Privacy Policy, Cookies, and Legal Notice

Last modified: 17/09/2020

Version 2.0

Thank you for visiting this website.

Please read carefully the Terms and Conditions contained in this document, since the use of this website
implies your express and full acceptance of them, in the version published at the time you access it.
We recommend that you carefully read this document every time you access the website to check whether
there have been any changes to the conditions of use, and leave the site if you do not agree with such changes.
If we believe that certain modifications are important, we will update the “Last updated” date at the top of this page.
You are responsible for reviewing and familiarising yourself with any changes made.

1. IDENTIFICATION

In compliance with the duty of information set out in Article 10 of Law 34/2002, of 11 July, on Information
Society Services and Electronic Commerce, and Regulation (EU) 2016/679 on the protection and processing of
personal data, we inform you that the information obtained as a result of your submission of personal data
will be processed by the following Data Controller:

Data Controller: MARIA JOSE BRUQUE REYES (hereinafter TilanoTV)

Trade name: TilanoTV

Tax ID (CIF): 34033568P

2. COMMUNICATION

To contact us, we provide you with the following means of communication:

Email: mjbruque@tilanotv.es

Registered address: Prof. Esteban Palacios, 41500 Alcalá de Guadaíra (Alcalá de Guadaira)

Website: www.tilanotv.es

All notifications and communications indicated in this section will be considered effective, for all purposes,
when they are made through any of the means detailed above.

3. BROWSING

Our website has reasonable technical resources to provide secure browsing and protect all collected information.
However, you should bear in mind that, although we apply and implement measures to protect your information,
no website, Internet transmission, computer system or wireless connection is absolutely secure.
TilanoTV shall not be held responsible in cases of interruption of service, malfunction or any
inconvenience that may occur due to causes beyond our control. Likewise, we exclude any liability for damages
or losses arising from the presence of viruses or any kind of incident caused or introduced into the computer
system via hackers or third parties who unlawfully access the integrity of our website.

Links to other websites: For your convenience, this website contains links to other pages that
may have different privacy policies. We recommend that you review their respective data protection clauses.
Under no circumstances will personal data be exchanged with any external site. We are not responsible for the content
nor for any other aspect related to websites belonging to, or managed by, third parties. Likewise, we inform you that
we cannot exercise any control over their maintenance and content, therefore we cannot guarantee that the hyperlinks,
pointers or other linking functions on such sites are correct at the time of access or that they are free of viruses
or other harmful elements that could cause damage or alterations to your computer equipment.

SSL Certificate: This website includes an SSL certificate. This is a security protocol that ensures
your data travels in an integral and secure manner, meaning that the transmission of data between the server and the
web user, and vice versa, is fully encrypted.

With regard to confidentiality in processing, MARIA JOSE BRUQUE REYES will ensure that any person
authorised by TilanoTV to process customer data (including staff, collaborators and service providers)
is under an appropriate duty of confidentiality (whether of a contractual or legal nature).

When any security incident occurs, once TilanoTV becomes aware of it, it must notify the Client
without undue delay and provide timely information related to the Security Incident as it becomes known or whenever
the Client reasonably requests it.

4. INTELLECTUAL PROPERTY

All of this website (product descriptions, text, images, trademarks, logos, buttons, files, colours, as well as the
structure, selection, arrangement and presentation of its contents) is the property of TilanoTV or of
third parties who have licensed or authorised us to use it. All logos, trademarks and designs appearing on this website
are part of intellectual property rights registered by us, and any form of exploitation is prohibited; this includes
reproduction, distribution, public communication and transformation without express authorisation.

The user undertakes to use the contents diligently, correctly and lawfully and, in particular, agrees to refrain from
removing or manipulating the copyright notice and any other identification data of the rights of
TilanoTV or of their owners included in the contents, as well as technical protection devices or any
information mechanisms that may be included in the contents.

Likewise, the user shall refrain from using the contents and, in particular, any kind of information obtained through
the site to send advertising, communications for commercial purposes, unsolicited messages addressed to multiple people
regardless of their purpose, and shall refrain from marketing or disclosing such information in any way.

Furthermore, TilanoTV may, where it deems appropriate and without prejudice to the sole and exclusive
responsibility of the users, establish the necessary filters to prevent content or opinions considered racist, xenophobic,
discriminatory, pornographic, defamatory or that in any way promote violence or the dissemination of clearly unlawful
or harmful content from being posted on the web through its pages. tilanotv.es is a domain registered by
TilanoTV and may not be used without prior express authorisation.

5. PRIVACY AND PROTECTION OF PERSONAL DATA

We understand that the privacy and security of your personal information is extremely important. Therefore, this policy
sets out what we do with your information and what we do to keep it secure. It also explains where and how we collect
your personal information, as well as your rights regarding any personal information we hold about you.

What is the new Data Protection Regulation?

It is a new European regulation. This Regulation harmonises confidentiality and personal data processing criteria at EU
level and adapts their management to new digital environments, such as the internet and mobile applications. In this way,
you have greater control over your data.

When does the new regulation apply?
The European Union approved the Regulation in 2016. Member States must apply it from 25 May 2018.

What changes will this mean for you?

The European regulation adds new rights to those contained in the current Spanish regulations. For this reason, we must
update the information made available to you about the data protection measures adopted by our company. We will also
request your authorisation to process your data in certain new cases. This way, we will be able to offer you a service
that is more closely adapted to your needs.

What measures have we taken to ensure the confidentiality, integrity and security of your data?

• We only request the minimum amount of information necessary, collecting only what we believe is essential to conduct business or for the specific transaction concerned.
• We have established a series of confidentiality agreements with all our suppliers, staff and collaborators.
• We work with specialised consultancy that will not only assist us on an ongoing basis in this area but will also carry out periodic checks to ensure correct compliance with this regulation.
• We have implemented a series of IT security measures to protect us from possible external attacks.
• We have reviewed all our documentation so that it is in line with the provisions of the new regulation.
• We have assessed the impact that our procedures may have on the protection of your personal data.
• We have trained our staff so that we can all act diligently and ethically, in compliance with all the requirements set out in the new regulation.

Principles we apply to your personal information

When processing your personal data, we apply the following principles, which comply with the requirements of the new
European Data Protection Regulation:

• Principle of lawfulness, fairness and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes, which we will inform you about in advance with absolute transparency.
• Principle of data minimisation: We will only request data that is strictly necessary in relation to the purposes for which we require it. The minimum possible.
• Principle of storage limitation: Data will be kept for no longer than necessary for the purposes of the processing. Depending on the purpose, we will inform you of the corresponding storage period. In the case of subscriptions, we will periodically review our lists and delete any records that have been inactive for a considerable period of time.
• Principle of integrity and confidentiality: Your data will be processed in such a way as to ensure appropriate security of personal data and guarantee confidentiality. You should know that we take all necessary precautions to prevent unauthorised access to, or misuse of, our users’ data by third parties.

6. LEGAL BASES FOR THE COLLECTION AND USE OF INFORMATION

If you are an individual in the European Economic Area (EEA), our legal basis for collecting and using information depends
on the personal data concerned and the specific context in which we collect it. Most of our information collection and
processing activities are generally based on:

• a contractual necessity;
• one or more legitimate interests of TilanoTV or a third party that are not overridden by your data protection interests; or
• your consent.

Sometimes we will have a legal obligation to collect your information, or we will need your personal information to
protect your vital interests or those of another person.

7. PROCESSING

Below we explain how we collect, use, disclose, transfer and store your information. This Privacy Policy applies to
personal information collected through our website. It is important that you check this Privacy Policy frequently in
case it has been updated.

All users who access our website may view all of its content without the need to provide any personal information. Your
personal data will only be collected when you voluntarily fill in our form(s). In this case, the user guarantees the
authenticity, accuracy and truthfulness of the information provided, undertaking to keep the personal data updated so
that it always reflects their real situation. The user is solely responsible for any false or inaccurate statements and
for any damages that these may cause. By this means of communication, you expressly agree to receive communications
periodically from the entity only. The personal data that we receive from users through the website will be kept in strict
confidence, guaranteeing their confidentiality, and we will adopt the necessary technical measures to prevent any
alteration, loss, misuse or unauthorised access to such data.

We also inform you that all data provided through electronic forms and/or by email are strictly necessary for the correct
identification of the sender. This information will be treated with strict confidentiality and with the sole purpose of
managing requests for information, the contracting of our services and products, and other purposes specified below. You
are informed and expressly give your full consent for your data to be used for activities related to the corporate purpose
of the entity.

