PROSEGUR CASH Privacy Policy

1. Data Controller

1.1 Information of the Data Controller

This document regulates the privacy policy of the PROSEGUR website (hereinafter, the "Website").

PROSEGUR CASH offers an extensive array of services, from fundamental logistics to the outsourcing of high-value services. The company's activity is mainly focused on the banking and distribution sector

For your information, the identity details of the company are provided below:

•   Company name: Prosegur Cash, S.A. (hereinafter, "PROSEGUR").
•   Tax ID: A87498564
•   Address: C/ Herberto Gut 12, 28007 Madrid (Spain).
•   Contact: dpo@prosegur.com

1.2. Scope

This Privacy Policy governs the processing of data carried out by PROSEGUR in relation to users of the PROSEGUR CASH Corporate Website. The foregoing would include the processing of personal data of (i) suppliers and/or potential suppliers; (ii) customers and/or potential customers; and/or (iii) shareholders; who access or transmit information through the Website. Therefore, this privacy policy reflects the information regarding the processing with respect to the different categories of data subjects indicated.

2. Purposes and legitimacy

You are informed that all the data that PROSEGUR requests or may request from you are necessary for the purposes described in this privacy policy and failure to provide them would make it impossible to contact you or manage the request you make to PROSEGUR. Likewise, PROSEGUR reserves the right not to respond to or process requests that do not include the data requested.

You guarantee the veracity of the personal data provided to PROSEGUR. PROSEGUR may periodically request you to review and update the personal data it holds about you.

On the Website you can find information that may be useful in order to find out about the services offered by PROSEGUR, as well as information related to the company. In this sense, PROSEGUR will only request and process the data necessary to be able to initiate and maintain a commercial and/or contractual relationship with you, provide you with the contracted service, and/or where appropriate, be able to offer you information about the company that is of interest to you, either because of your status as a customer, potential customer, supplier or potential supplier, or shareholder.

The different purposes for which your personal data are processed and the bases that legitimise the processing are described below, taking into account the different categories of data subjects mentioned:

2.1. In the event that you are a customer or potential customer of PROSEGUR

The different purposes for which your personal data are processed and the bases that legitimise the processing, if you are a customer or potential customer, are described below:

PURPOSE

BASIS OF LEGITIMACY

Manage the commercial relationship with potential customers, making commercial visits and responding to requests for information on products and services offered by PROSEGUR.

Performance of the Contract/Applications of pre-contractual measures

Formalize the contractual relationship, which will include the contracting process and signing of contracts.

To manage the contractual relationship with the PROSEGUR Group's customers and ensure the provision of the contracted services, which includes both installation assistance and technical service, as well as invoicing, collection and cancellation of the same.

Sending commercial communications related to different products and services to those contracted, by any means, including electronically, from PROSEGUR and its Group of companies dedicated to basic logistics services to the outsourcing of high value-added services.

Consent

Transfer of data to companies of the PROSEGUR Group and to third parties for the purpose of sending you commercial communications.

Sending commercial communications related to products and services similar to those contracted. In this case, PROSEGUR's legitimate interest is based on keeping you informed and updated on products or services that may be of interest.

PROSEGUR's legitimate interest

Sending communications through instant messaging applications, such as WhatsApp Business, in order to agree on a time with you to make a phone call in which you can move forward with the usual collection of information and scheduling of visits.

Consult public financial solvency files to verify if you are up to date with payments, if you have unpaid debts and if you had them in the past, how long it took you to pay them, which will simplify and facilitate the risk analysis procedure when contracting. In this case, PROSEGUR's legitimate interest would be to preserve the security of its operations and prevent fraud.

Carry out business process automation projects to improve the products and services offered by PROSEGUR. The legitimate interest in this case would be to improve the efficiency and productivity of PROSEGUR's activity.

Carry out profiling based on your personal data, to calculate the predisposition to purchase other products or contract other services, the propensity to cancel the contracted services and the assignment of an evaluation for the exclusive purpose of carrying out commercial actions.

2.2. In the event that you are a supplier or potential supplier of PROSEGUR

On the Website you can find information that may be useful in order to find out about the activity of PROSEGUR. To this end, if you are or represent a supplier or a potential supplier of PROSEGUR and you decide to contact the company, the data that will be processed will be those necessary to be able to initiate and maintain a contractual relationship with you, whether you are a sole proprietor, or with the company you represent.

