Who processes your data?

CORPORACIÓN MASAVEU, S.A. with registered address in C/Cimadevilla, 8 – 33003 Oviedo (Asturias) with C.I.F. A-33001595 and registered in the Companies Registry of Oviedo and contact email institucional@masaveu.com

For what purpose?

To assess your curriculum within the framework of the selection processes promoted by CORPORACIÓN MASAVEU, S.A. and the group companies listed below:

Industry: MASAVEU INDUSTRIA, S.L. CEMENTOS TUDELA VEGUÍN, S.A. COMERCIAL IBEROAMERICANA DE SERVICIOS, S.A. ESTABISOL, S.A. GENERAL DE HORMIGONES, S.A. MORTEROS TUDELA VEGUÍN, S.A. ESCORIAS Y DERIVADOS, S.A. ARENAS DE BOBIA, S.L. CANTERA CASTAÑERA, S.A. COMERCIAL ASTURIANA DE GRANELES, S.A. LINDE SEDILSA, S.L. MOLINOS CEMENTEROS LUSO GALAICOS, S.A. GENERAL DE ESCORIAS, S.A. REBARCO, S.L. HORMIGONES Y ARIDOS LA BARCA, S.A.

Wineries: MASAVEU BODEGAS, S.L. BODEGAS FILLABOA, S.A. POMARADAS Y LLAGARES DE SARIEGO, S.L. BODEGAS MURÚA, S.A. BODEGAS PAGOS DE ARAIZ, S.A. BODEGAS LEDA VIÑAS VIEJAS SL

Car parks: APARCAMIENTOS DE ASTURIAS, S.A. APARCAMIENTO HOSPITAL VIRGEN DEL ROCÍO, S.L. ESTACIONAMIENTOS CONTROLADOS, S.A. ESTACIONAMIENTOS DEL NOROESTE, S.A. ESTACIONAMIENTOS IRUÑA, S.A. ESTACIONAMIENTOS PONTEVEDRA, S.L. ESTACIONAMIENTOS PRAZA DO REI, S.L. MASAVEU APARCAMIENTOS, S.L.

Real Estate: MASAVEU INMOBILIARIA, S.A.

Why can they do so?

Because on sending in your application you tick a box which gives us your consent to process your data for the defined purposes.

Who else has access to your data?

Your data shall not be disclosed to third parties. Your data shall be processed exclusively for the purposes defined in the MASAVEU Group company’s selection processes.

What are your rights and where can you demand them?

The right to access your data and be informed about its use.

The right to correct data which is incomplete or incorrect.

The right to delete data when it is no longer necessary, in accordance with law, consent is withdrawn or you object to its use, amongst other reasons.

The right to object to the processing of data based on personal conditions, in which case once the reasons have been examined the data will no longer be processed.

The right to restrict the processing of the data while assessing the legal validity of the request, opposition to erasure or you wish them to be conserved in order to exercise or defend claims.

Withdrawal of consent for the processing of your data, which shall not affect the processing carried out up to that time.

You can request to exercise these rights by sending written notification to: Dpto. de atención de derechos de los interesados, c/ Cimadevilla 8, 33003 Oviedo (Asturias) or by sending an email to the following address atención.derechos@grma.masaveu.com.

You can also submit a complaint to the Spanish Data Protection Agency (AEPD) if you think that your data is not being processed in compliance with law.

For how long will your data be kept?

If you have not participated in any selection process, your curriculum will be erased within two years of its reception.

If you have been involved in a selection process, the result of such will form part of your files in the company if you have been selected or on the contrary, if you have not been successful, your data will be eliminated within 3 years.

For what purpose?

We only require access to the contact details necessary to reply to your request.

Why can we do so?

Because your request establishes the origin of legitimate interest of CORPORACIÓN MASAVEU, S.A. to answer you, and so it is necessary to process your contact data.

Who else has access to your data?

Your data will not be provided to third parties under any circumstances, but it is possible that CORPORACIÓN MASAVEU, S.A. may not be the most suitable Company in the Group to help you in certain cases, and so you may be referred to the business line that can provide you with information that most suits your needs.

