"lool" is deeply committed to compliance with Spanish and European legislation on the protection of personal data, and guarantees full compliance with the obligations laid down, as well as the implementation of the security measures provided for in the General Data Protection Regulation (GDPR) (EU) 2016/679 and Organic Law 3/2018, of December 5, on data protection and digital rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform that the use of our website may require that certain personal data be provided through registration forms or contact, or by sending emails, and that these will be processed by "lool", Data Controller, whose data are:

• Social Name: Paulo Alexandre Azevedo de Oliveira

• NIE: X4748124G

• Social Address: Calle Nicolás Morales 38, 3rd 8, 28019, Madrid

• Phone: 635408400

• Email: hello@lool.world

Collection and Processing of Personal Data

A personal data is any information relating to a person: name, email, address, telephone, ID... In addition, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet service provider.

"lool", as Data Controller, has a duty to inform Users of its website about the collection of personal data that can be carried out, either by sending email or by filling in the forms included on the website.

Only the necessary data will be obtained to be able to perform the contracted service, or to be able to respond appropriately to the request for information made by the User. The data collected is identifying and corresponds to a reasonable minimum in order to complete the activity carried out. In particular, no specially protected data is collected at any time. In no case will a different use of the data be made than the purpose for which they have been collected.

Mailing list registration forms (newsletter)

Purpose: Sending communications, some of them commercial, of interest to the Users according to the theme of the website. As established by the LSSICE, "lool" undertakes not to send commercial communications without identifying them as such. For this purpose, the information sent to customers for the maintenance of the existing contractual relationship, if any, will not be considered as commercial communication.

Legitimation: The legal basis that legitimizes this processing is the consent of the User, who can revoke at any time.

Data transfer: Personal data will be processed through servers managed by MailChimp that will be considered as Data Processor.

Purchase forms

Purposes:

• Manage purchases made.

• Provide information about the processing and status of purchases.

• Sending communications via email and/or telephone, in order to inform the User of possible incidents, errors, problems and / or status of orders.

Legitimation: The legal basis that legitimizes this processing is the execution of a contract.

Transfer of data: "lool" will not transfer or communicate to any third party your data, except in the cases legally provided or when the provision of a service implies the need for a contractual relationship with a Data Processor. Thus, the User accepts that some of the personal data collected will be provided to these Data Processors (payment platforms, management, intermediaries, etc.), when it is necessary for the effective realization of a contracted service or product purchased. The User also accepts that any of the services may be, in whole or in part, subcontracted to other persons or companies, who will have the consideration of Data Processors, with which the corresponding confidentiality contract has been agreed, or adhered to their privacy policies, established in their respective websites. The User may refuse to transfer your data to the Data Processors, by written request, by any of the means referred to above.

In addition, in those cases where necessary, the Client data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labour Inspectorate, etc.

Minors

Only persons over the age of 14 may use this website. As required by the LOPD and GDD, in case of children under 14 years of age, the consent of their parents or guardians will be a mandatory condition so that we can process your personal data.

Security Measures

Users of this website are informed that "lool" has adopted the technical, organizational and security measures at our disposal to prevent the loss, misuse, alteration, unauthorized access and theft of the data, and that they guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of the current regulations on data protection. The personal data collected in the forms are processed only by the staff of "lool" or the designated Data Processors.

The "lool" Website also has SSL encryption, which allows the User to securely send their personal data through the contact forms or registration of the website.

Truthfulness of data

The User declares that all the data provided by him are true and correct and undertakes to keep them updated. The User will be responsible for the veracity of his/her data and will be solely responsible for any disputes or disputes that may result from the falsity of the same. It is important that, in order for us to keep the personal data updated, the User informs "lool" whenever there has been any modification therein.

Exercise of User Rights

The LOPD and GDD and the GDPR grant data subjects the possibility to exercise a number of rights related to the processing of their personal data. To do this, the User must address, providing documentation proving his identity (ID or passport), by e-mail to hello@lool.world, or by written communication to the address that appears in our Legal Notice. Such communication shall reflect the following information: name and surname of the User, the request, the address and the supporting data.

The exercise of rights must be carried out by the User himself. However, they may be executed by a person authorized as the legal representative of the User, providing the documentation attesting to such representation.

