Disclaimer: The legally binding version of this Privacy Policy is the original Spanish text. This English translation is provided solely for the user’s convenience. In the event of any dispute, inconsistency, or discrepancy between the Spanish original and this translated version, the Spanish version shall govern and prevail in all respects.

OUR PRIVACY POLICY AT A GLANCE

Who are we? We are TOMAVISION STUDIO, S.L. and we process your data as the Data Controller. This means that we take responsibility for how we use and protect your personal data.

What do we use your data for? We use the data you have provided to us online or through any other means to address your queries and suggestions.

Why do we have them? We have a legal basis to process your data for various reasons. By filling out a form or sending an email in which you raise a query or suggestion, we have a legitimate interest in addressing it.

Who do we share your data with? We will only share your data with collaborating companies to address the requests received and provide our services or products to you, banking entities, and public authorities as required by law. Under no circumstances do we sell your data to third parties.

What are your rights? You have the right to access, rectify, or erase your personal data. You also have the right to object to our use of data that you have previously authorized us to use, to data portability, and to not be subject to automated individual decision-making.

In the processing of your personal data, we apply the following principles to ensure the highest level of protection for you:

• Principle of lawfulness, fairness, and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes that we will inform you about in advance with absolute transparency.
• Principle of data minimization: We will only request data that is strictly necessary in relation to the purposes for which we require it. The absolute minimum.
• Principle of storage limitation: The data will be kept for no longer than is necessary for the purposes of the processing. Depending on the purpose, we will inform you of the corresponding retention period. In the case of subscriptions, we will periodically review our lists and delete those records that have been inactive for a considerable time.
• Principle of integrity and confidentiality: Your data will be processed in a manner that ensures appropriate security of the personal data and guarantees confidentiality. You should know that we take all necessary precautions to prevent unauthorized access to or misuse of our users’ data by third parties.

In this privacy policy you will find more detailed information on how we use the personal data of our clients, suppliers, and users, and in general of all persons who maintain contact with us, regardless of the means they have used to communicate (online form, by phone or by email, in person).

We like to be transparent about what we do with your personal data, so that you understand the implications of the processing we carry out, or the rights you have regarding your data. For this reason, we keep our Privacy Policy, Legal Notice, and Cookies Policy updated, information that you can consult on this very website.

If you have any doubts or would like to obtain more information about the privacy policy, you may continue reading the document.

1. WHO IS THE DATA CONTROLLER OF YOUR DATA?

The data controller of your data is TOMAVISION STUDIO, S.L.:

TOMAVISION STUDIO, S.L. informs the user that the data provided to us by browsing our website, the different data collection forms, or the sending of emails, will be processed by TOMAVISION STUDIO, S.L. and that said processing is included in the Record of Processing Activities managed by TOMAVISION STUDIO, S.L. in accordance with the provisions of the GDPR.

2. WHAT DO WE USE YOUR PERSONAL DATA FOR?

At www.tomavision.net, we process data of both the users of our website and third parties who maintain relationships with us. In order to make it easier for you to understand the processing we carry out on your data, we have differentiated the purpose for which we use the data, the types of data, and the legal basis depending on the category of persons whose data we process. Below, we classify the persons whose data we process based on the type of relationship they maintain with TOMAVISION STUDIO, S.L.

• WEBSITE USERS

What data do we collect from our website users?

a) Data of users who fill out any of the available forms: The personal data requested by TOMAVISION STUDIO, S.L. includes:

• Identifying data: name and surname, telephone, postal and email address.
• Data relating to the request

b) Data of users browsing our website: Data provided by cookies and by Google Analytics.

For what purposes will we process your personal data?

When the user accepts our privacy policy, they authorize us to use the personal data provided for the following processing activities:

• To send you the information and provide the service you request through the various forms available on our website.

How do we obtain your data?

We obtain your data through:

• The form completed by the website user for the purpose stated therein. The form is subject to the acceptance of this privacy policy via the indicated checkbox.

What is the legal basis for processing your data?

The express consent of the user (Article 6.1.a GDPR) expressed by filling out the different forms; checking the box is what legitimizes the processing by TOMAVISION STUDIO, S.L. The user may withdraw their given consent at any time, although if they withdraw their consent, this does not affect the data processing carried out prior to its withdrawal.

The legitimate interest in creating browsing profiles and detecting preferences through the installation of cookies.

