The User Agreement for AUDIOGENERICS HISPANIA, S.L. consists of this Legal Notice, our Privacy Policy, and the Cookie Policy.

OUR PRIVACY POLICY AT A GLANCE

Who are we? We are AUDIOGENERICS HISPANIA, S.L. and we process your data as the Data Controller. This means we are responsible for how your personal data is used and protected.

What do we use your data for? We use the data you have provided to us online or through any other means to monitor comments made on our blog

Why do we have it? We are legitimate in processing your data for various reasons. By filling out a form or sending an email with an enquiry or suggestion, we have a legitimate interest in responding to it.

Who do we share your data with? We will only share data with collaborating companies to address received requests and provide our services or products, banking entities, and bodies required by law. Under no circumstances do we sell your data to third parties.

What rights do you have? You have the right to access, rectify, or erase your personal data. You also have the right to object to us using data you have previously authorised us to use, to data portability, and not to be subject to automated individual decision-making.

In processing your personal data, we apply the following principles to ensure the highest protection for you:

• Principle of lawfulness, fairness, and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes, which we will inform you of beforehand with absolute transparency.
• Principle of data minimisation: We will only request data strictly necessary in relation to the purposes for which we require it. The minimum possible.
• Principle of storage limitation: data will be kept for no longer than is necessary for the purposes of processing. Depending on the purpose, we will inform you of the corresponding retention period. In the case of subscriptions, we will periodically review our lists and delete inactive records after a considerable time.
• Principle of integrity and confidentiality: Your data will be processed in a manner that ensures appropriate security of personal data and guarantees confidentiality. You should know that we take all necessary precautions to prevent unauthorised access or misuse of our users’ data by third parties.

In this privacy policy, you will find more detailed information about how we use the personal data of our clients, suppliers, and users, and in general, all individuals who have contact with us, regardless of the means used to communicate (online form, by phone, or by email, in person).

We like to be transparent about what we do with your personal data, for you to understand the implications of our uses, and the rights you have regarding your data. For this reason, we keep our Privacy Policy, Legal Notice, and Cookie Policy updated, information which you can consult on this website.

If you have any questions or would like more information about the privacy policy, you can continue reading the document.

1. WHO IS THE DATA CONTROLLER FOR YOUR DATA?

The Data Controller for your data is AUDIOGENERICS HISPANIA, S.L.:

AUDIOGENERICS HISPANIA, S.L. informs the user that the data provided through browsing our website, the various data collection forms, or by sending emails, will be processed by AUDIOGENERICS HISPANIA, S.L. and that such processing is recorded in the Register of Processing Activities managed by AUDIOGENERICS HISPANIA, S.L. in accordance with the GDPR.

2. WHAT IS YOUR PERSONAL DATA USED FOR?

At oirvitalcanarias.com, we process data from both our website users and third parties who have relationships with us. To help you understand how we process your data, we have differentiated the purpose for which we use the data, the types of data, and the legal basis, depending on the category of individuals whose data we process. Below, we classify the individuals whose data we process based on the type of relationship they have with AUDIOGENERICS HISPANIA, S.L.

• WEBSITE USERS

What data do we collect from our website users?

1. Data from users who complete any of the available forms: The personal data requested by AUDIOGENERICS HISPANIA, S.L. includes:

• • Identification data: name and surname, telephone number, postal and email address

• Data relating to the request

• Data from users who browse our website: Data provided by cookies and Google Analytics.

• Data from users who post comments on our blog

For what purposes will we process your personal data?

When the user accepts our privacy policy, they authorise us to use the personal data provided for the following processing activities:

• To send you information and provide the service you request through the various forms available on our website.
• To manage your comments on our blog.

How do we obtain your data?

We obtain your data through:

• The form completed by the website user for the purpose stated therein. The form is subject to the acceptance of this privacy policy by ticking the indicated box.

What is the legal basis for processing your data?

The user’s express consent (Article 6.1.a. GDPR) manifested by completing the various forms, ticking boxes, and participating in our blog, legitimises the processing by AUDIOGENERICS HISPANIA, S.L.. The user can withdraw their consent at any time, although if consent is withdrawn, this does not affect data processing carried out prior to the withdrawal.

Our legitimate interest in creating browsing profiles and detecting preferences through the installation of cookies.

The performance of a contract or the adoption of pre-contractual measures when the client makes a request using the various forms available to the user on our website or requests information about the services provided by AUDIOGENERICS HISPANIA, S.L..

• SUPPLIERS

What data do we collect from our suppliers?

