In accordance with the provisions of arts. 13 and 14 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, “RGPD”), and articles 6 and 11 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter, “LOPDGDD”), which regulates the right to information when collecting data, we inform you of the following.

• Who is responsible for the processing of your personal data?

The personal data that you have provided to us through the website and in any other communications maintained with you will be subject to the Register of Processing Activities owned by Carlos Córdoba S.L with registered office at Polígono Industrial Los Bermejales, Parcela number 9, 14812 Almedinilla, Córdoba, with NIF B56084478.

• What presence does it have on social networks?

Carlos Córdoba S.L has the following profiles on the main social networks on the Internet (Facebook, Linkedin, Youtube, Blog and Newsletter).

It acknowledges that it is responsible for the processing of the data of its users, followers, or people who make comments through them. Likewise, in accordance with the Law on information society services and electronic commerce, Carlos Córdoba S.L is exonerated from any type of responsibility derived from comments by users and followers on its social networks.

Carlos Córdoba S.L may use the profiles described above to inform its users of topics that it considers to be of interest to them.

• What personal data do we collect?

The personal data that the user may provide:

• Identification data: name, surname, position, role, email and/or telephone number.

• Accounting data: account number, bank card, etc.

• Why and for what purpose do we process your data?

Depending on the purposes, we will need to process some data or others, which in general will be, as the case may be, the following:

• The website is fully informative about the educational platform services offered by Carlos Córdoba S.L. The data may be processed to respond to requests for information about these services.

• The collection and automated processing of data carried out through the website form to request information is collected in order to study the possibility of contacting us.

• The website provides information through identifying videos.

• The website has a blog to upload and share stories of interest to users.

• To manage and maintain your candidacy for a job at Carlos Córdoba S.L, when you send us your application to participate in a selection process. This processing is based on the User's consent and on the legitimate and mutual interest of Carlos Córdoba S.L and the User, as indicated in the privacy information that the User must accept prior to sending his/her application.

The personal data obtained through any of the channels on the website will be part of the Register of Processing Activities and Operations (RAT) owned by Carlos Córdoba S.L. This will be updated periodically in accordance with the provisions of the RGPD and the LOPDGDD, which is why Carlos Córdoba S.L has adopted all the relevant security measures in this regard.

The user is informed of the possibility of withdrawing his/her consent in the event that it has been granted for a specific purpose, without affecting the legality of the preceding processing based on the consent prior to its withdrawal.

• What is the legitimacy for the processing of your data?

The processing of your data may be based on the following legal bases:

• Express consent by users when completing the forms to receive commercial communications from Carlos Córdoba S.L.

• Legitimate interest: this consists of ensuring that our website remains secure, as well as helping us understand the needs, expectations and level of satisfaction of users and, therefore, improve our services. All actions are carried out in order to improve the level of satisfaction of users and ensure a unique browsing experience and eventual contracting.

• Compliance with legal obligations for fraud prevention, collaboration with Public Authorities and/or possible claims from third parties.

• How long do we retain your data?

The processing of data for the purposes described will be maintained for the time necessary to fulfill the purpose of its collection, as well as to comply with the legal obligations arising from the processing of the data. Without prejudice to the fact that conservation is necessary for the formulation, exercise or defence of potential claims; provided that it is permitted by applicable legislation.

Carlos Córdoba S.L undertakes to cease the processing of personal data when the conservation period has ended, as well as to duly block them in our databases.

To which recipients are your data communicated?

In general, Carlos Córdoba S.L will not transfer personal data to third parties, except in those situations in which they may be transferred to collaborators who provide services to Carlos Córdoba S.L, for the purpose of managing the provision of services, the contractual and/or pre-contractual relationship with the interested parties or processing requests made by them.

