The Controller of the following personal data is U-CAN-GET-IT Innovation, Development & Transformation (hereinafter, U-CAN-GET-IT), of registered office at Calle Majuelo 1, 28005 Madrid, represented by Ms Nuria Lorenzo Carbajo and Ms Carmen Quesada Carcelén, holders of Tax Identification Numbers 11830589-X and 11.827.031-V, respectively.

We likewise inform you that our organisation has appointed a Data Protection Officer (DPO), in accordance with the provisions of the regulations in force. You can contact our DPO at the following email address info@ucangetit.eu or by phone on +34 639169177.

• Identifying details
• Conventional or electronic mail addresses
• Commercial information
• Economic and transactional data
• Professional data
• Academic data

All the aforementioned data have been obtained either directly from you, through the acquisition of one of our products or otherwise via a company, by providing us with identification details and other information as required in order to perform the object of the contractual relationship between the parties. You or your company are obliged to provide us with updated data in the event of any change. If the data were gathered from third parties, U-CAN-GET-IT will contact the data subjects, informing them of the contact details of the Controller and its representative, the purposes and categories of personal data, the data storage period, the security measures, the consequences of a failure to provide the data and, where applicable, assignments and transfers, if any, their right to withdraw consent, the name and contact details of the Personal Data Protection Officer, the right to raise a grievance with the supervisory authority and the source from which the data are derived, in addition to the possibility of exercising rights of Access, Rectification, Erasure, Restriction, Objection and Portability.

At U-CAN-GET-IT we process the data provided to us by the data subjects in order to provide and administer the products and services we offer, for different activities resulting from specific procedures conducted as regards sales, customer service, supplier administration, quality and improvement of the service, etc. We will in this regard use your data to perform any of the following actions:

• a. Provision of the contracted services.
• b. Sending of the information you request from us via the contact form on our website or any other means of contact with your company.
• c. Provide both potential clients and our current clients with product and service offers of interest to them. Specific consent will once again be requested for this purpose.
• d. Conduct administrative, taxation and accounting management of our clients and/or suppliers.
• e. Send reports, satisfaction surveys, market studies, etc. in order to improve our products and offer optimal service quality, etc. Specific consent will once again be requested for this purpose.
• f. Administration of the online store.
• g. Administration of information which may enter via the website.
• h. Administration of the handling of rights with regard to data protection.

We do not generate commercial profiles on the basis of the information provided, and will not reach automated decisions about you on the basis of a commercial profile.

Personal data regarding natural persons connected with potential clients, clients and suppliers that U-CAN-GET-IT gathers via the different contact forms and/or information gathering will be stored for the shortest possible time period, and only for as long as is essential in order to provide the contracted service. The data provided by our clients and suppliers will be stored for as long as the commercial relationship remains in place between the parties, respecting in all cases any minimum legal storage periods depending on the matter in question. Once they are no longer valid, the data will be destroyed.

U-CAN-GET-IT will in all cases store your personal data for the reasonably required time period, taking into account our need to respond to any issues that might arise or to resolve problems, perform improvements, activate new services and fulfil the requirements imposed by the applicable legislation. This means that we may store your personal data for a reasonable time period, even after you have ceased to use our products or have ceased to use this website. After this period, your personal data will be deleted from all U-CAN-GET-IT systems and all copies in whatever format will be destroyed.

Depending on the type of data processing, we summarise below the legitimate basis for said processing:

U-CAN-GET-IT will never share your personal data with any third-party company, except where this would be necessary and you have granted express authorisation. We hereby inform you that we may provide your personal data to the competent Public Administration and Authorities in those cases where U-CAN-GET-IT receives a legal demand from said authorities, or in those cases where, acting in good faith, we believe that such action is reasonably necessary in order to comply with court proceedings, to respond to any claim or legal demand, or to protect the rights of U-CAN-GET-IT or its clients, and the general public.

Any person is entitled to obtain confirmation as to whether U-CAN-GET-IT is or is not processing personal data that concern him/her.

