PRIVACY AND SOCIAL MEDIA POLICY

1. USER INFORMATION

Because you are the most important thing to us, your data is too. For this reason, we advise you to take a few minutes of your time to read and accept our Privacy Policy, where we explain what personal data of yours we will use, for what purpose, and how you can access it whenever you need.

Who is responsible for processing your personal data?

MAISON BELMONT, S.L (hereinafter "Belmont") Tax ID (CIF): B22613541 Registered Office: C/ San Marcos 10 local A. 28004. Madrid. Telephone: 915 023 88 Email: info@belmontwellness.club

MAISON BELMONT SL, hereinafter, the CONTROLLER, informs the USER that it has created a profile on the Social Networks Facebook, Instagram, Twitter, LinkedIn, Youtube, Vimeo, and Google+, and that it is responsible for the processing of the user's personal data carried out on said social networks. It informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and Organic Law 3/2018 of 5 December (LOPDGDD), for which the following information regarding the processing is provided:

For what purpose do we process your personal data?

Purpose of the processing: To maintain a relationship between the USER and the CONTROLLER, which may include the following operations:

• For the fulfillment of our legal obligations.

• To process requests and queries raised with the controller.

• To inform about activities and events organized by the controller.

• To inform about products or services offered by the controller.

• To interact through the official profiles.

What personal data of yours will we process?

All personal data you provide us when:

• You contact us, for example, through our website, belmontwellness.club, or call us by phone to request information about our products or services.

• You purchase or contract products or services directly with us, either at any of our Belmont centers or through our Website.

• You participate in marketing campaigns, for example, by filling out a response card or participating in a promotion through our Website where we ask you to complete an online form with your personal data.

How will we use your personal data?

At BELMONT, we will process the information you provide us for the purpose of managing the contractual relationship that binds us, managing the sending of the information you request, providing you with promotions for our services and/or products of interest to you, and/or managing your application. They will also be used to send you notifications, alerting you to information such as: the status of your orders, reminders of your appointments, unique opportunities, and/or promotions.

The non-acceptance of this purpose will mean that we will not be able to inform you about our news and events.

The personal data you provide us will be kept as long as the contractual relationship that binds us is maintained.

How long do we keep your personal data?

Your data will be kept for no longer than is necessary to maintain the purpose of the processing or while there are legal provisions that dictate its custody, and when it is no longer necessary for that purpose, it will be deleted with appropriate security measures to ensure the anonymization of the data or its total destruction.

What is the legal basis for processing your data?

The legal basis for processing your personal data may be the execution of a potential and/or subscribed contractual relationship, legitimate interest, legal authorization, and/or the consent of the interested party. The data we request is appropriate, relevant, and strictly necessary, and you are in no case obliged to provide it to us, but its non-communication may affect the purpose of the service or the impossibility of providing it.

To which recipients will your data be communicated?

MAISON BELMONT, S.L will not communicate your data to any third party, unless explicitly informed.

What are your rights when you provide us with your data?

The data protection rights held by the interested parties are:

• Right to request access to your personal data.

• Right to rectification.

• Right to object.

• Right to cancellation or withdrawal of your data.

• Right to erasure or “right to be forgotten”.

• Right to removal of photos and videos from the internet.

• Right to restriction of processing of your data.

• Right to data portability.

The holders of the personal data obtained may exercise their personal data protection rights by addressing a written communication to the registered office of MAISON BELMONT, S.L or to the email address enabled for this purpose, info@belmontwellness.club, including in both cases a photocopy of their ID or other equivalent identification document.

You can find templates, forms, and more information available about your rights on the website of the national control authority, the Spanish Data Protection Agency (Agencia Española de Protección de Datos), hereinafter AEPD, www.agpd.es.

You can also find information in the Citizen's Guide published by the Spanish Data Protection Agency via the link provided below: http://www.agpd.es/portalwebAGPD/canaldocumentacion/publicaciones/common/Guias/GUIA_CIUDADANO.pdf

What does the right of access consist of?

By exercising this right, you can know what data of yours is being processed by us, the purpose of this processing, the origin of the data you have provided us, and whether it has been or will be communicated to a third party.

Belmont undertakes to respond to this request within a maximum period of one month, and if your right is granted, access will be effective within a maximum period of ten working days.

You can request to exercise the right of access by sending an email to info@belmontwellness.club or by sending a letter to MAISON BELMONT, S.L, C/ San Marcos 10 local A .28004. Madrid.

What does the right to rectification consist of?

With this right, you can modify any data of yours that is inaccurate or incomplete, indicating in said request which data you wish to be modified. You must attach the corresponding supporting documentation to this request. For example, if you have changed your address, you can inform us of the new address, rectifying your previous personal data.

You can request to exercise the right to rectification by sending an email to info@belmontwellness.club or by sending a letter to MAISON BELMONT, S.L, C/ San Marcos 10 local A .28004. Madrid.

What does the right to object consist of?

The right to object will allow you to object to us making use of the processing of your personal data at any time.

If you exercise this right, BELMONT will stop processing your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of claims.

You can request to exercise the right to object by sending an email to info@tachabeauty.com or by sending a letter to MAISON BELMONT, S.L, C/ San Marcos 10 local A .28004. Madrid.

What does the right to cancellation or withdrawal of your data consist of?

