1. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

The data controller responsible for processing personal data collected through this website is:

HUEMAAT FJ SL
Brand: MAATFIT
Tax Identification Number (NIF): B70902952
Registered office: Calle Pelícano 17, Villaviciosa de Odón, 28670, Madrid, Spain
Email: product@maatfit.com

Hereinafter, the “Company”.

The Company is responsible for processing and protecting the personal data provided by users through the MAATFIT website (hereinafter, the “Website”).

2. WHAT PERSONAL DATA DO WE PROCESS?

The personal data we process will depend on how you interact with the Website.

A. Data provided through the contact form

When you contact us through the form available on the Website, we may process the information you provide, including:

Your first and last name.

Your email address.

Any contact information you choose to provide.

The content of your enquiry or message.

Any other information you voluntarily provide through the form.

We recommend that you do not include personal information in your message that is not necessary for us to deal with your enquiry, particularly sensitive personal data.

B. Data provided by email

If you contact us directly at product@maatfit.com, we will process your email address and any information included in your communication for the purpose of managing and responding to your request.

C. Technical and browsing data

When you visit the Website, certain technical information may be processed automatically, such as your IP address, information about your device, browser, operating system and other technical data necessary for the operation, security and maintenance of the Website.

Where cookies or similar technologies requiring consent are used, their use will depend on the preferences you have selected.

Further information is available in our Cookie Policy.

3. WHY DO WE USE YOUR PERSONAL DATA?

We may process your personal data for the following purposes:

A. Responding to enquiries and requests

We will use the information you provide to:

Receive and manage your enquiry.

Respond to your questions or requests for information.

Maintain any communications necessary to deal appropriately with your request.

Follow up on a conversation where necessary.

B. Managing communications relating to MAATFIT

When you contact us to express an interest in MAATFIT, its products, projects, collaborations or other matters relating to the brand, we may use your personal data to respond to and manage that communication.

Submitting an enquiry does not, in itself, constitute the formation of a contract or automatically establish a commercial relationship.

C. Website operation and security

Certain technical data may be processed where necessary to:

Ensure the proper operation of the Website.

Maintain the security of our systems.

Detect technical errors.

Prevent abusive, fraudulent or unlawful use.

Protect the Website against unauthorised access or attacks.

D. Compliance with legal obligations

We may also process certain personal data where necessary to comply with a legal obligation applicable to the Company or to respond to valid requests from public authorities, regulatory bodies, courts or tribunals.

4. WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal basis for processing will depend on the specific purpose for which your personal data is used.

Enquiries and requests

When you voluntarily contact us through the contact form or by email, we will process the personal data necessary to manage and respond to your request.

Depending on the nature of the communication, this processing may be based on your consent when you voluntarily provide your personal data or, where applicable, on taking steps at your request prior to entering into a contract.

Website operation and security

Where certain technical data needs to be processed to ensure the security of the Website, prevent misuse or protect our systems, processing may be based on the Company's legitimate interest in maintaining the security and proper operation of its systems and digital services.

Cookies and similar technologies

Where applicable law requires your consent for the use of certain cookies or similar technologies, such processing will only take place after your consent has been obtained.

You may withdraw or modify your consent through the cookie settings available on the Website.

Strictly necessary cookies may be used where they are required to provide the service requested by the user.

Legal obligations

Where processing is necessary to comply with a legal obligation, the legal basis will be compliance with that obligation.

5. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We will retain your personal data only for as long as necessary to fulfil the purpose for which it was collected.

Enquiries and requests

Personal data relating to an enquiry will be retained for the time necessary to manage and respond to it.

Once the communication has ended, the data may be retained in a restricted and protected form for the period necessary to address any potential legal liabilities arising from the processing.

Data processed on the basis of consent

Where processing is based on your consent, we may process your personal data for as long as that consent remains valid or until you withdraw it.

Withdrawal of consent will not affect the lawfulness of any processing carried out before its withdrawal.

Legal obligations

Where there is a legal obligation to retain personal data, it will be kept for the period required by the relevant legislation.

Once the applicable retention periods have expired, the data will be appropriately deleted or anonymised.

6. WHO DO WE SHARE YOUR PERSONAL DATA WITH?

We do not sell your personal data.

