OUR PRIVACY POLICY AT A GLANCE

Who are we? We are Ferimark 2016 S.L. and we treat your data as Data Controller. That means we take responsibility for how we use and protect your personal data.

What do we use your data for? We use the information you have provided us online or through any other means to respond to your inquiries and suggestions, provide you with services or supply you with the products you have requested.

Why do we have them? We are entitled to process your data for different reasons. When you fill out a form or send us an e-mail with a question or suggestion, we have a legitimate interest in responding to it.

With whom do we share your data? We will only share the data with those companies that collaborate with us to attend the requests received and provide our services or provide you with the products, banks and organizations required by law. Under no circumstances do we sell your data to third parties.

What rights do you have? You have the right to access, rectify or delete your personal data. You also have the right to object to our use of data that you have previously authorized us to use, to port it and not to be subject to automated individualized decisions.

In processing your personal data, we apply the following principles to ensure the best protection for you:

• Principle of legality, fairness and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes that we will inform you in advance with absolute transparency.
• Data minimization principle: We will only request data that is strictly necessary in relation to the purposes for which we require it. As few as possible.
• Principle of limitation of the conservation period: the data will be kept for no longer than necessary for the purposes of processing, depending on the purpose, we will inform you of the corresponding retention period, in the case of subscriptions, we will periodically review our lists and delete those records inactive for a considerable time.
• Principle of integrity and confidentiality: Your data will be treated in a way that ensures adequate security of personal data and guarantees confidentiality. You should know that we take all necessary precautions to prevent unauthorized access or misuse of our users’ data by third parties.

In this privacy policy you will find more detailed information about the use we make of the personal data of our customers, suppliers and users, and in general of all persons who maintain contact with us, regardless of the means they have used to communicate (online form, by telephone or e-mail, in person).

We like to be transparent about what we do with your personal data, that you understand the implications of the uses we make of it, or the rights you have in relation to your data. For this reason we keep our Privacy Policy, Legal Notice and Cookies Policy updated, information that you can consult on this web page.

If you have any questions or would like more information about the privacy policy, please read on.

FERIMARK, S.L., undertakes to comply with the legislation in force at all times regarding the processing of personal data. By means of the following privacy policy FERIMARK, S.L., in accordance with the requirements of the RGPD and the LOPDGDD, informs users and persons whose data is processed of:

1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The person responsible for processing your data is Ferimark 2016 S.L.:

Ferimark 2016 S.L informs the user that the data provided through browsing our website, the various data collection forms or sending emails, will be processed by Ferimark 2016 S.L and that such treatment is included in the Register of Processing Activities managed by Ferimark 2016 S.L in accordance with the provisions of the RGPD.

2. WHAT ARE YOUR PERSONAL DATA USED FOR?

In ecobertura.es, we process data both from users of our website, as well as from third parties that maintain relationships with us. In order to make it easier for you to know how we process your data, we have differentiated the purpose for which we use the data, the types of data and the basis of legitimacy according to the category of persons whose data we process. Below, we classify the people whose data we process according to the type of relationship they have with Ferimark 2016 S.L.

• Web users

What data do we collect from our website users?

1. Data of users who fill in any of the available forms: The personal data requested by Ferimark 2016 S.L. include:

• Identification data: name and surname, telephone, postal and e-mail address.
• Data related to the application

For what purposes will we process your personal data?

Whenthe user accepts our privacy policy, he/she authorizes us to use the personal data provided for the following treatments:

• To send you the information and provide you with the service you request through the various forms available on our website.

How do we get your data?

We obtain your data by:

• The form filled in by the web user for the purpose stated therein. The form is subject to the acceptance of this privacy policy by ticking the box indicated.
• We obtain the navigation data from the different cookies that the user accepts when accessing ecobertura.es for the first time.

What is the legitimacy for the processing of your data?

The user’s express consent (Article 6.1.a. RGPD) expressed through the completion of the various forms, the ticking of the box is what legitimizes the treatment by Ferimark 2016 S.L. The user may revoke at any time the consent given, although if you revoke consent, it does not affect the processing of data made prior to the revocation of the same.

