Privacy and Confidentiality Policy

1. Scope of Application

The company GRAVITY SCOOTERS, S.L. ("GRAVITY") is committed to respecting the privacy of those who visit and use its website, located at www.gravity-scooters.com (the "Portal").

This Privacy Policy aims to inform the user about the processing of personal data collected through the Portal and associated services, in accordance with Organic Law 15/1999, of December 13, on the Protection of Personal Data, the regulations that develop it, and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce.

The use of the Portal or any of its associated services implies the user's acceptance of the provisions contained in this Privacy Policy, and that their personal data will be processed as stipulated therein.

This Privacy Policy is an integral part of the Legal Notice of the Portal.

2. Consent to the Processing of User's Personal Data.

In the context of its activities, GRAVITY has the possibility of user registration for sending email communications, making comments on the blog, and sending messages through the contact form.

By subscribing to the page, making comments, or using the contact form, the user will be giving their express consent to the processing of the personal data provided in accordance with Article 6 of the Data Protection Organic Law. The user may exercise their rights as established by Article 5 of the Data Protection Organic Law.

These same actions also imply the user's express consent to the international transfer of data as provided for in the Data Protection Organic Law due to the physical location of the aforementioned providers' facilities.

The personal data requested in these activities will be incorporated into a file for the purpose of communicating news related to the GRAVITY Website, acting as the file controller. The fields marked with an asterisk are mandatory, and the stated purpose cannot be carried out if these data are not provided. You are also informed of the possibility of exercising the rights indicated in the section on User Rights.

3. Confidentiality and Security.

At GRAVITY SCOOTERS SL, we process the information you provide us in order to provide the requested services and carry out their billing. The provided data will be kept for as long as the commercial relationship is maintained or for the time necessary to comply with legal obligations and address any potential liabilities that may arise from the fulfillment of the purpose for which the data were collected. The data will not be transferred to third parties except in cases where there is a legal obligation. You have the right to obtain information about whether GRAVITY SCOOTERS SL is processing your personal data, and therefore, you can exercise your rights of access, rectification, deletion, and data portability, as well as opposition and limitation to their processing before GRAVITY SCOOTERS SL, ANSELM CLAVE 43, 08773 MEDIONA (BARCELONA) SPAIN or by email to info@gravity-scooters.com, sufficiently identifying yourself in your request by electronic means or, failing that, by a properly signed request. However, if the data controller has reasonable doubts regarding the identity of the natural person making the request, they may request additional information necessary to confirm their identity. Likewise, and especially if you believe that you have not obtained full satisfaction in the exercise of your rights, you may submit a complaint to the national control authority by addressing the Spanish Data Protection Agency, C/ Jorge Juan, 6 - 28001 Madrid.

Furthermore, we request your authorization to offer you products and services related to those contracted and to retain you as a customer.

Data controller details:

• Identity: GRAVITY SCOOTERS SL - VAT Number: B66066713
• Postal address: ANSELM CLAVE 43, 08773 MEDIONA (BARCELONA) SPAIN
• Phone: +34 625 392 499
• Email: judith@gravity-scooters.com

4. 4. Third Party Data

In the event that the data provided by a user belongs to a third party other than the one providing the data, the user must inform the third party of the aspects contained in this Privacy Policy, and by providing them, the user acknowledges and declares to have obtained the authorization of said third party to provide their data to GRAVITY. If GRAVITY requires it, the user must demonstrate having obtained said consent.

5. 5. Minors

The Portal does not intentionally collect personal data from visitors under sixteen (16) years of age.

In the event that a user provides data of minors under sixteen (16) years of age, they guarantee to have obtained the prior consent of their parents or legal guardians. If GRAVITY requires it, the user must demonstrate having obtained said consent.

6. 6. Data Quality

Users guarantee that the personal data provided are true, accurate, complete, and up-to-date. Users will be solely responsible for any direct or indirect damage or harm that may arise as a result of failing to fulfill this obligation.

