LEGAL NOTICE

In compliance with the duty of information established in Article 10 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE), the following details are provided:

• Trade Name: We Move Mountains
• Company Name: WE MOVE MOUNTAINS S.L.U.
• Tax ID (NIF): B02862886
• Registered Address: Hondarribia 6, 6B, 20005 Donostia (Gipuzkoa), Spain
• Email: info@wemovemountains.consulting
• Phone: +34 722 534 833
• Company Registration: Mercantile Registry of Gipuzkoa, Volume 2976, Page 218, Section 8, Sheet SS-43296, Entry 1

Access to and use of this website confers the condition of User and implies full and unreserved acceptance of all the terms included in this Legal Notice. The User undertakes to use the website appropriately and not to engage in any activities that are unlawful, unethical, or contrary to public order.

Intellectual and Industrial Property:
All contents of this website, including texts, images, graphic design, logos, icons, buttons, software, trade names, trademarks, and other distinctive signs, are protected by intellectual and industrial property rights owned by We Move Mountains or third parties who have authorized their use.

Liability:
We Move Mountains shall not be held liable for any damages or losses of any nature that may result from the improper use of the website, errors or omissions in its content, unavailability of the site, or the presence of viruses or malicious programs.

Third-Party Links:
This website may contain links to other Internet sites. We Move Mountains has no control over these external sites and assumes no responsibility for their content or any consequences arising from their use.

Governing Law and Jurisdiction:
This Legal Notice is governed entirely by Spanish law. For the resolution of any disputes arising from access to the website, the User and the Owner expressly agree to submit to the courts of Donostia-San Sebastián, expressly waiving any other jurisdiction that may correspond to them.

WEBSITE PRIVACY POLICY

wemovemountains.consulting

I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, We Move Mountains (hereinafter also the Website) undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security for the risk of the collected data.

Applicable Laws to this Privacy Policy

This privacy policy is adapted to current Spanish and European legislation on the protection of personal data online. Specifically, it complies with the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
• Organic Law 3/2018 of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).
• Royal Decree 1720/2007 of 21 December, approving the Regulation implementing Organic Law 15/1999 on the Protection of Personal Data (RDLOPD).
• Law 34/2002 of 11 July, on Services of the Information Society and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The data controller of the personal data collected on We Move Mountains is: WE MOVE MOUNTAINS S.L.U., with NIF: B02862886, registered in: Commercial Registry of Gipuzkoa with registration data: T 2976, F 218, S 8, H SS 43296, I/A 1 (30.12.20), represented by: Iñigo Echave Calvo (hereinafter, the Data Controller). Contact details:

Address:
Hondarribia 6, 6B, 20005 Donostia
Phone: +34 722534833
Email: info@wemovemountains.consulting

Registration of Personal Data

In accordance with the GDPR and LOPD-GDD, users are informed that personal data collected by We Move Mountains through forms on its pages will be incorporated into and processed in our files in order to facilitate, expedite, and fulfill the commitments established between We Move Mountains and the User, or maintain the relationship established in the forms they fill out, or to respond to a request or inquiry.

In accordance with the GDPR and LOPD-GDD, unless the exception in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, based on their purposes, the processing activities carried out and other circumstances established by the GDPR.

Principles Applicable to the Processing of Personal Data

The processing of the User's personal data will be subject to the following principles established in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018:

• Lawfulness, fairness, and transparency: consent will be required at all times after providing complete and transparent information on the purposes of data collection.
• Purpose limitation: data will be collected for specific, explicit, and legitimate purposes.
• Data minimization: only strictly necessary data will be collected.
• Accuracy: personal data must be accurate and kept up to date.
• Storage limitation: data will be retained only as long as necessary for processing purposes.
• Integrity and confidentiality: data will be processed securely and confidentially.
• Accountability: the controller is responsible for ensuring compliance with these principles.

Categories of Personal Data

Only identifying data is collected and processed. No special categories of personal data as defined in Article 9 of the GDPR are processed.

