Privacy Policy

OUR PRIVACY POLICY AT A GLANCE

Who are we? We are YOUSAY COMPANY S.L.U., and we process your data as the Data Controller. That means we take care of how to use and protect your personal data.

What do we use your data for? We use the data you have provided us online or through any other means to address your inquiries and suggestions, provide you with the services or supply the products requested, register you as a user, send you the personalized communications you have subscribed to, monitor the comments made on our blog, as well as process your reservation or online purchase.

Why do we have them? We are authorized to process your data for various reasons. By filling out a form or sending an email in which you pose a query or suggestion, we have a legitimate interest in addressing it. When you register on our website or make a reservation or purchase, we need to execute the contract you accept with us, just as we have a legal obligation to issue an invoice that includes your data when the service or purchase is carried out. We are also authorized by your consent when you give us authorization to send you our newsletter and personalized offers.

Who do we share your data with? We will only share your data with those partner companies to address the requests received and provide our services or supply you with the products, banking entities, and bodies required by law. We never sell your data to third parties.

What rights do you have? You have the right to access, rectify, or delete your personal data. You also have the right to object to us using data that you have previously authorized us to use, to port them, and not to be a subject of automated individual decisions.

In the processing of your personal data, we apply the following principles to ensure the greatest protection for you:

• Principle of legality, loyalty, and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes, which we will inform you about beforehand with absolute transparency.
• Principle of data minimization: We will only request data strictly necessary in relation to the purposes for which we require them. The bare minimum.
• Principle of limitation of the retention period: data will be kept for no longer than necessary for the purposes of processing, depending on the purpose, we will inform you of the corresponding retention period, in the case of subscriptions, we periodically review our lists and delete those records that have been inactive for a considerable time.
• Principle of integrity and confidentiality: Your data will be treated in such a way that adequate security of personal data is ensured and confidentiality is guaranteed. You should know that we take all necessary precautions to prevent unauthorized access or misuse of our users' data by third parties.

In this Privacy Policy, you will find more detailed information about the use we make of the personal data of our customers, suppliers, and users, and generally of all the people who have contact with us, regardless of the means they have used to communicate (online form, by phone, or by email, in person).

We like to be transparent about what we do with your personal data, for you to understand the implications of the uses we carry out, or the rights you have concerning your data. For this reason, we keep our Privacy Policy, Legal Notice, and Cookies Policy updated, information that you can consult on this same website.

If you have any questions or want more information about the privacy policy, you can continue reading the document.

YOUSAY COMPANY S.L.U. commits to complying with current legislation at all times regarding the processing of personal data. Through the following privacy policy, YOUSAY COMPANY S.L.U., in accordance with the requirements of the GDPR and LOPDGDD, informs users and the people whose data it processes of:

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

The entity responsible for the processing of your data is YOUSAY COMPANY S.L.U. when accessing the website while being in the Canary Islands:

YOUSAY COMPANY S.L.U. informs the user that the data provided through navigating our website, the various data collection forms, or the sending of emails, will be processed by YOUSAY COMPANY S.L.U. and such processing is included in the Treatment Activities Registry managed by YOUSAY COMPANY S.L.U. in accordance with the GDPR.

2. WHAT ARE YOUR PERSONAL DATA USED FOR?

At www.anadelina.com, we process data from both users of our website and third parties who have relations with us. To make it easier for you to understand the processing we carry out of your data, we have differentiated the purpose for which we use the data, the types of data, and the basis of legitimacy depending on the category of people whose data we process. Below, we classify the people whose data we process depending on the type of relationship they maintain with YOUSAY COMPANY S.L.U.

2.1 WEB USERS

What data do we collect from our website users?

1. Data from users who fill out any of the available forms: The personal data that YOUSAY COMPANY S.L.U. requests include:
   • Identifying data: name and surname, phone, postal and email address.
   • Data related to the request.
2. Data from users who subscribe to the newsletter/want to receive commercial communications and information:
   • Identifying data: Name and surname, email address.
3. Data from users who register on our platform:
   • Identifying data: Name and surname, postal and email address, phone, billing address.
4. Data from users who navigate our website: Data provided by cookies and by Google Analytics.
5. Data from users who make comments on our blog.