Likewise, in order to guarantee the duty of quality and data updating, the user must inform GRAVITY of any modifications that may occur in the provided data.

7. 7. User Rights

In accordance with the provisions of article 5 of the LOPD, the user is informed that the exclusive purpose of the registration database is to send information about news related to the Website www.gravity-scooters.com. Only the owners will have access to their data, and under no circumstances will this data be transferred, shared, transferred, or sold to any third party.

In accordance with the LOPD, the user may exercise their rights of access, rectification, cancellation, and opposition against the provider at any time.

To facilitate the exercise of these rights, a unsubscribe link is provided in all communications, which will result in the immediate removal of the user's personal data from our database.

8. Data Hosting

For technical reasons and service quality, GRAVITY is hosted on servers provided by the company CDMON. Similarly, the email subscription service and newsletter delivery are carried out from the facilities of the company MailChimp.

Both CDMON and Mailchimp adhere to the principles of "Safe Harbor," in accordance with Commission Decision 2000/520/EC of July 26, 2000, which makes them entities with an adequate level of protection for the purposes of the LOPD.

9. 9. Anti-Spam Policy

The provider declares itself completely against the sending of unsolicited commercial communications and any type of behavior or manifestation known as "spam." Likewise, it declares its commitment to fighting against such abusive practices.

Therefore, the provider guarantees to the user that under no circumstances will the personal data collected on the Website be transferred, shared, transferred, or sold to any third party.

For the same reasons, the registration process must not be used to register email addresses of third parties without the express consent of the individuals concerned.

In the event that a user still receives communications from this Website without having registered, or without having given their express consent to such registration, they can unsubscribe from the links provided in the communication itself. Additionally, the user can contact us through the contact form maintained on the Website, both to report what happened and to request the immediate removal of their data from our system.

10. 10. IP Addresses

The servers of the Website may automatically detect the IP address and domain name used by the user. An IP address is a number assigned automatically to a computer when it connects to the Internet. All this information is recorded in a server activity file properly registered, which allows the subsequent processing of the data for the sole purpose of obtaining purely statistical measurements to know the number of page impressions, the number of visits made to the web services, the order of visits, the access point, etc.

11. 11. Security

GRAVITY employs information security techniques generally accepted in the industry, such as firewalls, access control procedures, and cryptographic mechanisms, all with the aim of preventing unauthorized access to data. To achieve these goals, the user/client agrees that the provider obtains data for the purpose of corresponding authentication of access controls.

All contracting processes or those involving the introduction of high-level personal data will always be transmitted using a secure communication protocol (https://...), so that no third party has access to the information transmitted electronically.

12. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the Website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information on our behalf for the purpose of tracking your use of the website, compiling reports on website activity, and providing other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

3. Cookie Policy

13. Cookies policy

What are cookies?

A cookie is a file that is downloaded to your computer when you access certain websites. Cookies allow a website, among other things, to store and retrieve information about a user's browsing habits or their device, and depending on the information they contain and how you use your device, they can be used to recognize the user.

What types of cookies does GRAVITY use?

The Website uses a technical cookie, with a session expiration, for one or more of the following purposes:

• Only allow communication between the user's computer and the network.
• Strictly provide a service expressly requested by the user.
• "User input" [1].
• Authentication or user identification (session only).
• User security [2].
• Multimedia player session.
• Session for load balancing.
• User interface customization.
• Plug-in (plug-in) for sharing social content.

Therefore, this type of cookie is exempt from compliance with the obligations established in article 22.2 of the LSSI (known as the "cookie law"), so it is not necessary to inform or obtain consent for its use.

[1] Session and user input cookies are typically used to track user actions when filling out online forms on multiple pages, or as a shopping cart to track items that the user has selected by clicking a button. [2] For example, cookies used to detect repeated incorrect attempts to connect to a website.

