Our privacy policy at a glance

1. Who are we? We are Viento a Favor Marbella, S.L. and we process your personal data as the Data Controller. This means we take responsibility for how your data is used and protected.

2. What do we use your data for? We will use your data (provided online or through other means), among other purposes, to address your inquiries, questions, and suggestions.

3. What do we use them for? We are authorised to process your data because we have a legitimate interest in addressing your inquiries and resolving your questions and suggestions.

4. Who do we share your data with? We will share your data with service providers who assist or support us, whether they are companies within the Sottovento Group itself or external collaborators with whom we have reached an agreement, and whether they are located inside or outside the European Union.

5. Your rights. You have the right to access, rectify, or delete your personal data. In some cases, you also have other rights, for example, to object to our use of your data or to data portability, as explained in detail below.

We invite you to read our full Privacy Policy below to understand in detail how we will use your personal data and the rights you have regarding it.

Before we begin

• In this Privacy Policy, you will find all relevant information regarding the use we make of our customers" and users" personal data, regardless of the channel or medium (such as online, by telephone, or by email) you use to interact with us.

• We are transparent about what we do with your personal data, so that you understand the implications of the uses we carry out or the rights you have in relation to your data:

or We make all the information in this Privacy Policy permanently available to you, which you can consult whenever you deem appropriate and, in addition,

or You will also find information about each processing of your personal data as you interact with us.

• Some terms we will use in this Privacy Policy:

When we refer to our Platform, we generally mean any of the digital or in-person channels or means you have used to interact with us. The main ones are:

• our website, www.sottoventobrand.com;

• the telephone, the postal or electronic mail.

1. Who is responsible for the processing of your data?

The data controller is:

• FAVOURABLE WIND MARBELLA, S.L.

or Postal address: Calle Pedraza 5, 29601, Marbella (Málaga), Spain.

or Email from the Data Protection Officer: info@sottoventobrand.com

In other words, VIENTO A FAVOR MARBELLA, S.L (hereinafter, "We"), is the Data Controller. This means that we are responsible for processing and protecting your personal data.

2. For what purpose do we process your personal data?

Depending on the products, services, or features you wish to use at any given time, we will need to process different sets of data, which will generally include, as applicable, the following:

• your identifying data (for example, your name, surname, language and market from which you interact with us, and contact details, etc.);

• transactional information (for example, information you provide about your purchase receipts, orders, returns, etc.);

• Connection data, and navigation.

Remember that when we ask you to fill in your personal details to grant you access to any feature or service on the Platform, we will mark certain fields as mandatory, as these are details we need in order to provide you with the service or grant you access to the relevant feature. Please bear in mind that if you choose not to provide us with these details, you may not be able to enjoy those services or features.

We will process your personal data for the following purposes:

Purpose More info

To handle the requests or inquiries you make through the Professional Contact and Customer Service channels We only process personal data that is strictly necessary to manage or resolve your request or inquiry.

Usability and quality analysis for the improvement of our services If you access our Platform, we inform you that we will process your browsing data for analytical and statistical purposes, that is, to understand how users interact with our Platform and thus be able to introduce improvements to it, as well as to address any improvement suggestions you may send us as a user.

3. What is the legal basis for processing your data?

The legal basis that allows us to process your personal data also depends on the purpose for which we process it, as explained in the following table:

Purpose Legitimation

Professional Contact and Customer Service We consider that we have a legitimate interest in addressing the requests or inquiries you submit to us through the various available contact channels. We understand that the processing of this data is also beneficial for you, as it allows us to properly assist you and resolve the inquiries raised.

When you contact us, particularly for the management of issues related to your order or the product/service of our brands purchased through the stores operated by the companies of the Sottovento Group, the processing is necessary for the performance of the sales contract.

When your inquiry is related to the exercise of the rights about which we inform you below, or to claims related to the products or services of the Sottovento Group brands, what legitimises us to process your data is the fulfilment of legal obligations on our part.

Usability and quality analysis We consider that we have a legitimate interest in analyzing the Platform"s usability and user satisfaction level, as we believe that processing this data is also beneficial for you because the purpose is to improve the user experience and offer a higher quality service, as well as address any suggestions you send us.

4. How long will we keep your data?

The retention period for your data will depend on the purposes for which we process it, as explained below:

Purpose Retention period

Professional Contact and Customer Service We will process your data for as long as necessary to handle your request or inquiry.

Usability and quality analysis We will process your data promptly for the duration of the specific quality action or survey we carry out, or until we anonymise your browsing data. Similarly, we will process your data for as long as necessary to address your suggestion.

Regardless of whether we process your data for the time strictly necessary to fulfil the corresponding purpose, we will subsequently keep it duly stored and protected for the period during which liabilities arising from the processing may arise, in compliance with the regulations in force at any given time. Once the possible actions in each case have expired, we will proceed to delete the personal data.