The consent given, both for the processing and for the transfer of the data of the data subjects, is revocable at any time
by notifying us at the email address mjbruque@tilanotv.es, under the terms
established in this Policy for the exercise of rights. Such revocation shall in no case have retroactive effects.

How we use your data

We may use your personal data in the following ways: the information you provide may help us make decisions, respond to
requests, improve services, detect new needs, generate promotions, understand your expectations and provide you with a
better service. We may also use your data for the following purposes:

Specific reason: If you provide your personal data for a specific purpose, we will use it in connection with the purpose for which it was provided. For example, if you contact us by email, we will use the personal data you provide to respond to your query or resolve the problem, and we will reply to the email address from which the message was sent.

Internal purposes: We may use your personal data for internal purposes such as, for example, to rely on it to improve the content and functionality of the services, better understand the needs of our customers, improve the services, protect, identify or address fraudulent activities, enforce our terms of service, manage your account and provide you with customer service and, in general, manage the services and our business activity, among other things.

Commercial communications: Whenever we have your express consent (which will be obtained through a specific checkbox in our forms), we may use your personal data to contact you in the future to carry out commercial actions that may be of interest to you, always related to the products and/or services offered by the company. In any case, you will always have the option to “unsubscribe” from these electronic messages at the bottom of such messages or by notifying us by sending an email to the following address: mjbruque@tilanotv.es. However, you may still receive notices and email messages whenever they are necessary and essential for the maintenance of our contractual transactions. In accordance with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE), TilanoTV does not engage in SPAM practices and is committed to not sending commercial communications without properly identifying them.

Below we explain in more detail which types of data are collected and processed and for what purposes:

Visiting user
Usability and quality analysis to improve our services.

User who contacts us
Responding to the user’s requests; answering any doubts, complaints, comments or concerns they may have regarding the
information included on the website, the services provided through the website, the processing of personal data, issues
related to the legal texts included on the website, as well as any other queries they may have that are not subject to
the contracting conditions.

Registered user
Processing and registering users on our website to allow them to access and self-manage their user account.

E-commerce customer
Processing, managing, sending, invoicing and charging for the sale of products or services purchased by the customer;
managing commercial communications through the distribution list on a regular basis about news, publications, offers,
promotions, events and other information.

Mailing list user
Management of the subscription list, sending newsletters, promotions and special offers, provided by the user when
subscribing. There are various forms on the website to activate the subscription.

Student user
Receipt and management of enrolments and registrations for courses, seminars and all types of training activities.

Legal bases linked to the above purposes

Visiting user
Consent given by accepting cookies or by continuing to browse our website.

User who contacts us
Our legitimate interest in dealing with queries and requests from the data subject, justified by the interest shown in
contacting us and receiving information, with minimal intrusion into their privacy and the use of limited data provided
by the user himself/herself.

Registered user
Consent requested when the user registers on our website. The data subject may withdraw consent at any time. Under no
circumstances will the withdrawal of consent affect the provision of other services. If the necessary data is not
provided, it will not be possible to process the user registration.

E-commerce customer
Performance of a sales contract according to the terms and conditions included in our general terms and conditions of
sale on our website. If the necessary data is not provided, it will not be possible to complete the transaction; consent
requested when the user subscribes to the mailing list. The data subject may withdraw consent at any time. Under no
circumstances will the withdrawal of consent affect the provision of other services.

Mailing list user
Consent requested when the user subscribes to the mailing list. The data subject may withdraw consent at any time. Under
no circumstances will the withdrawal of consent affect the provision of other services.

Student user
Completion of enrolment for a specific training activity. If the necessary data is not provided, it will not be possible
to complete the enrolment.

Data provided voluntarily by the data subject

Visiting user
IP address, browsing data.

User who contacts us
Data provided by the data subject (normally: name, email, telephone, address, ID number, postcode, province, country).

Registered user
Name, surname, address, date of birth, email address, telephone number.

E-commerce customer
Name, surname, Tax ID (NIF/CIF), shipping address, billing address, email, telephone number, type and number of bank card,
order details.

Mailing list user
Name, email, telephone, address, ID number, postcode, province, country.

Student user
Name, surname, Tax ID (NIF/CIF), shipping address, email, telephone, bank account number.

Possible consequences of not providing such data

Visiting user
No consequences.