For what purposes will we process your personal data?

When the user accepts our privacy policy, they authorize us to use the personal data provided for the following processing:

• Send them the information and provide the service they request through the various forms available on our website.
• Organize, communicate, and celebrate events or similar.
• Conduct statistical studies to assess the success of campaigns/ways in which the user has learned about a service provided by YOUSAY COMPANY S.L.U. These data are collected for statistical purposes only and are for internal use by YOUSAY COMPANY S.L.U.
• Manage their comments on our blog.
• Send them the newsletter when they are subscribed, with events, activities, and promotions of YOUSAY COMPANY S.L.U. and of the sector that may be of their interest.
• Send them commercial communications about offers, activities, and promotions of YOUSAY COMPANY S.L.U. and of the sector that may be of their interest by conventional or electronic means when they have ticked the box indicating they wish to receive information.

How do we obtain your data?

We obtain your data through:

• The form completed by the web user for the purpose indicated therein. The form is subject to the acceptance of this privacy policy through the indicated checkbox.
• The navigation data we obtain from the different cookies that the user accepts when accessing www.anadelina.com for the first time.

What is the legal basis for processing your data?

The explicit consent of the user (article 6.1.a GDPR) expressed by filling out the various forms, ticking the box to send the newsletter and to receive commercial communications/information about offers, activities, and promotions of YOUSAY COMPANY S.L.U. and the sector that may be of interest, and participation in our blog is what legitimizes the processing by YOUSAY COMPANY S.L.U. The user can revoke the consent given at any time, although if consent is revoked, it does not affect data processing carried out prior to the revocation of the same.

The legitimate interest for the creation of browsing profiles and detecting preferences through the installation of cookies.

The execution of a contract or the application of pre-contractual measures when the client makes a request through the various forms available on our website or requests information about the services provided by YOUSAY COMPANY S.L.U.

2.2 SUPPLIERS

What data do we collect from our suppliers?

1. Identifying data of the supplier: The personal data that YOUSAY COMPANY S.L.U. requests include:
   • Identifying data: name and surname, phone, postal and email address.
   • Employment and professional data.
   • Activities and business.

How do we obtain your data?

We obtain your data through:

• The signing of the contract that binds us, the acceptance of the presented budget, the reception of invoices from the supplier, and the signing of the Data Processor Agreement if applicable due to the service provided.

For what purposes will we process your personal data?

To manage information related to the data of our suppliers of goods and services, as well as their representatives.

Maintenance of the contractual relationship with our suppliers.

Management of payments and collections related to the contracts that bind us.

What is the legal basis for processing your data?

In the execution of a pre-contract/contract to send you the information and manage the service provided, which would not be possible otherwise.

In the legitimate interest for the management of data related to the representatives of the suppliers of YOUSAY COMPANY S.L.U.

2.3 CUSTOMERS

What data do we collect from our customers?

1. Data from customers who fill out any of the forms available on www.anadelina.com as well as in the physical establishment of YOUSAY COMPANY S.L.U.
   • Identifying data: name and surname, telephone, postal and email address.
   • Data related to the request.
2. Data from customers who register on our platform:
   • Identifying data: Name and surname, postal and email address, telephone, billing address.
3. Data from customers who make a reservation or order in our establishment in person:
   • Identifying data: Name and surname, postal and email address, telephone, billing address.
4. Data from our customers obtained through our contracts and quotes.
5. Data from customers who make a purchase online or in person:
   • Identifying data: Title, name, surname, postal and email address, telephone, billing address.
   • Transaction data: Products purchased/services provided and payment method, invoice or purchase receipt.

How do we obtain your data?

If you are an online customer, we obtain your data through:

• The form filled out by the user to request information and/or a quote, place an order, or finalize the online purchase on our e-commerce site. The form is subject to acceptance of this privacy policy through the indicated checkbox.
• The browsing data we obtain from the different cookies that the customer accepts when accessing www.anadelina.com for the first time.