5. Will we share your data with third parties?

To fulfil the purposes indicated in this Privacy Policy, it is necessary for us to grant access to your personal data to entities within the Sottovento Group (for example, to the Sottovento Group entity/entities located in the market you referred to in your query) and to third parties that provide us with support in the services we offer you, namely:

• technology service providers,

• customer service-related service providers.

For service efficiency, some of the providers mentioned are located in territories outside the European Economic Area that do not provide a level of data protection comparable to that of the European Union, such as the United States. In such cases, we inform you that we transfer your data with appropriate safeguards and always ensuring the security of your data.

• Some providers are certified under Privacy Shield, a certification you can check at the following link: https://www.privacyshield.gov/welcome

• With other providers we have signed Standard Contractual Clauses approved by the Commission, the content of which you can consult at the following link: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en

6. What are your rights when you provide us with your data?

We are committed to respecting the confidentiality of your personal data and ensuring you can exercise your rights. You can exercise these rights free of charge by sending an email to our address dataprotection@sottoventobrand.com, simply stating the reason for your request and the right you wish to exercise. If we consider it necessary to identify you, we may ask you for a copy of an identity document.

In particular, regardless of the purpose or legal basis under which we process your data, you have the right to:

• Request access to the data we have about you.

• Asking us to rectify the data we already hold. In any case, please note that by actively providing your personal data through any means, you guarantee that it is true and accurate, and you undertake to notify us of any changes or modifications. Any loss or damage caused to the Platform or the Platform"s manager or any third party due to the communication of incorrect, inaccurate, or incomplete information in the registration forms will be the sole responsibility of the user. Please remember that, as a general rule, you should only provide your own personal data, not that of third parties.

• Request that we delete your data to the extent that it is no longer necessary for the purpose for which we need to process it, as we have informed you above, or to the extent that we no longer have the legal basis to do so.

• You can ask us to limit the processing of your data, which means that in certain cases you can request us to temporarily suspend the processing of the data or to retain it for longer than necessary when you may need it.

Additionally, when the processing of your data is based on our legitimate interest, you will also have the right to object to the processing of your data.

Finally, we inform you of your right to lodge a complaint with the relevant data protection supervisory authority, in particular, with the Spanish Data Protection Agency (https://www.agpd.es/portalwebAGPD/index-ides-idphp.php).

7. Changes to the privacy policy

We may modify the information contained in this Privacy Policy when we deem it appropriate. If we do so, we will notify you through various channels on the Platform (for example, through a banner or a pop-up). In any case, we suggest that you review this Privacy Policy from time to time in case of minor changes or if we introduce any interactive improvements, taking advantage of the fact that you will always find it as a permanent point of information on our Website.

8. Cookie Information

We use cookies and similar devices to facilitate your navigation on the Platform, understand how you interact with Viento A Favor Marbella, S.L., and, in certain cases, to show you advertising based on your browsing habits. Please read our Cookie Policy to learn more about the cookies and similar devices we use, their purpose, and other relevant information.

PRICES

Online prices are the same as those in the shops.

If there is any discrepancy between the price shown online and the labels, the correct price will be the one indicated and accepted at the time of purchase.

PAYMENT METHODS

To ensure maximum security, we use Banco Sabadell's Virtual Point of Sale (Redsys) as our payment gateway.

The payment form is embedded on our website but hosted on Banco Sabadell's server, which maximises its security. Data is transmitted securely using SSL encryption.

You can use the following payment methods:

The amount of your order is charged to your account once the order is dispatched. Most banks block the amount at the time of purchase and then process the actual charge later.

You can shop with complete peace of mind in our stores as we put great effort into ensuring the security of your purchases and your data.

INVOICE

You can request an invoice for your order as an individual or as a business. You will have access to the invoice through your account once the order has been dispatched. If you made the purchase as a guest, please contact us and we will send it to you.

In this Cookie Policy, you will find information about the use we make of cookies and similar devices that are installed on our customers' and users' terminals. Sometimes, the use of cookies may be related to the processing of personal data, so we recommend that you consult our Privacy Policy, accessible on our Platform, if you wish to obtain information about how we use the personal data of our customers and users, how to exercise your rights, or the terminology we use to refer to our Platform (Website, App, or Physical Stores).

1. What is a Cookie?

A Cookie is a small text file that a website, app, or other platform stores on your computer, tablet, smartphone, or any other similar device, with information about your browsing or usage, like a tag that identifies your device. Cookies are necessary, for example, to facilitate navigation and understand how users interact with platforms so that they can be improved. They are also very useful for being able to offer advertising according to the user's preferences, as well as for other purposes detailed later. Cookies do not harm your computer or device.

When we talk about "Cookies," we also refer to other similar technologies for installing and/or collecting information on or about your device (such as flash cookies, web beacons or bugs, pixels, HTML5 (local storage), and SDK technologies for app formats. Likewise, the term "Cookies" also applies to the use of fingerprinting techniques, i.e., those information combination techniques that help us identify your device. Sometimes, these technologies work together with cookies to collect and store information, either to provide you with certain functionalities or services on our Platform, or to show you advertising on third-party platforms, taking into account your browsing.

