PRIVACY POLICY

Confidentiality and security are fundamental values of DISTRIBUIDORES
AUTOMÁTICOS VENDING, S.L. (DAV, S.L.) and therefore we are always committed
to ensuring the privacy of personal data of our customers and not to
collect unnecessary information.

Next, we provide you with all the necessary information about our Privacy
Policy in relation to the personal data we collect, explaining:

• Who is the controller of the processing of your personal data.

• For what purposes we ask for the information we ask for.

• What is the lawfulness of processing.

• How long we keep them.

• To which recipients their information is communicated.

• What are your rights?

Who is the controller of the processing of your personal data?

Business name:
DISTRIBUIDORES AUTOMÁTICOS VENDING, S.L. (DAV, S.L.)

VAT Number:
B08378911

Address:
Avda. de la Riera 1, 08960 Sant Just Desvern (Barcelona), Spain

Contact:
dpo@ivsiberica.com

We also inform you that personal data can be shared with IVS ITALIA S.P.A.
as the parent company of the group, and other subsidiary companies of
DAV, S.L.

Who are the data subjects?

The personal data processed are those of:

• Supplied directly by the User: they are all the Personal Data entered on the Site (including those entered on the Site and/or provided to telephone operators for surfing, requesting information, registering as User/Customer), or to communicate with you during organisational events or events in which IVS Italia Spa is a participant, or however provided to the owner of the site using any direct method by the User (for example, filling out forms or correspondence).

• Contact persons of our customers and suppliers

• Contact persons who have provided us with your information to obtain
information about our products and services and maintain a business
relationship.

• People who contact us to make inquiries or report incidents in the use of
the products and services of DAV, S.L.

• People who request an appointment with an adviser through the contact
form available in our website

For what purposes and lawfulness do we process personal data?

In DAV, S.L. We treat your personal data in order to execute the contract
or provide the service you have contracted with us.

The personal data processed will be those that:

• The data owners have provided them through the available forms

• They have been generated as a result of the provision of the services of
DAV, S.L. or the development of the commercial and administrative
relationship with our clients.

• DAV, S.L. has obtained by different means as described throughout this
Privacy Policy.

These personal data will be processed for the legitimate purposes indicated
below

• Formalization and performance of the contract of services.

The processing of the personal data of the contact persons of our clients
is necessary for the conclusion of the contract between the DAV, S.L. and
our clients, as well as for the performance of the contractual relationship.

Thus, DAV, S.L. will process the Personal Data of the contact persons of
our clients, among others, to manage the commercial, administrative and
logistic relationship with them. In the scope of the management of the
quality of our services, DAV, S.L. You can also handle your data to perform
statistical studies, quality or technical analysis and even conduct
satisfaction surveys.

Lawfulness of processing:

Processing is necessary for the performance of a contract to which the
data subject is party or in order to take steps at the request of the data
subject prior to entering into a contract;

Legitimate interest of DAV, S.L. For such data treatment, it can be
internal administrative purposes or so that we can better meet your
expectations and improve your degree of satisfaction as a client.

• Response to contact requests or appointment requests with our advisors.

DAV, S.L. will process personal data to respond to requests received,
whether inquiries about the products and services that we market, or to
request an appointment with our advisors.

Applications may have been made through the relevant forms available on our
website, or by contacting us directly by sending emails or phone calls.

Lawfulness of processing:

Legitimate interest of DAV, S.L. pursued by the need to attend the
requests received and develop the commercial activity of the company taking
into account the reasonable expectations of those interested in receiving a
response to their requests.

Consent freely given by the data owner who sends their information in the
form provided specifically for this purpose.

• Response to incidents and complaints from the users of our services.

DAV, S.L. will process personal data to respond to incidents and complaints
communicated to us by users of our services, either to report problems with
the operation of our machines or request the refund of sums owed due to
products not dispensed

The requests may have been made through the channels provided, such as the
telephone line enabled for this purpose.

Lawfulness of processing:

Legitimate interest of DAV, S.L. to manage and ensure the quality of the
services provided.

• Send commercial communications by any channel, including electronically.

DAV, S.L. will process personal data to inform and advise those interested
parties that have expressly requested it, taking into account their
interests and particular needs regarding the services provided by DAV, S.L.

Thus, DAV, S.L. will process the personal data of the interested parties to
send commercial communications as well as information about the company,
events and activities that may be of interest to them related to the
products and services that we commercialize.

Lawfulness of processing:

Consent that is requested to the interested party, without in any case
the withdrawal of the same condition the execution of the contract of
provision of services.

In addition to the foregoing, DAV, S.L. may carry out other processing
activities of personal data. In that case, the data subject will receive
the necessary information in relation to these processing activities and
DAV, S.L. will request their consent if it is necessary.

