In accordance with Article 10 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, we inform you that DIVERXIA H2, S.L., with Tax Identification Number B67670562 and registered office at Calle Botiguers 3, Floor 2 Office C, 46980 – Paterna (Valencia) Spain, is responsible for the management and operation of the website www.diverxiah2.com, registered in the Commercial Register of VALENCIA T 11086, L 8364, F 1, S 8, H V 201548.

If you wish to contact us, you can do so by postal mail to the above address or through the email address info@diverxiah2.com. Access to our domain can be made directly or through any existing redirection, with this Privacy Policy being applicable in either case.

Access to our domain can be made directly or through any existing redirection, with this Privacy Policy being applicable in either case.

PRIVACY POLICY

This Privacy Policy describes how we handle your personal data (e.g., collection, use, communication, storage, and protection of your personal information) and provides information about your rights as a data subject.

DIVERXIA H2 SL is the data controller, as well as the entity responsible for the collection, use, communication, storage, and protection of your personal data, in accordance with the General Data Protection Regulation, internal rules and policies, or any applicable national regulations.

In compliance with Organic Law 3/2018 of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), as well as the new General Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, through this document, DIVERXIA H2 SL informs:

Identity and contact details of the Data Controller

Our identifying information:

DIVERXIA H2 SL

You can contact us:

• By postal mail P.Empresarial Táctica C/Botiguers 3 Edificio Onofre Planta 2 Oficina C. 46980-Paterna (Valencia) Spain
• By e-mail: info@diverxiah2.com
• By phone: 902 565 274
• Website: www.diverxiah2.com

Categories of personal data

We process the following categories of personal data:

• Identification data –name and surname, ID card or equivalent.
• Administrative data – Company name, address, bank details and contact persons.
• Contact information –email, phone number and address.
• Digital data –cookies, IP address, web pages and social networks and other data publicly accessible on the Internet, etc.
• Business data – suppliers, customers, administrators and partners.
• Other data necessary for processing – for more information about the category of personal data in the development of our activity, you can consult our Record of Processing Activities.

How do we collect your data?

We collect information about you from the following sources:

From our website:

• Through the Contact Form
• Through the Work with Us Form

From other Internet tools:

• Through our social networks.

From other sources:

• When communicating or interacting with you by telephone, e-mail or other means of contact from our company.
• When visiting our facilities.
• Through a commercial visit.

For more information about the different data collection mechanisms in the development of our activity, you can consult our Record of Processing Activities.

How long do we keep your data? (Retention Period)

The data will be kept for as long as there is a commercial, contractual, or professional relationship with the data subject and subsequently for the years necessary to comply with the corresponding legal obligations in each case. Notwithstanding the foregoing, they will be kept for as long as they are necessary for the processing and the data subject does not request their deletion.

Regarding accounting and tax documentation, for tax purposes, accounting books and other mandatory record books according to the applicable tax regulations (personal income tax, VAT, corporate tax, etc.), as well as the supporting documentation justifying the entries recorded in the books (including computer programs and files and any other evidence with tax relevance), must be kept, at least, during the period in which the Tax Administration has the right to verify and investigate and, consequently, to settle tax debt, according to Articles 66 to 70 of the General Tax Law, for 4 years.

In terms of accounting and tax documentation, for commercial purposes, books, correspondence, documentation, and documents concerning your business, duly ordered from the last entry made in the books, unless otherwise established by general or special provisions, this commercial obligation extends to mandatory books (income, expenses, investments, and provisions), as well as the documentation and evidence supporting the entries recorded in the books (issued and received invoices, receipts, rectifying invoices, bank documents, etc.), according to Article 30 of the Commercial Code, for 6 years.

For more information on data retention in the development of our activity, you can consult our Record of Processing Activities.

To whom do we transfer your data?

Depending on the purpose of the processing, we may transfer your personal data to different categories of recipients (professionals, entities, collaborators directly related to the Controller, public or tax administrations) with whom we have signed collaboration agreements protecting your rights and freedoms in relation to your personal data. All of this under your express consent in the necessary cases and in compliance with our obligations as Data Controllers. For more information, you can consult our Record of Processing Activities.

Likewise, we inform you that your data may be processed by companies belonging to our group, for commercial, administrative, statistical, and/or financial purposes. For more detailed information, you can consult the website www.grupo-alonso.com.