The User may request the exercise of the following rights:

• Right to request access to personal data, which is the right to obtain information about whether your own personal data are being processed, the purpose of the processing that, if applicable, is being carried out, as well as the information available about the origin of such data and the communications made or provided for therein.

• Right to request rectification, in case the personal data are incorrect or inaccurate, or deletion of the data that proves to be inappropriate or excessive.

• Right to request the limitation of its processing, in which case only the data strictly necessary for the exercise or defense of claims will be kept by "lool".

• Right to object to processing: refers to the right of the data subject not to carry out the processing of his personal data or to cease in cases where his consent for the processing is not necessary, in case of commercial prospecting files or that have the purpose of taking decisions regarding the data subject and based solely on the automated processing of his data, unless for legitimate reasons or the exercise or defense of possible claims they must continue to be processed.

• Right to data portability: in case you want your data to be processed by another company, "lool" will facilitate the portability of your data in exportable format.

In the event that consent has been granted for any specific purpose, the User has the right to withdraw the consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

We undertake to enforce all these rights within the maximum established legal period of 10 business days.

If a User considers that there is a problem with the way in which "lool" is handling their data, they can direct their complaints to the Security Manager or the corresponding data protection authority, with the Spanish Data Protection Agency being the one indicated in the case of Spain.

Data retention

The personal data of Users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to respond to the request for information, or until the consent granted is revoked.

The Client's personal data will be processed until the end of the contractual relationship. The period of storage of personal data will be the minimum necessary, being able to be maintained until:

• 4 years: Law on Violations and Sanctions in the Social Order (obligations in terms of membership, registrations, cancellations, contribution, payment of wages...); Arts. 66 and next. General Tax Law (accounting books...)

• 5 years: Art. 1964 Civil Code (personal actions without special term)

• 6 years: Art. 30 Commercial Code (accounting books, invoices...)

• 10 years: Article 25 Law on the Prevention of Money Laundering and the Financing of Terrorism.

• No deadline: disaggregated and anonymised data.

For its part, the data of Users who register in the newsletter or newsletter will be kept indefinitely, until the consent granted is revoked.

In the case of processing candidate data (C.V.), "lool" may keep its curriculum stored for a maximum of two years to incorporate it into future calls, unless the candidate states otherwise.

Social Media

"lool" has a profile on some of the main social networks on the Internet (Facebook, Instagram), recognizing in all cases Responsible for the processing of the data of its followers, fans, subscribers, commentators and other profiles of Users (hereinafter, followers) published by "lool".

The purpose of the processing of data by "lool", when the law does not prohibit it, will be to inform its followers about its activities and offers, by any means that the social network allows, as well as provide personalized service of attention to the User. The legal basis that legitimizes this processing will be the consent of the interested party, which may be revoked at any time.

In no case "lool" will extract data from social networks, unless the User's consent for it was obtained in a timely and express manner (for example, for the conduct of a contest).

Personnel Selection

The applicant who sends electronic communications to "lool", in order to access the selection processes of personnel of the responsible, authorizes us to analyze the documents sent (for example, the C.V.), all content that is directly accessible through Internet search engines (e.g. Google), the profiles that he maintains on professional social networks (for example, professional social networks (for example, , LinkedIn), the data obtained in the access tests and the information that you reveal in the job interview, in order to evaluate your application and be able, where appropriate, to offer you a job. In the event that the candidate is not selected, "lool" may keep his/her C.V. stored for up to two years, to incorporate it into future calls, unless the candidate states otherwise. The legal basis that legitimizes this processing will be the consent of the interested party, which may be revoked at any time.

Confidentiality

The information provided by the User will, in any case, be considered confidential, without being able to be used for purposes other than those described herein. "lool" undertakes not to disclose information about the User's claims, the reasons for the advice requested or the duration of its relationship with the User.

Validity

This privacy and data protection policy has been drafted by ExpertsLOPD®, data protection company, as of May 14, 2020, and may vary depending on the changes in regulations and jurisprudence that are occurring, being the responsibility of the holder of the data to read the updated document, in order to know its rights and obligations in this regard at any time.