General Information

This Privacy and Cookies Policy applies to all personal data that you, as a user, (understood as any individual accessing the website) provide to AZUMENTA XXI GROUP S.L when you access https://thesant.com, hereinafter the "Website".

The purpose of this Privacy and Cookies Policy is to inform you about how we process your personal data as a user, as well as to explain the rights granted to you under the General Data Protection Regulation and other applicable data protection regulations.

Who is responsible?

The data controller for the personal data collected through the Website is AZUMENTA XXI GROUP S.L, with tax identification number B66710872 and registered address at Verge dels Dolors 23, local 3 Sant Just Desvern, Barcelona 08960, Spain.

Why do we request your data?

What is our legal basis for data processing?

Our legal basis for processing personal data is as follows:

• Consent: if you have given explicit consent when entering personal data by checking the corresponding box.
• Contract performance: if there is a contractual relationship between you and AZUMENTA XXI GROUP S.L, or if processing personal data is necessary for the performance of the commercial relationship.
• Compliance with a legal obligation: in cases where AZUMENTA XXI GROUP S.L has a legal obligation applicable as data controllers.
• Legitimate interest: in cases where there is a legitimate interest of our own or third parties related to the operation of the Website or the provision of services to the user, provided that the fundamental interests and rights of the users do not override the legitimate interest.

How long will we retain your data?

The personal data we collect through the Website will be processed and stored for the time necessary to fulfill the purpose for which they were collected.

Specifically, data collected for the development and execution of a contract with you will be retained for as long as the contractual relationship is in effect. However, personal data collected based on legitimate interest or your consent will only be kept for the time necessary to fulfill that purpose.

After the strictly necessary period for the purposes described above has elapsed, we will retain personal data for an additional period, until all actions arising from our liability resulting from each of the processing activities have expired.

Do we share your data with third parties?

In order to fulfill the purposes described above, it is necessary to grant access to your personal data to other service providers, who will act as data processors, such as:

• Service providers and partners related to marketing and advertising (print and distribution, social media platforms, media agencies or advertising agencies, media or advertising agencies, data analysis companies and public relations agencies).

• Public administrations and agencies when required by tax, labor, Social Security or any other applicable regulations.

• Providers of services related to the management of the company

• Logistics, transportation and delivery service providers and partners

• Providers of services related to customer care

We have entered into an agreement with the companies acting as data processors to regulate the management and processing of users' personal data, as well as the implementation of the security measures adopted.

In cases where we need to transfer data to third parties located outside the European Union or the European Economic Area (Iceland, Norway, or Liechtenstein), and if that country does not offer a level of data protection equivalent to that of the European Union, we will transfer your personal data while always respecting the appropriate safeguards and maintaining security standards, in accordance with the applicable regulations.

When such transfers are made from the EU/EEA to a third country for which the European Commission has not issued an Adequacy Decision, or if we do not have Binding Corporate Rules, we will comply with the provisions established by the European Commission for these cases to provide you with the appropriate safeguards, and when necessary, we will enter into the Standard Contractual Clauses and even implement additional protection measures when required.

If you want more information about the transfer of personal data we carry out to countries outside the EU/EEA, you can contact us via the following email: shop@thesant.com

What are your rights?

You can exercise the following rights at any time and free of charge:

• Access: to know what data we hold and what we do with it.
• Rectification: to inform us of any inaccurate data.
• Erasure: to have your personal data deleted, to the extent possible.
• Objection: to stop us from processing your personal data for any of the purposes mentioned above, provided there is no legal obligation preventing it.
• Portability: to have your personal data transferred to a third party, to the extent possible.
• Restriction: to suspend your data when you challenge its accuracy, or if you want us to keep it for legal claims.
• Not to be subject to decisions based solely on automated processing of your data.

You can exercise any of these rights for free by accessing here.

If we do not properly respect these rights as the data controller, please note that you can file a complaint with the data protection authority at Agencia Española de Protección de Datos (AEPD), C/Jorge Juan, 6, 28001 Madrid, or via email at internacional@aepd.es.

Confidentiality and Security Measures

AZUMENTA XXI GROUP S.L, as the data controller, we commit to respecting the confidentiality of users' personal data and to using it according to the purposes for which it was collected.

We have implemented all appropriate technical and organizational security measures according to the nature of the data being processed and as required by data protection regulations.

COOKIE POLICY

Before we begin, what is a cookie? What types of cookies exist?

A cookie is a small text file that websites install on users' computers or mobile devices when they visit them. Cookies are generally used to make web pages work, or work more efficiently, as well as to gather information about their usage.

Cookies can be classified as follows:

• According to the entity that manages them: first-party and third-party cookies;
• By the period they remain active: session and persistent cookies;
• According to their purpose: technical, preference or customization, analytical, and marketing.

What cookies do we use?

The following table explains the cookies we use and their purposes:

Deleting cookies

Most web browsers allow some control of most cookies through the browser settings. You can configure cookies on the most common browsers by following their instructions:

• Google Chrome
• Microsoft Edge
• Mozilla Firefox
• Microsoft Internet Explorer
• Opera
• Apple Safari

For information on other browsers, you can visit the relevant browser's website.

At https://thesant.com, we use Google Consent Mode v2 to transmit consents for different purposes. More information here

Changes to the Privacy and Cookie Policy

This Privacy and Cookie Policy was last updated on 23/04/2025, AZUMENTA XXI GROUP S.L reserves the right to update and modify certain aspects of it to adapt to legislative and jurisprudential developments, so we recommend reviewing it periodically.