PRIVACY NOTICE

2. HOW DO WE PROCESS YOUR INFORMATION?

In summary: We process your information to provide, improve, and manage our Services, communicate with you, for security and fraud prevention, and to comply with the law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To provide, improve, and manage our Services.
• To communicate with you.
• For security and fraud prevention reasons.
• To comply with the law.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In summary: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

• Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
• Business partners. We may share your information with our business partners to offer you certain products, services, or promotions.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In summary: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (such as web beacons and pixels) to collect information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services, prevent failures, correct errors, save your preferences, and assist with basic site functions.

We also allow third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display ads, tailor ads to your interests, or send abandoned cart reminders (depending on your communication preferences). Third parties and service providers use their technology to provide advertising about products and services tailored to your interests that may appear on our Services or other websites.

Información específica sobre cómo usamos dichas tecnologías y cómo puede rechazar ciertas cookies se establece en nuestro Aviso de Cookies.

5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In summary: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details (such as your Facebook or X logins). When you choose to do so, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider involved, but often includes your name, email address, friends list, and profile picture, as well as other information you choose to make public on that social media platform.

We will use the information we receive only for the purposes described in this Privacy Notice or otherwise made clear to you in the relevant Services. Please note that we do not control and are not responsible for other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and how you can configure your privacy preferences on their sites and apps.

6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In summary: We may transfer, store, and process your information in countries other than your own.

Our servers are located in. Regardless of your location, please note that your information may be transferred, stored, and processed by us at our facilities and at the facilities of third parties with whom we may share your personal information (see WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION? above), including facilities in and other countries.

If you are a resident of the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary steps to protect your personal information in accordance with this Privacy Notice and applicable law.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

In summary: We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only retain your personal information for as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we no longer have a legitimate ongoing business need to process your personal information, we will delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

8. DO WE COLLECT INFORMATION FROM MINORS?

In summary: We do not knowingly collect data from or market to children under the age of 18.

We do not knowingly collect, solicit, or market to children under the age of 18, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 years old or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information has been collected from users under the age of 18, we will deactivate the account and take reasonable steps to promptly delete such data from our records. If you become aware of any data we may have collected from children under the age of 18, please contact us at privacy@recipal.es.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In summary: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent: If we rely on your consent to process your personal information, which may be express and/or implied consent depending on applicable law, you have the right to withdraw your consent at any time. You may withdraw your consent at any time by contacting us using the contact details provided in the section HOW CAN YOU CONTACT US ABOUT THIS NOTICE? below.

However, please note that this will not affect the lawfulness of processing prior to its withdrawal, nor, where permitted by applicable law, will it affect the processing of your personal information carried out in reliance on legal bases other than consent.

Account information

If at any time you wish to review or change the information in your account or terminate your account, you may:
When you request termination of your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with applicable legal requirements.

10. CONTROLS FOR NON-FOLLOW FUNCTIONS

Most web browsers and some mobile operating systems and mobile applications include a Do Not Track (“DNT”) feature or setting that you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, there is no uniform technology standard for recognizing and implementing DNT signals. Therefore, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you of that practice in a revised version of this Privacy Notice.

11. DO WE UPDATE THIS NOTICE?

In summary: Yes, we will update this notice as necessary to remain in compliance with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated with an updated “Revised” date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by sending you a notification directly. We encourage you to review this Privacy Notice frequently to stay informed about how we are protecting your information.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have any questions, comments, or requests regarding this privacy policy, you can contact us as follows:

• Primary email address: privacy@recipal.es (recommended)
• Other channels: See the section Contact from our website for information on phone numbers, online forms, and social media.

Our team will respond to your inquiry within the time limits established by applicable regulations.

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

In accordance with applicable laws in your country, such as the General Data Protection Regulation (GDPR) in the European Union, the General Data Protection Law (LGPD) in Brazil, or other similar regulations, you may have the right to: request access to the personal information we collect, obtain details about how we process it, correct inaccuracies, delete your personal data, withdraw your consent to processing, object to the processing of your data, request the portability of your data, or limit its use. These rights may be subject to certain limitations under applicable law, for example, when processing is necessary to comply with legal or contractual obligations.

In our online store, we facilitate the exercise of these rights in the following ways:

• Through your customer account: You can review and update your personal information, such as contact details or address, directly from your user profile on our website. You also have the option to delete your account from your profile, which will result in the deletion of your personal data, except for data that we are required to retain due to legal obligations (e.g., for accounting or regulatory purposes).
• By direct request: If you prefer not to manage your data through your account or wish to exercise other rights, you may send us a direct request. To do so, please contact us using the methods listed in the “Contact” section of this policy. We will process your request within a reasonable time, generally within 30 days, or as required by applicable law.

We guarantee that your request will be treated securely and confidentially, verifying your identity to protect your data. For more information or questions about these rights, please do not hesitate to contact us.