In compliance with the obligations established in Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, you are hereby provided with information regarding the processing of your personal data:

Who is responsible for processing your data?

Data controller: NETBOSS COMUNICACIONES, S.L.

Tax ID: B39474929

Registered office: PLAZA VISTA BAHIA, 1-2 BAJO 39610, EL ASTILLERO.

Telephone: +34 942 01 07 10

Email: rgpd@netboss.es

Website: https://www.netboss.es/

Data Protection Officer (DPO): PRODAT Cantabria – dpdcantabria@prodat.esWe reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it, and if you have registered and access your account or profile, you will be informed of any changes. If you belong to any of the following categories, please consult the information:In compliance with the obligations established in Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, you are hereby provided with information regarding the processing of your personal data: Who is responsible for processing your data? Data controller:NETBOSS COMUNICACIONES, S.L. Tax ID: B39474929 Registered office: PLAZA VISTA BAHIA, 1-2 BAJO 39610, EL ASTILLERO. Telephone: +34 942 01 07 10 Email: rgpd@netboss.es Website: https://www.netboss.es/ Data Protection Officer (DPO): RODAT Cantabria – dpdcantabria@prodat.es We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it, and if you have registered and access your account or profile, you will be informed of any changes. If you belong to any of the following categories, please consult the information:

WEBSITE OR EMAIL CONTACTS

What data do we collect through the Website?

We may process your IP address, the operating system or browser you use, and even the duration of your visit, anonymously. If you provide us with data through the contact form, you will identify yourself so that we can contact you if necessary.

For what purposes will we process your personal data?

• To respond to your enquiries, requests, or applications.
• To manage the requested service, respond to your request, or process your application.
• To provide information by electronic means concerning your request.
• To provide commercial or event information by electronic means, provided that express authorization has been given.
• To carry out analyses and improvements to the Website and to our products and services. To improve our commercial strategy.

What is the lawful basis for processing your data?

• The data subject’s acceptance and consent: In cases where submitting a request requires completing a form and clicking the submit button, doing so necessarily implies that the data subject has been informed and has expressly consented to the content of the clause attached to that form or has accepted the Privacy Policy.
• All our forms use the * symbol to indicate mandatory fields. If you do not provide those details or do not tick the checkbox accepting the Privacy Policy, the information cannot be submitted. It normally uses the following wording: “□ I am over 14 years old and I have read and accept the Privacy Policy.”

NEWSLETTER CONTACTS

What data do we collect through the newsletter?

The Website allows you to subscribe to the Newsletter by providing us with an email address to which it will be sent. We will store only your email address in our database and will send you emails periodically until you request to unsubscribe or we stop sending emails. You will always have the option to unsubscribe in any communication.

For what purposes will we process your personal data?

• To manage the requested service.

• To provide information by electronic means concerning your request.

• To provide commercial or event information by electronic means, provided that express authorization has been given.

• To carry out analyses and improvements to email campaigns in order to improve our commercial strategy.

What is the lawful basis for processing your data?

The data subject’s acceptance and consent: When you subscribe, you will be required to tick a checkbox and click the submit button. This necessarily implies that you have been informed and have expressly consented to receiving the newsletter.

If you do not tick the checkbox accepting the Privacy Policy, the information cannot be submitted. It normally uses the following wording: “□ I am over 14 years old and I have read and accept the Privacy Policy.”

CUSTOMERS

For what purposes will we process your personal data?

• To prepare the quotation and follow it up through communications between both parties.

• To provide information by electronic means concerning your request.

• To provide commercial or event information by electronic means, provided that express authorization has been given.

• To manage the administrative, communication, and logistics services carried out by the Data Controller. • Invoicing and filing the applicable tax returns.

• To carry out the relevant transactions.

• Credit control and debt collection activities.

QUALITY SURVEYS

For what purposes will we process your personal data?

• To assess the quality level of the service provided

• To improve the services offered in accordance with ISO compliance

What is the lawful basis for processing your data?

The lawful basis is the respondent’s express consent.

SUPPLIERS

For what purposes will we process your personal data?

• To provide information by electronic means concerning your request.

• To provide commercial or event information by electronic means, provided that express authorization has been given.

• To manage the administrative, communication, and logistics services carried out by the Data Controller. • Invoicing.

• To carry out the relevant transactions.

• Invoicing and filing the applicable tax returns.

• Credit control and debt collection activities.

What is the lawful basis for processing your data?

The lawful basis is acceptance of a contractual relationship or, failing that, your consent when contacting us or offering us your products through any channel.

SHAREHOLDERS

For what purposes will we process your personal data?

• To organize the actions necessary to achieve the company’s objectives

• Its internal management and legal compliance.

• To convene meetings.

• To carry out the relevant transactions.

• To file the applicable tax returns.

What is the lawful basis for processing your data?

The lawful basis is contractual: acceptance of a share purchase agreement or similar contract, or participation in the incorporation of the company.

SOCIAL MEDIA CONTACTS

For what purposes will we process your personal data?

• To respond to your enquiries, requests, or applications.

• To manage the requested service, respond to your request, or process your application.

• To interact with you and create a community of followers.

What is the lawful basis for processing your data?

Acceptance of a contractual relationship within the relevant social network environment and in accordance with its Privacy Policies: Facebook https://www.facebook.com/policy.php?ref=pf Instagram https://help.instagram.com/155833707900388 Twitter https://twitter.com/privacy Linkedin https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv Youtube https://www.google.com/intl/es/policies/privacy/

How long will we retain the personal data?