In any case, we only transfer your data to the extent strictly necessary and in the manner required to carry out the purposes described in this privacy policy. These entities and/or professionals considered Data Processors will be governed by the provisions of Article 28 of the GDPR, and this entity is responsible for ensuring that they take all necessary security measures in accordance with Article 32 of the GDPR.

Where do we process your data?

In order to carry out our business we process your personal data in accordance with the conditions set out in this policy, within the European Union (EU).

In principle, this entity does not carry out any international data processing. If necessary and in those services offered by this entity that require international data transfers for their provision, this circumstance will be included in the Specific Conditions of the contract that apply to the service and will be expressly accepted by the client prior to them.

For more information on where we process data in the development of our activity, you can consult our Record of Processing Activities.

What are the purposes of processing your data?

Your data will be collected for the relevant processing operations for the following purposes:

Specific purposes of elements on our website:

• Contact Form:
  • Receive contact information or other requests made by you.
• Work with us form:
  • Include the curriculum in our job pool.
• Specific treatment in social networks (see social networks section)

General purposes of our activity:

• Receive contact information or other requests made by you through any of our communication channels.
• Administrative, Commercial, Tax and/or Accounting tasks derived from the provision of our services.

For more information on the purposes of data processing in the development of our activity, you can consult our Record of Processing Activities.

You can withdraw your consent at any time free of charge by exercising your rights, directing your request in writing and properly identified by some documentary evidence to our address P.Empresarial Táctica C/Botiguers 3 Edificio Onofre Planta 2 Oficina C. 46980-Paterna (Valencia) Spain or by email at info@diverxiah2.com, attention to our internal data protection officer. For more detailed information on the Exercise of your rights, you can consult our Record of Processing Activities.

Why can we process your data? (Legitimacy)

The use of your data under the conditions described above is allowed by European and Spanish data protection regulations in accordance with the following legal bases:

Art.6. RGPD

• The data subject gave consent to the processing of his/her personal data for one or more specific purposes.
• The processing is necessary for the performance of a contract to which the data subject is a party or for the application of pre-contractual measures requested by him/her.
• The processing is necessary for compliance with a legal obligation applicable to the data controller.

For more information on the legal basis for processing data in the development of our activity, you can consult our Record of Processing Activities.

What are your rights?

Data protection regulations allow you to exercise your rights of access, rectification, opposition, deletion (“right to be forgotten”), limitation of processing, portability, and not to be subject to individualized decisions before the data controller.

Any data subject has the right to be provided, BEFORE their data is collected, with basic information at a first level, in a summarized form, at the same time and in the same medium in which their personal data is collected. On the other hand, they must be sent the rest of the information, in a more suitable medium for its presentation and comprehension.

The information to be provided in layers or levels would be as follows:

1st Layer Information

• The identity of the Data Controller.
• What data will be processed.
• For what purpose.
• Where and how they have been obtained.
• The legal basis for the processing.
• Whether they will be communicated, transferred, or processed by third parties.
• Reference to the procedure for exercising Rights.

2nd Layer Information

• Contact details of the controller. Identity and data of the representative (if any). Identity and data of the representative (if any). Contact details of the data protection officer (if any).
• Extended description of the purposes of the processing. Deadlines or criteria for data retention. Automated decisions, profiles, and applied logic.
• Detail of the legal basis for processing, in cases of legal obligation, public interest, or legitimate interest. Obligation or not to provide data and consequences of not doing so.
• Recipients or categories of recipients. Decisions on adequacy, guarantees, binding corporate rules, or specific situations applicable
• How to exercise the rights of access, rectification, deletion, and portability of data, and the limitation or opposition to its processing.
• Right to withdraw the consent given.
• Right to lodge a complaint with the Supervisory Authority.

(The following table indicates what your rights are).

Access right	To know what data of yours are being processed, for what purpose they are processed, where they have obtained the data, and if they are going to communicate or have communicated them to someone.
Right of rectification	To modify inaccurate or incomplete data of yours.
Cancellation right	To cancel your inappropriate or excessive data.
Right of opposition	To prevent your data from being processed or from being processed, only in the cases established by law.
Right to limit processing	To request the suspension of data processing in the cases established by law.
Right to data portability	To receive your data provided in a structured, commonly used electronic format and to transmit them to another Controller.
Right not to be subject to individualized decisions	In order not to make a decision about you, which produces legal effects or affects you, based solely on the processing of your data.

