The purpose of this privacy policy is to inform you about how BME Group companies obtain and process the personal data that you provide when a contractual or corporate relationship is established or said data is submitted through the websites of BME Group companies.

The purpose of data collection and processing is to facilitate the development, execution, compliance and control of the contractual or corporate relationship maintained with BME Group companies. These data are safeguarded for the duration of the relationship and until the corresponding responsibilities derived from said relationship expire.

For the purposes of this privacy policy, the party responsible for personal data processing shall be the BME Group company with which you maintain a contractual or corporate relationship or to which personal data has been submitted for the use of its website.

The BME Group guarantees the confidentiality of all personal data provided to it in the course of a contractual or corporate relationship or for the use of its websites. The data shall be processed by applying all the measures established by Law to prevent illicit processing, loss, unauthorised processing or access to the corresponding personal data, with the understanding of the risks of exposure involved. The BME Group's Security Policy governing this privacy policy can be found here.

The BME Group will not share or yield the personal data in its possession and to which this Privacy Policy refers to any third party unless it receives prior consent to do so or is obliged to do so as a legal requirement.

In the event of a legal requirement to share or yield the personal data referred to in this Privacy Policy to a third party, said condition shall be indicated in the documents used to collect said data, as well as the purpose of said transfer of personal data and the recipient of the same.

As regards the personal data collected on BME Group company websites, please refer to our Policy on the Use of Cookies, which is available here.

You can access and consult your personal data included in the files of the entity responsible for their processing, rectify them if you believe they are incorrect, request that they be eliminated or reject the use of the same.

You may request that processing of your personal data be restricted in the following cases:

• If the accuracy of the data has been contested.
• If processing is unlawful and the procedure for rejection and elimination of the data has been initiated.
• If the personal data are necessary for drafting, exercising or defending a claim or claims.
• If you oppose processing of your personal data for purposes of public interest or the satisfaction of a legitimate interest, while verification takes place as to whether the legitimate motives of the entity responsible prevail over those of the interested party.

Moreover, you have the right to request and receive, in electronic format, the personal data submitted to any of the BME Group companies and transmitted to another entity.

Lastly, we inform you that there is a Data Protection Officer in the BME Group responsible for counselling and supervising the management of personal data in the Group's companies whose contact information is as follows:

Data Protection Officer
Grupo BME
Palacio de la Bolsa
Plaza de la Lealtad, 1
28014 Madrid

Email: protecciondedatos@grupobme.es

Telephone number: +34 915891031

You may exercise your rights of access, rectification, erasure, restriction of processing, data portability and objection by written request addressed to the Data Protection Officer of BME Group to the address indicated above or by email to the following email address: protecciondedatos@grupobme.es. The exercise of these rights is free of charge.

You may also lodge a complaint with the supervisory authority which in Spain is the Agencia Española de Protección de Datos (www.aepd.es).