We can only access or delete your data on a limited basis because you have a specific profile. We will process it for as long as you allow us to follow you, remain friends, or use “like,” “follow,” or similar buttons. Any correction of your data or restriction of information or posts must be made through your profile or user settings on the social network itself.

JOB APPLICANTS

For what purposes will we process your personal data?

• To organize recruitment processes for hiring employees.
• To invite you to job interviews and evaluate your application.
• If you have given us your consent, we may disclose your data to collaborating or related companies solely to help you find employment.
• If you tick the checkbox accepting the Privacy Policy, you consent to our sharing your job application with the entities that make up the group of companies so that you may be included in their recruitment processes.

We also inform you that one year after receiving your curriculum vitae, we will securely destroy it.

What is the lawful basis for processing your data?

The lawful basis is your unequivocal consent when you send us your CV.

VIDEO SURVEILLANCE

For what purposes will we process your personal data?

• To ensure security and access to the premises.
• To monitor the work of employees and other equivalent personnel.
• To assess the quality of the Service.

What is the lawful basis for processing your personal data?:

• To protect the public interest

To whom may we disclose your personal data?

State law enforcement agencies and/or judges and courts:

• In cases involving the commission of criminal acts, verification of serious misconduct, and similar situations.
• To bring legitimate legal actions based on our right to effective judicial protection.

How long will we store your personal data?

For a maximum period of 30 days.

Do we include personal data relating to third parties?

No. As a general rule, we only process data provided to us by the data subjects. If you provide us with third-party data, you must first inform those persons and obtain their consent; otherwise, you release us from any liability for failure to comply with this requirement.

What about data relating to minors?

We do not process data relating to children under 14 years of age. Therefore, please refrain from providing such data if you are under that age or, where applicable, from providing data relating to third parties who are under that age. NETBOSS COMUNICACIONES, S.L. accepts no liability for failure to comply with this provision.

Will we communicate by electronic means?

• They will only be used to manage your request if electronic communication is one of the contact methods you have provided. • If we send commercial communications, they will have been expressly authorized by you in advance.

What security measures do we apply?

You can rest assured: We have adopted an optimal level of protection for the Personal Data we handle and have implemented all available technical means and measures, in line with the state of the art, to prevent the loss, misuse, alteration, unauthorized access, and theft of Personal Data.

To which recipients will your data be disclosed?

• Your data will not be disclosed to third parties unless required by law. Specifically, it will be disclosed to the Spanish State Tax Administration Agency and to banks and financial institutions for payment collection for the service provided or product purchased, as well as to the data processors necessary for the performance of the agreement.
• In the event of a purchase or payment, if you choose an application, website, platform, bank card, or another online service, your data will be disclosed to that platform or processed within its environment, always with the highest level of security.
• When instructed by us, the web development and maintenance company or the hosting company will have access to our website. They will have signed a service agreement requiring them to maintain the same level of privacy as we do.
• Any international transfer of data resulting from the use of American applications will be covered by the Privacy Shield framework, which guarantees that American software companies comply with European data protection policies concerning privacy.

What rights do you have?

• To know whether or not we are processing your data.
• To access your personal data.
• To request the rectification of your data if it is inaccurate.
• To request the erasure of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw the consent you granted us.
• To request restriction of the processing of your data in certain circumstances, in which case we will retain it only in accordance with applicable regulations.
• To data portability. Your data will be provided to you in a structured, commonly used, and machine-readable format. If you prefer, we can send it to the new controller you designate. This right applies only in certain circumstances.
• To lodge a complaint with the Spanish Data Protection Agency or the competent supervisory authority if you believe that we have not handled your request correctly.
• To withdraw your consent at any time for any processing to which you have consented. If any of your details change, please inform us so that we can keep them up to date.

Form for exercising your rights

• We have forms for exercising your rights. Request them from us by email or, if you prefer, you may use those prepared by the Spanish Data Protection Agency or third parties.
• These forms must be electronically signed or accompanied by a photocopy of your DNI.
• If someone represents you, you must attach a copy of their DNI or have them sign the form electronically.
• The forms may be submitted in person or sent by post or email to the Data Controller’s address stated at the beginning of this text.

How long do we take to respond to a request to exercise your rights?

It depends on the right concerned, but no later than one month after your request, or two months if the matter is highly complex and we notify you that we require more time.

Do we use cookies?

If we use cookies other than those that are strictly necessary, you may consult the Cookie Policy through the corresponding link on our website’s home page.

How long will we retain your personal data?

• Personal data will be retained for as long as you remain associated with us.
• Once your relationship with us ends, the personal data processed for each purpose will be retained for the periods provided by law, including the period during which a judge or court may require it, taking into account the limitation period for legal actions.
• The processed data will be retained until the legal periods referred to above expire where there is a legal retention obligation or, if no such legal period exists, until the data subject requests its erasure or withdraws the consent granted.
• We will retain all information and communications relating to your purchase or the provision of our service for the duration of the product or service warranties in order to handle potential claims.

How long will we retain your data?

• Customers and suppliers: For the duration of the contractual relationship and the time required to comply with legal obligations (at least 6 years).
• Website forms and newsletter: Until you withdraw your consent.
• CVs: A maximum of 1 year from receipt.
• Video surveillance: A maximum of 30 days, unless otherwise required by law.

Security measures

We have adopted all necessary technical and organizational measures to ensure the confidentiality, integrity, availability, and resilience of personal data, in compliance with theNational Security Framework (ENS)and other applicable ISO standards.Changes to the Privacy Policy

We reserve the right to amend this policy to adapt it to legislative or case-law developments. In the event of a significant change, we will notify you through our usual channels.

Last updated: 28/04/2025