In accordance with the GDPR and other applicable personal data protection legislation, DDUUEETT informs you that the personal data you provide on Social Media, as well as for completing and submitting queries or forms on this Website or incident reports, will be included in the corresponding activity log owned by the data controller.

The controller of your personal data is:

· Company name: DDUUEETT Europe, S.L.

· Address: C/ Font de la Ventaiola, 1-3, Nau 3 bis, 08670 Navàs (Barcelona)

· Phone: 937378102

· CIF (Tax ID): B-67076687

· Domains: https://b2b.dduueett.com / www.dduueett.com

· Email: sales@dduueett.com

The only personal data DDUUEETT will access is that which the User voluntarily provides.

Please note that to access some services offered through the Website, personal data will be requested as well as the completion of forms with mandatory fields. Omission of any required fields may result in the inability to register, process your request, or access or use said services and content— unless the form specifies the data is optional.

Users are also informed that DDUUEETT has created a profile on Social Media with the main purpose of promoting its products and services.

In compliance with the applicable personal data protection laws, by accepting this Privacy Policy, the User agrees that DDUUEETT may process their personal data for the following purposes:

Processing for contractual purposes

Personal data will primarily be processed to manage and deliver the

products and services you have contracted with us. This processing I essential; without it, we could not manage your requests. The legal basis for this processing is the execution of the existing business and contractualrelationship between the parties.

Specifically, to:

• Provide requested services and information, offering specialized advice.

• Create user profiles to generate requested quotes and offer advice on design and required products.

Processing to comply with legal obligations

We are authorized to process your data when you exercise your rights under data protection laws, as it is necessary to comply with legal obligations, particularly regarding data subject rights, as provided in Articles 12 to 22 of the GDPR and Articles 12 to 18 of Organic Law 3/2018.

Processing based on legitimate interest DDUUEETT processes personal data based on the legitimate interest of improving efficiency and productivity, to conduct surveys and handle claims and complaints in accordance with existing quality standards.

Unless you have objected or object in the future, we may send you updates and information about products or services similar to those you have already acquired. On Social Media, DDUUEETT will use your data to advertise its products and services. If we use your contact data for direct marketing, it will always comply with the legal requirements of the GDPR and the LSSI-CE.

This legitimate interest is based on keeping our users informed and up to date.

Processing based on your consent

By providing your personal data via the company’s contact email listed on the Website or through any existing web form, you are expressly consenting to the processing of your data to respond to your service requests.

As previously mentioned, DDUUEETT has created a Social Media profile to promote its products and services.

By joining our page, you give consent for the processing of personal data published on your profile. DDUUEETT may perform the following actions:

• Access public profile information.

• Post on your profile any information already published on the DDUUEETT page.

• Send individual direct messages via the Social Media platform.

• Publish page updates on your profile.

Users can always control their connections, delete unwanted content, and limit who they share with by adjusting their privacy settings.

By subscribing to our newsletter, you expressly consent to us using your data to send news, information about products, activities, events (our own or third-party), services, offers, and promotions related to DDUUEETT’s activities.

Once the User has joined the DDUUEETT page, they may publish comments, links, images, or any multimedia content supported by the platform. The

User must always be the owner of such content, hold copyright and intellectual property rights, or have consent from the affected third parties.

Any publication that violates morals, ethics, good taste, decorum, or any applicable laws, including copyright, image rights, or intellectual property rights, is strictly prohibited. DDUUEETT reserves the right to immediately remove such content and may permanently block the user.

DDUUEETT is not responsible for content freely posted by users.

Users should be aware that their posts will be visible to others and are therefore primarily responsible for their own privacy.

Images posted on the page will not be stored in any file by DDUUEETT but will remain on the Social Media platform.

The personal data processed will be the minimum and necessary for the purposes described above, specifically:

• Identification data, contact information, financial data, and personal characteristics, all collected through the appropriate forms.

• DDUUEETT will have access to and process public profile information, especially your contact name. These data are only used within the Social

Media platform and are not stored in any file.

The accuracy of your data is important and must be kept up to date.

The Website User and service recipient is solely responsible for the accuracy and truthfulness of the data provided. DDUUEETT acts in good faith as a mere service provider.

Therefore, the data must be accurate, truthful, and lawful. DDUUEETT reserves the right to exclude any users who provide false data from the services, without prejudice to legal action. You agree to inform us of any changes to your data so that we can keep them current.

DDUUEETT will retain your personal data as long as the relationship between the parties exists or the service is provided, and for commercial purposes unless you object, request deletion, or restriction.

After this period, your data will be deleted, except for data that must be retained due to legal obligations, in which case it will remain blocked for the period required by law.

Generally, DDUUEETT will not share your data with third parties unless required by law. However, to properly provide services, DDUUEETT may need to share some personal data with service providers, solely for operational purposes.

In such cases, data will be shared under data processing agreements with third parties acting as processors on behalf of DDUUEETT, in compliance with data protection regulations.

No international data transfers are currently planned. If such transfers become necessary, DDUUEETT guarantees compliance with legal requirements and will ensure appropriate safeguards are in place with the third country or international organization.

Browsing the Website and Social Media involves the processing of personal data to personalize your experience and remind you of our products, services, and events related to DDUUEETT.

Cookies are used for this purpose. For more information, please refer to our Cookie Policy.

DDUUEETT will maintain a Record of Processing Activities, containing information on data processing activities in the scope of its operations, kept up to date at all times.

Regarding security and protection, we inform you that your data will be processed lawfully, fairly, transparently, appropriately, pertinently, limitedly, accurately, and updated. DDUUEETT commits to adopting the necessary technical measures, security levels, and protection standards to prevent loss, misuse, alteration, unauthorized access, or theft of data provided by the User via the Website, which will be handled with due confidentiality.

You may exercise the following rights regarding your personal data:

• Right of Access: Know what data we are processing about you.

On Social Media, this will be defined by the functionality of the platform and your profile visibility settings.

• Right to Withdraw Consent: Withdraw your consent at any time.

• Right to Rectification: Request correction or completion of your data if inaccurate. (Only applicable to data controlled by DDUUEETT; for example, removing comments on our page. Other requests should be directed to the platform.)

• Right to Object: Object to processing of your data, unless needed for legal defense.

• Right to Erasure: Request deletion of your data when no longer necessary.

• Right to Restrict Processing: Request limited processing in certain cases, as provided by law.

• Right to Data Portability: Request your data in a transferable format when technically possible.

You can exercise these rights by contacting:

• Company name: DDUUEETT

• Address: C/ Font de la Ventaiola, 1-3, Nau 3 bis, 08670 Navàs (Barcelona)

• Phone: 937378102

• Email: sales@dduueett.com

If you are not satisfied after exercising your rights, you may file a complaint with the national supervisory authority. In Spain, this is the Spanish Data Protection Agency, at:

C/ Jorge Juan, 6, 28001 Madrid

This policy may be updated due to changes in applicable legislation, judicial rulings, legal precedents, or changes in DDUUEETT's business strategy. Any significant changes will be duly communicated to the user.