Your privacy is important to me. In this privacy statement, I explain what personal data I collect from my users and how I use it. I encourage you to read these terms carefully before providing your personal data on this website. Users over 13 years of age may register on https://www.revertis.com/ as users without the prior consent of their parents or guardians.

In the case of minors under thirteen years of age, the consent of parents or guardians is required for the processing of their personal data.

Under no circumstances will data relating to the professional economic situation or the privacy of other family members be collected from minors without their consent.

If you are under thirteen years of age and have accessed this website without notifying your parents, you must not register as a user.

This website respects and cares for users’ personal data. As a user, you should know that your rights are guaranteed.

I have strived to create a safe and reliable space, and that is why I want to share my principles regarding your privacy:

• I never request personal information unless it is truly necessary to provide you with the services you require.
• I never share my users’ personal information with anyone except to comply with the law or if I have your express authorization.
• I never use your personal data for a purpose other than that expressed in this privacy policy.

It should be noted that this Privacy Policy may vary depending on legislative or self-regulatory requirements, so users are advised to visit it periodically. It will be applicable if users decide to fill out any form on any of its contact forms where personal data is collected.

REVERTIS, S.L. has adapted this website to the requirements of Organic Law 15/1999 of December 13 on the Protection of Personal Data (LOPD) and Royal Decree 1720/2007 of December 21, known as the LOPD Development Regulation. It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons (GDPR), as well as Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSICE or LSSI).

Controller of your personal data

Controller’s Identity: REVERTIS, S.L.

Controller’s Tax ID (NIF/CIF): B-65013633

Controller’s Address: Passeig del Ferrocarril, 337, Pl Bj Local 3, 08860, Castelldefels (Barcelona)

Controller’s Email: info@revertis.com

Controller’s Activity: Software

For the purposes of the aforementioned General Data Protection Regulation, the personal data you send me through the website forms will be processed as “Website users and subscribers” data.

For the processing of my users’ data, I implement all technical and organizational security measures established in current legislation.

Principles I will apply to your personal information

In processing your personal data, I will apply the following principles that comply with the requirements of the new European data protection regulation:

• Principle of lawfulness, fairness, and transparency: I will always require your consent for the processing of your personal data for one or more specific purposes, which I will inform you of beforehand with absolute transparency.
• Principle of data minimization: I will only request strictly necessary data in relation to the purposes for which I require them. The minimum possible.
• Principle of storage limitation: Data will be kept for no longer than necessary for the purposes of processing, depending on the purpose. I will inform you of the corresponding retention period. In the case of subscriptions, I will periodically review my lists and delete inactive records for a considerable time.
• Principle of integrity and confidentiality: Your data will be processed in such a way as to ensure adequate security of personal data and guarantee confidentiality. You should know that I take all necessary precautions to prevent unauthorized access or misuse of my users’ data by third parties.

How I obtained your data

The personal data I process on https://www.revertis.com/ comes from:

• Contact form
• Comments on publications
• Service request form
• Download form

What are your rights when you provide me with your data?

Any person has the right to obtain confirmation as to whether https://www.revertis.com/ is processing personal data concerning them or not.

Interested parties have the right to:

• Request access to personal data concerning the data subject
• Request its rectification or erasure
• Request restriction of its processing
• Object to processing
• Request data portability

Interested parties may access their personal data as well as request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the limitation of the processing of their data, in which case I will only retain them for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. https://www.revertis.com/ will cease to process the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. As an interested party, you have the right to receive the personal data concerning you, which you have provided to me, in a structured, commonly used, and machine-readable format, and to transmit them to another data controller when:

• Processing is based on consent
• Data has been provided by the interested party.
• Processing is carried out by automated means.

When exercising your right to data portability, you will have the right to have personal data transmitted directly from one controller to another where technically feasible.

Interested parties will also have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency, if they consider that the processing of personal data concerning them infringes the Regulation.

For what purpose do I process your personal data?

When a user connects to this website, for example, to comment on a post, send an email to the owner, subscribe, or make a contract, they are providing personal information for which REVERTIS, S.L. is responsible. This information may include personal data such as your IP address, name, physical address, email address, phone number, and other information. By providing this information, the user gives their consent for their information to be collected, used, managed, and stored by https://www.revertis.com/, only as described in the Legal Notice and this Privacy Policy.

On https://www.revertis.com/, there are different systems for collecting personal information, and I process the information provided by interested parties for the following purpose for each collection system (forms):

• Contact form: I request the following personal data: Name, Email, to respond to the requirements of https://www.revertis.com/ users. For example, I may use this data to respond to your request and answer any questions, complaints, comments, or concerns you may have regarding the information included on the website, the services provided through the website, the processing of your personal data, issues related to the legal texts included on the website, as well as any other queries you may have that are not subject to the contracting conditions. I inform you that the data you provide us will be located on the servers of: CLOUDMAX, S.L.U. (provider of https://www.revertis.com/) within the EU.
• Blog comment registration form: To comment on blog posts on https://www.revertis.com/, the user is required to register through this form. In this case, I request the following personal data: Name, Email. Once registered, the user can make as many comments as they wish and reply to previous ones. I inform you that the data you provide us will be located on the servers of: CLOUDMAX, S.L.U. (provider of https://www.revertis.com/) within the EU.
• Service request form: I request the following personal data: Name, Email, to request any of the services that https://www.revertis.com/ makes available to its users. The information collected will allow requesting the corresponding service for possible offline processing. Requests will be answered by email. The website does not allow direct payment management. I inform you that the data you provide us will be located on the servers of: CLOUDMAX, S.L.U..

(provider of https://www.revertis.com/) within the EU.

