Through this Privacy Policy, Estripagecs Mountain Events informs you about the personal data we collect through the services offered on our website, how we process them, and the rights you have regarding your personal data and our processing as granted by the applicable Personal Data Protection regulations.

Applicable Regulations

Specifically, the following apply to us:

1. Law 29/2021, of October 28, classified as Personal Data Protection (hereinafter, “the LQPD”) and its implementing regulations, and
2. Regulation (EU) 679/2016 of the European Parliament and the Council, of April 27, 2016, on the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter, “the GDPR”).

Furthermore, in compliance with what is established in the LQPD concerning files, we inform you that any personal data you provide will be part of our files duly registered with the Andorran Data Protection Agency (APDA).

We have structured the information into the following sections to facilitate your access to the points of interest. However, we recommend that you read this Privacy Policy in its entirety:

1. Who does this Privacy Policy apply to?
2. How do we obtain your personal data?
3. What do we use your personal data for, and on what legal basis?
4. Who is responsible for what we do with your personal data?
5. Who can we share your personal data with?
6. How long do we retain your personal data?
7. What rights do you have?
8. What responsibilities do you have?
9. How do we protect your personal data?
10. Changes to this Privacy Policy

---

6. How long do we retain your personal data?

Estripagecs Mountain Events retains your personal data exclusively for the duration of the processing that requires them, and subsequently, to comply with the legal obligations applicable at any given time (including the obligation to demonstrate that we have attended to a request to destroy all your personal data).

When we no longer have a legitimate need to retain any of your personal data, we will delete or anonymize them, and if this is not possible (e.g., because they are stored in backup files), we will securely store and isolate them from any further processing until deletion is possible.

Specifically, the data we collect through cookies is deleted after 3 months, and the data collected for the other purposes mentioned in this policy is not deleted unless you request it.

7. What rights do you have?

You have the right to obtain confirmation on whether Estripagecs Mountain Events has collected any of your personal data.

Below, we explain the other rights you have and how to exercise them.

Rights associated with Andorran regulations. If you are physically located in the Principality of Andorra or outside the European Union when you consult or use our website's services, the LQPD grants you the following rights:

• • Access your personal data.
  • Rectification of any of your personal data.
  • Deletion of some or all of your personal data.
  • Objection to any of our processing activities.

Rights associated with European Union regulations. If, on the contrary, you are in the European Union when you consult or use our website's services, in addition to being protected by the LQPD, you are also protected by the GDPR, which additionally grants you the following rights (in some cases, the only differences from those already granted by Andorran law are the response times and the Supervisory Authority to which you may submit a claim if you believe that your rights have not been fully satisfied):

• • Access your personal data.
  • Rectification of any of your personal data, specifying the reason.
  • Deletion of some or all your personal data.
  • Restriction of the processing of your data, specifying the reason for the limitation.
  • Objection to the processing of your personal data.
  • Portability of your data when the legitimacy basis for its collection has been your consent or a contract.
  • Right not to be subject to automated individual decisions.

Where and how can you exercise your rights? To enable you to exercise your rights, Estripagecs Mountain Events provides the following means:

1. 1. By sending Estripagecs Mountain Events a written request addressed to Estripagecs Mountain Events, at our postal address indicated in section 4 of this policy, indicating a means of contact with you to respond to your request or ask for further information. We kindly request that you write “Exercise of Personal Data Protection Rights” on the envelope.
   2. By sending the corresponding form (provided below) to Estripagecs Mountain Events via email to admin@estripagecs.com, indicating in the subject “Exercise of Personal Data Protection Rights.”

In both cases, if we cannot verify that you are who you claim to be, we will ask you to kindly send us a copy of your passport or official national identity document to ensure we only respond to the data subject or their legal representative, who must provide proof of representation in this case.

Furthermore, and especially if you believe that your rights have not been fully satisfied, we inform you that you may submit a complaint to your country's national supervisory authority or the Andorran Data Protection Agency (APDA).

8. What responsibilities do you have?

By providing us with your data, you guarantee that the data provided is accurate and complete. Likewise, you confirm that you are responsible for the accuracy of the personal data you have communicated to us and that you will keep it updated as necessary to reflect your actual situation, being liable for any false or inaccurate personal data you may provide, as well as for any direct or indirect damage or harm that may result from its inaccuracy.

You may not provide us with personal data of others unless justified in relation to the services you request from us. In any case, if you provide us with personal data of third parties, you assume responsibility for informing these third parties, prior to providing us with their personal data, about all the provisions set out in this privacy policy and are responsible for the legality of this data and for transmitting the rights these third parties have over their personal data.

In cases where you need to provide us with the personal data of a minor under the age of 16 or a person with limited rights, you are obligated to have the authorization of their legal guardians or representatives. Without this authorization, it is prohibited to provide any personal data of such persons.

9. How do we protect your personal data?

We are fully committed to protecting your privacy and personal data. We have compiled a record of all personal data processing activities carried out by Estripagecs Mountain Events and assessed the risk each of these activities may pose to you. We have implemented the appropriate legal, technical, and organizational safeguards to avoid, as far as possible (since zero risk does not exist), the alteration of your personal data, its misuse, loss, theft, unauthorized access, or processing. We keep the privacy and cookie policies of this website up to date to ensure that we provide you with all the information we have on processing your personal data. We have signed data protection clauses and data processing contracts with all our service providers, according to the necessity each has to process personal data. We restrict access to personal data to those employees who genuinely need to know it to perform any of the processes mentioned in this policy and have trained and raised awareness among them about the importance of confidentiality, privacy, and security of your information, as well as the disciplinary measures that any eventual breach in this area would imply.

10. Changes to this Privacy Policy

We will update this policy as necessary to reflect any changes that occur, for example, when Law 29/2021, of October 28, classified as Personal Data Protection, comes into effect. If there are substantial changes to this policy or how Estripagecs Mountain Events plans to use your personal data, we will notify you before they take effect by sending you a notification or publishing a prominent notice on this website. You will have the option to exercise your rights as we have informed you in an earlier section. In any case, we recommend that you periodically review this privacy policy to know how we protect your personal data.

If you have any questions about this policy, do not hesitate to communicate with us by sending an email to admin@estripagecs.com

Last updated: December 29, 2024