Legitimate interest for the elaboration of browsing profiles and to detect preferences through the installation of cookies.

The execution of a contract or the adoption of pre-contractual measures when the customer makes a request through the different forms available to the user on our website or requests information about the services provided by Ferimark 2016 S.L.

• Suppliers

What data do we collect from our suppliers?

1. Supplier’s identification data: The personal data requested by Ferimark 2016 S.L. includes:

• Identification data: name and surname, telephone, postal and e-mail address.
• Employment and professional data
• Activities and business

How do we get your data?

We obtain your data by:

• The signature of the contract that binds us, the acceptance of the budget presented, the receipt of invoices from the supplier and the signature of the contract of Data Processor in case it is appropriate for the service provided.

For what purposes will we process your personal data?

Manage the information related to the data of our suppliers of goods and services, as well as their representatives.

Maintenance of the contractual relationship with our suppliers.

Management of payments and collections related to the contracts that bind us.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract to send you the information and make the proper management of the service provided, not being possible its realization otherwise.

In the legitimate interest for the management of data relating to the representatives of the suppliers of Ferimark 2016 S.L.

• Customers

What data do we collect from our customers?

1. Data of customers who fill in any of the forms available in ecobertura.es as well as in the physical establishment of Ferimark 2016 S.L.

• Identification data: name and surname, telephone, postal and e-mail address.
• Data related to the application

1. Data of customers who register on our platform:

• Identification data: Name and surname, postal and e-mail address, telephone, billing address.

1. Data of customers who make a reservation or order in our establishment in person:
   • Identification data: Name and surname, postal and e-mail address, telephone number, billing address.
2. Customer data obtained through our contracts and quotations
3. Data of customers who make a purchase online or in person:

• Identifying data: Treatment, name, surname, postal and e-mail address, telephone, billing address.
• Transaction data: Products purchased/services rendered and means of payment, invoice or purchase ticket.

How do we get your data?

If you are an online customer we obtain your data through:

• The form that the user fills out to request information and/or a quotation, order or to complete the online purchase in our e-commerce. The form is subject to the acceptance of this privacy policy by ticking the box indicated.
• We obtain the navigation data from the different cookies that the client accepts when accessing ecobertura.es for the first time.

If you are an in-person customer, we obtain your data through:

• The customer registration form.
• Acceptance of the budget submitted.
• The signed contract.

For what purposes will we process your personal data?

• Generate and manage the documentation associated with your requests and purchases.
• Provide you with information about offers, products and services related to your purchase.
• Process your reservation or purchase on-line through our platform.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract to send you the information and make the proper management of the service provided or the product supplied, not being possible otherwise.

In the user’s consent to the sending of the newsletter and commercial communications of offers, activities and promotions of Ferimark 2016 S.L. and the sector that may be of interest and the management of our blog. The user may revoke the consent given at any time.

• Job applicants and candidates.

What data do we collect from applicants?

1. Candidate data requested in the ‘work with us’ form by. Ferimark 2016 S.L.:

• Identification data: name and surname, telephone, postal and e-mail address.
• Academic and employment data
• Data that the candidate himself/herself includes as attached documents

How do we get your data?

We obtain your data by:

• The delivery of a resume at our facilities or the completion of the ‘Work with us’ form on our website.

For what purposes will we process your personal data?

The personal data provided by the candidates are used only for the selection processes that are open or will be carried out in the event that the data provided are for our employment exchange.

What is the legitimacy for the processing of your data?

In the user consent by incorporating your data and curriculum on the website of Ferimark 2016 S.L. to participate in the selection processes that are active as well as in future processes that may be carried out as long as you do not oppose the processing of your data.

• Social Networking Contacts

What data do we collect?

1. Identification data in the Social Network: Ferimark 2016 S.L. will not ask you for data beyond what you have included in your user profile.

For what purposes will we process your personal data?

Answer and manage your inquiries, requests or requests.