In any event, on the Group website you can find information on the Group’s different activities and go straight to a specific company by accessing the contact form on the web page.

What are your rights and where can you demand them?

The right to access your data and be informed about its use.

The right to correct data which is incomplete or incorrect.

The right to delete data when it is no longer necessary, in accordance with law, consent is withdrawn or you object to its use, amongst other reasons.

The right to object to the processing of data based on personal conditions, in which case once the reasons have been examined the data will no longer be processed.

The right to restrict the processing of the data while assessing the legal validity of the request, opposition to erasure or you wish them to be conserved in order to exercise or defend claims.

Withdrawal of consent for the processing of your data, which shall not affect the processing carried out up to that time.

You can request to exercise these rights by sending written notification to: Dpto. de atención de derechos de los interesados, c/ Cimadevilla 8, 33003 Oviedo (Asturias) or by sending an email to the following address atención.derechos@grma.masaveu.com.

You can also submit a complaint to the Spanish Data Protection Agency (AEPD) if you think that your data is not being processed in compliance with law.

For how long will my data be kept?

Your data will be erased once your request has been answered unless another kind of relationship or interest has arisen from the request, in which case the data will be kept.

For what purpose?

Image processing for video surveillance and entrance control purposes is based on the legitimate interest of CORPORACIÓN MASAVEU, S.A. to protect its artistic and material property, as well as to guarantee the safety of its employees and all others who enter their property.

Why can we do so?

Because you have given consent to do so. You can freely make the choice to appear in photographs or not and shall be asked when they are going to be taken, and you will be informed in a clear and transparent manner on their purpose and use.

Who else has access to your data?

The video surveillance service is provided by the private security company SERCOINFO SEGURIDAD, S.L., which has access to the data through CORPORACIÓN MASAVEU, S.A.

The images may be provided upon request to Law Enforcement Authorities or judges and courts in the course of investigations or proceedings, or when necessary to exercise or protect the rights of CORPORACIÓN MASAVEU, S.A. or third parties that may be affected.

What are your rights and where can you demand them?

The right to access your data and be informed about its use.

The right to correct data which is incomplete or incorrect.

The right to delete data when it is no longer necessary, in accordance with law, consent is withdrawn or you object to its use, amongst other reasons.

The right to object to the processing of data based on personal conditions, in which case once the reasons have been examined the data will no longer be processed.

The right to restrict the processing of the data while assessing the legal validity of the request, opposition to erasure or you wish them to be conserved in order to exercise or defend claims.

Withdrawal of consent for the processing of your data, which shall not affect the processing carried out up to that time.

You can request to exercise these rights by contacting SERCOINFO SEGURIDAD, S.L. at C/Hacienda de Pavones, 248 – 28030 Madrid for matters relating to video surveillance images or by contacting CORPORACIÓN MASAVEU, S.A. with the contact details provided for other matters.

You can also submit a complaint to the Spanish Data Protection Agency (AEPD) if you think that your data is not being processed in compliance with law.

For how long will my data be kept?

Your data will be erased within one month after its recording or collection, with the exception of those images or recordings which must be kept if required during the course of an investigation until it concludes or if responsibilities are established arising from the recorded activities.

For what purpose?

This data is processed for contacting companies, business people or professionals who collaborate with or provide services to CORPORACIÓN MASAVEU, S.A. or to identify the legal representatives of those companies if a juridical relationship has been established with them.

Why can we do so?

Because the relationship established with clients and suppliers determines the existence of legitimate interest to maintain fluid contact with the Company through its employees and to enable them to verify the representative capacity of their representatives in legal transactions.

Who else has access to your data?

Your data will not be provided to third parties, except when required by law.

What are your rights and where can you demand them?

The right to access your data and be informed about its use.

The right to correct data which is incomplete or incorrect.

The right to delete data when it is no longer necessary, in accordance with law, consent is withdrawn or you object to its use, amongst other reasons.

The right to object to the processing of data based on personal conditions, in which case once the reasons have been examined the data will no longer be processed.

