The purpose of this policy is to inform data subjects about the various processing operations carried out by this organization through its website, which affect their personal data, in accordance with the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016.

1. INFORMATION TO THE USER.

RETAIL&KEY BUSINESS, SL., domiciled at CALLE BRUC 38-5-C -08010 (BARCELONA) with NIF B66483025, contact telephone number: 931 175 638 and email address
pedidos@krouniforms.com

2. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA.

USERS/BROWSERS OF THE CONTROLLER'S WEBSITE.
We will process your personal data provided through our web forms to:

• Respond to requests, complaints, and incidents submitted through our contact channels on the website.
• Understand web browser behavior in order to detect potential cyberattacks on our website.
• Comply with the legal obligations that are directly applicable to us and regulate our activity.
• To protect and exercise our rights or respond to claims of any kind.
• If applicable, we may send commercial communications regarding the goods or services that comprise our activity, and/or news or newsletters related to our sector.
• Manage and send you the requested quote.
• Manage, administer, and monitor your activity on the embedded blog/forum.

CUSTOMERS. We will process your personal data provided through our web forms to:

• Business relationship management.
• The provision of the services you have contracted from us.
• Procedures related to the shipping and receiving of the product purchased through this website.
• Administrative, accounting and tax management.
• Respond to requests, complaints, and incidents submitted through our contact channels on the website.
• Understand web browser behavior in order to detect potential cyberattacks on our website.
• If applicable, we may send commercial communications related to the goods or services that comprise our activity, and/or news or newsletters related to our sector.
• To comply with the legal obligations that are directly applicable to us and that regulate our activities. To protect and exercise our rights or respond to claims of any kind.

3. LEGAL BASIS FOR THE PROCESSING.

USERS/BROWSERS ON THE CONTROLLER'S WEBSITE.

• In the consent you have given us to process your data for the purposes indicated. Failure to provide your personal data will make it impossible to process your data for the purposes mentioned.
• To comply with our legal obligations. In this case, the data subject may not object to the processing of personal data.
• In our legitimate interest to protect our image, business, and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although they may, where appropriate, exercise the rights recognized in section eight of this policy.

CUSTOMERS.

• Performance of a contract to which you are a party or application of pre-contractual measures. Failure to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• In the consent you have given us to process your data for purposes other than the development or execution of the existing contract. Failure to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• To comply with our legal obligations. In this case, the data subject may not object to the processing of personal data.
• In our legitimate interest to protect our image, business, and history by preventing attacks on our website, the data subject may not object to the processing of personal data, although they may, where appropriate, exercise the rights recognized in section eight of this policy.

4. DATA RETENTION PERIODS OR CRITERIA.

The personal data provided will be retained for the time necessary to fulfill the purposes for which it was initially collected. Once the data is no longer necessary for the processing in question, it will be duly blocked and, where appropriate, made available to the competent Public Administrations and Organizations, Judges and Courts, or the Public Prosecutor's Office, during the statute of limitations for any actions that may arise from the relationship with the client and/or the retention periods established by law. If you have provided us with your resume, we will retain your data for a maximum period of one year from the date it is received by the entity, unless you have authorized us to retain your data for a longer retention period than indicated. Data blocking period:

• THE CIVIL CODE. Between 5 and 15 years, depending on the case, in accordance with the provisions of Article 1964.2 of the aforementioned legal code.
• THE COMMERCIAL CODE. For 6 years, pursuant to the provisions of Article 30 of the aforementioned legal code. It applies to commercial information related to (invoices issued and received, receipts, corrective invoices, bank documents, etc.).
• THE GENERAL TAX LAW. For four years, pursuant to the provisions of Articles 66 to 70 of the aforementioned legal framework. This applies to information related to tax obligations.

5. AUTOMATED DECISIONS AND PROFILING.

The website does not make automated decisions or create profiles.

6. RECIPIENTS.

During the period in which your personal data is processed, the organization may transfer your data to the following recipients:

• Judges and Courts.
• State Security Forces and Corps.
• Other competent authorities or public bodies, when the controller has a legal obligation to provide the personal data.
• Banks and Financial Institutions, in the event that you hire us.

7. INTERNATIONAL DATA TRANSFERS.

The organization does not carry out any International Data Transfer.

8. RIGHTS.

Interested parties may exercise their rights of access, rectification, and deletion at any time and free of charge, as well as request that the processing of their personal data be restricted, object to it, request its portability (whenever technically possible), or withdraw their consent. Where applicable, they may not be subject to a decision based solely on automated processing, including profiling.

To do so, you can use the forms provided by the organization or send a letter to the address or email address indicated above. In any case, your request must be accompanied by a photocopy of your ID or equivalent document to prove your identity.

If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Supervisory Authority (Spanish Data Protection Agency) through its website: www.agpd.es.

In compliance with the provisions of Article 21 of Law 34/2002 on information society services and electronic commerce, if you no longer wish to receive information about our services, you can unsubscribe by sending an email to info@krouniforms.com with the subject "UNSUBSCRIBE."

9. ACCURACY OF THE DATA.

The interested party guarantees that the information provided is true, accurate, complete, and up-to-date. The interested party undertakes to report any changes to the information provided through the channels provided for this purpose and indicated in point one of this policy. The interested party shall be liable for any direct or indirect damages or losses that may result from failure to comply with this obligation.

If the user provides data about third parties, they declare that they have the consent of the interested parties and undertake to provide them with the information contained in this clause, exempting the organization from any liability arising from failure to comply with this obligation.

10. SOCIAL NETWORKS.

Social networks are part of the daily lives of many Internet users, and the Entity has created different profiles on some of them for them.
All users who visit our website have the opportunity to join our social networks or groups.
However, please note that unless we request your data directly (for example, through marketing actions, contests, promotions, or any other valid means), your data will belong to the corresponding Social Network. Therefore, we recommend that you carefully read their terms of use and privacy policies, and ensure that you configure your preferences regarding data processing.

11. MODIFICATIONS/UPDATE.

This privacy policy may be modified or updated based on established legal requirements or in order to adapt it to instructions issued by the Spanish Data Protection Agency or changes to our website.
For this reason, we advise users to periodically visit our privacy policy.
If you have any questions about this policy, you can contact RETAIL&KEY BUSINESS, SL at the following email address: info@krouniforms.com