Engage with you as long as you are part of our community of followers.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract binding you to the relevant social network and in accordance with its privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf

Instagram https://help.instagram.com/155833707900388

Twitter http://twitter.com/privacy

LinkedIn http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Pinterest https://about.pinterest.com/es/privacy-policy

Youtube https://policies.google.com/privacy?hl=es&gl=es

ecobertura.es shall at all times try to establish adequate mechanisms to obtain the User’s consent for the installation of cookies that require it. When a user accesses our website a pop-up appears informing of the existence of cookies and that if you continue browsing our site you consent to the installation of cookies. The acceptance of the installation of cookies entails the acceptance of the conservation of the IP address in the records of ecobertura.es, together with the date of acceptance, for a period of one year, with the purpose of proving the consent given. You can obtain more information in our “Cookies Policy”.

3. HOW LONG DO WE KEEP YOUR DATA?

• Web users

Data that are processed on the basis of the web user’s consent will be kept as long as they are relevant for the purpose for which they were collected and the consent is not revoked.

Those data that are processed on the basis of legitimate interest, the conservation time will be linked to that which motivated the collection of the data, always ensuring adequate safeguards and respect for the rights and freedoms of data subjects.

Those data that are processed on the basis of the execution of a contract or the adoption of pre-contractual measures, the retention period will be that in which the contractual relationship remains in force as well as the subsequent time that by legal obligation must be retained.

The IP address obtained through cookies will be kept for a period of one year, in order to demonstrate the user’s consent.

Regarding the period of conservation of cookies, you can obtain more information on our website in the section “Cookies policy”.

• Suppliers

Those data that are processed on the basis of legitimate interest, the conservation time will be linked to that which motivated the collection of the data, always ensuring adequate safeguards and respect for the rights and freedoms of data subjects.

Data that are processed on the basis of a contract, as well as if part of the processing is legitimized by a legal obligation, the data will be kept for as long as the contractual relationship is in force. The retention period of the data after the end of the processing, or in the event that the processing is linked to a legal obligation, will be that legally provided for and the data subject may not revoke the processing of the data except in the provisions of blocking of the same provided for by law.

• Customers

Data that is processed on the basis of the customer’s consent will be kept for as long as it is relevant for the purpose for which it was collected and the consent is not revoked.

Those data that are processed on the basis of legitimate interest, the conservation time will be linked to that which motivated the collection of the data, always ensuring adequate safeguards and respect for the rights and freedoms of data subjects.

Data that are processed on the basis of a contract, as well as if part of the processing is legitimized by a legal obligation, the data will be kept for as long as the contractual relationship is in force. The retention period of the data after the end of the processing, in the event that the processing is linked to a legal obligation, will be as long as foreseen and the data can not be revoked by the data subject except in the provisions of blocking of the same provided by law.

• Job applicants and candidates

Those data that are processed based on the consent of the job applicant and candidate will be kept as long as the selection process to which he/she applied remains open. In the event that the application is not for a specific selection process and is for future applications, the conservation period will be a maximum of one year, at which time the CV will be deleted and destroyed, unless the interested party expresses its will to keep it and it is updated.

• Social Networking Contacts

The data processed from Social Network contacts will be kept as long as the user and Ferimark 2016 S.L. maintain a link in the social network. Since Ferimark 2016 S.L. is not directly responsible for the processing of the data, we can only consult or remove your data in a restricted manner. We will treat your data as long as the user of the social network is linked to Ferimark 2016 S.L. as ‘friends’, ‘like’, ‘follow’ or similar buttons.

To proceed to the rectification of your data, restriction of information or those publications that you share, Ferimark 2016 S.L. will not be responsible for making such corrections, but it must be done by the user of the Social Network through the configuration of your profile in accordance with the privacy policy of the Social Network itself.

Regardless of the legitimacy that supported the collection of the data, it may be processed for scientific, historical or statistical research purposes, always implementing appropriate safeguards and respecting the rights and freedoms of data subjects.

4. ADDITIONAL INFORMATION ON DATA PROCESSING

Only people over 14 years old can provide data through our website and e-mail. If you are under this age, you must have the consent of your parents or legal guardians.