Legal Basis for Processing

The legal basis for processing personal data is consent. We Move Mountains undertakes to obtain the explicit and verifiable consent of the User for one or more specific purposes.

The User has the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it, and will not affect the use of the Website.

When the User provides data via forms, they will be informed whether providing such data is mandatory, as it may be necessary to correctly carry out the operation.

Data Retention Period

Data will be retained only for the minimum time necessary for processing purposes, and in any case, for a maximum of 18 months, or until the User requests deletion.

Upon collection, the User will be informed of the retention period or criteria used to determine it.

Recipients of Personal Data

Personal data will not be shared with third parties.

In any case, Users will be informed at the time of data collection about any recipients or categories of recipients.

Personal Data of Minors

Only those over 14 years old may legally consent to the processing of their data by We Move Mountains. For minors under 14, parental or guardian consent is required.

Data Security and Confidentiality

We Move Mountains commits to adopting appropriate technical and organizational measures to guarantee the security of personal data and prevent accidental or unlawful destruction, loss, or alteration, or unauthorized access or disclosure.

The Website uses SSL (Secure Socket Layer) to ensure secure and encrypted data transmission.

However, since absolute security on the internet cannot be guaranteed, the Data Controller will notify the User without undue delay if a data breach is likely to result in a high risk to their rights and freedoms.

Personal data will be treated as confidential, and this confidentiality will be ensured through legal or contractual obligations with employees, collaborators, and anyone else with access to the information.

Data Subject Rights

The User has the following rights under the GDPR and Organic Law 3/2018:

• Right of access: to know whether personal data is being processed and to obtain specific information.
• Right to rectification: to request the correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): to request deletion of data under certain circumstances.
• Right to restriction of processing: to limit processing when specific conditions are met.
• Right to data portability: to receive and transfer data to another controller.
• Right to object: to object to the processing of personal data.
• Right not to be subject to automated decision-making, including profiling: unless legally required.

The User may exercise these rights by written communication to the Data Controller with the reference "GDPR-wemovemountains.consulting", including:

• Full name and a copy of their ID (or that of a legal representative).
• Specific request and reasons for it.
• Address for notifications.
• Date and signature.
• Any supporting documents.

These requests may be sent by post or email to:

Postal address:
Hondarribia 6, 6B, 20005 Donostia
Email: info@wemovemountains.consulting

Complaints to Supervisory Authority

If the User believes there is a violation of data protection laws, they may lodge a complaint with a supervisory authority, particularly in the country of residence, workplace, or place of the alleged violation. In Spain, this is the Spanish Data Protection Agency (http://www.agpd.es).

II. COOKIES POLICY

Accessing this Website may involve the use of cookies. Cookies are small pieces of information stored in the User’s browser to help the server remember information to be read later. Cookies facilitate browsing and do not harm the device.

The information collected may include visit dates and times, pages viewed, time spent on the Website, and sites visited before or after. Cookies cannot access contact information or extract data from the User’s hard drive.

Cookies that identify a person are considered personal data and are subject to the same privacy rules. Therefore, consent is required for their use — explicitly, affirmatively, and prior to processing.

Own Cookies

These are cookies sent to the User’s device and managed exclusively by We Move Mountains to improve the Website. They help recognize repeat users and tailor content to their preferences.

The cookie provider(s) may transfer this information to third parties if required by law or if third parties process this information for them.

Disabling, Rejecting, and Deleting Cookies

Users may disable, reject, or delete cookies through browser settings (e.g., Chrome, Firefox, Safari, Explorer). Procedures may vary between browsers. Rejecting cookies may limit Website functionality.

III. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must have read and agreed to this Privacy and Cookies Policy and consent to data processing as described. Use of the Website implies acceptance.

We Move Mountains reserves the right to modify this Policy at its discretion or in response to changes in laws, regulations, or guidance from the Spanish Data Protection Agency. Updates will not be explicitly notified. Users are advised to check this page regularly.

This Privacy and Cookies Policy was last updated on April 9, 2021 to comply with the GDPR and Organic Law 3/2018.