With this right, you can cancel any personal data of yours that is inadequate or excessive. However, we will keep them blocked in a way that prevents their processing, without prejudice to their availability to public administrations, judges, and courts, for dealing with possible liabilities that may have arisen from the processing during their limitation period. Once this period has passed, we will proceed to their deletion.

When you request the cancellation of your personal data, you must indicate which data you are referring to, providing the documentation that justifies such a request.

We must reply to you within a maximum of 10 working days.

You can request to exercise the right to cancellation or withdrawal of your data by sending an email to info@belmontwellness.club or by sending a letter to MAISON BELMONT, S.L, C/ San Marcos 10 local A .28004. Madrid.

What does the right to erasure consist of? The "right to be forgotten"

You can obtain from BELMONT the erasure of personal data concerning you when one of the following circumstances applies: that they are no longer necessary in relation to the purposes for which they were collected or otherwise processed; that you withdraw consent and the processing is not based on another legal basis; that you object to the processing and there are no overriding legitimate grounds for the processing; that they have been processed unlawfully.

What does the right to removal of photos and videos from the internet consist of?

With this right, you can request the cancellation of photos and videos on the internet that we have uploaded without your consent, since both are considered personal data.

To do this, you must prove your identity, indicating the links where the videos and photos appear, and therefore requesting their deletion.

You can request to exercise the right to removal of all photos and videos from the internet by sending an email to info@belmontwellness.club or by sending a letter to MAISON BELMONT, S.L, C/ San Marcos 10 local A .28004. Madrid.

What does the right to restriction of processing consist of?

This right allows you to request BELMONT to suspend the processing of data when:

• The accuracy of the personal data is contested, pending verification of its accuracy by us.

• You have exercised your right to object to the data processing, pending verification of whether BELMONT's legitimate grounds override yours.

• Request BELMONT to retain your personal data when:

  • You consider the processing of your data to be unlawful and you oppose the erasure of your data and request the restriction of its use instead.

  • We no longer need the data for the purposes of the processing, but the interested party needs them for the establishment, exercise, or defense of claims.

When you have obtained the restriction of processing according to this section, we will inform you before the lifting of said restriction.

What does the right to data portability consist of?

You can receive your personal data provided in a structured, commonly used, and machine-readable format, and be able to transmit it to another controller, whenever technically possible.

Where can I complain if I consider that my data is not being processed correctly?

Remember that if you consider that your data is not being processed correctly by BELMONT, you can address your claims to the email info@belmontwellness.club or to the corresponding data protection authority, which is the AEPD in the national territory, www.agpd.es.

Security and updating of your personal data.

In order to safeguard the security of your personal data, we inform you that MAISON BELMONT S.L has adopted all the necessary technical and organizational measures to guarantee the security of the personal data supplied. All this is to prevent its alteration, loss, and/or unauthorized processing or access, as required by law, although absolute security does not exist.

It is important that, in order for us to keep your personal data updated, you inform us whenever there is any modification of the same.

CONFIDENTIALITY

MAISON BELMONT S.L informs you that your data will be processed with the utmost care and confidentiality by all personnel involved in any of the processing phases. We will not transfer or communicate your data to any third party, except in cases legally provided for, or unless the interested party has authorized us.

Social Networks

Why can we process your personal data?

Legal basis for the processing: Article 6.1.a GDPR, the interested party has given consent to the processing of his or her personal data for one or more specific purposes. The USER has a profile on the same social network and has decided to join the CONTROLLER's social network, thereby showing interest in the information published on it. Therefore, by requesting to follow our official profiles, they provide us with their consent for the processing of the personal data published on their profile.

The USER can access the privacy policies of the social network itself at any time, as well as configure their profile to ensure their privacy.

The CONTROLLER has access to and processes the USER's public information, especially their contact name.

This data is only used within the social network itself and will only be incorporated into a CONTROLLER file when necessary to process the USER's request.

For how long will we keep your personal data?

Data retention criteria: They will be kept as long as the USER does not revoke the consent given as indicated in this privacy policy.

To whom do we provide your personal data?

Data communication: The information provided by the USER through the CONTROLLER's social networks, including their personal data, may be published, always depending on the services the USER uses, so it may be made publicly available to other third-party users of the social networks. From the profile of each social network, the USER can configure what information they want to make public in each case, view the permissions that have been granted, delete them, or deactivate them, like any third-party application that is no longer desired to be used.

No communication of personal data to third parties outside the social network is planned, except, if it were essential for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the CONTROLLER has signed the confidentiality and data processor contracts required by current privacy regulations.

What are your rights?

Rights assisting the USER: They can only be satisfied in relation to information that is under the CONTROLLER's control.

• Right to withdraw consent at any time.

• Right of access, rectification, portability, and erasure of your data, and the limitation or opposition to its processing.

• To inform about products or services offered by the controller.

• Right to file a claim with the control authority (www.aepd.es) if they consider that the processing does not comply with current regulations.

Contact details to exercise your rights: MAISON BELMONT, S.L, C/ San Marcos 10 local A .28004. Madrid. Email: info@belmontwellness.club. Contact details of the data protection officer: Fénix, 19, 28023 MADRID – administracion@fundacionprotecciondedatos.es.

2. USING THE PROFILE