ESSENTIAL ASPECTS OF THE JOINT CONTROLLERSHIP AGREEMENT BETWEEN GRUPO LAR INVERSIONES INMOBILIARIAS, COMMUNITY OF OWNERS OF C.C. PORTAL DE LA MARINA, C.C. LAGOH, COMMUNITY OF OWNERS OF C.C. ALBACENTER, ENTITY FOR THE MANAGEMENT OF COMMON EXPENSES OF C.C. ANECBLAU, LE RETAIL EL ROSAL, S.L., COMMUNITY OF OWNERS OF C.C. AS TERMAS AND LE RETAIL GRAN VÍA DE VIGO, S.L.

In accordance with Article 26 of Regulation (EU) 2016/679 GDPR, the above-mentioned entities inform the data subject of the following essential aspects of their joint controllership agreement:

OBJECT.- The parties jointly determine the purposes and means of processing necessary for the launch and operation of the Club Disfrutones, including the initiatives to be offered to Club members.

PURPOSE OF PROCESSING THE ACTIVITY REGISTER “CLUB DISFRUTONES MEMBERS”.- The purpose of processing personal data is:

1. To keep Members informed of all news, activities and services carried out by the joint controllers, through the sending of periodic communications, using segmentation and/or profiling.

2. To register the enrollment of individuals interested in joining the Club.

3. To prevent and notify members of any security incident that may occur in the system where the data is processed.

4. To resolve technical issues related to the functioning of the My Account section.

5. To respond to requests for information and/or suggestions made by members.

6. To handle possible exercises of rights submitted by members.

RESPECTIVE RESPONSIBILITIES OF THE JOINT CONTROLLERS.

1. Respective obligations to provide mandatory information as set out in Articles 13 and 14 GDPR: With regard to the general operating conditions of the Club, all joint controllers cooperate in drafting the mandatory information, common to all of them, and through the processors (common to all controllers).

This general information is provided to each member at the time of joining the Club, regardless of the center in which the enrollment is made.

Regarding the information to be provided during registration for specific events (for example, participation in prize draws), each controller will be responsible for providing the corresponding information, in accordance with Articles 13 and 14 of the GDPR, at the time of registration.

2. Responsibilities regarding the exercise of data subject rights: The joint controller at the center where the member has activated their Club membership will be responsible for handling the exercise of rights submitted by any data subject, for any of the rights set out in Articles 15 to 22 GDPR, namely rights of access, rectification, erasure (right to be forgotten), restriction, portability and objection; as well as automated individual decision-making, including profiling.

However, it should be noted that data subjects have the right to submit their request, and exercise these rights, against any of the joint controllers.

Each of the parties, to the extent that they process data of the requesting data subject, will facilitate the handling of these rights by the joint controller responsible for addressing them.

3. Contact point for data subjects: The contact points for data subjects wishing to exercise their rights will be Grupo Lar Inversiones Inmobiliarias and the shopping center where they registered and/or activated their membership.

To facilitate the exercise of rights, requests will be centralized at the email address hola@elclubdelosdisfrutones.com, as well as the corresponding section in the private My Account area.