In these cases, we ensure that the recipients respect confidentiality and have the appropriate measures in place to protect personal data. Carlos Córdoba S.L seeks to guarantee the security of personal data when it is sent outside the company. The third parties with whom Carlos Córdoba S.L contracts have the obligation to guarantee that the information is treated in accordance with current data protection regulations.

In those cases where the law may require that personal data be disclosed to public bodies or other parties, only what is strictly necessary for the fulfillment of said legal obligations will be disclosed.

Carlos Córdoba S.L communicates data to external providers, as data processors, to carry out certain services:

What rights do you have and how can you exercise them?

You can direct your communications and exercise your rights by means of a written communication to the following email address: confecciones@carloscordoba.es

In accordance with the provisions of the data protection regulations, you can request:

• Right of access: you can request information about the personal data we have about you.

• Right of rectification: you can communicate any change in your personal data.

• Right to deletion and to be forgotten: you can request the deletion prior to blocking of personal data.

• Right to limitation of processing: this involves restricting the processing of personal data.

• Right to object: you can withdraw consent to the processing of data, opposing the continued processing of data.

• Right to data portability: in some cases, you can request a copy of your personal data in a structured, commonly used and machine-readable format for transmission to another controller.

• Right not to be subject to individualised decisions: you can request that no decisions be made based solely on automated processing, including profiling, that produce legal effects or significantly affect the data subject.

In some cases, your request may be rejected if you request that data necessary for compliance with legal obligations be deleted. Likewise, if you have a complaint about the processing of your data, you can file a claim with the competent data protection authority.

Who is responsible for the accuracy and truthfulness of the data provided?

The user is solely responsible for the truthfulness and correctness of the data provided through any of the forms included in the website, exonerating Carlos Córdoba S.L from any liability in this regard. Users guarantee and respond, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the forms they fill out.

Carlos Córdoba S.L is not responsible for the veracity of information that is not of its own creation and for which another source is indicated, and therefore does not assume any liability for hypothetical damages that may arise from the use of said information.

Carlos Córdoba S.L is exonerated from liability for any damage or harm that the user may suffer as a result of errors, defects or omissions in the information provided by Carlos Córdoba S.L provided that it comes from sources other than it.

What security measures do we apply to protect your personal data?

Carlos Córdoba S.L has adopted the legally required levels of security for the protection of personal data, and seeks to install those additional technical means and measures within its reach to prevent the loss, misuse, alteration, unauthorized access and theft of personal data provided to Carlos Córdoba S.L. However, the user must be aware that Internet security measures are not impregnable. Therefore, Carlos Córdoba S.L is not responsible for hypothetical damages or losses that may arise from interference, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operational functioning of this electronic system, caused by reasons beyond the control of Carlos Córdoba S.L, delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Center, in the Internet system or in other electronic systems, as well as damages that may be caused by third parties through illegitimate interference beyond the control of Carlos Córdoba S.L.

How do we treat the data of minors?

As a general rule, Carlos Córdoba S.L will process data of minors for the storage and maintenance of said data on the educational platform of which it is the Data Controller. By signing with the educational centers the contracts of data processors necessary to guarantee the protection and security of this data.

How do we use cookies? The website and social networks of Carlos Córdoba S.L use cookies to optimize and personalize your browsing experience. Cookies are physical information files that are stored on the user's terminal. The information collected through cookies is used to facilitate the user's navigation through the portal and optimize the browsing experience. The data collected through cookies may be shared with their creators, but in no case will the information obtained through them be associated with personal data or data that can identify the user. However, if the user does not want cookies to be installed on their hard drive, they have the option of configuring the browser in such a way as to prevent the installation of these files. For more information, see our Cookie Policy.

Internal security policy

Security breaches may be caused by employees, third parties or computer errors. Therefore, we are legally obliged to notify interested parties if their personal data has been seriously affected within a maximum period of 72 hours. In addition, users will be notified as soon as the security breach is resolved.

Modification of the privacy policy

This privacy policy may be modified. We recommend that you review the privacy policy periodically.