retention and Deletion of Your Information

1. Our intention is for the personal information we hold about you to be accurate and up to date. We will delete information about you that we no longer need.
2. Personal data provided will be retained for as long as the contractual relationship is maintained (and deletion is not requested by the data subject), and as required by law; after this period, we will delete it. Use the details in the Contact section for more information.
3. Please note that we may retain minimal information about you even if we know you have left the organisation you represented, so that we can maintain continuity if we re-establish contact in the future with you as the representative of a different organisation.

5. Your Rights

1. You may have the right to access your personal information that we hold and certain related information under data protection law. You may also request that inaccurate personal information be corrected or deleted.
2. You may object at any time to our use of your personal information for direct marketing purposes and, in certain circumstances, you may have the right to object to our processing some or all of your personal information (and to request that we delete it). You may also request the restriction of the processing of your personal data.
3. In certain circumstances, you may also have the right to data portability, i.e., to request that we transfer your personal data to you or to a new service provider.
4. If you would like to exercise any of the rights mentioned above, please use the Contact details below.
5. You may also lodge a complaint about how we process your personal information with the national data protection supervisory authority.

6. Contact

1. Questions, comments and requests regarding this privacy statement and how we process personal information are welcome.
2. Please email the Data Protection Officer at dpo@cesine.com.

7. Changes to This Policy

Any changes we make to this privacy statement in the future will be published on our website www.cesine.com/es/politica-de-privacidad/ and will also be available on request using the Contact details below:

• Email: dpo@cesine.com
• Address: C/ Simón Cabarga No. 6, 39005 Santander, Cantabria
• Phones: 942 281 858

Check regularly for updates.
Last updated: January 2025.