I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, Kaito Charter (hereinafter, also the Website) is committed to adopting the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected.

Laws incorporated into this privacy policy:

This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it complies with the following regulations:

* Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

* Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

* Royal Decree 1720/2007, of December 21, which approves the Implementing Regulation of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).

* Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller:

The data controller for the personal data collected by Kaito Charter is: Ignacio Arrivi Ortiz, with Tax Identification Number (NIF): 50106394-C (hereinafter, the Data Controller). Their contact details are as follows:

Address: Ctra Denia a Javea, 42

Contact telephone: 689535007

Contact email: info@kaitocharter.com

Personal Data Registration:

In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by Kaito Charter through the forms on its website will be incorporated into and processed in our file in order to facilitate, expedite, and fulfill the commitments established between Kaito Charter and the User, or to maintain the relationship established through the forms completed by the User, or to respond to a request or inquiry from the User. Furthermore, in accordance with the provisions of the GDPR and the LOPD-GDD, unless the exception provided for in Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying, according to their purposes, the processing activities carried out and the other circumstances established in the GDPR.

Principles applicable to the processing of personal data:

The processing of the User’s personal data will be subject to the following principles set out in Article 5 of the GDPR and in Article 4 et seq. of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights:

* Principle of lawfulness, fairness and transparency: the User’s consent will be required at all times, after being fully and transparently informed of the purposes for which the personal data are collected.

* Principle of purpose limitation: personal data will be collected for specified, explicit and legitimate purposes.

* Principle of data minimization: the personal data collected will be only that which is strictly necessary in relation to the purposes for which it is processed.

* Principle of accuracy: personal data must be accurate and kept up to date.

* Principle of storage limitation: personal data will only be kept in a form that permits identification of the User for no longer than is necessary for the purposes for which the personal data are processed.

* Principle of integrity and confidentiality: personal data will be processed in a manner that ensures appropriate security and confidentiality.

* Principle of accountability: the Data Controller will be responsible for ensuring compliance with the above principles.

Categories of personal data:

The categories of data processed by Kaito Charter are solely identification data. Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR.

Legal basis for processing personal data:

The legal basis for processing personal data is consent. Kaito Charter is committed to obtaining the User’s explicit and verifiable consent for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, withdrawing consent will not affect the use of the Website.

When the User is required or able to provide their data through forms to make inquiries, request information, or for reasons related to the Website’s content, they will be informed if completing any of the forms involves providing personal data.