Publication date: (September 14, 2026)

EUROFRAGANCE, S.L.U (hereinafter, “EUROFRAGANCE”) with N.I.F. B59341081 and address at C/Camí de Can Camps, 17-19, Edificio Kibo, 08174 Sant Cugat del Vallès (Barcelona), states that it is the Data Controller of the data collected on the website https://www.eurofragance.com/ (hereinafter, el “Website”).

EUROFRAGANCE will process personal data in accordance with the obligations set forth in the General 2016/679 Data Protection Regulation (hereinafter, the “GDPR”), the Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (hereinafter, the “LOPDGDD”), and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (hereinafter, the “LSSICE”).

Fields identified as mandatory in the forms must be completed so that EUROFRAGANCE can properly manage the inquiry or request. All other fields are optional, unless expressly stated otherwise.

The term “User/s” is used herein to refer to all persons of legal age who access the Website.

Basic Information Regarding Data Processing

Detailed Information Regarding Data Processing

1. Identity and Contact Details of the Data Controller

Under applicable data protection regulations and, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights, the Data Controller is:

2. Compliance with Applicable Regulations

Eurofragance processes personal data in accordance with the GDPR, the LOPDGDD and any other applicable regulations. To this end, it applies appropriate policies, measures and technical and organizational procedures to protect personal data and ensure its confidentiality, integrity, availability and security.

The provision of personal data through the Website is voluntary, without prejudice to those fields identified as mandatory because they are necessary to address or manage the corresponding inquiry or request.

Before processing begins, the User will receive information regarding the purposes, legal bases and other circumstances applicable to the use of their personal data through the corresponding information notice and access to this Privacy Policy.

3. Principles Applicable to the Processing of Personal Data

The data provided to EUROFRAGANCE through different means, “online” or “offline” contact forms or any other procedure used to collect data will be processed in accordance with applicable data protection regulations and solely for the purpose of providing the service about which the User has been informed.

When processing your personal data, we apply the following principles in accordance with the requirements of the GDPR:

• Principle of lawfulness, fairness, and transparency: We will always have a legal basis for processing your personal data for one or more specific purposes, which we will inform you about in advance with full transparency. EUROFRAGANCE informs you that only the information necessary to achieve the purpose of the processing is collected, and only the data you have provided for the purpose(s) about which you were informed will be processed.
• Data minimisation principle: We will only request data that is strictly necessary in relation to the purposes about which we have informed you.
• Storage limitation principle: Personal data will be retained for the period strictly necessary until the purpose for which it was collected has been fulfilled, and for as long as the legal basis that justified the processing of such personal data remains in effect. Once the legal basis that justified the processing has ended, the personal data will be duly blocked for the statute of limitations period applicable to any actions that may arise from the relationship between the parties and/or for the retention periods established by law
• Integrity principle: Your data will be processed in such a way as to ensure appropriate security of personal data and guarantee confidentiality. You should be aware that we take all necessary precautions to prevent unauthorized access to or improper use of the data by third parties.
• Confidentiality principle: EUROFRAGANCE, in its capacity as Data Controller, guarantees confidentiality in the processing of all the User’s personal data to which it has access. The Data Controller, as well as any other person involved in any stage of the processing, is subject to the strictest professional secrecy, with a particular commitment to adopting the necessary levels of protection and measures, both technical and organizational, to guarantee the security of personal data and prevent its alteration, misuse, loss, theft, processing or unauthorized access.
• Data accuracy principle: All information provided by the User to EUROFRAGANCE must be truthful, and the User will be solely responsible for any false or inaccurate statements made and for any loss or damage caused to EUROFRAGANCE or third parties.

EUROFRAGANCE reserves the right to exclude from its services any User who has provided false data, without prejudice to any other legal actions that may apply.

4. Processing of Personal Data

4.1. Collection and Processing of Personal Data

EUROFRAGANCE may collect personal data when the User uses the contact form, communicates through the enabled email addresses or other corporate channels, manages their cookie preferences or browses the Website.

The User must provide truthful, accurate, complete, and up-to-date data and must inform EUROFRAGANCE of any changes that may be necessary. Eurofragance may request the updating or correction of data where there are indications that such data are inaccurate or outdated.

When the User provides personal data relating to third parties, the User must have sufficient legal basis to disclose such data to Eurofragance and, where necessary, must have previously informed such people about the processing of their data. Eurofragance may request evidence of compliance with these obligations where reasonably necessary.

Personal data will be used exclusively for the purposes indicated in this Privacy Policy and in the information, notices provided at each point of collection.