If you are a walk-in customer, we obtain your data through:

• The customer registration form.
• Acceptance of the presented quote.
• The signed contract.

For what purposes will we process your personal data?

• Generate and manage the documentation associated with your requests and purchases.
• Provide you with information about offers, products, and services related to your purchase.
• Process your reservation or online purchase through our platform.

What is the legal basis for processing your data?

In the execution of a pre-contract/contract to send you the information and manage the service provided or the product supplied, which would not be possible otherwise.

In the user's consent for sending the newsletter and commercial communications about the offers, activities, and promotions of YOUSAY COMPANY S.L.U. and the sector that may be of interest, and for managing our blog. The user can revoke the consent given at any time.

In the legitimate interest for sending information on exclusive promotions, latest news, and personalized information adapted to the profile of the interested party, and for sending satisfaction surveys on the products or services purchased.

2.4 JOB APPLICANTS AND CANDIDATES

What data do we collect from applicants?

1. Data from candidates requested in the 'work with us' form by YOUSAY COMPANY S.L.U.
   • Identifying data: name and surname, telephone, postal and email address.
   • Academic and employment data.
   • Data that the candidate includes as attached documents.

How do we obtain your data?

We obtain your data through:

• Submitting a CV at our facilities or completing the 'Work with us' form on our website.

For what purposes will we process your personal data?

The personal data provided by candidates are used solely for the selection processes that are open or are going to be carried out in case the data provided is for our employment pool.

What is the legal basis for processing your data?

In the user's consent by including their data and curriculum on the YOUSAY COMPANY S.L.U website to participate in the selection processes that are active as well as future processes that may be carried out as long as they do not oppose the processing of their data.

2.5 SOCIAL MEDIA CONTACTS

What data do we collect?

1. Identifying data on Social Networks: YOUSAY COMPANY S.L.U. will not request data beyond what you have included in your user profile.

For what purposes will we process your personal data?

To answer and manage your queries, requests, or petitions.

To relate to you as long as you are part of our community of followers.

What is the legal basis for processing your data?

In the execution of a pre-contract/contract that binds you to the corresponding social network and in accordance with its privacy policies:

• Facebook: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
• Instagram: https://help.instagram.com/155833707900388
• LinkedIn: https://es.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
• Youtube: https://policies.google.com/privacy?hl=es&gl=es
• TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/es

www.anadelina.com will always endeavor to establish appropriate mechanisms to obtain the User's consent for the installation of cookies that require it. When a user accesses our website, a pop-up appears informing about the existence of cookies and that if they continue browsing our page, they consent to the installation of cookies. Accepting the installation of cookies implies the acceptance of the retention of the IP address in the records of www.anadelina.com, along with the date of acceptance, for a period of one year, in order to demonstrate the consent given. You can get more information in our "Cookie Policy".

3. HOW LONG DO WE KEEP YOUR DATA?

3.1 WEB USERS

Data processed based on the web user's consent will be kept as long as they are relevant for the purpose for which they were collected and consent is not revoked.

Data processed based on legitimate interest will be kept for the period linked to the reason for data collection, always ensuring adequate guarantees and respect for the rights and freedoms of the interested parties.

Data processed based on the execution of a contract or the taking of pre-contractual measures will be kept for as long as the contractual relationship remains in force and for the subsequent period that legal obligations must be preserved.

The IP address obtained through cookies will be kept for a period of one year, in order to demonstrate the user's consent.

Regarding the retention period of cookies, more information can be found on our website in the section "Cookie Policy".

3.2 SUPPLIERS

Data processed based on legitimate interest will be kept for the period linked to the reason for data collection, always ensuring adequate guarantees and respect for the rights and freedoms of the interested parties.

Data processed based on a contract, as well as if part of the processing is legitimized by a legal obligation, will be kept for the duration of the contractual relationship. The retention time of the data once this has ended, or in the case that the processing is linked to a legal obligation, will be the legally provided one, and the interested party cannot revoke the data processing except for the legally provided blocking provisions.

3.3 CUSTOMERS

Data processed based on the customer's consent will be kept as long as they are relevant for the purpose for which they were collected and consent is not revoked.