The performance of a contract or the taking of pre-contractual steps when the client makes a request through the various forms available to the user on our website or requests information about the services provided by TOMAVISION STUDIO, S.L.

• CLIENTS

What data do we collect from our clients?

a) Data of clients who fill out any of the available forms on www.tomavision.net as well as at the physical premises of TOMAVISION STUDIO, S.L.

• Identifying data: name and surname, telephone, postal and email address
• Data relating to the request

How do we obtain your data?

If you are an online client, we obtain your data through: The information request form completed by the user. The form is subject to the acceptance of this privacy policy via the indicated checkbox.

• We obtain browsing data from the different cookies that the client accepts when first accessing www.tomavision.net

If you are an in-person client, we obtain your data through:

• The client registration form.
• The acceptance of the provided quote.
• The signed contract.

For what purposes will we process your personal data?

• To generate and manage the documentation associated with your requests and purchases.
• To provide you with information about offers, products, and services related to your purchase.
• To process your online reservation or purchase through our platform.

What is the legal basis for processing your data?

The performance of a pre-contract/contract to send you the information and manage the provided service or supplied product, which would not be possible otherwise.

The user may withdraw their given consent at any time.

• JOB APPLICANTS AND CANDIDATES

What data do we collect from applicants?

a) Data of the candidates requested in the ‘work with us’ form by TOMAVISION STUDIO, S.L.:

• Identifying data: name and surname, telephone, postal and email address
• Academic and professional data
• Data that the candidate themselves includes as attached documents

How do we obtain your data?

We obtain your data through:

• The delivery of a resume/CV at our facilities or the completion of the ‘Work with us’ form on our website.

For what purposes will we process your personal data?

The personal data provided to us by the candidates is used solely for the selection processes that are open or will be carried out in the event that the data provided is for our employment pool.

What is the legal basis for processing your data?

The user’s consent through the incorporation of their data and their resume/CV on the TOMAVISION STUDIO, S.L. website to participate in active selection processes, as well as in future processes that may be carried out as long as they do not object to the processing of their data.

3. FOR HOW LONG DO WE RETAIN YOUR DATA?

• WEBSITE USERS

Those data that are processed based on the consent of the website user will be kept as long as they are relevant for the purpose for which they were collected and the consent is not withdrawn.

For those data processed based on legitimate interest, the retention period will be linked to the reason that motivated the data collection, always ensuring adequate safeguards and respect for the rights and freedoms of the data subjects.

For those data processed based on the performance of a contract or the taking of pre-contractual steps, the retention period will be the duration for which the contractual relationship remains in force, as well as the subsequent time they must be kept by legal obligation.

The IP address obtained through cookies will have a retention period of one year, for the purpose of demonstrating the user’s consent.

Regarding the retention period of cookies, you can obtain more information on our website in the “Cookies Policy” section.

• CLIENTS

Data processed on the basis of the client’s consent will be kept as long as it remains relevant for the purpose for which it was collected and the consent is not withdrawn.

For data processed on the basis of legitimate interest, the retention period will be linked to the reason that motivated the data collection, always ensuring adequate safeguards and respect for the rights and freedoms of the data subjects.

Data processed on the basis of a contract, as well as if part of the processing is legitimized by a legal obligation, will be kept for the duration of the contractual relationship. The data retention period once it has ended, in the event that the processing is linked to a legal obligation, will be that which is prescribed, and the processing of the data cannot be withdrawn by the data subject except in the legally provided provisions for blocking them.

• JOB APPLICANTS AND CANDIDATES

Data processed on the basis of the job applicant’s and candidate’s consent will be kept as long as the selection process they applied for remains open. In the event that the application is not for a specific selection process and is for future vacancies, the retention period will be a maximum of one year, at which time their CV will be deleted and destroyed, unless the data subject expresses their desire for retention and it is updated.

4. ADDITIONAL INFORMATION ON DATA PROCESSING

Only those over 14 years of age may provide data through our website and email. If you are under this age, you must have the consent of your parents or legal guardians.

The User guarantees the authenticity and currency of all data communicated to TOMAVISION STUDIO, S.L. and declares that they are over 14 years of age, and will be solely responsible for any false or inaccurate statements they make.

The personal data processed by TOMAVISION STUDIO, S.L. may be mandatory or voluntary. Special categories of data will not be requested through the web forms in order to guarantee your privacy. In the event that it is necessary to collect special categories of data to provide you with a service, they will be requested through other means.

Voluntary information is that which the user is not obliged to provide to contact us.