Certain service providers that provide services necessary for the operation of the Website and our systems may have access to personal data on behalf of the Company.

These may include, where applicable:

Web hosting and technology service providers.

Email service providers.

Website maintenance and security providers.

Providers responsible for the technical operation of the contact form.

Providers of cookie-related or website measurement services, where such services are used and there is an appropriate legal basis for the processing.

Such providers must process personal data in accordance with the Company's instructions and applicable data protection obligations.

We may also disclose personal data to public authorities, regulatory bodies, courts, tribunals or other third parties where required to do so by law.

7. INTERNATIONAL DATA TRANSFERS

Some technology providers used by the Website may provide their services from countries outside the European Economic Area (EEA).

Where an international transfer of personal data takes place, the Company will implement the measures and safeguards required by applicable data protection legislation.

Depending on the circumstances, these safeguards may include adequacy decisions adopted by the European Commission, Standard Contractual Clauses approved by the European Commission or other legally recognised mechanisms.

Where international transfers relate to services using cookies or similar technologies, additional information will be provided in the Cookie Policy, where applicable.

8. WHAT ARE YOUR RIGHTS?

Data protection legislation provides you with certain rights in relation to your personal data.

Where applicable, you may exercise the following rights:

Access: the right to know whether we are processing your personal data and to obtain information about such processing.

Rectification: the right to request the correction of inaccurate or incomplete personal data.

Erasure: the right to request the deletion of your personal data where the applicable legal requirements are met.

Objection: the right to object to the processing of your personal data in certain circumstances.

Restriction of processing: the right to request that we temporarily restrict the processing of your personal data in the circumstances provided for by law.

Data portability: the right to receive certain personal data you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible and legally applicable, to request that it be transmitted directly to another data controller.

Withdrawal of consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

Not to be subject to solely automated decisions: where applicable, you have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

9. HOW CAN YOU EXERCISE YOUR RIGHTS?

You may exercise your rights free of charge by sending your request to:

product@maatfit.com

Your request should specify the right you wish to exercise and provide sufficient information to enable us to identify the personal data to which your request relates.

Where we have reasonable doubts concerning your identity, we may request additional information strictly necessary to verify it.

We will respond to requests within the time limits established by applicable data protection legislation.

10. RIGHT TO LODGE A COMPLAINT

If you believe that the processing of your personal data does not comply with applicable data protection legislation, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Spain, the competent supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD).

Information about your rights and how to lodge a complaint is available through the AEPD's official website.

11. THIRD-PARTY PERSONAL DATA

As a general rule, you should only provide us with your own personal data.

If, exceptionally, you include another person's personal data in a communication sent to us, you must ensure that you are authorised to provide that information and, where legally required, that the person concerned has been appropriately informed.

We recommend that you do not provide personal data relating to third parties unless it is strictly necessary for the purpose of your communication.

12. DATA SECURITY

The Company will implement appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or unauthorised access, taking into account the nature of the data, the characteristics of the processing and the risks involved.

However, no system connected to the Internet can guarantee absolute security.

13. CHILDREN'S PERSONAL DATA

The Website is not specifically directed at children.

If we become aware that a child's personal data has been provided to us without an appropriate legal basis for processing it, we will take reasonable steps to delete such data where appropriate.

14. COOKIES

The Website may use cookies and similar technologies.

Detailed information regarding the cookies used, their providers, purposes, duration and, where applicable, any international data transfers will be available in our Cookie Policy.

Where consent is required for the use of a cookie, that cookie will not be placed until the user has provided the required consent.

15. CHANGES TO THIS PRIVACY POLICY

The Company may update this Privacy Policy where necessary to reflect changes to the Website, the processing activities carried out or applicable legislation.

The version published on the Website at any given time will be the version currently in force.

Where significant changes are made that materially affect the processing of personal data, users will be informed through appropriate means where required.

16. CONTACT

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact:

HUEMAAT FJ SL
Brand: MAATFIT
Tax Identification Number (NIF): B70902952
Registered office: Calle Pelícano 17, Villaviciosa de Odón, 28670, Madrid, Spain
Email: product@maatfit.com