In accordance with Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free circulation of such data and by which Directive 95/46/CE (General Data Protection Regulation) is repealed, the following information is provided to users:

1. Who is the Data Processor?

2. For what purpose do we treat your personal data and what is the basis of legitimation that sustains it?

In Dibaq we collect and treat the personal data that facilitates us with the following purposes:

3. How have we obtained your data and for how long do we keep your personal data?

Personal data have been provided by you through the forms on the website or through contact with the staff of the organization and will be kept for the time necessary for the realization of the purposes for which they were collected, until they exercise their right to withdraw or withdraw their consent.

In that case, your data will be blocked and preserved to meet the potential responsibilities arising from the treatment in accordance with the legally established deadlines.

Regarding the management of candidates, CVs will be preserved for 2 years since the last update of the same.From this period, those who have not been updated will be deleted unless they ask us otherwise.

4. To which recipients will communicate their weight data?

Except in cases where your data is treated for the purpose of providing information related to advertising campaigns, the personal data processed may be communicated to the following destinations:

• Banks and financial entities.

• Information institutions for credit and property credit.

• Office of consumers and users for any claim.

• Under the Act, as is the case of the Security Forces and Corps.

• To the public administrations to which DIBAQ DIPROTEG S.A. has to provide information on the fulfilment of our legal obligations.

• Group companies.

5. What are your rights when you provide us with your personal data?

You can exercise your rights in writing by attaching a copy of your ID or documentation that you identify in the following address: CALLE CRUZ, 1 - 40260 - FUENTEPELAYO (SEGOVIA) or by e-mail to rgpd@dibaq.com

We also inform you that when you have not obtained satisfaction in the exercise of your rights or how to exercise them you may file a claim with the Control Authority.If you want to know more about this right and how to exercise it, you can contact the AGPD:

• http://www.agpd.es Tel.901 100 099 and 912 663 517.C/ Jorge Juan, 6, 28001 Madrid.

Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes they were collected.

In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only retain them for the exercise or defence of claims.

In certain circumstances and for reasons related to their particular situation, the interested parties may object to the processing of their data. DIBAQ DIPROTEG S.A. cease to treat the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.

In certain circumstances, the person concerned shall have the right to receive the personal data that fails him, which has provided us, in a structured format, of common use and mechanical reading, and to transmit them to another responsible for the treatment.

The persons concerned shall have the right to object, on grounds related to their particular situation and without any legitimate grounds that prevail over the interests, rights and freedoms of the person concerned, to the subject ' s personal data being processed based on the fulfilment of a mission carried out in the public interest or in the exercise of public powers or to the satisfaction of legitimate interests of the person concerned DIBAQ DIPROTEG S.A.including profiling.