Who is the Data Controller?

• Identity: Sociedad Anónima Industrias Celulosa Aragonesa ("Saica").
• Address: San Juan de la Peña, 144. Zaragoza (Spain). C.P.: 50015
• Phone: +34 976 103 100
• Email: dpocompliance@saica.com

For what purpose do we process your personal data?

In compliance with the provisions of the European General Data Protection Regulation 2016/679, as well as with applicable local regulation on data protection matters, we inform you that at Saica we process the data you provide us for the following purposes:

1. Respond to your request for information regarding our products and services.
2. Share data between companies of the Saica Group for internal administrative purposes.

For how long we will store your data?

Your data will be store for the time necessary to comply with the purpose for which they were collected and to determine the possible liabilities that may arise from said purpose and the processing of the data, as well as the time necessary to comply with the corresponding legal obligations.

Which is our lawful basis to process your personal data?

The legal bases for the processing of your personal data for the purpose indicated above in section 2 are as follows:

• Purpose 1: Necessary for the performance of the contractual or pre-contractual relationship with you.
• Purpose 2: Legitimate interest in sharing personal data within the business group for internal administrative purposes.

With whom we will share your personal data?

Your personal data may be shared to other companies of the Saica Group for internal administrative purposes. In addition, your data may also be transferred to public bodies and authorities (administrative or judicial) in those cases in which a legal regulation so establishes.

What rights do you have in relation to your personal data and how can you exercise them?

You have the right to access your personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, you may request the limitation of the processing of your data, in which case we will only keep it for the exercise or defense of claims.

For reasons related to your situation, you may object to the processing of your data. Saica will cease to process the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

Likewise, you can exercise the right to data portability, as well as withdraw the consents provided at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

If you wish to exercise any of the above rights, you can contact us by sending a written communication to the email address dpocompliance@saica.com. Remember to provide us with as much information as possible about your request: First name, last name and email address used.

Finally, we inform you that you can contact the competent supervisory authority or other competent public bodies for any claim arising from the processing of your personal data.