The User guarantees the authenticity and timeliness of all data communicated to Ferimark 2016 S.L. and declares that he/she is over 14 years of age, and shall be solely responsible for any false or inaccurate statements made.

In the case of making a reservation of a service or purchase on line, the interested party must be over 18 years of age, the age legally established in the civil code to acquire the age of majority and capacity to act.

The personal data processed by Ferimark 2016 S.L. may be mandatory or voluntary. No special category data will be requested through the web forms in order to guarantee your privacy. If it is necessary to collect special categories of data in order to provide you with a service, you will be asked for them in a different way. The data to be requested in the forms are:

1. Identification data: name and surname, telephone, postal and e-mail address.
2. Data related to the application.

Voluntary information is information that the user is not required to provide in order to contact us.

The fields marked with an asterisk (*) or with the word (required) in our forms are mandatory, refusal to provide them will result in the impossibility to provide the service or fulfill your request.

In the event that you provide us with data of third parties, you declare that you have their consent and you agree to transfer the information provided in this clause, exempting Ferimark 2016 S.L. from any kind of obligation. However, Ferimark 2016 S.L. may carry out verifications to verify that the third party has been informed by adopting the diligence measures established in the data protection regulations.

5. TO WHOM WILL YOUR DATA BE COMMUNICATED?

No data will be transferred to third parties unless required by law or in the event that it is necessary to fulfill your request.

Among the recipients to whom your data may be communicated are:

• Public administrations and agencies when so required by tax, labor, social security or any other applicable regulation. Companies in charge of data processing (providers of fraud detection and prevention, technological services, customer services, advertising and marketing services, and, in general, third party providers that are necessary for the provision of the services offered by Ferimark 2016 S.L. such as courier and transport service providers, etc.).

There may also be international data transfers based on the above transfers/communications for which Ferimark 2016 S.L. will use the tools provided in Article 46 and 49 of the GDPR as a guarantee of those transfers made to countries that do not have an adequacy decision of the European Commission.

In any case, third parties with whom certain personal data is shared will have previously accredited the adoption of adequate technical and organizational measures for the correct protection of the same and will only be carried out with third countries when there is a binding legal instrument in accordance with articles 46 and following of the RGPD. By accepting this privacy policy, you agree that an international transfer of data may occur in accordance with the guarantees indicated.

If the requirements referred to in Article 46 are not met, the data subject may consent to the international transfer or a contract may be executed in the interest of the data subject. Otherwise, an authorization must be requested from the Control Authority.

Ferimark 2016 S.L. does not sell customer data to third parties under any circumstances.

WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

The user may exercise the following rights before Ferimark 2016 S.L.:

1. Access to your personal data
2. Rectify them when they are inaccurate or incomplete
3. Request the deletion or cancellation of data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
4. Oppose your treatment
5. Request the limitation of the processing of your data when any of the conditions provided for in the regulations are met.
6. Request the portability of your data in the cases provided for in the regulations.
7. Prevent being subject to automated decisions
8. Revoke consents granted

In order to exercise their rights, users must send a letter indicating the right they wish to exercise and attach a document proving their identity and a postal or e-mail address for notification purposes. This request can be made either by mail to: Ferimark 2016 S.L Calle Los Geranios 11, Edif. Manena 208b, 38530 – CANDELARIA (Santa Cruz De Tenerife), or at the following e-mail address: iratxegl@ecorbertura.es.

Ferimark 2016 S.L. shall answer the request for the exercise of rights within one month of receipt of the request. This period may be extended for a further two months if necessary, taking into account the complexity and number of applications. We will inform you of any extension within one month of receipt of the request, stating the reasons for the delay.

Likewise, the interested parties have the right to complain to the competent Control Authority (Spanish Data Protection Agency) when they consider that Ferimark 2016 S.L. has violated the rights that the data protection regulations recognize in www.aepd.es.

7. IS MY DATA SECURE?

Ferimark 2016 S.L. has a contract in force with the hosting company Grupo Sys4net, S.L. for the hosting of its website. It is a European company and has the latest systems in security measures.