Purpose of processing and nature of consent

Personal Data are processed exclusively for the following purposes:

• provision of services offered by the undersigned company to fulfill any contractual obligations established with the User;

• statistics, market research;

• sending of informative and advertising material, reporting of promotional initiatives and commercial offers and other information services on the activity of the undersigned company, if the User has expressed specific consent and/or adherence to the service;

• definition of the User profile to personalize and individualize the commercial offers of the undersigned company and the companies belonging to its group, if the user has expressed specific consent and/or adherence to the service.

How long will DAV, S.L. keep the data?

As a rule, data will be kept for as long as necessary to fulfill the
purpose for which they were requested and to determine the possible
responsibilities that may arise from this purpose and the processing of
these data.

Among others, implies that DAV, S.L. will keep the personal data of the
data subjects for the duration of the relationship with us and, where
appropriate, during the period that is necessary for the formulation,
exercise or defense of potential claims, or for comply with the legal
obligations determined by the applicable legislation.

Once this period has expired, DAV, S.L. undertakes to cease processing all
personal data, destroy them, block them or anonymize them as far as
possible for the purpose for which they are kept.

To which third parties will the data be communicated?

Personal data will not be transferred to third parties, unless it is
necessary to respond to the request, we are bound by law or the interested
party has given us his or her consent.

Nevertheless, in order to be able to provide you with an adequate service
and manage the relationship that we maintain with you as a client, we can
communicate your personal data to:

• Companies that provide us with services related to the ordinary and
administrative activity of the company as treatment managers, national or
international, within the framework of the provision of services such as,
among others, providers of logistics services.

The provision of these services may involve the processing of personal data
by companies located in countries outside the European Economic Area
(international data transfers), in which case it is only carried out when
countries offer an adequate level of protection or, in the case of entities
in the US that are certified under the EU-US Privacy Shield. Decision (EU)
2016/1250 of the Commission, of July 12, 2016.

• IVS ITALIA as the parent company of the IVS Group and provider of the IT
services on which our management is based.

• Subsidiary companies of DAV, S.L. who provide services in their specific
areas of responsibility.

What are the rights of the data subjects when they provide us with their data?

Gladly we will inform you whether and which of your personal data is
processed by us and for what purposes. Furthermore, given the respective
legal conditions, you have to the right to rectification, the right to
restrict processing, the right to erasure, the right to object and the
right to data portability.

These rights may be exercised free of charge by the data subject and, if
applicable, by his/her representative, by means of a written and signed
request, accompanied by a copy of his/her ID or equivalent document proving
his/her identity, addressed to:

• By email:
dpo@ivsiberica.com

• By postmail:
Avda. de la Riera 1, 08960 Sant Just Desvern (Barcelona), Spain

In the case of representation, you must prove by means of a written
document and attaching a copy of the DNI or equivalent document that
proves your representation.

In addition to the foregoing rights, data owners shall have the right to
withdraw the consent granted at any time through the procedure described
above, without this withdrawal of consent affecting the lawfulness of the
processing activities prior to the withdrawal of this consent. DAV, S.L.
may continue to process the personal data of the data subject to the extent
that the applicable law permits it or persist any other legitimation that
justifies it.

Irrespective of these rights and the possibility of asserting another
administrative or legal redress, you also have the possibility at any time
of asserting your right to complain to a supervisory authority, in
particular, in the member state of your place of domicile, of your place of
work or of the location of the alleged infringement if you are of the view
that the processing of personal data affecting you infringes legal data
protection regulations.

Update of your data

It is important that in order for us to keep your personal information
updated, you inform us whenever there has been any change in them.
Otherwise, we do not respond to the veracity of these and the implications
it may have on treatment.

Security in the processing and custody of data

DAV, S.L. declares that it has applied the appropriate technical and
organizational measures to guarantee and be able to demonstrate that the
processing activities are in accordance with current legislation and that
the protection of the rights of the interested parties is guaranteed.

For this purpose, it has implemented a Personal Data Protection Management
System to determine and apply the technical and organizational means at its
disposal to prevent the loss, misuse, alteration, unauthorized access and
theft of data provided by data owners, without prejudice to inform that
security measures on Internet are not impregnable.

use of cookies

This website, like most websites on the Internet, uses cookies to improve
the user experience. In our Cookies Policy

you will find information about what cookies are, what kind of cookies this
website uses, how you can disable cookies in your browser and how to
specifically disable the installation of third-party cookies.

Please read our Cookies Policy

carefully before continuing to browse our website.

Modification of the Privacy Policy

DAV, S.L. can modify its Privacy Policy in accordance with the applicable
legislation at all times. In any case, any modification of the Privacy
Policy will be duly notified so that you are informed of the changes made
in the processing of your personal data and, if the applicable regulations
so require, the interested party can confirm their consent.