Data processed based on legitimate interest will be kept for the period linked to the reason for data collection, always ensuring adequate guarantees and respect for the rights and freedoms of the interested parties.

Data processed based on a contract, as well as if part of the processing is legitimized by a legal obligation, will be kept for the duration of the contractual relationship. The retention time of the data once this has ended, in the case that the processing is linked to a legal obligation, will be the provided one, and the interested party cannot revoke the data processing except for the legally provided blocking provisions.

3.4 JOB APPLICANTS AND CANDIDATES

Data processed based on the consent of the job applicant and candidate will be kept while the selection process they have applied for remains open. If the application is not for a specific selection process and is for future candidacies, the retention period will be a maximum of one year, at which point their CV will be deleted and destroyed, unless the interested party expresses their wish to keep it and it is updated.

3.5 SOCIAL MEDIA CONTACTS

Data processed from Social Media contacts will be kept as long as the user and YOUSAY COMPANY S.L.U. maintain a connection on the social network. As it does not directly depend on YOUSAY COMPANY S.L.U., and the data processing can only consult or unsubscribe their data in a restricted manner. We will process their data as long as the social network user links with YOUSAY COMPANY S.L.U. as 'friends', 'likes', 'follows', or similar buttons.

To proceed with the rectification of their data, restriction of the information, or of those publications shared, YOUSAY COMPANY S.L.U. will not be responsible for making such rectifications, but the social network user must do so through their profile settings according to the privacy policy of the Social Network itself.

Regardless of the legitimization that supported the collection of the data, it may be processed for scientific, historical, or statistical research purposes, always implementing the adequate guarantees and respecting the rights and freedoms of the interested parties.

4. ADDITIONAL INFORMATION ABOUT DATA PROCESSING

Only those over 14 years old can provide data through our website and email. If you are under this age, you must have the consent of your parents or legal guardians.

The User guarantees the authenticity and timeliness of all data communicated to YOUSAY COMPANY S.L.U. and declares to be over 14 years old, and will be solely responsible for any false or inaccurate statements made.

In the case of making a reservation for a service or online purchase, the interested party must be over 18 years old, the legal age established in the civil code to acquire the age of majority and capacity to act.

The personal data processed by YOUSAY COMPANY S.L.U. may be obligatory or voluntary. Through the web forms, data of special categories will not be requested to ensure your privacy. In case it is necessary to collect data of special categories to provide a service, it will be requested by another means. The data that will be requested in the forms are:

1. Identifying data: name and surname, telephone, postal and email address.
2. Data related to the request.
3. Data from users who subscribe to the newsletter/want to receive commercial communications and information.
4. Data from users who register on our platform.

Voluntary information is that which the user is not obligated to provide to contact us.

Fields marked with an asterisk (*) or with the word (required) in our forms are mandatory to fill out, refusal to supply them will make it impossible to provide the service or attend to your request.

In case you provide third-party data, you declare to have their consent and you commit to transfer the information provided in this clause, exempting YOUSAY COMPANY S.L.U. from any type of obligation. However, YOUSAY COMPANY S.L.U. may carry out verifications to confirm that the third party has been informed, adopting the due diligence measures established in the data protection regulations.

5. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Data will not be transferred to third parties except by legal obligation or in the case that it is necessary to attend to your request.

Among the recipients to whom your data may be communicated are:

• Administrations and Public Bodies when required by tax, labor, Social Security, or any other applicable regulations. Data processing companies, fraud detection and prevention providers, technological services, customer service, advertising and marketing services, and, in general, third-party suppliers that are necessary for the provision of the services offered by YOUSAY COMPANY S.L.U. such as courier and transport service providers, etc…

6. ARE THERE ANY INTERNATIONAL DATA TRANSFERS?

www.anadelina.com is hosted in Spain, a country within the European Union, in the territory of the European Economic Area, or that complies with the guidelines established in articles 46 and 47 of the GDPR, therefore, there will not be international transfers of the data provided by users on the web.

