"Bruna" is deeply committed to complying with the Spanish and European regulations on the protection of personal data, and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures set forth in the General Data Protection Regulation (RGPD) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Digital Rights Protection (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through contact forms, or by sending emails, and that these will be processed by "Bruna", Responsible for the treatment, whose data are:

Company Name: Bruna Audiovisual Producer SCCL

VAT number: F66937426

Registered office: C/ Anselmo Clavé 17, Building 15. Matacás Industrial Estate, 08980 Sant Feliu de Llobregat, Barcelona

Telephone: 644 238 316

Email: ei@holabruna.cat

A personal date is any information relating to a person: number, email, address, telephone number, NIF/NIE... Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet access provider.

"Bruna", as Responsible for the Treatment, has the duty to inform the Users of its website about the collection of personal data that may take place, either by sending an email or by filling in the forms included on the website.

Only the necessary data will be obtained to be able to perform the contracted service, or to be able to adequately respond to the request for information made by the User. The data collected are identifying and correspond to a reasonable minimum to be able to carry out the activity carried out. In particular, no specially protected data is collected at any time. In no case will the data be used differently than the purpose for which they have been collected.

Purpose: Respond to your request for information made through our contact form(s).

Legitimation: The legal basis that legitimizes this treatment is the consent of the User, which can be revoked at any time.

Data transfer: Personal data will be processed through servers managed by Adobe , which will have the consideration of Encargado del Tratamiento.

Only persons over the age of 14 may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under the age of 14, the consent of their parents or guardians is a mandatory condition for us to process their personal data.

On the other hand, only persons over the age of 18 may use our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.

Users of the "Bruna" website are informed that the security, technical and organizational measures at our disposal have been adopted to prevent the loss, misuse, alteration, unauthorized access and theft of data, and that they thus guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with what is established in the current regulations on data protection. The personal data collected in the forms are the subject of treatment, solely, by the staff of "Bruna" or by the Designated Data Processors. The "Bruna" website also has SSL encryption, which allows the user to securely send their personal data through the contact or registration forms on the website.

The User declares that all the data provided by him are true and correct and undertakes to keep them updated. The User will be responsible for the veracity of his data and will be solely responsible for any conflicts or litigation that may result from the falsity of the same. It is important that, so that we can keep personal data up to date, the User informs "Bruna" whenever there has been any modification to them.

"Bruna" will not transfer or communicate your data to any third party, except in the cases provided for by law or when it is strictly necessary for the provision of a service. Specifically, the data may be transferred to:

Providers of technological or IT services

Payment service providers

Courier and parcel companies

Third parties or intermediaries, as service providers, who operate in our own number (management, consultancy...).

Data transfers will take place respecting the strictest confidentiality, using the necessary measures, such as the signing of confidentiality contracts, or adherence to the privacy policies established on their respective web pages. The User may refuse the transfer of their data to the Treatment Managers, by means of a written request, by any of the previously referenced means.

In addition, in those cases in which it is necessary, Customer data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, Labor Inspection, etc.

The LOPD and the RGPD grant interested parties the possibility of exercising a series of rights related to the treatment of their personal data. To do this, the User must go, providing documentation that proves his identity (DNI or passport), via electronic mail to ei@holabruna.cat, or via written communication to the address that appears in our Legal Notice. Said communication must reflect the following information: number and details of the User, object of the request, domicile and crediting data.

The exercise of rights must be carried out by the User himself. However, they may be executed by an authorized person as legal representative of the User, providing the documentation that proves said representation.

The User may request the exercise of the following rights:

Right to request access to personal data, which is the right to obtain information about whether your own personal data is being processed, the purpose of the processing that, in this case, is being carried out, as well as the information available about the origin of said data and the communications made or planned for them.

Right to request its rectification, in case the personal data are incorrect or inaccurate, or deletion of the data that turn out to be inadequate or excessive.

Right to request the limitation of its treatment, in which case only the data strictly necessary for the exercise or defense of claims will be kept by "Bruna".

Right to object to treatment: refers to the right of the interested party not to carry out the treatment of their personal data or to stop it in the event that their consent is not necessary for the treatment, that it is commercial prospecting files or that have the purpose of adopting decisions referred to the interested party and based solely on the automated treatment of their data, unless for legitimate reasons or the exercise or defense of possible claims must continue to be treated.

Right to data portability: in the event that anyone whose data is processed by another company, "Bruna" will facilitate the portability of their data in exportable format. In the event that consent has been granted for a specific purpose, the User has the right to withdraw consent at any time, without this affecting the legality of the treatment based on consent prior to its withdrawal.

We promise to execute all these rights within the maximum legal term (1 month).

If a User considers that there is a problem with the way "Bruna" is handling their data, they can direct their complaints to the Security Manager or the corresponding data protection authority, the Spanish Data Protection Agency being the one indicated in the case of Spain.

The personal data of Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to respond to the request for information, or until the consent granted is revoked.

The personal data of the Clients will be treated until the end of the contractual relationship. The period of conservation of personal data will be the minimum necessary, pudiendo mantenerse hasta:

4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding membership, registrations, terminations, quotations, payment of salaries...); arts 66 et seq. General Tax Law (accounting books...)

5 years: art 1964 Civil Code (personal actions without special time limit)

6 years: art 30 Commercial Code (accounting books, invoices...)

10 years: art 25 Law on the Prevention of Money Laundering and Financing of Terrorism.

No deadline: disaggregated and anonymized data.

In the case of candidate data processing (CV), "Bruna" will be able to store their resume for a maximum of two years to include it in future calls, unless the candidate states otherwise.

"Bruna" has a profile on some of the main social networks on the Internet (Facebook, Twitter, Instagram, Vimeo, Tumblr), recognizing in all cases Responsible for the treatment of the data of its followers, fans, subscribers, commentators and other profiles of Users (hereinafter, followers) published by "Bruna".

The purpose of data processing by "Bruna", when the law does not prohibit it, will be to inform its followers about its activities and offers, by any means that the social network allows, as well as to provide personalized customer service. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.

In no case will "Bruna" extract data from social networks, unless the User's consent is obtained promptly and expressly for this (for example, for the realization of a contest).

The applicant who sends electronic communications to "Bruna", with the purpose of accessing the personnel selection processes of the person in charge, authorizes us to analyze the documents sent (for example, the CV), all the content that is directly accessible through Internet search engines (for example, Google), the profiles that he maintains in professional social networks (for example, LinkedIn), the data obtained in the access tests and the information that he reveals in the job interview, with the objective of assessing his candidacy and power, in his case, offer him a job. In the event that the candidate is not selected, "Bruna" will be able to store his CV for a maximum of two years, to include it in future calls, unless the candidate states otherwise. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.

The information provided by the User will, in any case, be considered confidential, but may be used for purposes other than those described here. "Bruna" undertakes not to divulge or reveal information about the User's claims, the reasons for the advice requested or the duration of their relationship with him.

This privacy and data protection policy has been drafted by ExpertosLOPD®, protection company of data, as of April 26, 2021, and may vary depending on the changes in regulations and jurisprudence that are being produced, being the responsibility of the data owner to read the updated document, in order to know their rights and obligations in respect of each moment.