• Download form: On this website, different content that is periodically incorporated can be downloaded. In this case, I request the following personal data: Name, Email, to activate the subscription form. Your information is used for the purposes indicated for subscribers. I inform you that the data you provide us will be located on the servers of: CLOUDMAX, S.L.U. (provider of https://www.revertis.com/) within the EU.

There are other purposes for which I process your personal data:

• To ensure compliance with the terms of use and applicable law. This may include the development of tools and algorithms that help this website ensure the confidentiality of the personal data it collects.
• To support and improve the services offered by this website. • Other non-identifiable data is also collected through some cookies that are downloaded to the

user’s computer when browsing this website, which I detail in the cookie policy.

• To manage social networks. https://www.revertis.com/ may have a presence on social networks. The processing of data carried out on individuals who become followers on the social networks of the official pages of https://www.revertis.com/ will be governed by this section. As well as by those terms of use, privacy policies, and access regulations belonging to the respective social network and previously accepted by the user of REVERTIS, S.L.. It will process your data for the purposes of correctly managing its presence on the social network, informing about activities, products, or services of https://www.revertis.com/. As well as for any other purpose that the regulations of the social networks allow. Under no circumstances will I use follower profiles on social networks to send advertising individually.

In accordance with the provisions of the European General Data Protection Regulation (GDPR) 2016/679, REVERTIS, S.L., with registered office at Passeig del Ferrocarril, 337, Pl Bj Local 3, 08860, Castelldefels (Barcelona), will be responsible for the processing of data corresponding to website users and subscribers.

https://www.revertis.com/ does not sell, rent, or transfer personal data that can identify the user, nor will it do so in the future to third parties without prior consent. However, in some cases, collaborations with other professionals may occur. In such cases, user consent will be required, informing about the

identity of the collaborator and the purpose of the collaboration. This will always be carried out with the strictest security standards.

Legitimacy for the processing of your data

The legal basis for the processing of your data is: consent.

To contact or make comments on this website, consent to this privacy policy is required.

The prospective or commercial offer of products and services is based on the consent requested from you, and in no case will the withdrawal of this consent condition the execution of the subscription contract.

Data category

The categories of data processed are identifying data.

No specially protected data categories are processed.

How long will I keep your data?

The personal data provided will be kept:

• As long as the commercial relationship is maintained.

To whom will your data be communicated?

Many tools I use to manage your data are contracted by third parties.

To provide services strictly necessary for the development of the activity, https://www.revertis.com/ shares data with the following providers under their corresponding privacy conditions:

• Google Analytics: a web analytics service provided by Google Inc., a Delaware company whose main office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help https://www.revertis.com/ analyze how users use the website. The information generated by the cookie about your use of https://www.revertis.com/ (including your IP address) will be directly transmitted to and stored by Google on servers in the United States.
• Hosting: CLOUDMAX, S.L.U. processes data for the purpose of providing its hosting services to REVERTIS, S.L..
• Web platform: Automattic Inc., with domicile in the USA. More information at: (https://es.wordpress.org) (Automattic Inc.). Automattic Inc. processes data for the purpose of providing its web platform services to REVERTIS, S.L..

Navigation

By browsing https://www.revertis.com/, non-identifiable data may be collected, which may include IP addresses, geographical location (approximately), a record of how services and sites are used, and other data that cannot be used to identify the user. Among the non-identifiable data are also those related to your browsing habits through third-party services. This website uses the following third-party analytics services:

• Google Analytics
• Bing
• Facebook Pixel

I use this information to analyze trends, administer the site, track users’ movements around the site, and to gather demographic information about my user base as a whole.

Data secrecy and security

https://www.revertis.com/ commits to the use and processing of users’ personal data, respecting their confidentiality and using them according to their purpose, as well as fulfilling its obligation to store them and adopt all measures to prevent alteration, loss, unauthorized processing, or access, in accordance with the provisions of current data protection regulations.

This website includes an SSL certificate. This is a security protocol that ensures your data travels integrally and securely; that is, the transmission of data between a server and a web user, and in feedback, is fully encrypted.

https://www.revertis.com/ cannot guarantee the absolute impregnability of the Internet network and therefore the violation of data through fraudulent access by third parties.

Regarding the confidentiality of processing, REVERTIS, S.L. will ensure that any person authorized by it to process customer data (including its personnel, collaborators, and providers) will be under the appropriate obligation of confidentiality (whether a contractual or legal duty).

Should a security incident occur, upon becoming aware of it, REVERTIS, S.L. must notify the Client without undue delay and must provide timely information related to the Security Incident as it becomes known or as reasonably requested by the Client.

Accuracy and veracity of data

As a user, you are solely responsible for the veracity and correctness of the data you submit to https://www.revertis.com/, exempting REVERTIS, S.L. from any responsibility in this regard.

Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided and undertake to keep them duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

Acceptance and consent

The user declares to have been informed of the conditions regarding the protection of personal data, accepting and consenting to their processing by REVERTIS, S.L. in the manner and for the purposes indicated in this privacy policy.

Revocability

The consent given, both for the processing and for the transfer of data of interested parties, is revocable at any time by communicating it to REVERTIS, S.L. under the terms established in this Policy for the exercise of ARCO rights. This revocation will in no case have retroactive effect.

Changes to the privacy policy

REVERTIS, S.L. reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, REVERTIS, S.L. will announce the changes introduced on this page with reasonable anticipation of their implementation.

Commercial emails

In accordance with the LSSICE, https://www.revertis.com/ does not engage in SPAM practices, so it does not send commercial emails electronically that have not been previously requested or authorized by the user. Consequently, in each of the forms on the website, the user has the possibility to give their express consent to receive the newsletter, regardless of the commercial information specifically requested.

In accordance with the provisions of Law 34/2002 on Information Society Services and Electronic Commerce, https://www.revertis.com/ undertakes not to send commercial communications without identifying them

properly.