In any case, Ferimark 2016 S.L. guarantees the adoption of appropriate measures to ensure the confidential treatment of your data taking into account the confidential nature of the same and undertakes that such data will remain secret, treating them with the utmost reserve, and declares to have implemented in its information system, the security policies corresponding to the type of data handled in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR).

All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate that allows an encrypted connection to be established when a user visits our website and exchanges information with us.

8. LINKS TO OTHER WEBSITES

If you choose to leave our website through links to other websites not belonging to our entity, Ferimark 2016 S.L. will not be responsible for the privacy policies of such websites or the cookies that they may store on the user’s computer.

COOKIES POLICY

1. WHAT ARE COOKIES?

A cookie is a text file that a web server can save on your computer’s hard drive to store some information about you as a user. Cookies are used for various purposes such as storing data for future visits, to recognize the user and avoid asking for authentication again, to know which pages you visit, or to save your preferences in customizable areas…). Usually websites use cookies to obtain statistical information about their web pages, and to analyze the behavior of their customers/users.

Cookies used for any of the following purposes are exempt from compliance with the obligations established in article 22.2 of the LSSI:

• Allow only communication between the user’s equipment and the network.
• Strictly to provide a service expressly requested by the user.

Thus, among the excepted cookies would be those that have the purpose of:

• “User input” cookies.
• User authentication or identification cookies (session only).
• User security cookies
• Media player session cookies.
• Session cookies for load balancing.
• User interface customization cookies.
• Certain plug-in cookies for sharing social content

The specific uses we make of these technologies are described in the following sections.

2. TYPES OF COOKIES

Cookies can be classified according to the following criteria:

Depending on who sets the cookie, these may be:

Own Cookies: These are those that are sent to the user’s terminal equipment from a computer or domain managed by the editor itself and from which the service requested by the user is provided.

Third-party cookies: These are those that are sent to the user’s terminal equipment either from a computer or domain managed by us or by a third party, but the information collected by the cookies is managed by a third party other than the owner of the website.

Depending on their retention period, cookies can be:

Session Cookies: These are those that last as long as the user is browsing the Web page and are deleted when browsing ends.

Persistent Cookies: They remain stored in the user’s terminal, for a longer time, thus facilitating the control of the chosen preferences without having to repeat certain parameters each time the Web site is visited.

Depending on their purpose, cookies can be:

Technical cookies: Technical cookies are those essential and strictly necessary for the proper functioning of a website and the use of the various options and services it offers. For example, those for session maintenance, those that allow the use of security features, sharing content with social networks, etc.

Personalization Cookies: Allow the user to choose or customize features of the Web page such as language, locale or browser type.

Analytical Cookies: These are used by Web portals to create browsing profiles and to know the preferences of users in order to improve the supply of products and services. They allow to control geographic areas of greater interest of a user, the information of the most accepted web, etc.

Advertising Cookies / advertising: are those that store information on user behavior obtained through the continued observation of their browsing habits, allowing to develop a specific profile to display advertising based on the same.

3. COOKIES USED ON OUR WEBSITE

ecobertura.es uses the following types of cookies on the web:

Technical Cookies

They allow the user to browse the Web, remember passwords and use features such as the shopping cart.

Personalization cookies

They allow to know the user’s preferences: language, products visited…

Analytics Cookies

We use Google Analytics cookies to quantify the number of users visiting the website. These cookies allow us to measure and analyze how users browse the Web. This information allows FERIMARK 2016, S.L. to continuously improve its services and the experience of the users of the Web. For more information, you can refer to the Google Analytics privacy page: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage.

Advertising and behavioral advertising cookies

These cookies are used to show relevant ads to users based on their use of our website. In addition, they limit the number of times each user views an advertisement and help FERIMARK 2016, S.L. to measure the effectiveness of its advertising campaigns. By browsing the Web, the user accepts that we install this type of cookies on their device and perform queries when the user visits the FERIMARK 2016, S.L. website in the future.