Our website only accesses user data through the following means:

• Through the contact forms available to the user on the web.
• Through the cookies that the user has previously accepted.
• Through newsletter sign-ups.
• Through comments made by the user on the website's blog.

International data transfers may also occur in the context of the aforementioned assignments/communications for which YOUSAY COMPANY S.L.U. will use the tools provided in Article 46 and 49 of the GDPR as a guarantee for those transfers made to countries that do not have an adequacy decision from the European Commission.

In any case, third parties with whom certain personal data are shared will have previously accredited the adoption of adequate technical and organizational measures for the correct protection of these and will only be carried out with third countries when there is a binding legal instrument in accordance with articles 46 and following of the GDPR. By accepting this privacy policy, you accept that an international transfer of data may occur in accordance with the indicated guarantees.

If the requirements established in the GDPR are not met, the interested party may grant their consent to the international transfer or execute a contract in the interest of the interested party. Otherwise, authorization must be requested from the Control Authority.

Furthermore, we inform you that some services provided by and for YOUSAY COMPANY S.L.U. may involve the transfer of personal data to a third country not belonging to the EU, in "cloud" services offered by some of the main international providers (for example, Google, Microsoft). In those services, the aforementioned compliance will be confirmed.

YOUSAY COMPANY S.L.U. do not sell their users' data to third parties under any circumstances.

7. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

The user can exercise the following rights before YOUSAY COMPANY S.L.U.:

1. Access their personal data.
2. Rectify them when they are inaccurate or incomplete.
3. Request the deletion or cancellation of the data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
4. Oppose their processing.
5. Request the limitation of the processing of their data when one of the conditions provided in the regulations is met.
6. Request the portability of their data in the cases provided in the regulations.
7. Prevent being subject to automated decisions.
8. Revoke the consents given.

To exercise their rights, the user must send a letter indicating the right they wish to exercise and accompany it with a document accrediting their identity and postal or electronic address for notification purposes. This request can be made either by postal mail to:

When the contractual relationship has been made from the Canary Islands: YOUSAY COMPANY S.L.U. for notification purposes at Calle Miguel Yuste, nº 3, 1º E 28037 (Madrid) (For notification purposes), or at the following email address: gestion@yousaycompany.com.

YOUSAY COMPANY S.L.U. must respond to the request to exercise rights within one month from the receipt of the request. This period may be extended by another two months if necessary, taking into account the complexity and number of requests. We will inform you of any extension within one month from the receipt of the request, stating the reasons for the delay.

Also, the interested parties have the right to complain to the competent Control Authority (Spanish Data Protection Agency) when they consider that YOUSAY COMPANY S.L.U. have violated the rights that data protection regulations grant them at www.aepd.es.

8. ARE MY DATA SECURE?

YOUSAY COMPANY S.L.U. have a current contract with Dinahosting S.L. for the hosting of their website. It is a European company and has the latest systems in security measures. It is a company hosted in Spain that has adequate technical and organizational security measures for the correct protection of the data and the international transfer is made because there is a binding legal instrument in accordance with articles 46 and following of the GDPR.

In any case, YOUSAY COMPANY S.L.U. guarantee the adoption of appropriate measures to ensure the confidential treatment of your data, considering their confidential nature and commit to ensuring that such data remain secret, treating them with the utmost confidentiality, and declare to have implemented in their information system, the security policies corresponding to the type of data handled in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate that allows when a user visits our website and exchanges information with us, a encrypted connection is established.

9. DO I NEED AN ACCOUNT AND/OR PASSWORD?

The user can register on our website, for this it is essential to create an account. It is the user's responsibility to maintain the confidentiality of the account information, including the password, as well as all activities that occur therein.

The user is obliged to inform YOUSAY COMPANY S.L.U immediately in case of illegitimate use of their account or password, or if any security problem occurs, by sending an email to gestion@yousaycompany.com.

10. LINKS TO OTHER WEBSITES

If you choose to leave our website through links to other websites not belonging to our entity, YOUSAY COMPANY S.L.U. will not be responsible for the privacy policies of such websites or the cookies that they may store on the user's computer.