Website Owner Information: MARKETING OLFATIVO, S.L. with address at VARSOVIA, EDIF. LUNA MAC, LOCAL 15, SAN PEDRO ALCÁNTARA (MÁLAGA), 29670, and communication email info@thearomatrace.com. Registered in the commercial registry of Málaga with VOLUME: 4131, BOOK: 3042, SHEET: 186, PAGE MA-86602.

Data Protection Officer: The owner is responsible for the personal data collected through the navigation and use of this website in accordance with the requirements established by REGULATION (EU) 2016/679 on the protection of natural persons concerning the processing of personal data and in accordance with Law 34/2002 of July 11 on Services of the Information Society and Electronic Commerce (LSSI-CE).

By using this website, we understand that you have read and understood the information regarding the processing of your personal data.

Data Protection Policy: The responsible party applies the principle of active responsibility in the processing of personal data, maintaining constant updating and promotion of continuous improvement of the data protection system according to legal requirements, ensuring in any case:

• Respect for the freedoms and fundamental rights of natural persons
• That the data is processed lawfully, fairly, and transparently
• That the processed data is accurate, adequate, relevant, and limited to what is necessary for the purposes for which it is collected
• That the purposes for which they are collected are explicit, legitimate, and not processed in a way incompatible with those purposes

The purpose of this document is to inform users about what we do with their personal data, how it is collected, what it is used for, the rights they have, as well as all the necessary legal information established by current regulations.

Data Collected, Purpose, and Legality: The personal data processed are those provided by users through the forms available on this website and are the minimum required to:

• Send information about our products/services
• Attend to inquiries.
• Process orders, as well as generate corresponding invoices, inform about order status, address complaints, and any other management derived from the service provided through this website.

These purposes are based on legal principles for the processing of data collected by current regulations: for the execution of a contract or the provision of a service to users, for compliance with legal obligations, due to legitimate interest, and with the consent of users.

Web Forms: Personal data collected through the contact web form are used to attend to any inquiries made by the user through it.

Personal data collected in the order form is intended to process the necessary data for the proper management of their orders.

The processing of data is legitimized by the consent given when expressly accepting the treatment conditions informed through this privacy policy.

Data Recipients: Personal data obtained through web forms are recorded and stored in electronic media controlled and supervised by the data controller.

Your personal data will not be communicated to third parties, except when such data communication is supported by a legal obligation or when, for the proper provision of the service or the execution of the contract, it is necessary to communicate your data to third parties to make the payment (payment gateways), as well as manage product deliveries (carriers) supported by this assignment for service needs. For payments through other payment gateways, we recommend that the user read the privacy policy to understand how personal information is handled, for example:

• Redsys Servicios de Procesamiento, S.L. (“Redsys”): Privacy Policy
• PayPal (Europe) S.à.r.l. et Cie, S.C.A.: Privacy Policy

In cases where the communication of data to third parties is not supported by the legal bases established in the previous section, the communication of data to other recipients will only be made if the user has given express consent.

Strict criteria for the selection of data processors are maintained, as well as the contractual commitment with each of them to comply with and enforce the obligations established in data protection matters.

In case of international data transfers, MARKETING OLFATIVO, S.L. will ensure that the transfer of your personal data is carried out in accordance with the applicable privacy laws, and, in particular, that the necessary contractual, technical, and organizational measures are applied, such as the standard contractual clauses approved by the European Commission.

You can obtain more information about the processing of personal data from our organization by requesting it at the email: INFO@THEAROMATRACE.COM or by accessing through the following link: https://www.accesousuario.com/protecciondedatos/rgpd/informacion_consentimientoAPI.php?codEmpresa=74319

Technical and Organizational Data Protection Measures: The media have the necessary technical and organizational measures that guarantee the confidentiality and conservation of personal data obtained through the web.

The personal data collected from the web is processed through the HTML protocol with a valid SSL certificate.

Personnel involved in data processing operations: access, editing, deletion, etc., are trained and committed to this data protection policy.

Data Retention: Personal data obtained through the contact form will be kept for the time necessary to address the request/consultation made.

Personal data obtained through the order form will be kept for as long as there is a contractual and/or commercial relationship with you or until you exercise your right to deletion, cancellation, and/or limitation of the processing of your data.

Once the contractual relationship has expired, we will keep the information duly blocked, without giving it any use, as long as it may be necessary for the exercise or defense of claims or some type of judicial, legal, or contractual responsibility may arise from its processing that must be attended to, and for which its recovery is necessary.

In case you have expressly accepted the sending of commercial information, we will keep your contact details until you communicate your decision to cancel such commercial communications.

Information on the Existence of Automated Decisions (including profiling): We normally do not make automated decisions, but when we do, we will make it clear that this type of decision is being made. However, MARKETING OLFATIVO, S.L. includes several sections dedicated to personalization of services to display personalized advertising when entering its website and also for sending personalized communications.

MARKETING OLFATIVO, S.L. recognizes the possibility of profiling to improve its product offering or customize the sending of commercial offers or provide a more personalized treatment to the customer.

Objection to the Processing of Data for Advertising Purposes: If you gave your consent for them to use your data for advertising purposes and do not wish to continue receiving advertising, you can revoke the consent given at any time by sending an email to the responsible person's email INFO@THEAROMATRACE.COM.

Changes to the Privacy Policy: We may modify the information contained in this Privacy and Cookies Policy when we deem it appropriate. In case we do, we will notify you through various means through the Platform (for example, through a banner, pop-up, or push notification), or even notify you at your email address when the change in question is significant for your privacy so that you can review the changes, assess them, and, if necessary, oppose or unsubscribe from any service or functionality. In any case, we suggest that you review this Privacy and Cookies Policy from time to time in case of minor changes or the introduction of any interactive improvements.