User who contacts us
If the user who contacts us does not provide their data, we will not be able to respond properly to their query or queries.

Registered user
If a user who registers does not provide their data, we will not be able to complete the creation of their account in our system.

E-commerce customer
If an e-commerce customer does not provide their data, we will not be able to complete their purchase or comply with our tax obligations.

Mailing list user
If the user does not voluntarily register in our mailing list, we will not be able to send them the requested information.

Student user
If someone interested in our courses does not provide their data, we will not be able to complete their enrolment or register them in our courses.

Possible disclosure of data to third parties

Visiting user
No data is collected from the visiting user.

User who contacts us
We will not disclose personal data relating to this type of user to third parties without their consent.

Registered user
We will not disclose personal data relating to this type of user to third parties without their consent.

E-commerce customer
We will not disclose personal data relating to this type of user to third parties without their consent, except where there
is a legal obligation or it is requested by a competent authority.

Mailing list user
We will not disclose personal data relating to this type of user to third parties without their consent.

Student user
We will not disclose personal data relating to this type of user to third parties without their consent, except where there
is a legal obligation or it is requested by a competent authority.

International transfers

Visiting user
No data is collected from the visiting user.

User who contacts us
No transfer of personal data to a third country or international organisation is carried out.

Registered user
No transfer of personal data to a third country or international organisation is carried out.

E-commerce customer
No transfer of personal data to a third country or international organisation is carried out.

Mailing list user
No transfer of personal data to a third country or international organisation is carried out.

Student user
No transfer of personal data to a third country or international organisation is carried out.

Retention periods

Visiting user
No data is stored from the visiting user.

User who contacts us
Data will be kept for as long as necessary to fulfil the purpose for which it was collected.

Registered user
Data will be kept for as long as necessary to fulfil the purpose for which it was collected.

E-commerce customer
Data will be kept for the duration of the relationship you have with us and, in any case, for the periods provided for in
the applicable legal provisions, for example in accounting and tax matters, and for as long as necessary to deal with
possible liabilities arising from the processing. We will cancel your data when it is no longer necessary or relevant for
the purposes for which it was collected.

Mailing list user
Data will be kept until the user requests its deletion.

Student user
Data will be kept for the duration of the relationship you have with us and, in any case, for the periods provided for in
the applicable legal provisions, for example in accounting and tax matters, and for as long as necessary to deal with
possible liabilities arising from the processing. We will cancel your data when it is no longer necessary or relevant for
the purposes for which it was collected.

8. OTHER ASPECTS RELATED TO DATA DISCLOSURE

As a general rule, the data you provide will not be disclosed to third parties without your consent, except where there is
a legal obligation, for example: in the case of a court summons or a request from a government body, or if we believe in
good faith that such action is necessary to: (a) comply with a legal obligation; (b) protect or defend our rights,
interests or property, or those of a third party; (c) prevent or investigate possible wrongdoing in relation to the
Services; (d) act in urgent circumstances to protect your personal safety; or (e) protect against legal liability.

9. STORAGE

We may store your data or transfer it to a third party who will store it in accordance with this Privacy Policy.
We take measures that we consider reasonable to protect personal data against loss, misuse, unauthorised use,
unauthorised access, accidental disclosure, alteration and destruction. However, no networks, servers, databases,
internet or email transmissions are completely secure or error-free. In the event that there is a security breach
involving the data in our custody, we will take all necessary steps to mitigate its consequences and will notify the
Supervisory Authority, together with all relevant information for documenting and communicating the incident.

10. CONSENT

The consent of the data subject, according to the provisions of data protection regulations, is a free communication by
which the data subject accepts the processing of their data for a specific purpose, under certain conditions, of which they
must be informed in advance.

Can you modify your consents whenever you wish?

Of course you can. The information about the processing operations that you have consented to will always be accessible.
You may modify it at any time through our email. Likewise, you may unsubscribe from our database at any time by sending us
an email at: mjbruque@tilanotv.es

11. DATA PROTECTION RIGHTS

Users may send a written communication to the registered address of TilanoTV or to the email address
indicated at the beginning of this Legal Notice, in both cases including a photocopy of their ID card or other similar
identification document, to request the exercise of the following rights:

• Right of access to personal data: You may ask us whether we are processing your data.
• Right of rectification (if it is incorrect) or erasure (when the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed).
• Right to request restriction or cancellation of processing, in which case we will only keep it for the exercise or defence of claims.
• Right to object to processing: We will stop processing the data in the way you indicate, unless there are compelling legitimate grounds for the processing or for the exercise or defence of possible claims.
• Right to data portability: If you want your data to be processed by another company, we will provide you with the portability of your data to any other company you indicate, in a structured, intelligible and machine-readable format.