Data subjects may specifically ask to exercise the right to access their personal data and to receive them in a standard, machine-readable format, if the processing is performed by electronic means (right of portability).

Data subjects may likewise ask to exercise the right of rectification of inaccurate data or, where applicable, to request their erasure if, among other reasons, the data are no longer needed for the purposes for which they were gathered.

On a supplementary basis, in certain circumstances data subjects may request the restriction of processing of their data, or in certain circumstances and for reasons connected with their individual situation, data subjects may exercise their right to object to the processing of their data. U-CAN-GET-IT will no longer process the data except for overriding legitimate reasons, or in exercising or defending against possible claims, or in any of the exceptions established in the applicable regulations.

We likewise inform you that you are entitled to withdraw the forms of consent granted at any time, without this affecting the lawfulness of processing based on consent prior to the withdrawal thereof.

You are likewise hereby informed that you may at any time exercise the aforementioned rights by writing to us, using the contact details set out in Subsection 1, "Data Controller", of this Data Protection and Privacy Policy of U-CAN-GET-IT, enclosing a copy of your ID document. You will likewise be entitled to raise a grievance with the Spanish Data Protection agency, in particular if you have been unable to exercise your rights to your satisfaction: Spanish Data Protection Agency. Calle Jorge Juan, 6 - 28001 – Madrid - Tel. 901100099 / 912663517

In accordance with the current Regulation (EU) 2016/679, U-CAN-GET-IT hereby informs you that the personal data of users of its website (hereinafter, the "Website") will be processed for the purpose indicated in each data gathering form on our Website. Said processing of your data will be covered by your own consent, and the need to provide a service and/or product. By clicking on the button "SEND", you consent to the processing of your data by U-CAN-GET-IT.

We likewise hereby inform you that, except for legal obligations or where you have given your express consent, U-CAN-GET-IT will not transfer your data to third parties.

Users are likewise informed that they may at any time exercise their rights of access, rectification or erasure of data, and avail themselves of other rights recognised in this document and governed by Regulation (EU) 2016/679, by serving notice on U-CAN-GET-IT, at Calle Majuelo 1, 28005 Madrid - +34 639169177, e-mail: info@ucangetit.eu

Meanwhile, in accordance with the provisions of Information Society and Electronic Services Act 34/2002, of 11 July 2002, U-CAN-GET-IT undertakes not to send advertising by email without first having received express authorisation from the recipient. Users may object to the sending of advertising by marking the corresponding checkbox. All advertising sent will be fully identified as such.

U-CAN-GET-IT adopts the security levels required by European and Spanish regulations in force as regards data protection, taking into account the technical state-of-the-art, the cost of application and the nature, scope, context and purposes of processing described, in addition to risks of varying likelihood and seriousness for their rights and freedoms as a person.

On occasion, U-CAN-GET-IT may make modifications and corrections to this "Data Protection Policy for Clients, Suppliers and Users" subsection. Please check this subsection regularly to consult any changes that might have been made, and how they could affect you.

This Data Protection Policy for Clients, Suppliers and Users provides you in a clear and easily accessible manner with all information required in order for you to understand the type of personal data that U-CAN-GET-IT keeps about its potential clients, clients and/or suppliers, the purposes pursued, the rights you are granted as a data subject, and how you may exercise those rights. As a result, if you deliberately send your personal data to us by means of contact channels and/or by embarking on a commercial relationship with U-CAN-GET-IT, we understand that you acknowledge and accept the processing of your personal data as described in this policy. This personal information will be used only for the purposes for which you provided us with your data, or where certain national or regional regulations allow us to do so.

We must in any event advise you that a refusal on your part to provide certain data requested could hamper or prevent the execution of the contractual relationship between the parties.

Should you have any queries with regard to this subsection setting out the Data Protection Policy for Potential Clients, Clients and Suppliers of U-CAN-GET-IT, please contact us at the address provided in Subsection 1, "Data Controller", and we will be delighted to deal with you and provide a response to any additional questions you might wish to raise with us.

These Conditions shall at all times be governed by the provisions of Spanish and European personal data protection and privacy legislation.