Cookies installed in our web domain:

This website, like most websites, includes functionality provided by third parties.

Our website is a living website and may include new designs or services from third parties. This may occasionally change the cookie settings and cookies may appear that are not detailed in detail in this policy.

Third-party cookies used on our website installed by third-party domains are as follows:

Our site does not control the cookies used by these third parties. For more information about cookies from social networks or other third-party websites, we advise you to review their own cookie policies.

4. INFORMATION AND OBTAINING CONSENT FOR INSTALLATION

ecobertura.es shall at all times try to establish adequate mechanisms to obtain the User’s consent for the installation of cookies that require it. When a user accesses our website, a pop-up appears informing of the existence of cookies and that by accepting them, the user consents to the installation of cookies.

5. HOW CAN I PREVENT THE INSTALLATION OF COOKIES?

The user can refuse the installation of all cookies, according to his/her preferences, except for those that he/she expressly authorizes or those that are of a technical nature and must be installed to guarantee the correct functioning of the web page, indicating those that he/she wishes to install or refuse in the pop-up or cookie acceptance window that appears when entering the home page. However, there are other ways to prevent cookies from being installed on your computer, as described below.

The user can configure his browser to accept, or not, the cookies he receives or to warn him when a server wants to save a cookie. Disabling some technical cookies does not guarantee the correct functioning of some of the web utilities.

The user will be able to exclude the storage of “analytical and advertising” cookies from Google Analytics on his or her terminal by means of the opt-out systems provided by Google Analytics.

Below, we also provide some examples of how to disable cookies:

1. Through the configuration of the browser itself:

• Internet Explorer: http://windows.microsoft.com/es-es/windows-vista/block-or-allow-cookies
• Firefox: https://support.mozilla.org/es/kb/habilitar-y-deshabilitar-cookies-que-los-sitios-web
• Safari: http://support.apple.com/kb/HT1677?viewlocale=es_ES.
• Chrome: https://support.google.com/accounts/answer/61416?hl=es.
• Opera: http://help.opera.com/Windows/11.50/es-ES/cookies.html

For further information, please refer to the Spanish Data Protection Agency’s web page that helps you to configure privacy settings in social networks, browsers and mobile operating systems. More information.

1. Through third-party tools:

There are third-party tools, available on-line, that allow users to detect cookies on each website they visit and manage their deactivation, for example:

http://www.ghostery.com

http://www.youronlinechoices.com/es/

In any case, the user can allow or block cookies, as well as delete your browsing data (including cookies) from the browser you use. Please refer to the options and instructions provided by your browser for this purpose. Please note that if you accept third-party cookies, you must delete them from your browser options.

6. LINKS TO OTHER WEBSITES

If you choose to leave our Web site through links to other Web sites not owned by us, we are not responsible for the privacy policies of those Web sites or the cookies they may store on your computer.

7. HOW DO WE COLLECT AND USE IP ADDRESSES?

Web servers will be able to automatically detect the IP address and domain name used by users.

An IP address is a number automatically assigned to a computer when it connects to the Internet. This information allows the subsequent processing of the data in order to know if you have given your consent to the installation of cookies, perform measurements only statistics that allow to know the number of visits made to the Web, the order of visits, the point of access, etc..

8. INTERNATIONAL TRANSFER OF DATA

The cookies installed on our web domain are installed on our server so the data collected in them are not subject to international data transfers.

Third-party cookies installed on our website by third-party domains may be subject to international data transfer. For more information on possible international data transfers that these cookies may involve, we recommend that you click on the “more information” section of the cookie you wish to consult.

Data collected by Google Analytics cookies may be subject to international data transfer as they are processed by Google. As described in its Privacy Shield certificationGoogle, including Google LLC, and its wholly owned U.S. subsidiaries, which have certified their adherence to the Privacy Shield principles, comply with the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield frameworks.

9. UPDATE OF OUR COOKIE POLICY

This policy is reviewed periodically to ensure that it is current and may be amended. We recommend that you visit the page regularly where we will inform you of any updates in this regard.