Who is the data controller responsible for processing your data? The responsible entity is AFGC MINERIA Y PROYECTOS SLP, administered by Aurelio Francisco, with its registered office at Lugar Parque Tecnológico de Boecillo, Boecillo, 47151, Spain. The contact telephone number is +34 616801201 and the email address is aurelio.francisco@anfgc.pro.

Who is the Data Protection Officer (DPO) and how can they help you? The DPO is a legally established figure whose main functions are to inform and advise us on the obligations that affect us regarding personal data protection and to oversee compliance. Furthermore, the DPO acts as a point of contact for any matter related to the processing of personal data, so you may contact them if you wish. The DPO for AFGC MINERIA Y PROYECTOS SLP is the entity itself. You can contact them regarding this matter at the company’s postal address or via the email address aurelio.francisco@anfgc.pro.

For what purpose do we process your personal data? We process the personal data you provide us for the following purposes:

• Sending commercial communications regarding our engineering, mining, and industrial project services, unless you express your opposition through any means. Authorization to process your data for this purpose is voluntary, and your refusal would solely result in you not receiving commercial offers for our services.

• Resolving inquiries or preparing quotes for projects that you may request through our contact forms. We reserve the right to address inquiries or quote requests that are not remunerated.

How long will we keep your data? Data used for sending commercial communications about our services will be kept indefinitely until, where applicable, you express your desire to have it deleted. Data provided exclusively for resolving inquiries or preparing project quotes, in the event you check the box indicating you do not wish to receive commercial communications, will be kept for 2 years.

What is the legal basis for processing your data? The legal basis for processing your data to resolve inquiries, prepare quotes, and carry out commercial actions is the consent requested from you, which you may revoke at any time. The withdrawal of such consent will not affect the execution of a potential engineering services contract under any circumstances, but data processing carried out for that purpose prior to withdrawal will not lose its lawfulness because consent has been revoked.

To which recipients will your data be communicated? Your data may be communicated to third-party collaborating entities solely for the purpose of sending you proposals or developing commercial solutions of interest related to your project.

What are your rights when you provide us with your data? Anyone has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under the conditions provided in the General Data Protection Regulation (GDPR), interested parties may request the restriction of the processing of their data or its portability, in which case we will only retainit for the exercise or defense of legal claims.

In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. If you have granted consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal. In these cases, we will stop processing the data or, where appropriate, stop doing so for that specific purpose, except for compelling legitimate grounds, or the exercise or defense of possible legal claims.

All the aforementioned rights can be exercised through the contact channels (email or postal address) listed at the beginning of this clause.

If you provide third-party data, you assume the responsibility of informing them in advance of everything provided for in Article 14 of the General Data Protection Regulation, under the conditions established in said provision.

In the event of any violation of your rights, especially when you have not obtained satisfaction in exercising them, you may file a claim with the Spanish Data Protection Agency (contact details available at www.aepd.es) or another competent supervisory authority. You may also obtain further information about your rights by contacting these organizations.