4.2. Purposes of Processing

The purposes for which EUROFRAGANCE processes the User’s personal data are as follows:

4.3. Data Category

Considering the aforementioned purposes, EUROFRAGANCE collects and processes the following categories of User data:

1. Identification and contact data: Name, last name, DNI, telephone number, email address, postal address, and country.
2. Academic and professional data: Company and position, résumé company, position, professional email address and professional experience.
3. Data relating to the Internal Information System and management of rights: any information that the reporting person or data subject considers appropriate to communicate in order to manage their request.
4. In addition, certain information related to your browsing is collected through cookies. Its processing and purposes are explained in our Cookie Policy.

The personal data collected belong to the following category/categories of data subjects: clients, potential clients, website users, representatives of clients and suppliers, reporting persons and candidates.

In relation to the contact form and the Internal Information System provided on the Website, the User is allowed to briefly explain the reason for the inquiry or contact. Please note that EUROFRAGANCE will not respond to any personal inquiry, except those strictly provided for under applicable legislation. Under no circumstances may the User communicate special categories of data (for example: health data, religion, etc.) through the forms available on the Website. If the User does so, the User releases EUROFRAGANCE from any liability. If inappropriate inquiries or content are submitted, EUROFRAGANCE will delete them.

5. Processing of Data by Third Parties and Disclosure

Depending on the purposes for which personal data are collected, your personal data may be processed by:

• Public Administrations, authorities, regulatory bodies, Courts and Tribunals, where disclosure is required by applicable regulations or is necessary to respond to a legitimate request.
• Other recipients expressly disclosed to the User, where disclosure is necessary to manage their inquiry or request, and there is a legal basis that permits it.

In addition, certain service providers may access personal data on behalf of Eurofragance in order to provide technology, web hosting, maintenance, IT support, form and email management, analytics, cookie consent management or security services.

These providers will act as data processors, following EUROFRAGANCE instructions and in accordance with the corresponding data processing agreement. They may only access the data necessary to provide the contracted service and may not use such data for their own purposes.

Where a provider acts for its own purposes and independently determines the means and purposes of the processing, it will be considered a Data Controller and must inform the User in accordance with applicable regulations.

6. Security Measures

EUROFRAGANCE applies appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of or access to such data.

These measures are determined and reviewed taking into account the nature, scope, context, and purposes of each processing activity, as well as the risks that may affect the rights and freedoms of data subjects.

Among other actions, Eurofragance applies measures aimed at controlling access to data, preserving the confidentiality, integrity and availability of information, managing potential security incidents and periodically verifying the effectiveness of the measures implemented.

Likewise, individuals and providers who access personal data on behalf of Eurofragance must process such data in accordance with its instructions and will be subject to the corresponding confidentiality and security obligations.

However, no information system can guarantee absolute security. Therefore, Eurofragance will review and update its measures when necessary to respond to technological or organizational changes or changes related to the risks of the processing.

7. International Data Transfers

EUROFRAGANCE will verify whether the technology providers used, the companies within its corporate group or other recipients of the data are located outside the European Economic Area (hereinafter, the “EEA”) or allow access to personal data from third countries.

Where an international data transfer is carried out, Eurofragance will ensure that it is covered by one of the mechanisms provided for in Articles 44 to 49 of the GDPR.

In particular, transfers may be carried out:

• To countries, territories or organizations in respect of which the European Commission has adopted an adequacy decision.
• Through appropriate safeguards, such as standard contractual clauses approved by the European Commission, together with any supplementary measures that may be necessary.
• Exceptionally, under one of the derogations provided for in Article 49 of the GDPR, provided that its requirements are met.

The User may request additional information regarding international transfers carried out and obtain a copy of or reference to the safeguards applied by submitting a request to the Data Protection Officer at arco@eurofragance.com, REF” Data Protection”.

EUROFRAGANCE does not carry out international transfers of personal data processed through the Website. If such transfers are carried out, appropriate safeguards will apply, such as adequacy decisions or standard contractual clauses.

8. Data Subjects Rights and How to Exercise Them

In accordance with the GDPR and the LOPDGDD, Users may exercise the following rights:

• Right of access: The User may ask EUROFRAGANCE whether it is processing their data and, if so, access such data.
• Right to rectification: The User may request the rectification of data if they are inaccurate or incomplete.
• Right to request erasure of their data: The User may request the deletion of their personal data where any of the circumstances established by applicable regulations apply, without prejudice to the possible retention of such data, duly blocked, where there is a legal obligation or potential liabilities may arise.
• Right to request restriction of processing: In this case, we will retain the data solely for the establishment, exercise or defense of legal claims.
• Right to object to processing: EUROFRAGANCE will stop processing personal data, except where the processing must continue for compelling legitimate grounds or for the establishment, exercise or defense of potential claims.
• Right to data portability: Where the User wishes for their data to be processed by another Data Controller, EUROFRAGANCE will facilitate the transfer of their data to the new Data Controller where both have the technical means necessary to do so.
• Right not to be subject to a decision based solely on automated processing of their personal data.
• Right to withdraw consent: Where the User has given consent for a specific purpose, the User may withdraw it whenever they wish, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to file a complaint with the Spanish Data Protection Agency: If the User believes that an infringement of data protection legislation has occurred in relation to the processing of their personal data (http://www.aepd.es/)

To exercise their rights, the data subject may submit a request to Eurofragance through any of the following channels:

• Email: arco@eurofragance.com
• Postal Address: C/ Camí de Can Camps, 17-19, Edificio Kibo, 08174 Sant Cugat del Vallès, Barcelona.
• Reference: “Data Protection”.

The request must indicate the right the data subject wishes to exercise and contain the information necessary to identify the applicant and process the request. Where there are reasonable doubts regarding the applicant’s identity, Eurofragance may request additional information strictly necessary to verify it.

The exercise of these rights will be free of charge, except where requests are manifestly unfounded or excessive, particularly because of their repetitive nature, under the terms established by applicable regulations.

EUROFRAGANCE will respond to the request within a maximum period of one month from receipt. This period may be extended by an additional two months where necessary, considering the complexity and number of requests, and the data subject will be informed of such extension and the reasons for it.

The data subject may also contact the Data Protection Officer at arco@eurofragance.com to submit inquiries relating to the processing of their personal data and the exercise of their rights.

The data subject may file a complaint with the Spanish Data Protection Agency (https://www.aepd.es/), if they consider it appropriate.

9. User Consent and Withdrawal

Where the processing of personal data is based on the User’s consent, Eurofragance will request such consent freely, specifically, on an informed basis and unambiguously, through a statement or clear affirmative action.

Mere browsing the Website, reading this Privacy Policy or, where applicable, checking a box intended to confirm that the User has been informed does not in itself constitute consent for additional purposes that require specific authorization.

The User may withdraw their consent at any time through the mechanism enabled for each processing activity or by submitting a request to arco@eurofragance.com. Withdrawal will not affect the lawfulness of processing carried out before such withdrawal.

Refusal to provide or withdrawal of consent will not affect processing activities that are based on another legal basis. However, it may prevent Eurofragance from carrying out the specific purpose that depends on such consent.

10. Links to Other Websites

This Website contains links to other websites not managed by EUROFRAGANCE. Accordingly, EUROFRAGANCE has no control over them or over the information to which they provide access.

We recommend that you visit these websites directly to obtain information regarding their privacy policies, which provide information on the protection of your data, security, data collection, and provisions relating to the transfer of data.

If you follow our social media accounts, please review their privacy policies for information on how they process and share your personal data. EUROFRAGANCE has no control over them and bears no responsibility for the information to which these websites provide access.

11. Changes to the Privacy Policy

EUROFRAGANCE may amend this Privacy Policy when necessary to adapt it to regulatory changes, criteria issued by supervisory authorities, changes in the processing activities carried out, new services or technical and organizational changes.

The updated version will apply from the time it is published on the Website. The date indicated at the beginning of the document will make it possible to identify the version in force at any given time.

Where changes materially affect the processing of personal data, Eurofragance will inform the data subjects through appropriate channels. If the amendment involves a new purpose incompatible with the purpose initially disclosed or requires a different legal basis, EUROFRAGANCE will adopt the necessary measures and, where appropriate, request consent again.

Users are advised to review this Privacy Policy periodically to stay informed about the current information regarding the processing of their data.

12. Applicable Law

The processing of personal data carried out by Eurofragance will be governed by Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation); Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights; and any other applicable European or Spanish regulations.

Regarding the use of cookies and other similar technologies and, where applicable, the sending of electronic commercial communications, Law 34/2002 of 11 July on Information Society Services and Electronic Commerce will also apply.

13. Cookies

The Website uses cookies and other similar technologies to enable its operation, remember certain preferences and, where authorized by the User, analyzes browsing and use of the Website.

Strictly necessary cookies may be used without consent where they are essential to provide the requested service or enable the technical operation of the Website. All other cookies will only be installed when the User has previously provided consent through the enabled banner or settings panel.

The User may accept, reject or configure cookies and subsequently modify or withdraw consent through permanent access to the preferences panel available on the Website.

Detailed information regarding the categories, purposes, providers, duration, international transfers and management mechanisms is available in the Cookie Policy.