The fields marked with an asterisk (*) or with the word (required) in our forms are mandatory; refusing to supply them will make it impossible to provide the service or address your request.

In the event that you provide us with third-party data, you declare that you have their consent and commit to transferring the information we provide in this clause to them, exempting TOMAVISION STUDIO, S.L. from any type of obligation. However, TOMAVISION STUDIO, S.L. may carry out verifications to confirm that the third party has been informed by adopting the due diligence measures established in data protection regulations.

5. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Data will not be disclosed to third parties except under legal obligation or in the event that it is necessary to address your request.

Among the recipients to whom your data may be communicated are:

• Public Administrations and Bodies when required by tax, labor, Social Security, or any other applicable regulations. Data processors (providers of fraud detection and prevention, technological services, customer service, advertising and marketing services, and, in general, third-party providers that are necessary for the provision of the services offered by TOMAVISION STUDIO, S.L. such as courier and transport service providers, etc…

6. DO INTERNATIONAL DATA TRANSFERS OCCUR?

www.tomavision.net is hosted in Spain, a country located in the European Union, within the territory of the European Economic Area, or which complies with the guidelines established in Articles 46 and 47 of the GDPR; therefore, there will be no international transfers of the data provided by users on the website.

Our website only accesses user data using the following means:

• Through the contact forms available to the user on the website.

International data transfers may also occur in the context of the aforementioned disclosures/communications, for which TOMAVISION STUDIO, S.L. will use the tools provided in Article 46 and 49 of the GDPR as safeguards for those transfers made to countries that do not have an adequacy decision from the European Commission.

In any case, the third parties with whom certain personal data is shared will have previously demonstrated the adoption of appropriate technical and organizational measures for its correct protection, and transfers will only be carried out with third countries when there is a legally binding instrument in accordance with Article 46 et seq. of the GDPR. By accepting this privacy policy, you accept that an international data transfer may occur in accordance with the indicated safeguards.

In the event that the requirements established in the GDPR are not met, the data subject may give their consent to the international transfer or a contract may be performed in the interest of the data subject. Otherwise, authorization must be requested from the Supervisory Authority.

TOMAVISION STUDIO, S.L. under no circumstances sells its users’ data to third parties.

7. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

The user may exercise the following rights before TOMAVISION STUDIO, S.L.:

a) Access their personal data
b) Rectify them when they are inaccurate or incomplete
c) Request the erasure or cancellation of the data when, among other reasons, they are no longer necessary for the purposes for which they were collected
d) Object to their processing
e) Request the restriction of the processing of their data when any of the conditions provided for in the regulations are met
f) Request the portability of their data in the cases provided for in the regulations
g) Not be subject to automated decision-making
h) Withdraw the given consents

To exercise their rights, the user must send a written request indicating the right they wish to exercise, accompanied by a document proving their identity, and a postal or email address for notification purposes. This request can be made either by postal mail to: TOMAVISION STUDIO, S.L. JOSÉ ZARATE y PENICHET 5, OFICINA 7 38001 – Santa Cruz de Tenerife, or to the following email address: carmen.m@tomavision.net.

TOMAVISION STUDIO, S.L. must respond to the request for the exercise of rights within a period of one month from the receipt of the request. This period may be extended by two further months where necessary, taking into account the complexity and number of the requests. We will inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.

Likewise, data subjects have the right to lodge a complaint with the competent Supervisory Authority (Spanish Data Protection Agency) when they consider that TOMAVISION STUDIO, S.L. has infringed the rights recognized by data protection regulations at www.aepd.es

8. ARE MY DATA SECURE?

TOMAVISION STUDIO, S.L. has a current contract with the hosting company ARSYS INTERNET, S.L.U. for the hosting of its website. It is a European company and has the latest systems in security measures.

In any case, TOMAVISION STUDIO, S.L. guarantees the adoption of the appropriate measures to ensure the confidential processing of your data given their reserved nature and is committed to keeping said data secret, treating them with the utmost confidentiality, and declares to have implemented in its information system the security policies corresponding to the type of data handled in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate that ensures an encrypted connection is established when any user visits our website and exchanges information with us.

9. LINKS TO OTHER WEBSITES

If you choose to leave our website through links to other websites not belonging to our entity, TOMAVISION STUDIO, S.L. will not be held responsible for the privacy policies of said websites or the cookies that they may store on the user’s computer.

Date: 2026/06/29
Version: V.1.0