Privacy Policy

This Application collects some Personal Data of its Users.

This document can be printed for reference using the print command in any browser's settings options.

Data Controller and Data Processing Manager

EXPERIMENTALITY LAB S.L.

Contact email of the Data Controller: hugo@experimentality.es

Classes of Data Collected

Among the classes of Personal Data that this Application collects, either directly or through third parties, are: Trackers; Usage Data.

Complete information regarding each category of Personal Data collected is provided in the sections of this privacy policy dedicated to this purpose or through specific explanatory texts displayed before the collection of such Data.

Personal Data may be freely provided by the User or, in the case of Usage Data, shall be collected automatically when using this Application.

All Data requested by this Application are mandatory and failure to provide them may prevent this Application from proceeding with the provision of the Service. In cases where this Application specifically indicates that certain Data are not mandatory, Users shall be free not to communicate such Data without any consequence to the availability or functioning of the Service. Users with doubts about which Data are mandatory may contact the Data Controller.

The use of Cookies or other tracking tools by this Application or by third-party service owners used by this Application is intended for the provision of the Service requested by the User, in addition to any other purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for any Personal Data of third parties that is obtained, published or shared through this Application and hereby declares that it has the consent of such third parties to provide such Data to the Data Controller.

Method and Place of Data Processing

Processing Methods

The Data Controller shall process Users' Data appropriately and adopt appropriate security measures to prevent unauthorized access, disclosure, alteration or destruction of the Data.

Data processing shall be carried out by computers and/or computer tools, following procedures and organizational methods strictly related to the stated purposes. In addition to the Data Controller, in some cases certain categories of authorized persons related to the operation of this Application (administration, sales, marketing, legal department and systems administration) or external contractors providing services to the Data Controller (such as external technical service providers, courier companies, hosting companies, computer companies, communication agencies) may access the Data and shall be appointed by the Data Controller as Data Processors, if necessary. An updated list of such persons may be requested from the Data Controller at any time.

Legal Basis of Processing

The Data Controller may process the User's Personal Data if one of the following conditions is met:

• When Users have given their consent for one or more specific purposes;
• When obtaining Data is necessary for the performance of a contract between the User and/or any other pre-contractual obligation of the User;
• When processing is necessary for compliance with a legal obligation binding on the User;
• When processing is related to a task carried out in the public interest or in the exercise of official powers granted to the Data Controller;
• When processing is necessary for the purposes of a legitimate interest pursued by the Data Controller or a third party.

In any case, the Data Controller is at your disposal to define the specific legal bases that apply to the processing and in particular, if obtaining Personal Data is a contractual or statutory requirement or a necessary requirement for entering into a contract.

Place

Data is processed at the Data Controller's offices, as well as in any other place where the parties involved in the processing are located.

Depending on the location of the Users, Data transfers may involve the transfer of Users' Data to a country different from their own. For more information about the place of processing of such transferred Data, Users may consult the section containing details about the processing of Personal Data.

Data Retention Period

Personal Data shall be processed and retained for the time necessary and for the purpose for which they have been collected.

Therefore:

• Personal Data collected for the conclusion of a contract between the Data Controller and the User shall be retained as such until such contract is completely concluded.
• Personal Data collected in the legitimate interest of the Data Controller shall be retained for the time necessary to fulfill such purpose.

The Data Controller may retain Personal Data for an additional period when the User gives consent to such processing, provided that such consent remains valid.

Purpose of Data Processing

User-related Data are collected to enable the Data Controller to provide its Service, comply with its legal obligations, respond to execution requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes: Interaction with social networks and external platforms, Statistics and Tag Management.

Users' Rights

Users may exercise certain rights with respect to Data processing by the Data Controller.

In particular, Users have the right to do the following:

• Withdraw consent at any time. Users have the right to withdraw consent they have previously given for the processing of their Personal Data.
• Object to the processing of their Data. Users have the right to object to the processing of their Data if such processing is carried out on a legal basis other than consent.
• Access to their Data. Users have the right to know whether their Data will be processed by the Data Controller, to obtain information about certain aspects of the processing, and to obtain a copy of the Data being processed.
• Verify and request modification. Users have the right to verify the accuracy of their Data and request that it be updated or corrected.
• Restrict processing of their Data. Users have the right, in certain cases, to restrict the processing of their Data.
• Delete or eliminate Personal Data. Users have the right, in certain cases, to obtain the deletion of their Data by the Data Controller.
• Receive your Data and transfer it to another controller. Users have the right to receive their Data in a standard, structured, machine-readable format and, if technically possible, to have it transferred to another controller.
• File a complaint. Users have the right to file a complaint with the competent personal data protection authority.

How to Exercise These Rights

Any request to exercise Users' rights may be addressed to the Data Controller through the contact details provided in this document. Such requests shall be processed by the Data Controller free of charge as soon as possible and in any case within one month.

Modification of this Privacy Policy

The Data Controller reserves the right to modify this privacy policy at any time, notifying Users through this page and, where possible, through this Application.

We strongly recommend that you review this page frequently, taking as reference the date of the last update indicated at the end of the page.

In the event that changes affect processing activities carried out based on User consent, the Data Controller must obtain, if necessary, the new consent of the User.

Last revision: June 24, 2022