`PRIVACY POLICY`

`1. USER INFORMATION`

`Who is responsible for the processing of your personal data?`

ESENSSI AROMAS, S.L. is the RESPONSIBLE for the processing of the USER’s personal data and informs the USER that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of 27 April (GDPR), and Organic Law 3/2018, of 5 December (LOPDGDD).

`What do we process your personal data for?`

To maintain a business relationship with the user. The operations envisaged to carry out the processing are:

- - Sending commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that make it possible to carry out commercial communications. These communications will be made by the RESPONSIBLE PARTY and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to the personal data.
  - Conduct market research and statistical analysis.
  - To process orders, requests, respond to queries or any type of request made by the USER through any of the contact forms made available on the CONTROLLER’s website.
  - Send the online newsletter about news, offers and promotions in our activity.

`Why may we process your personal data?`

Because the processing is legitimized by Article 6 of the GDPR as follows:

- - With the consent of the USER: sending commercial communications and newsletters.
  - For the legitimate interest of the CONTROLLER: to carry out market research, statistical analysis, etc. and to process orders, requests, etc. at the request of the USER.

`How long will we keep your personal data?`

They will be kept for no longer than is necessary to maintain the purpose of the processing or there are legal prescriptions that dictate their custody and when it is no longer necessary to do so, they will be deleted with appropriate security measures to guarantee the anonymisation of the data or the total destruction of the same.

`Who do we provide your personal data to?`

No communication of personal data to third parties is foreseen except, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with which the RESPONSIBLE PARTY has signed the confidentiality and data processor agreements required by current privacy regulations.

`What are your rights?`

The rights of the USER are:

- - Right to withdraw consent at any time.
  - Right of access, rectification, portability and deletion of your data, and of limitation or opposition to its processing.
  - The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with the regulations in force.

Contact details to exercise your rights:

ESENSSI AROMAS, S.L.. C/ FUENTESPINA, 41 4 C – 28031 MADRID (Madrid). E-mail: info@esenssi.com

`2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER`

USERS, by ticking the corresponding boxes and entering data in the fields, marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to attend to their request, by the provider, and the inclusion of data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the RESPONSIBLE are truthful and are responsible for communicating any modification of the same.

The RESPONSIBLE PARTY informs that all data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the USER. In the event that not all data is provided, there is no guarantee that the information and services provided will be completely tailored to your needs.

`3. SECURITY MEASURES`

That in accordance with the provisions of the current regulations on the protection of personal data, the RESPONSIBLE PARTY is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data for which it is responsible, and manifestly with the principles described in article 5 of the GDPR, by which they are treated lawfully, fair and transparent in relation to the data subject and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of the USERS and has communicated to them the appropriate information so that they can exercise them.

For more information on privacy guarantees, you can contact the RESPONSIBLE PARTY via: