At Insorvet SL, we work to provide you with the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We care about your privacy and believe that we should be transparent about it. Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter, "GDPR") regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data, and LAW 34/2002, of 11 July

of Information Society Services and Electronic Commerce (hereinafter, "LSSI"), Insorvet SL informs the user that, as the data controller, it will incorporate the personal data provided by users into an automated file.

Our commitment begins by explaining the following to you:

· Your data is collected to improve the user experience, catering to your interests and needs.

· We are transparent about the data we collect about you and the reason we do so.

· Our intention is to provide you with the best possible experience. Therefore, when we need to use your personal information, we will always do so in compliance with the regulations, and when necessary, we will seek your consent.

· We understand that your data belongs to you. Therefore, if you decide not to authorise us to process it, you can request that we stop handling it.

· Our priority is to ensure your safety and to handle your data in accordance with European regulations.

If you wish to obtain more information about the processing of your data, please consult the various sections of the privacy policy provided below:

Who is responsible for the processing of your personal data?

 Identity: Insorvet SL

Registered office: C/Rubio i Orts, 35 – Pol. Ind. Del Terri – 17834 – Porqueres (Girona).

C.I.F. nº: B64447212

Email: [email protected]

Insorvet SL  has appointed a Data Protection Officer or an internal contact person within its organisation. If you wish to make an inquiry regarding data processing.

What personal data do we collect?

The personal data that the user may provide:

· Name, address and date of birth.

· Phone number and email address.

· Location.

· Information regarding payments and refunds.

· IP address, date and time you accessed our services, internet browser you use, and data about the operating system of the device.

· Any other information or data that you choose to share with us.

In some cases, completing the registration form is mandatory to access and enjoy certain services offered on the website; likewise, not providing the requested personal data or not accepting this data protection policy means that it is impossible to subscribe, register, or participate in any of the promotions that require personal data.

Why and for what purpose do we process your data?

At Insorvet SL, we process the information provided to us by interested parties for the following purposes:

· Manage orders or hire any of our services, whether online or in physical stores.

· Manage the sending of the information requested from us.

· Develop commercial actions and maintain and manage the relationship with the user, as well as manage the services offered through the website and information tasks, being able to carry out automatic assessments, obtain profiles, and segment customers in order to personalise the interaction according to their characteristics and needs and improve the online experience of the customer.

· Develop and manage competitions, draws or other promotional activities that can be organised.

· In some cases, it will be necessary to provide information to the Authorities or third parties for audit purposes, as well as to handle personal data from invoices, contracts, and documents to respond to customer complaints or those from Public Administrations.

We inform you that the personal data obtained as a result of your registration as a user will be part of the Register of Activities and Processing Operations (RAT), which will be updated periodically in accordance with the provisions of the GDPR.

What is the legal basis for the processing of your data?

The processing of your data may be based on the following legal grounds:

· Consent of the interested party for the hiring of services and products, for contact forms, information requests, or subscription to e-newsletters.

· Legitimate interest for the processing of our clients' data in direct marketing actions and explicit consent from the data subject for everything related to automated assessments and profiling.

· Compliance with legal obligations for fraud prevention, communication with public authorities, and third-party claims.

How long do we keep your data?

The processing of data for the purposes described will be maintained for as long as necessary to fulfil the purpose of its collection (for example, for the duration of the commercial relationship), as well as to comply with the legal obligations arising from the processing of the data.

Who are your data communicated to?

In some cases, only when necessary, Insorvet SL will provide user data to third parties. However, data will never be sold to third parties. External service providers (for example, payment providers or delivery companies) that Insorvet SL works with may use the data to provide the corresponding services; however, they will not use such information for their own purposes or for transfer to third parties.

Insorvet SL seeks to ensure the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have appropriate measures in place to protect personal data. These third parties are obliged to ensure that the information is processed in accordance with data privacy regulations.

In some cases, the law may require that personal data be disclosed to public authorities or other parties, only the strictly necessary information will be revealed to comply with such legal obligations. The personal data obtained may also be shared with other companies in the group.

Where are your data stored?

As a general rule, data is stored within the EU. For data sent to third parties outside the EU, we will ensure that they provide an adequate level of protection, either because they have Binding Corporate Rules (BCR) or because they have adhered to the "Privacy Shield".

