Personal data collected through the Portal by ICEX will be treated secretly and confidentially.

The personal data collected will be subject to automated processing and incorporated into the corresponding registers of automated processing activities owned by and under the responsibility of ICEX.

ICEX will provide users with the appropriate technical resources so that, prior to providing personal data, they may access this notice on the Personal Data Protection Policy or any other relevant information, and may give their consent so that ICEX may proceed with the automated processing of users’ personal data. The User’s acceptance that his/her data may be processed is always revocable, without retroactive effect.

ICEX, as data controller, informs you that the purpose of the collection and automated processing of the personal data requested is the management, administration, provision, expansion and improvement of the services offered by ICEX on the Portal from time to time, all based on the contractual relationship with ICEX or your consent. Also, based on legitimate interest, its purpose is the quantitative and qualitative study of visits and use of services by Users, the design of new services related to ICEX’s own services and their updates, and the sending by traditional and electronic means of technical and operational information, information related to the specific parameters selected by the User in the Subscription Form, survey forms or commercial or advertising information about products and services offered by ICEX or third party collaborators.

The User is not obliged to receive the aforementioned advertising or survey forms, indicating this through the channels provided for this purpose by ICEX in the Subscription Form for the services offered, by means of written communication or directly through the procedure provided for in each of the commercial communications.

ICEX, as a consequence of the existence of a prior contractual relationship and based on legitimate interest, may send commercial communications regarding its own products or services similar to those initially contracted with the User, without the User’s express authorization or request. However, the User, in any case, will have the means provided above to show his opposition to the reception of this type of commercial communications.

Under no circumstances will ICEX use Users’ personal data for purposes other than those mentioned above.

The User declares that all the information provided by him/her is true and correct, and undertakes to inform ICEX of any changes that may occur in such information. The User has the right to object to the processing of any of his/her data that are not essential for the conclusion of the contract and to their use for any purpose other than the maintenance of the contractual relationship.

The User also guarantees that he/she is over 14 years of age and has sufficient legal capacity to contract the services offered by ICEX, in accordance with the applicable regulations.

In the event that the User provides personal data of third parties, ICEX cannot be held responsible for compliance with the principles of information and consent, and therefore the User must guarantee to ICEX that he/she has previously informed and obtained the express consent of the owner of such data to communicate their data to ICEX. To do so, you must inform them of this privacy policy and obtain their express consent for ICEX to process their data. The User shall be liable to ICEX and shall hold ICEX harmless for any breach that may be incurred as a result thereof.

The transfer of Users’ personal data to third parties will not be made without the prior consent of the Users. In such cases, ICEX shall expressly inform the User of the transfer of his or her personal data to third parties, indicating the identity of the transferees and the purpose of the transfer of the personal data.

Notwithstanding the above, the User consents to the use of his/her personal data when so required by the Public Administrations, Tax Agency, Courts and competent administrative authorities or by court order; as well as, in general, to natural or legal persons to whom it is necessary to communicate the aforementioned data for the correct and better attention of the client or by legal obligation.

The User’s acceptance that his/her data may be transferred is always revocable, without retroactive effect.

Your data will be kept for the minimum time necessary for the proper provision of the service offered as well as to meet the responsibilities that may arise from it and any other legal requirement.

In the case of use of your data to receive commercial communications from ICEX, your data will be kept until you express your desire to stop receiving such communications, either by the means offered in the communication itself or through one of the forms listed in the following point.

Users have recognized, and may exercise their rights of access, rectification, deletion, opposition, limitation and portability of their data by sending a letter or email, attaching a copy of your ID card or other equivalent identification document, to the following address:

Paseo de la Castellana 278

28046 Madrid

delegadoprotecciondedatos@icex.es

Models, forms and more information about your rights are available on the website of the national supervisory authority, Agencia Española de Protección de Datos (Spanish Data Protection Agency) www.aepd.es.

ICEX has adopted the legally required levels of security for the protection of personal data, and has installed all the technical means and measures within its power to prevent the loss, misuse, alteration, unauthorized access and theft of the personal data provided in accordance with the state of the art in accordance with current legislation. Nevertheless, the User should be aware that Internet security measures are not impregnable.

It is important that, in order for us to keep your personal data up to date, you inform us whenever there is a change in your personal data.

The ICEX Data Protection Officer(DPO) will be the guarantor within ICEX of compliance with data protection regulations.

You may contact the ICEX Data Protection Officer at the following address: delegadoprotecciondatos@icex.es or at the postal address in Spain, Madrid, Paseo de la Castellana, núm. 278 (att. Delegado de Protección de Datos).

Users have the right to revoke their consent to receive commercial communications at any time by notifying ICEX that they no longer wish to receive such communications. To do so, the User may either revoke their consent in the manner described in the previous section on the rights of users in relation to their personal data or click on the link included in each commercial communication, thereby canceling the sending of electronic commercial communications.