The different purposes for which your personal data are processed and the bases that legitimise the processing are described below:

PURPOSE

BASIS OF LEGITIMACY

Manage the commercial relationship with potential suppliers, responding to requests for information.

Execution of the contract / application of pre-contractual measures

Formalize the contractual relationship, which will include the contracting process and signing of contracts.

To manage the contractual relationship with the suppliers of the PROSEGUR Group, which includes monitoring the relationship and payment to them.

Consent

Transfer of data to companies of the PROSEGUR Group and to third parties for the purpose of sending you commercial communications.

Sending commercial communications related to similar PROSEGUR products and services by any means. In this case, PROSEGUR's legitimate interest is based on keeping you informed and updated on products or services that may be of interest.

PROSEGUR's legitimate interest

2.3. In the event that you are a shareholder of PROSEGUR

In these cases, PROSEGUR will process your data as a shareholder for the main purpose of carrying out the necessary actions to manage the relationship with you, including providing you with relevant information about the company and complying with legal requirements in this area.

The different purposes for which your personal data are processed and the bases that legitimise the processing are described below:

PURPOSE

BASIS OF LEGITIMACY

Manage the relationship with you as a shareholder, responding to requests for information, including monitoring the relationship.

Execution of the contract / application of pre-contractual measures

Formalize the relationship with you as a shareholder, which will include the process of buying and selling shares and signing contracts.

Comply with legal obligations and requirements in this area, which require the processing of your personal data, taking into account your status as a shareholder.

Compliance with a legal obligation

Sending commercial communications by any means, including electronics, of PROSEGUR products and services, other than those related to the logistics, transport and cash management sectors.

Consent

Transfer of data to companies of the PROSEGUR Group and to third parties for the purpose of sending you commercial communications in the security, logistics, transport and cash management sectors.

To provide you with relevant information about the company, taking into account your status as a shareholder. In this case, PROSEGUR's legitimate interest is based on keeping you informed and updated on relevant aspects of the company that may be of interest.

PROSEGUR's legitimate interest

Sending commercial communications by any means, including electronic, of PROSEGUR products and services, those related to the logistics, transport and cash management sector, which due to your status as a shareholder may be of interest to you.

3. Recipients

The personal data that you provide to PROSEGUR may be communicated to the following categories of recipients:

Third parties to whom PROSEGUR is obliged to transmit information, such as public authorities, security forces and bodies, judges and courts, in order to comply with the requirements of said authorities and the applicable regulations, where applicable.
Companies that are part of the PROSEGUR Group, in order to be able to properly manage their contractual relationship as a result of the centralisation of administrative and IT processes within the PROSEGUR Group.

We inform you that some of these third parties may have companies outside the European Union. In these cases, PROSEGUR has developed and implemented the Corporate Linking Rules (BCR) so that international data transfers between the different entities of the PROSEGUR Group are secure. You can access the Prosegur Group's NCVs by clicking here.

4. Data Retention

The criteria that PROSEGUR uses to set the storage periods of your data have been determined in accordance with the requirements established in the applicable legislation, regulations and normative guidelines, as well as the operational requirements of PROSEGUR related to the correct management of the relationship with its customers and/or potential customers.

Your data will not be kept for a period of more than six years from the end of any possible contractual relationship between you and PROSEGUR, the previous storage period for the blocked data having been set in accordance with commercial regulations, and more specifically based on the provisions of the Commercial Code. Notwithstanding the above, in the event that there is an ongoing procedural procedure in relation to you, your data may be kept for the additional time necessary until a final court decision is obtained. After this period has ended, your data will be deleted.

5. Your Data Protection Rights

You may contact PROSEGUR whenever you so wish, and you may exercise your rights of access, rectification, deletion, limitation, opposition, as well as the right to portability of your data and not to be subject to automated decisions, by means of a request addressed to Prosegur Cash, S.A. at C/ Herberto Gut 12, 28007 Madrid (Spain), or to the following email address: protecciondedatos.cash@prosegur.com, attaching documentation proving their identity. Likewise, you are informed that you may revoke the consents granted whenever you wish, by contacting PROSEGUR at the address or email indicated above. Finally, if you would like more information about your rights in terms of data protection or need to file a complaint, you may contact the corresponding Supervisory Authority in order to safeguard your rights.