Basic information on data protection Responsible: ABC MAILS MALAGA SL (hereinafter 247 LOCKERS); 

Purpose: To manage the user registration on our website; Legitimation: User consent; Recipients: Only transfers are made if there is a legal obligation; Rights: Access, rectify and delete, as well as other rights, as indicated in the additional information;

Additional Information: You can consult the complete Data Protection information in our Privacy Policy*. PRIVACY POLICY 247 LOCKERS in compliance with the provisions of the General Data Protection Regulation (RGPD 2016/679) and the Law on Personal Data Protection and guarantee of digital rights (LO 3/2018), informs users of the website www.247 LOCKERS.com:

1.- Who is responsible for the processing of your data? 247 LOCKERS with CIF B72655293 and address for notification purposes at Panaderos 18, 29005 MALAGA. You can contact us by e-mail at [email protected].

2.- For what purpose do we collect your data and what is the legal basis for processing your data? CUSTOMER PERSONAL DATA Purpose: To budget the requested services. Legal Basis: It is the execution of pre-contractual measures at the request of the interested party (budgets). Purpose: To provide the requested services. Legal Basis: It is the execution of a contract. Purpose: Internal client-company management. Legal Basis: It is 247 LOCKERS’ legal obligation to comply with its fiscal and tax obligations. Purpose: Administrative management of our company. Legal Basis: It is the execution of a contract. Purpose: Invoicing of requested services, if applicable. Legal Basis: It is 247 LOCKERS’ legal obligation to comply with its fiscal and tax obligations. Purpose: To send commercial information. Legal Basis: It is consent. Purpose: To send commercial information. Legal Basis: It is the legitimate interest, based on art. 21.2 of the Law on Information Society Services. VIDEO SURVEILLANCE DATA Purpose: Video surveillance of the facilities for security and control purposes. Legal Basis: It is the public interest in the protection of persons, property and facilities of the responsible party. PERSONAL DATA COLLECTED ON OUR WEBSITE In addition, this website collects personal data through different forms. The data requested in each form are those necessary for the purpose for which they are collected. The purpose of treatment are the following: CONTACT FORM: Purpose: To be able to answer the queries raised and send the user the requested information through the email or telephone indicated on the form. Legal Basis: It is the consent of the user. EMAIL Purpose: If the user contacts through the email and/or WhatsApp published on this website, their data will be processed to answer the queries raised and to be able to send them the requested information through the email and/or WhatsApp through which the query is received. Legal Basis: It is the legitimate interest of our company to respond to communications received.

3.- What category of data do we process? The data collected, by way of example but not limited to, refer to the category of identifying data, such as: Name and surname, Telephone, Postal Address, Company, Email; economic and financial data, such as: Bank details.

4.- How long do we keep your data? PERSONAL DATA OF CUSTOMERS AND SUPPLIERS The personal data provided will be retained as long as the business relationship is maintained or the user requests its deletion. Once the commercial relationship has ended, the data will be kept for as long as necessary to comply with legal obligations. Once the responsibilities derived from these legal obligations have expired, your data will be deleted. The personal data necessary for sending commercial communications, if you have authorized them, will be kept as long as you do not request their deletion. VIDEO SURVEILLANCE IMAGES Images captured by video surveillance systems shall be kept for a maximum of 30 days, unless a court order is issued or the images show violations, in which case the images shall be blocked and made available to the authorities. PERSONAL DATA WEBSITE FORMS The data collected through the forms on our website will be retained as long as they are necessary to fulfill the purpose for which they were collected or the user requests their deletion. The personal data necessary for sending commercial communications, if you have authorized them, will be kept as long as you do not request their deletion. Data collected through the “work with us” form will be kept for 1 year. The data collected through other forms on our website will be retained as long as they are necessary to fulfill the purpose for which they were collected or the user requests their deletion. The personal data necessary for sending commercial communications, if you have authorized them, will be kept as long as you do not request their deletion. In case of making a purchase on our website, the personal data provided will be retained for as long as the business relationship is maintained or the user requests its deletion. Once the commercial relationship has ended, the data will be kept for as long as necessary to comply with legal obligations. Once the responsibilities derived from these legal obligations have expired, your data will be deleted.

5.- Do we make profiles with your data? No automated decisions will be made and no profiling will be performed. With the information provided by the candidates through their CV, 247 LOCKERS. will be able to create profiles in order to be able to select the best candidate for a given job position.

6.- To whom do we give your data? No data transfers are foreseen except for those authorized by tax, commercial and telecommunications legislation, as well as in those cases in which a judicial authority requires us to do so. 247 LOCKERS may share personal data with outside companies that provide services to 247 LOCKERS. A Confidentiality Agreement is formalized with all these companies to guarantee the use of personal data in accordance with the requirements of current Data Protection regulations. By way of example and without being exhaustive, these companies may be: – Tax and Accounting Consulting. – Computer companies. In addition, 247 LOCKERS may share personal data with external companies, which are responsible, in order to be able to properly develop the activity. By way of example and without being exhaustive, these companies may be: – Transportation companies

7.- What third parties provide services on this website? The following service providers are used for the development of this website: Hosting: The servers where our website is hosted are located in the EU. It uses secure protocols so that data communication is done through an encrypted channel.

8.- What rights do you have and how to exercise them? The user has the right to access his/her personal data, to request the rectification of those that are inaccurate, as well as their deletion when, among other reasons, they are no longer necessary for the purposes for which they were collected. In certain circumstances, you may also request the limitation of their processing, in which case they will only be kept for the exercise or defense of claims, as well as to request the portability of your data. For reasons related to your particular situation, you may object to their processing and 247 LOCKERS will stop processing them, except for compelling legitimate reasons, or the exercise or defense of possible claims. The applicant may revoke the consents given at any time. Applicants may exercise their rights by sending an e-mail to [email protected] with a photocopy of their ID card and indicating the right they are exercising. You may also file a complaint with the Spanish Data Protection Agency.

9.- What security measures do we have in place? As part of our commitment to ensure the security and confidentiality of your personal data, we inform you that the necessary technical and organizational measures have been adopted to ensure the security of personal data and prevent its alteration, loss, unauthorized processing or access, given the state of technology, the nature of the data stored and the risks to which they are exposed, according to Art. 32 of the RGPD EU 679/2016.

10.- How do our social networks work? Through our social networks you can share our content or leave us your comments, photos or videos, as long as they are of interest to the entire community.

11.Our social networks are constantly monitored in order to respond to your questions and comments in the shortest possible time. We want it to be a space that we all enjoy, so it is important that we all respect the rules of coexistence: You are responsible for the contents you publish, do not violate any right, law or regulation. 1

12. Take care of the wording and tone, avoid publishing any abusive, defamatory or obscene information.

13. Respect the right to privacy, do not make unlawful, offensive or discriminatory comments about third parties.

14. Avoid fraudulent, misleading or deceptive comments.

15. We do not allow spam, commercial or advertising messages, we do not want repetitive messages.

16. We will not maintain conversations with profiles that we may consider to be fake. Please note that the content posted by followers on our pages does not necessarily reflect the views of our company. If your comments do not comply with the ‘House Rules’, they may be deleted, hidden or blocked. Anyone posting content that is not allowed will be blocked from the community. We reserve the right to modify these rules at any time and without prior notice.