What rights assist you and how can you exercise them?

You can direct your communications and exercise your rights by making a request at the following email address: [email protected].

In accordance with what is established by the GDPR, you can request:

· Right of access: you can request information about the personal data we hold concerning you.

· Right of rectification: you can communicate any changes to your personal data.

· Right to erasure and to be forgotten: you can request the deletion following the blocking of personal data.

· Right to restriction of processing: involves the limitation of the processing of personal data.

· Right to object: you can withdraw your consent to the processing of data by opposing its continued processing.

· Right to data portability: in some cases, you can request a copy of your personal data in a structured, commonly used, and machine-readable format for transmission to another controller.

· Right not to be subject to individualised decisions: you can request that decisions are not made based solely on automated processing, including profiling, which produces legal effects or significantly affects the data subject.

In some cases, the request may be rejected if you ask for the deletion of data necessary for the fulfilment of legal obligations. Likewise, if you have any complaints about the processing of data, you can file a complaint with the data protection authority.

Who is responsible for the accuracy and truthfulness of the provided data?

The user is solely responsible for the truthfulness and accuracy of the data provided, exempting Insorvet SL from any liability in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and commit to keeping it duly updated. The user agrees to provide complete and correct information in the registration or subscription form. Insorvet SL reserves the right to terminate the contracted services that may have been established with the users, in the event that the data provided is false, incomplete, inaccurate, or not up to date.

Insorvet SL does not take responsibility for the accuracy of information that is not of its own creation and for which another source is indicated, nor does it assume any responsibility for any hypothetical damages that may arise from the use of such information.

Insorvet SL reserves the right to update, modify or delete the information contained on its websites, and may even limit or deny access to such information. Insorvet SL is exempt from liability for any damage or harm that the user may suffer as a result of errors, defects or omissions in the information provided by Insorvet SL, provided that it originates from sources external to the company.

Likewise, the user certifies that they are over 14 years old and that they have the legal capacity necessary to provide consent regarding the processing of their personal data.

How do we handle the personal data of minors?

In principle, our services are not specifically aimed at minors. However, in the event that any of them are directed at children under the age of fourteen, in accordance with Article 8 of the GDPR and Article 7 of LO3/2018, of 5 December (LOPDGDD), Insorvet SL will require valid, free, unequivocal, specific, and informed consent from their legal guardians to process the personal data of minors. In this case, the ID card or another form of identification of the person providing consent will be required.

In the case of individuals over the age of fourteen, data processing may proceed with the user's consent, except in those cases where the Law requires the presence of the holders of parental authority or guardianship.

What security measures do we apply to protect your personal data?

Insorvet SL has adopted the legally required levels of security for the protection of Personal Data, and seeks to implement any other means and additional technical measures within its reach to prevent the loss, misuse, alteration, unauthorised access, and theft of the Personal Data provided to Insorvet SL.

Insorvet SL is not responsible for hypothetical damages or losses that may arise from interferences, omissions, interruptions, computer viruses, telephone faults or disconnections in the operational functioning of this electronic system, caused by factors beyond the control of Insorvet SL; for delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Centre, in the Internet system or in other electronic systems, as well as for damages that may be caused by third parties through illegitimate intrusions beyond the control of Insorvet SL. Nevertheless, the user should be aware that security measures on the Internet are not infallible.

Links to other websites

On the website www.insorvet.com, there may be links to other web pages. By clicking on one of these links and accessing an external website, your visit will be subject to the privacy policy of that website, and Insorvet SL will be disassociated from any responsibility regarding its privacy policy.

How do we use cookies?

The website and social media of Insorvet SL use cookies in order to optimise and personalise your browsing experience. Cookies are physical files of information that are stored on the user's own device; the information collected through cookies helps to facilitate the user's navigation through the portal and optimise the browsing experience. The data collected through cookies may be shared with their creators, but under no circumstances will the information obtained be associated with personal data or data that can identify the user. However, if the user does not wish for cookies to be installed on their hard drive, they have the option to configure their browser in such a way that it prevents the installation of these files. For more information, please consult our Cookie Policy at www.insorvet.com.

Can the privacy policy be modified?

This privacy policy may be modified. We recommend that you review the privacy policy periodically.