These rights are characterized by the following:

• Their exercise is free.
• You can exercise the rights directly or through a legal representative.
• If the request is made electronically, the information will be provided by these means when possible unless the data subject requests otherwise.
• Before exercising your rights, we must identify you to protect your personal data against fraudulent attempts.
• Your request will be resolved within one month.

If the requests are manifestly unfounded or excessive (e.g. repetitive nature), the data controller may:

• The controller is obliged to inform you about the means to exercise these rights. These means must be accessible, and this right cannot be denied solely on the grounds that another means is chosen.
• If the controller does not process the request, it will inform and no later than one month, of the reasons for not acting and the possibility of complaining to a Supervisory Authority.

If you wish to exercise any of the described rights, you can contact us through our Data Protection Officer:

• By postal address:

DIVERXIA H2 SL

Att. Data Protection Agency

P.Empresarial Táctica C/Botiguers 3 Edificio Onofre Floor 2 Office C.

46980-Paterna (Valencia) Spain

• Or by e-mail at the following address: info@diverxiah2.com

Applicable Legislation and Competent Courts

The terms and conditions governing this website, as well as any relationships that may arise, are protected and subject to Spanish legislation. For the resolution of any dispute, litigation, or discrepancy that may arise between the user and DIVERXIA H2 SL regarding the use of this website, it is agreed to submit them to the Courts and Tribunals of Valencia, Spain.

Cookies

Cookies are files that are downloaded to your computer to collect standard internet log information and information about browsing habits. This information is used, for example, to track visitor usage of the website and compile statistical reports on website activity.

You can set your browser not to accept cookies. However, some first-party cookies are necessary to enable the website user’s session to use our services.

For more information, please visit the website’s Cookie Policy.

Social networks

DIVERXIA H2 SL has presence in various media or social networks, such as: LinkedIn being the purpose of the processing of personal data those established within the conditions affecting the service. In the event that the registration to certain services is made through personal data associated with a user account, we inform you that we will share certain information contained in your account. DIVERXIA H2 SL reminds you that you should be aware of the privacy policies of such media or social networks in which you are registered in order to avoid sharing unwanted information.

You have the privacy and account management settings in social networks to manage privacy, identity, advertising and other related preferences.

In the event that the registration to certain services is made through personal data associated with a user account, we inform you that we will share certain information contained in your account.

The purposes of the data collected in the different social networks are:

• Personnel selection / Contact with candidates.
• Communication with customers or interested parties.

In relation to LinkedIn, when a user publishes his or her profile as a professional, we will have access to the public data incorporated by him or her in said social network. In addition, we will be able to communicate with them through it. The privacy policy governing this social network is available at the following link: https://www.linkedin.com/legal/privacy-policy?_l=es_ES.

Activity Log

You can request through our email address info@diverxiah2.com an updated copy of our Register of Activities.

Unsubscription Request

To request the cancellation of any service in which you are registered, we inform you that you can exercise your right to cancel or oppose to the processing of your data by writing to P.Empresarial Táctica C/Botiguers 3 Edificio Onofre Floor 2 Office C. 46980-Paterna (Valencia) Spain or by sending an email to info@diverxiah2.com, with the subject UNSUBSCRIBE REQUEST and indicating your data and the email address with which you are registered. We will respond to your request indicating the status of your request or if we need more information.

Security

DIVERXIA H2 SL adopts organizational and technical measures in order to guarantee the security of personal data and avoid its alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.

Updates

We keep our privacy policy under review and may change it from time to time (primarily to comply with legal and data protection practices).

Updated versions will be posted on our website.

Applicable Legislation and Competent Courts

The terms and conditions governing this web site, as well as the relationships that may arise are protected and subject to Spanish law. The terms and conditions governing this website, as well as any relationships that may arise, are protected and subject to Spanish legislation. For the resolution of any dispute, litigation, or discrepancy that may arise between the user and DIVERXIA H2 SL regarding the use of this website, it is agreed to submit them to the Courts and Tribunals of Valencia, Spain.