These rights are strictly personal and will be exercised by the data subject, with only the limitations provided for in the
applicable legislation. However, the legal representative of the data subject may act on their behalf when the data subject
is in a situation of incapacity or minority that prevents them from exercising their rights personally. The exercise of
your rights will be implemented by the Data Controller within thirty days from receipt of the request. If the Data
Controller considers that it is not appropriate to accede to the request, they will communicate this decision with reasons
within the period indicated in this section.

In cases where, although cancellation of the data is appropriate, it is not possible to physically delete it, due either to
technical reasons or due to the nature of the storage medium used, we will proceed to block the data in order to prevent its
use, until it can be completely deleted from the information systems.

12. SOCIAL MEDIA

Social networks are part of the daily life of many internet users, and for this reason we have created various profiles of
our company on them.

TilanoTV informs you that through its social networks it will publish events, competitions, activities,
programmes or any other type of advertising information about the activities it carries out, and the user accepts being
the recipient of such information simply by becoming our “friend” or “follower” on the corresponding social network.

All users can join the pages or groups that we have on different social networks and, to stop receiving this information
in their social media profiles, they must stop following TilanoTV on them.

However, you should bear in mind that to sign up for a social network, the user must accept the contractual relationship
in the environment of the corresponding social network and agree to its Privacy Policies. We therefore recommend that you
carefully read their terms of use and privacy policies and ensure that you configure your preferences regarding data
processing.

13. COLLECTION OF DATA FROM MINORS

Persons over the age of 14 may register on https://www.tilanotv.es
as users without the prior consent of their parents or guardians.

For minors under 14 years of age, the consent of parents or guardians is required for the processing of their personal data.

Under no circumstances will data be collected from minors regarding the professional, financial or privacy situation of
other family members without their consent.

If you are under 14 and have accessed this website without informing your parents, you must not register as a user.

14. PROCESSING OF SPECIAL CATEGORIES OF PERSONAL DATA AND DATA RELATING TO CRIMINAL CONVICTIONS AND OFFENCES

When filling in free-text fields, it is not permitted to enter personal information relating to data that reveals racial
or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as the processing
of genetic data, biometric data intended to uniquely identify a natural person, data concerning health or data concerning
a natural person’s sex life or sexual orientation, nor personal data relating to criminal convictions and offences.

If any information relating to the above aspects is provided in any of our forms or via email, it will be immediately
deleted from our information systems and we will not be able to respond to the query, since such data is neither necessary
nor relevant for the purposes determined for the processing activities of this website.

15. IMAGES PRESENT ON THE WEBSITE

Through the website, TilanoTV provides information about numerous events, activities, etc., which involve
the participation of members of the public. In some cases, the information provided is accompanied by photographs or videos
in which images of identified or identifiable persons may appear which, as part of reporting a news item or event, are not
intentionally disseminated.

If a user recognises themself in any of these photographs and does not wish to appear in them, we kindly ask them to inform
us via the email address mjbruque@tilanotv.es, attaching a copy of an identity
document and referencing the section of the website where the image or video in which they appear is located. In the case
of minors under 16 years of age, the request must be made by the father, mother or legal guardian.

16. COMPLAINTS BEFORE THE SUPERVISORY AUTHORITY

If you believe that there is a problem with the way we are handling your data, you may submit a complaint to the relevant
Data Protection Authority. In Spain, this is the Spanish Data Protection Agency (Agencia Española de Protección de Datos)
(www.agpd.es).

TilanoTV has adapted this website to the requirements of Regulation (EU) 2016/679 of the European Parliament
and of the Council of 27 April 2016 on the protection of natural persons (GDPR), Organic Law 3/2018, of 5 December, on
Personal Data Protection and the guarantee of digital rights (LOPDGDD), as well as Law 34/2002, of 11 July, on Information
Society Services and Electronic Commerce (LSSICE or LSSI).

© All rights reserved: MARÍA JOSÉ BRUQUE REYES (TilanoTV)