The right to restrict the processing of the data while assessing the legal validity of the request, opposition to erasure or you wish them to be conserved in order to exercise or defend claims.

Withdrawal of consent for the processing of your data, which shall not affect the processing carried out up to that time.

You can request to exercise these rights by sending written notification to: Dpto. de atención de derechos de los interesados, c/ Cimadevilla 8, 33003 Oviedo (Asturias) or by sending an email to the following address atención.derechos@grma.masaveu.com.

You can also submit a complaint to the Spanish Data Protection Agency (AEPD) if you think that your data is not being processed in compliance with law.

For how long will my data be kept?

The data shall be maintained for the duration of the relationship with your Company and as regards legal documents while they are in effect or any responsibility may derive from them, or if they are required for exercising rights or defending the company against claims.

For what purpose?

For the maintenance of a list of shareholders, number of shares and the depositary entity that holds the shares, for the purpose of knowing the shareholding structure, as well as the calling and holding of shareholder meetings and for sending requested information.

Why can we do so?

In compliance with the provisions set forth in Legislative Royal Decree 1/2010, of 2nd July, approving the restated text of the Spanish Companies Act and to guarantee shareholders rights.

Who else has access to your data?

The Company Register and the Tax Office in compliance with legally established tax and registration obligations.

Financial depositary institutions and notaries involved in operations related to the representation and transfer of shares.

What are your rights and where can you demand them?

The right to access your data and be informed about its use.

The right to correct data which is incomplete or incorrect.

The right to delete data when it is no longer necessary, in accordance with law, consent is withdrawn or you object to its use, amongst other reasons.

The right to object to the processing of data based on personal conditions, in which case once the reasons have been examined the data will no longer be processed.

The right to restrict the processing of the data while assessing the legal validity of the request, opposition to erasure or you wish them to be conserved in order to exercise or defend claims.

Withdrawal of consent for the processing of your data, which shall not affect the processing carried out up to that time.

You can request to exercise these rights by sending written notification to: Dpto. de atención de derechos de los interesados, c/ Cimadevilla 8, 33003 Oviedo (Asturias) or by sending an email to the following address atención.derechos@grma.masaveu.com.

You can also submit a complaint to the Spanish Data Protection Agency (AEPD) if you think that your data is not being processed in compliance with law.

For how long will my data be kept?

Your data will be kept as long as the company continues its operations and up to six years after its liquidation.

For what purpose?

Photographs are taken at Group events and activities in order to provide information in the News section of the Groups website or the specific websites of each company, to form part of Group Reports or Statements, or to be kept as graphic testimony of historical character of the Group’s development and track record.

Why can we do so?

Because you have given consent to do so. You can freely make the choice to appear in photographs or not and shall be asked when they are going to be taken, and you will be informed in a clear and transparent manner on their purpose and use.

Who else has access to your data?

The images may be published in the News section of the website or the specific web pages of the Group’s companies if they are related to important newsworthy events. In which case they will be accessible on the internet, however they shall not be tagged and the news items are renewed every three years.

What are your rights and where can you demand them?

The right to access your data and be informed about its use.

The right to correct data which is incomplete or incorrect.

The right to delete data when it is no longer necessary, in accordance with law, consent is withdrawn or you object to its use, amongst other reasons.

The right to object to the processing of data based on personal conditions, in which case once the reasons have been examined the data will no longer be processed.

The right to restrict the processing of the data while assessing the legal validity of the request, opposition to erasure or you wish them to be conserved in order to exercise or defend claims.

Withdrawal of consent for the processing of your data, which shall not affect the processing carried out up to that time.

You can request to exercise these rights by sending written notification to: Dpto. de atención de derechos de los interesados, c/ Cimadevilla 8, 33003 Oviedo (Asturias) or by sending an email to the following address atención.derechos@grma.masaveu.com.

You can also submit a complaint to the Spanish Data Protection Agency (AEPD) if you think that your data is not being processed in compliance with law.

For how long will my data be kept?

The images will form part of the Company’s historic photographic archive, however you may exercise your rights at any time.

Request for Protection of Personal Data Rights