Privacy Policy

The Data Controller informs you of its Privacy Policy regarding the processing and protection of users' personal data that may be collected while browsing the Website: https://toqenkapital.com

In this regard, the Data Controller guarantees compliance with current personal data protection regulations, as set out in Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).

Use of the Website implies acceptance of this Privacy Policy as well as the conditions set out in the Legal Notice.

Identity of the Data Controller

• Data Controller: TOQEN KÂPITAL, S.A.
• Tax ID (CIF): A-27577618
• Registered address: C/Gabriel Miró, 3-3. 41704 Dos Hermanas (Sevilla), Spain.
• Website: https://toqenkapital.com
• Contact email: info@toqenkapital.com
• Telephone: +34 619 524 327

Principles applied to the processing of data

When processing your personal data, the Data Controller shall apply the following principles, which comply with the requirements of the new European data protection regulation (GDPR):

• Principle of lawfulness, fairness and transparency: The Data Controller will always require consent for the processing of personal data, which may be for one or several specific purposes about which the Data Controller will inform the User beforehand with absolute transparency.
• Principle of data minimisation: The Data Controller will only request the data strictly necessary for the purpose or purposes for which it is requested.
• Principle of limitation of the storage period: The Data Controller will retain the personal data collected only for as long as strictly necessary for the purpose or purposes of the processing. The Data Controller will inform the User of the applicable retention period according to the purpose.
• In the case of subscriptions, the Data Controller will periodically review the lists and delete records that have remained inactive for a considerable period of time.
• Principle of integrity and confidentiality: The personal data collected will be processed in such a way that its security, confidentiality and integrity are guaranteed.
• The Data Controller takes the necessary precautions to prevent unauthorised access to, or misuse of, its users' data by third parties.

Collection of personal data

It is not necessary to provide any personal data in order to browse the Website.

The cases in which you do provide your personal data are the following:

• When contacting us through the contact forms or by sending an email.

Rights

The Data Controller informs you that, with respect to your personal data, you have the right to:

• Request access to the data stored.
• Request rectification or erasure.
• Request restriction of its processing.
• Object to the processing.

You may not exercise the right to data portability.

The exercise of these rights is personal and must therefore be exercised directly by the data subject, requesting it directly from the Data Controller. This means that any client, subscriber or collaborator who has provided their data at any time may contact the Data Controller and request information about the data held, how it was obtained, request its rectification, object to its processing, restrict its use or request the deletion of such data from the Data Controller's files.

To exercise your rights, you must send your request together with a photocopy of your National Identity Document or equivalent to the following postal address:

TOQEN KÂPITAL, S.A., C/Gabriel Miró, 3-3. 41704 Dos Hermanas (Sevilla), Spain

The exercise of these rights does not include any data that the Data Controller is obliged to retain for administrative, legal or security purposes.

You have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency (Agencia Española de Protección de Datos), if you consider that the processing of personal data concerning you infringes the Regulation.

Purpose of the processing of personal data

When you connect to the Website to send an email to the Data Controller or subscribe to its newsletter, you are providing personal information for which the Data Controller is responsible. This information may include personal data such as your IP address, first and last name, physical address, email address, telephone number, and other information. By providing this information, you consent to your information being collected, used, managed and stored by — Comvive Servidores S.L.U. — solely as described on the pages:

• Legal Notice
• Privacy Policy

The personal data and the purpose of processing by the Data Controller differ depending on the information collection method used:

Contact forms: The Data Controller requests personal data which may include: first and last name, email address, telephone number and website address, for the purpose of responding to Users' enquiries.

For example, the Data Controller uses this data to respond to messages, queries, complaints, comments or concerns that Users may have regarding the information included on the Website, the processing of personal data, matters relating to the legal texts included on the Website, as well as any other enquiry that the User may have that is not subject to the Website's terms and conditions.

There are other purposes for which the Data Controller processes personal data:

• To ensure compliance with the conditions set out in the Legal Notice page and with applicable law. This may include the development of tools and algorithms that help the Website guarantee the confidentiality of the personal data it collects.
• To support and improve the services offered by this Website.

Security of personal data

To protect your personal data, the Data Controller takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, unauthorised access, disclosure, alteration or destruction.

The Website is hosted by: Comvive Servidores S.L.U. Data security is guaranteed, as all necessary security measures are taken. You may consult its privacy policy for further information.

The Data Controller informs the User that their personal data will not be transferred to third-party organisations, except where such transfer is required by a legal obligation or where the provision of a service requires a contractual relationship with a data processor. In the latter case, data will only be transferred to the third party once the Data Controller has obtained the express consent of the User.

However, in some cases collaborations may be carried out with other professionals; in such cases, the User's consent will be requested, informing them of the identity of the collaborator and the purpose of the collaboration. This will always be carried out under the strictest security standards.

Content from other websites

The pages of this Website may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves exactly as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using that code.

Cookie Policy

For this Website to function correctly it needs to use cookies, which are information stored in your web browser.

Legal basis for the processing of data

The legal basis for the processing of your data is:

• The consent of the data subject.

Categories of personal data

The categories of personal data processed by the Data Controller are:

• Identification data.

No specially protected categories of data are processed.

Retention of personal data

The personal data provided to the Data Controller will be kept until you request its deletion.

Recipients of personal data

Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, United States ("Google").

Google Analytics uses "cookies", which are text files located on your computer, to help the Data Controller analyse how Users use the Website. The information generated by the cookie about the use of the Website (including the IP address) will be directly transmitted and stored by Google on servers in the United States.

More information at: https://analytics.google.com

You can find out how Google manages privacy with regard to the use of cookies and other information on Google's Privacy Policy page: https://policies.google.com/privacy?hl=en

You can also view a list of the types of cookies used by Google and its partners, and all the information relating to their use of advertising cookies, at:

• Types of cookies used by Google
• How Google uses cookies in advertising.

Web Browsing

When browsing the Website, non-identifying data may be collected, which may include the IP address, geolocation, a record of how services and sites are used, browsing habits and other data that cannot be used to identify you.

The Website uses the following third-party analytics services:

• Google Analytics.

The Data Controller uses the information obtained to obtain statistical data, analyse trends, administer the site, study browsing patterns and to collect demographic information.

The Data Controller is not responsible for the processing of personal data carried out by the websites that may be accessed through the various links contained on the Website.

Accuracy and veracity of personal data

You undertake that the data provided to the Data Controller is correct, complete, accurate and up to date, and to keep it duly updated.

As a User of the Website, you are solely responsible for the veracity and accuracy of the data sent to the Website, releasing the Data Controller from any liability in this regard.

Acceptance and consent

As a User of the Website, you declare that you have been informed of the conditions regarding the protection of personal data and that you accept and consent to its processing by the Data Controller in the manner and for the purposes set out in this Privacy Policy.

To contact the Data Controller, subscribe to a newsletter or leave comments on this Website, you must accept this Privacy Policy.

Changes to the Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy in order to adapt it to legislative or case-law developments, as well as to industry practices.

These policies will remain in effect until amended by others duly published.