This explanation is a general overview of what is understood by Cookies for informational purposes only. The specific Cookies we use are detailed in the cookie settings panel accessible on our Platform.

2. What types of Cookies are there?

Please review this section, which provides an overview of the types of Cookies that may be used in an online environment.

Depending on the owner of the Cookies, they can be classified as:

• First-party Cookies: These are those sent to the user's computer or device from a computer or domain managed by the publisher itself, and from which the platform or service requested by the user is provided.

• Third-party Cookies: These are those sent to the user's computer or device from a computer or domain that is not managed by the publisher, but by another entity that processes the data obtained through the cookies.

Depending on the purpose of the Cookie, they can be classified as:

• Strictly necessary (technical) Cookies: These are those that allow the user to navigate through a website, platform, or application and use the different options or services that exist there, such as controlling traffic, identifying data or the session, accessing restricted access sections or content, remembering the items that make up an order, carrying out the purchase process of an order, managing payment, controlling fraud linked to the security of the service, using security elements during navigation, making the request for registration or participation in an event, storing content for the dissemination of videos or sound, enabling dynamic content (for example, loading animation of a text or image), or sharing content through social networks. Technical cookies, being strictly necessary, are downloaded by default when they allow the platform to be displayed or provide the service requested by the user.

• Functionality or customisation Cookies: These cookies are those that allow information to be remembered so that the user accesses the service or platform with certain characteristics that can differentiate their experience from that of other users, such as the language, the number of results to display when the user performs a search, the appearance or content of the service depending on the type of browser used by the user or the region from which they access the service, etc. Not accepting these Cookies may result in slow website performance or poorly adapted recommendations.

• Analytical Cookies: These are those that allow the number of users, the sections visited on the platform, and how they interact with it to be quantified, in order to carry out the measurement and statistical analysis of the use made by users, with the aim of introducing improvements based on the analysis of the usage data of the platform or service by users.

• Behavioural advertising Cookies: These are those that store information about user behaviour obtained through the continuous observation of their browsing habits, which allows a specific profile to be developed to show advertising based on it. These cookies allow the management, as effectively as possible, of the advertising spaces that, where applicable, the publisher has included directly or in collaboration with third parties.

3. What are Cookies used for on our Platform?

Cookies are an essential part of how our Platform works. The main objective of our Cookies is to make your browsing experience more comfortable and efficient. For example, they are used to remember your preferences (language, country, etc.) during browsing and on future visits. We also use our Cookies to continuously improve our services and Platform, as well as to be able to offer personalised advertising based on your browsing habits.

The information collected in Cookies also allows us to improve our Platform through estimates based on statistical data and usage patterns (number of visits, most visited sections, visit duration, etc.), to understand statistically how users interact with the Platform in order to improve our services, as well as to adapt the Platform to your individual interests, speed up searches, etc.

Sometimes, we may use Cookies to obtain information that allows us to display, from our Platform, third-party platforms, or by any other means, advertising based on the analysis of your browsing habits (products visited, sections consulted, etc.).

In any case, in the Cookies we use, we never store sensitive information such as passwords, credit or debit card details, etc.

4. How can I manage the use of Cookies on this Platform?

In the cookie settings panel accessible at all times on our Platform, you can obtain all the information about the Cookies used by this Platform, along with information about the purpose, duration, and management (first-party or third-party) of each of them, so that you can manage the activation and deactivation of the use of those Cookies that are not strictly necessary for the functioning of the Platform.

Alternatively, if you are browsing the internet, you can disable the use of Cookies in your browser. We indicate how to do this in the most popular browsers:

• Google Chrome

• Internet Explorer

• Mozilla Firefox

• Safari

This possibility of avoiding the use of Cookies can be carried out at any time.

Please note that both your management of the cookie settings panel and your option to reject Cookies are specific to each browser you are using. Therefore, if you choose to configure Cookies in a certain way on one device and wish for your option to be applied similarly to another device, you will need to activate the same option for that other device.

As an additional step, regarding third-party cookies for the purpose of providing advertising based on your interests, please note that certain third parties may be members of one of the following self-regulatory behavioural online advertising programmes, with the corresponding voluntary opt-out options:

• Network Advertising Initiative (NAI) - https://www.networkadvertising.org/choices/

• Google Analytics - https://tools.google.com/dlpage/gaoptout

5. Who uses the information stored in the Cookies?

The information stored in the Cookies on our Platform is used exclusively by us, except for those identified in section 2 as "Third-party Cookies," which are used and managed by external entities to provide us with services aimed at improving our services and the user experience when browsing our Platform. More information in the cookie settings panel accessible at all times on our Platform.

For more detailed information about the processing of your personal data in our collaboration with third parties and those subject to international data transfers, we recommend that you read our Privacy Policy accessible on our Platform, and the privacy policies / privacy settings of these third-party collaborators accessible through their platforms.