PRIVACY POLICY
Last updated: September 2025

1 Introduction

In this Privacy Policy, we provide information on how personal data is processed at lyntia.

2 Legal Notice

Lyntia, in compliance with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, provides you with the following information:

• – Its corporate name is Lyntia Networks S.A.
• – Its tax identification number (NIF) is A-61648069.
• – Its registered office is located at Av. De Bruselas nº 24, Planta 1ª, C.P. 28108, Alcobendas, Madrid (Spain).
• – Its contact telephone number is 91 550 77 00.
• – It is registered in the Mercantile Register of Madrid, in Volume 28,235, Folio 69, Section 8, Page M-508573.
• – Its contact email address is: protecciondedatos@lyntia.com.

3 Privacy Policy

PRIVACY POLICY

Lyntia Networks S.A. (hereinafter, lyntia) is the owner of the website www.lyntia.com, and therefore responsible for the information processed through its website. Given that it is Lyntia’s intention to protect personal data, we will explain below what type of data we process, how we process data and the technical and organisational measures adopted to ensure the correct use of such data.

For the purposes of this Privacy Policy, a user is understood to be any person who interacts with or browses the website owned by lyntia.

In order to comply with this Privacy Policy, the General Data Protection Regulation, the Organic Law on Data Protection and Guarantee of Digital Rights, as well as any other regulations that may develop or complement it in the future, have been taken into account.

We recommend that you carefully review our Privacy Policy to ensure that you understand how your personal data will be used when browsing the website.

1. Who is responsible for processing your data?

The data controller is the legal entity that determines the purposes and means of personal data processing. In other words, the data controller decides how and for what purposes personal data are processed. For the purposes of this Privacy Policy, the data controller is Lyntia Networks, S.A., with tax identification number A-61648069, registered office at Av. De Bruselas nº 24, Planta 1ª, C.P. 28108 – Alcobendas, Madrid (Spain); contact telephone number 91 550 77 00 and email address protecciondedatos@lyntia.com.

2. How do we collect your information?

Directly from you: We collect the information you provide when filling out the various forms on the website or when sending us an email. The categories of data we will process are your identifying details (name, surname, email address, country, and any other information you decide to provide us with).

From your use of the website: you can use our website from any device. We use tools that help us understand how you browse our site. For more information, please visit our Cookie Policy.

3. What is the purpose and legal basis for processing your data?

In general, the personal data you provide us with and that we obtain from you will be used for the following purposes:

• a) To process and respond to your requests for information, queries, suggestions or complaints submitted via the forms provided and the contact details indicated on the website. The processing of your personal data is based on the consent you have given us by completing the form and our legitimate interest in carrying on our business.
• b) To manage complaints received through the Internal Channel, including, where appropriate, their processing, investigation and the adoption of appropriate measures. The processing of your personal data is based on the fulfilment of a mission carried out in the public interest, in accordance with the provisions of Law 2/2023, of 20 February, regulating the protection of persons who report regulatory infringements and the fight against corruption, and other applicable legislation.
• c) To manage the security of our website. The processing of your personal data is based on our legitimate interest in ensuring the security of the data collected through the website and maintaining our means of contact active.
• i. To what extent will decision-making be automated? Lyntia does not use fully automated decision-making processes to establish, develop or terminate a contractual relationship with you. If we use such processes in a particular case, we will keep you informed, communicate your rights in this regard and comply with our obligations in accordance with applicable regulations.
• ii. Will profiling take place? No, in order to offer you products and/or services in line with your interests and improve your user experience, we may perform a classification. However, no automated decisions will be made based on this classification.

4. How long do we keep the information provided?

Lyntia will retain your personal data for as long as necessary to fulfil the purposes indicated above.

• a) The data necessary to provide you with information, answers to queries, suggestions or complaints submitted through the forms provided and the contact methods indicated on the website will be kept for the time necessary to respond to and process such requests or until you revoke your consent.
• b) In order to manage complaints received through the Internal Channel, we will retain your data for a maximum period of three (3) months from the date on which the data are entered into the Internal Channel. Additionally, they may be kept for a further three (3) months in particularly complex cases. Exceptionally, the Company reserves the right, in order to be able to exercise its rights of defence with full guarantees, to keep the complaint files duly blocked for a maximum period equivalent to the limitation period applicable in each case to the criminal offence or administrative infringement reported. c) For the security of our website, we will retain your data for as long as necessary to analyse the security of the website. Exceptionally, the Company reserves the right, in order to be able to exercise its rights of defence with all guarantees, to keep the data duly blocked for a maximum period equivalent to the limitation period applicable in each case to the offence that may arise from actions taken against our website.

