In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and current data protection legislation, we hereby inform you that the Data Controller of your data is DIGITAL COLLECTIVE TOKENS, SL, holder of Tax Identification Number B04990115, whose headquarters is Calle Violetes, 32 (08197), Sant Cugat del Vallès (Barcelona) registered in the Commercial Register of Barcelona, Volume 47,777, Folio 183, Page B-561934 (hereinafter "frameit", "Company", "we" o "us") and e-mail i[email protected].

The purpose herein is to provide information on how frameit processes your personal data in accordance with current Personal Data Protection legislation, specifically Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with regard to the Processing of Personal Data and on the Free Movement of such Data (hereinafter, "GDPR") and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, "LGPDGDD").”).

I. Purposes of processing

Why do we process your data?

The Data Controller shall process your data, in a fair and transparent manner, whether by automated or non-automated means, for the following specified and explicit purposes:

II.- Legal basis

What is the legal basis for processing your data?

The legal basis is as follows:

III. Recipients

Who may we disclose your data to?

Personal data may be transferred/communicated to the following recipients:

Will your data be transferred internationally?

frameit operates systems outside Europe. As a result, we may transfer personal data from Europe to third countries outside Europe under the following conditions:

When you have given us your prior consent to transfer to a third country, you may withdraw your consent at any time. However, please be aware that our services may not be available if we are unable to transfer personal data to third countries.

When we transfer personal data to third countries, we strive to ensure that appropriate safeguards are put in place, for example, through the use of standard contractual clauses or Privacy Shield certification.

IV. Data retention period

How long do we keep your data?

In accordance with the principle of minimisation and limitation of the retention period, the personal data provided shall be kept for a period of time not longer than necessary to fulfill the specific purpose and/or purposes for which they are collected and for as long as the business or employment relationship is maintained.

Once the relationship has come to an end, the data shall be kept for the appropriate period of time in order to comply with the statute of limitations for possible data protection infringements, as well as the statute of limitations periods pursuant to other applicable legislation, although duly blocked before destruction.

The CVs you provide shall be destroyed if they do not match the profiles sought by the Data Controller, or shall be kept for a maximum of one year, in case the Data Controller deems that you may be of potential interest vis-à-vis future selection processes for the company or a client. In this case, you would be informed and consent would be requested at the appropriate time.

V. Rights of data subjects

What are your rights upon providing us with your data?

We hereby inform you that you have the following rights:

You may exercise these rights at any time and free of charge by sending a written communication to the company “DIGITAL COLLECTIVE TOKENS, SL.”, holder of Tax Identification Number B04990115, whose headquarters is Calle Violetes, 32 (08197), Sant Cugat del Vallès (Barcelona) or by sending an e-mail to the following address: [email protected], in both cases including a photocopy of your ID card or other equivalent electronic identification document.

You may use the templates and forms on the rights referred to in the previous point on the official website of the Spanish Data Protection Agency (http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/ejercicio_derechos/index-ides-idphp.php).

On the other hand, if you deem that the Data Controller has processed your personal data inappropriately, you may file a complaint before the Data Controller or the corresponding Supervisory Authority. In Spain, you should address your complaint to the Spanish Data Protection Agency.

VI. Links to other websites

There are links on the Website to other websites that we believe may be potentially useful and of interest to you. However, please be aware that we do not endorse the content or services of such websites and are not responsible for the privacy policies of such websites. We urge you to review the privacy policies of all websites you visit. Please note that this Privacy Policy only applies to data collected and/or processed by the Data Controller.

VII. Security measures

Taking into account the nature, scope, context and purposes of the processing as well as the risks of varying likelihood and severity to the rights and freedoms of natural persons, the Controller shall implement appropriate technical and organisational measures in order to ensure the integrity, confidentiality and availability and to be able to demonstrate that the processing is carried out in accordance with the GDPR and the LOPDGDD, as well as to prevent any security breach leading to the accidental or unlawful destruction, loss or alteration of, unauthorised disclosure of or access to, personal data transmitted, stored or otherwise processed.

However, you are hereby warned and informed that technical measures are neither infallible nor impregnable, and for this reason, the Data Controller cannot be held liable for such practices or the consequences thereof, in particular, for the presence of viruses or other elements or for damages that may derive from the presence of viruses, the connection or downloading of content from the Website that cause alterations in computer systems (hardware and software).

VIII. Information about cookies

Cookies are files that are downloaded to your computer or terminal when you access our website. Cookies allow us, among other things, to store and retrieve information about a user's browsing habits or their device and, depending on the information they contain and the way they use their device, they can be used to recognise the user.

IX. How we use cookies

DIGITAL COLLECTIVE TOKENS, SL may use first-party or third-party cookies on this website.

The cookies used by www.frameit.io, or the third party acting on its behalf, are only associated with an anonymous user and their computer, and do not provide us with the user's personal data.

By using cookies, the www.frameit.io server or that of any third-party acting on its behalf, may recognise the browser of the device used by the user in order to make browsing easier, allowing, for example, access to users who have previously registered, access to areas, services, promotions or competitions reserved exclusively for them without having to register every time the website is visited. They are also used to measure the audience and traffic parameters, monitor progress and number of people logging on.

Similarly, the www.frameit.io web servers will be able to automatically detect the IP address and domain name used by the user. All this information is recorded in a server activity file that allows the subsequent processing of the data in order to obtain statistical measurements that make it possible to ascertain the number of views, the number of visits made to the web services, etc. In any case, this file is subjected to dissociation processes that prevent the identification of the user's device.

X. Types of cookies we use

XI. Cookie management

You can allow, block or delete the cookies installed on your computer by configuring your device's browser options.

XII. Modifications and completeness of our privacy policy

We shall only use your personal data in accordance with the Privacy Policy in force at the time the personal data is collected. The Data Controller reserves the right to modify this Privacy Policy at any time by publishing such modifications on the Website, therefore, we urge you to visit it each time you access the Privacy Policy. If, at any time, we decide to use personal data in a manner different from that stated at the time it was collected, we shall notify you by e-mail, provided that we have it on file. At that time, you will be given the option to consent to other uses or dissemination of the personal data you provided to us prior to modifying our Privacy Policy.

In the event that any clause of this Privacy Policy is annulled or considered null and void, the rest of the conditions shall not be affected, and shall remain fully valid and in force, in accordance with the applicable legislation in force at any given time.