1. Supplier identification data: The personal data requested by AUDIOGENERICS HISPANIA, S.L. includes:

• Identification data: name and surname, telephone number, postal and email address
• Employment and professional data
• Activities and businesses

How do we obtain your data?

We obtain your data through:

• The signing of the contract that binds us, the acceptance of the presented quote, the receipt of supplier invoices, and the signing of the Data Processor contract if applicable for the service provided.

For what purposes will we process your personal data?

To manage information related to the data of our goods and services supplier companies, as well as their representatives.

Maintenance of the contractual relationship with our suppliers.

Management of payments and collections related to the contracts that bind us.

What is the legal basis for processing your data?

In the performance of a pre-contract/contract to send you information and manage the service provided, which would not be possible otherwise.

In the legitimate interest for managing data related to the representatives of AUDIOGENERICS HISPANIA, S.L.’s suppliers.

• CLIENTS

What data do we collect from our clients?

1. Data from clients who complete any of the forms available on oirvitalcanarias.com as well as at the physical premises of AUDIOGENERICS HISPANIA, S.L.

• • Identification data: name and surname, telephone number, postal and email address

• Data relating to the request

How do we obtain your data?

If you are an online client, we obtain your data through: The information request form completed by the user. The form is subject to the acceptance of this privacy policy by ticking the indicated box.

• We obtain browsing data from the various cookies that the client accepts when first accessing oirvitalcanarias.com

If you are an in-person client, we obtain your data through:

• The client registration form.
• The acceptance of the presented quote.
• The signed contract.

For what purposes will we process your personal data?

• To generate and manage documentation associated with your requests and purchases.
• To provide you with information about offers, products, and services related to your purchase.
• To process your online reservation or purchase through our platform.

What is the legal basis for processing your data?

In the performance of a pre-contract/contract to send you information and manage the service provided or product supplied, which would not be possible otherwise.

The user can withdraw their consent at any time.

3. HOW LONG DO WE RETAIN YOUR DATA?

• WEBSITE USERS

Data processed based on the website user’s consent will be retained as long as it remains relevant for the purpose for which it was collected and consent is not withdrawn.

For data processed based on legitimate interest, the retention period will be linked to the reason for data collection, always ensuring adequate safeguards and respect for the rights and freedoms of data subjects.

For data processed based on the performance of a contract or the adoption of pre-contractual measures, the retention period will be as long as the contractual relationship remains in force, as well as any subsequent period required by legal obligation.

The IP address obtained through cookies will have a retention period of one year, for the purpose of demonstrating user consent.

Regarding the retention period for cookies, you can find more information on our website in the “Cookie Policy” section.

• SUPPLIERS

For data processed based on legitimate interest, the retention period will be linked to the reason for data collection, always ensuring adequate safeguards and respect for the rights and freedoms of data subjects.

For data processed based on a contract, as well as if part of the processing is legitimised by a legal obligation, the data will be retained for as long as the contractual relationship is in force. The retention period for data once this has ended, or if the processing is linked to a legal obligation, will be that legally stipulated, and the data subject cannot revoke the data processing except in cases of legally provided blocking.

• CLIENTS

Data processed based on the client’s consent will be retained as long as it remains relevant for the purpose for which it was collected and consent is not withdrawn.

For data processed based on legitimate interest, the retention period will be linked to the reason for data collection, always ensuring adequate safeguards and respect for the rights and freedoms of data subjects.

For data processed based on a contract, as well as if part of the processing is legitimised by a legal obligation, the data will be retained for as long as the contractual relationship is in force. The retention period for data once this has ended, if the processing is linked to a legal obligation, will be that stipulated, and the data subject cannot revoke the data processing except in cases of legally provided blocking.

4. ADDITIONAL INFORMATION ON DATA PROCESSING

Only individuals over 14 years of age can provide data through our website and email. If you are under this age, you must have the consent of your parents or legal guardians.

The User guarantees the authenticity and up-to-dateness of all data communicated to AUDIOGENERICS HISPANIA, S.L. and declares that they are over 14 years of age, and will be solely responsible for any false or inaccurate statements made.

Personal data processed by AUDIOGENERICS HISPANIA, S.L. may be mandatory or voluntary. Through web forms, you will not be asked for special category data to ensure your privacy. If it is necessary to collect special category data to provide you with a service, it will be requested through another channel. The data that will be requested in the forms are:

Voluntary information is that which the user is not obliged to provide to contact us.

Fields marked with an asterisk (*) or with the word (required) in our forms are mandatory; refusal to provide them will make it impossible to provide the service or attend to your request.

