Social Media Policy

1. INFORMATION FOR THE USER

Who is the data controller responsible for processing of your personal data?

CENTRAL RESERVES MONTSERRAT, S.A.U. is the data controller responsible for processing the personal data of those USERS who have created a profile on any of its social networks. These data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), Organic Law 3/2018 of 5 December (LOPDGDD - Spanish Data Protection Law), and the Law on Information Society Services and Electronic Commerce (LSSI in its Spanish initials), providing the following information on the processing:

Why do we process your personal data?

Purpose of the processing: to maintain a relationship between the USER and CENTRAL RESERVES MONTSERRAT, S.A.U. (hereinafter the DATA CONTROLLER) which may include the following operations:

• Process requests and queries raised with the data controller
• Inform about activities and events organised by the data controller
• Inform about products or services offered by the data controller
• Interact through official profiles

When the DATA CONTROLLER collects and processes personal data through its social networks, USERS will be informed about the purpose of the data collection, as well as about their personal data protection rights. Personal data will be used only for the purposes indicated and will be kept securely.

Legal Basis for Processing: the explicit consent granted by the USER for the processing of their personal data for one or more specific purposes (Article 6.1.a GDPR).

Furthermore, the USER can access the privacy policies of the social network itself at any time, as well as set up their profile to guarantee their privacy.

How long will we store your personal data?

Data retention criteria: they will be retained provided the USER does not revoke the consent given as indicated in this privacy policy.

To whom do we convey your personal data?

Communication of data: the information provided by the USER through the DATA CONTROLLER's social networks, including their personal data, may be published, always depending on the services used by the USER. Therefore, it may be publicly available to other third-party users of social networks. From the profile of each social network, the USER can configure what information they want to make public in each case, view the permissions that have been granted, delete them or deactivate them, like any third-party application that they no longer wish to use.

However, there is no planned communication of personal data to third parties outside the social network, except if it is essential for the development and execution of the purposes of the processing, for our service providers regarding communications, with whom the DATA CONTROLLER has signed the confidentiality and processing contracts required by current privacy regulations.

What are your rights?

Rights that pertain to the USER: these rights can only be exercised with regard to the information that is under the control of the DATA CONTROLLER.

• Right to withdraw consent at any time.
• Right of access, rectification, portability and erasure of your data, and restriction or objection to their processing.
• Right to file a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.

Contact details to exercise your rights:

CENTRAL RESERVES MONTSERRAT, S.A.U. - LG Monestir, S/N - 08199 MONTSERRAT (Barcelona). E-mail: informatica@larsa-montserrat.com

The full privacy policy is available at montserratvisita.com

2. USE OF THE PROFILE

The DATA CONTROLLER will carry out the following:

• Access to public profile information.
• Publication on the USER's profile of all information already published on the DATA CONTROLLER's social network.
• Send personal and individual messages through social network channels.
• Updates to the page status which will be published on the USER'S profile.

The USER can always control their connections, delete content that no longer interests them and restrict who they share their connections with; to do this, they must access their settings where they will find different configuration options related to the degree of privacy of their user profile on the social network.

3. POSTS

The purpose of social networks is to give visibility and disseminate the activities carried out by the DATA CONTROLLER. These tools store personal data on the servers of their respective services and are governed by their own privacy policy.

The USER, once they are a follower or have joined the DATA CONTROLLER's social network, may post comments, links, images, photographs or any other type of multimedia content supported by it. The USER, in all cases, must be the owner of the posted content, hold the copyright and intellectual property rights or have the consent of the third parties involved.

Any post on the social network, whether texts, photos, images, videos, etc. that violate or are likely to violate morals, ethics, good taste or decorum, and/or that violate or infringe intellectual or industrial property rights, image rights or the law is expressly prohibited. Offensive, defamatory, illegal or inappropriate comments or content will not be tolerated on the company’s profiles. The Company reserves the right to delete these comments or content and block the users responsible.

In these cases, the DATA CONTROLLER reserves the right to immediately remove the content, without prior communication, and may request the USER be permanently blocked.

The DATA CONTROLLER shall not be held liable for content that the USER has freely published.

The USER shall be aware that their posts will be known by other users, so they themselves are primarily responsible for their privacy.

Images that are posted on the social network will not be stored in any file by the DATA CONTROLLER, but they will remain on the social network.

4. DATA OF MINORS OR SPECIALLY-ABLED PEOPLE

It is recommended to review and read the terms of use and privacy policy of each social network at the time of registration, taking into account the different age requirements for completing it.

Likewise, the DATA CONTROLLER shall be expressly held harmless from any liability that may arise from the use of social networks by minors or specially-abled people, whose access should be carried out under the supervision and control of their legal representatives.

The DATA CONTROLLER reserves the right to change this policy at any time. Changes will be communicated through our social media profiles and/or our website.