Types of cookies according to the entity that manages them

According to the entity that manages the computer or domain from which cookies are sent and processes the data obtained, we can distinguish:

• First-party cookies: these are those sent to the user's terminal equipment from a computer or domain managed by the publisher itself and from which the service requested by the user is provided.
• Third-party cookies: these are those sent to the user's terminal equipment from a computer or domain that is not managed by the publisher, but by another entity that processes the data obtained through cookies. In the event that cookies are installed from a computer or domain managed by the publisher itself but the information collected through them is managed by a third party, they cannot be considered as first-party cookies.

Types of cookies according to the length of time they remain active

According to the length of time they remain active on the terminal equipment, we can distinguish:

• Session cookies: these are a type of cookies designed to collect and store data while the user accesses a website. They are usually used to store information that is only of interest to keep for the provision of the service requested by the user on one occasion (e.g., a list of purchased products).
• Persistent cookies: These are a type of cookies in which the data remains stored on the terminal and can be accessed and processed for a period defined by the cookie's controller, which can range from a few minutes to several years.

Types of cookies according to their purpose

According to the purpose for which the data obtained through cookies is processed, we can distinguish between:

• Technical cookies: these are those that allow the user to navigate through a website, platform, or application and use the different options or services that exist in it, such as controlling traffic and data communication, identifying the session, accessing restricted access parts, remembering the elements that make up an order, carrying out the process of purchasing an order, carrying out the request for registration or participation in an event, using security elements during navigation, storing content for the dissemination of videos or sound, or sharing content through social networks.
• Personalization cookies: these are those that allow the user to access the service with some predefined general characteristics based on a series of criteria on the user's terminal, such as the language, the type of browser through which the user accesses the service, the regional configuration from which the user accesses the service, etc.
• Analytics cookies: these are those that allow the entity responsible for them to track and analyze the behavior of users of the websites to which they are linked. The information collected through this type of cookies is used in the measurement of the activity of the websites, application, or platform and for the elaboration of navigation profiles of the users of said sites, applications, and platforms, in order to introduce improvements based on the analysis of the usage data made by the users of the service. Regarding the processing of data collected through analytics cookies, the working group of article 29 has stated that, although they are not exempt from the obligation to obtain informed consent for their use, it is unlikely that they represent a risk to the privacy of users as long as they are first-party cookies, treating aggregated data for strictly statistical purposes, providing information about their use, and including the possibility for users to express their refusal to use them.
• Advertising cookies: these are those that allow the management, in the most efficient way possible, of the advertising spaces that, where appropriate, the publisher has included on a website, application, or platform from which the requested service is provided based on criteria such as the edited content or the frequency with which ads are displayed.
• Behavioral advertising cookies: these are those that allow the management, in the most efficient way possible, of the advertising spaces that, where appropriate, the publisher has included on a website, application, or platform from which the requested service is provided. These cookies store information on the behavior of users obtained through the continuous observation of their browsing habits, which allows the development of a specific profile to display advertising based on it.

Cookie Management

You can allow, block, or delete cookies installed on your computer by configuring the options of the browser installed on your computer.

Who uses cookies on this Website?

GRAVITY only uses a technical cookie with a session expiration, and no information is obtained from it. Therefore, it is not processed by third parties or the publisher.

14. Intellectual Property and Use of Contents

The GRAVITY Website, including, but not limited to, its programming, editing, compilation, and other elements necessary for its operation, designs, logos, text, and/or graphics, are the property of the provider or, where applicable, have a license or express authorization from the authors.

Any unauthorized use by the provider will be considered a serious breach of the intellectual or industrial property rights of the author.

The designs, logos, text, and/or graphics belonging to third parties and that may appear on the Website are the property of their respective owners, who are responsible for any possible controversy that may arise regarding them. In any case, the provider has the express and prior authorization from them.

To make any observations regarding possible breaches of intellectual or industrial property rights, as well as any of the contents of the Website, you can do so through the contact form maintained on the Website.

© 2020 GRAVITY. All rights reserved.