In the event that you provide us with third-party data, you declare that you have their consent and undertake to provide them with the information we give you in this clause, exempting AUDIOGENERICS HISPANIA, S.L. from any obligation. However, AUDIOGENERICS HISPANIA, S.L. may carry out verifications to confirm that the third party has been informed, adopting the due diligence measures established in data protection regulations.

5. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Data will not be transferred to third parties except by legal obligation or if necessary to attend to your request.

Among the recipients to whom your data may be communicated are:

• Public Administrations and Bodies when required by tax, labour, Social Security, or any other applicable regulations. Data processors (fraud detection and prevention providers, technology services, customer service, advertising and marketing services, and, in general, third-party providers necessary for the provision of services offered by AUDIOGENERICS HISPANIA, S.L. such as courier and transport service providers, etc.).

6. ARE INTERNATIONAL DATA TRANSFERS MADE?

oirvitalcanarias.com is hosted by Cloudflare, Inc., which stores your data in data centres located in the United States.

The personal data provided by the user may be stored in the United States by Cloudflare, Inc. based on the existing service provision between both parties, thus resulting in an international data transfer. The international transfer complies with the GDPR as it is a transfer based on an adequacy decision, with the United States having been declared a country with an adequate level of protection by the European Commission (EU-USA Data Privacy Framework – Decision of 10 July 2023) and Cloudflare, Inc. being included in the “Data Privacy Framework List”.

Our website only accesses user data using the following methods:

• Through the contact forms available to the user on the website.
• Through comments made by the user on the website’s blog.

International data transfers may also occur in the context of the aforementioned assignments/communications, for which AUDIOGENERICS HISPANIA, S.L. will use the tools provided in Articles 46 and 49 of the GDPR as a guarantee for transfers made to countries that do not have an adequacy decision from the European Commission.

In any case, third parties with whom certain personal data are shared will have previously demonstrated the adoption of appropriate technical and organisational measures for their proper protection and will only be made with third countries when there is a binding legal instrument in accordance with Articles 46 et seq. of the GDPR. By accepting this privacy policy, you agree that an international data transfer may occur in accordance with the indicated safeguards.

If the requirements established in the GDPR are not met, the data subject may give their consent to the international transfer or a contract may be executed in the interest of the data subject. Otherwise, authorisation must be requested from the Supervisory Authority.

AUDIOGENERICS HISPANIA, S.L. never sells user data to third parties.

7. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

The user can exercise the following rights before AUDIOGENERICS HISPANIA, S.L.:

1. Access your personal data
2. Rectify them when they are inaccurate or incomplete
3. Request the erasure or cancellation of data when, among other reasons, they are no longer necessary for the purposes for which they were collected
4. Object to their processing
5. Request the restriction of the processing of your data when any of the conditions provided for in the regulations are met
6. Request the portability of your data in the cases provided for in the regulations
7. Prevent being subject to automated decisions
8. Withdraw granted consents

To exercise their rights, the user must send a written request indicating the right they wish to exercise and attach a document proving their identity and postal or email address for notification purposes. This request can be made either by post to: AUDIOGENERICS HISPANIA, S.L. María Cristina, 28 38003 – Santa Cruz de Tenerife, or to the following email address: [email protected]; [email protected]; [email protected]; [email protected].

AUDIOGENERICS HISPANIA, S.L. must respond to the request for the exercise of rights within one month from the receipt of the request. This period may be extended by another two months if necessary, taking into account the complexity and number of requests. We will inform you of any extension within one month of receiving the request, stating the reasons for the delay.

Furthermore, data subjects have the right to lodge a complaint with the competent Supervisory Authority (Spanish Data Protection Agency) when they consider that AUDIOGENERICS HISPANIA, S.L. has violated the rights recognised by data protection regulations at www.aepd.es

8. IS MY DATA SECURE?

AUDIOGENERICS HISPANIA, S.L. has a current contract with the Hosting company Cloudflare, Inc. for the hosting of its website.

In any case, AUDIOGENERICS HISPANIA, S.L. guarantees the adoption of appropriate measures to ensure the confidential processing of your data, given its reserved nature, and undertakes to keep such data secret, treating it with the utmost confidentiality, and declares to have implemented in its information system the security policies corresponding to the type of data handled in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate that ensures an encrypted connection is established when a user visits our website and exchanges information with us.

9. LINKS TO OTHER WEBSITES

If you choose to leave our website via links to other websites not belonging to our entity, AUDIOGENERICS HISPANIA, S.L. will not be responsible for the privacy policies of such websites or for the cookies they may store on the user’s computer.

Date: 17/11/2025

Version: V.1.0