5. To whom may we disclose your data?

We only use, transfer or share personal data with third parties in accordance with the terms described in this Privacy Policy. We will share or give third parties access to your personal data when necessary to achieve one of the objectives described below and in accordance with prevailing legislation:

• a) Our data processors : Lyntia will communicate your personal data to companies that provide us with services under contract and in compliance with current legal provisions on data protection when necessary to achieve the purposes described in this Privacy Policy: IT and website services, email distribution, call centre, web positioning services, marketing, market analysis and organisation of promotional campaigns. If any of these service providers need to access your personal data, they will only use it to provide us with a service and in accordance with our strict instructions .
• b) Legal obligations: Lyntia may disclose your personal data when the transfer is necessary to comply with a legal obligation, including transfer to the competent authorities, judges and courts. This includes compliance with requests made by the authorities in accordance with Law 10/2010 of 28 April on the Prevention of Money Laundering and Terrorist Financing.

6. Will your data be transferred internationally?

No international transfers of your data will be made.

7. Accuracy of data and responsible use

You undertake to guarantee to Lyntia that the information provided is real, truthful, up to date and belongs to you and not to third parties.

If you include information from third parties, you must request their authorisation prior to sending it and inform them of this Privacy Policy, providing such evidence to Lyntia. Lyntia reserves the right to verify the accuracy of the data provided, to request supporting documentation, and, where appropriate, to delete it.

8. Security measures

At Lyntia, the security measures adopted are those required by law for each type of processing. However, the Internet is not 100% secure, which is why Lyntia cannot guarantee that the use of these pages is completely secure. Accordingly, you must take the precautions typical of any Internet browsing (password protection, use of antivirus software, etc.).

If you are aware of or suspect the misuse of personal data or unauthorised access to it, please let us know as soon as possible through any of the channels indicated in Section 1 of this Privacy Policy.

We undertake to act quickly in the event of any problem that may jeopardise the security of the information provided and, where appropriate, to inform you if necessary.

9. These pages are not designed for minors

Our services are aimed at companies and their representatives. If you are the parent or legal guardian of a minor and you believe that they have provided us with their data, please contact us at the following email address: protecciondedatos@lyntia.com, specifying in the subject line: “Unsubscribe a minor”.

10. Our website may contain links to third-party websites

Our website may contain links or plug-ins that refer to third-party websites (see Facebook, Twitter, LinkedIn, among others). This Privacy Policy does not cover the websites of such third parties. You should read their terms of use.

11. Where can you exercise your rights?

How can you exercise your rights as a data subject ? In accordance with applicable regulations, you have a number of rights in relation to the collection and processing of your personal data.

These rights are as follows:

• a) Right to information: the right to be informed in a concise, transparent, intelligible and easily accessible manner, using clear and plain language, about the use and processing of your personal data.
• b) Right of access: the right to ask us at any time to confirm whether we are processing your personal data, to provide you with access to it and information about its processing, and to obtain a copy of such data. The copy of your personal data that we provide will be free of charge, although requests for additional copies may be subject to a reasonable fee based on administrative costs. For our part, we may ask you to prove your identity or require further information necessary to process your request.
• c) Right of rectification: the right to request the rectification of inaccurate, outdated or incomplete personal data concerning you. You may also request that incomplete personal data be completed, including by means of an additional statement.
• d) Right to erasure: the right to request the erasure of your personal data when, among other reasons, the data are no longer necessary for the purposes for which they were collected or processed. However, this right is not absolute, and lyntia may continue to keep your data duly blocked in the cases provided for by the applicable regulations.
• e) Right to restrict processing: the right to request that we restrict the processing of your personal data, which means that we may continue to store it, but not process it if any of the following conditions are met: you contest the accuracy of the data, for a period that allows us to verify its accuracy; the processing is unlawful and you oppose the erasure of the data and request instead the restriction of its use; Lyntia no longer requires the data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims; you have not objected to the processing, while it is being verified whether Lyntia’s legitimate grounds override yours.
• f) Right to data portability: the right to have your data transferred to another data controller in a structured, commonly used and machine-readable format. This right applies when the processing of your personal data is based on consent or on the performance of a contract and such processing is carried out by automated means.
• g) Right to object: This right allows you to object to the processing of your personal data, including profiling. We will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing or for the establishment, exercise or defence of legal claims.
• h) Right to withdraw consent: In cases where we have obtained your consent to process your personal data in relation to certain activities (for example, in order to send you commercial information), you may withdraw it at any time by contacting protecciondatos@lyntia.com.

You may exercise your rights by sending us a communication to protecciondatos@lyntia.com, indicating an address for communication purposes and providing the necessary details to process your request.

If your requests are manifestly unfounded or excessive, especially due to their repetitive nature, we may charge a reasonable fee, taking into account the administrative costs involved, or not act on the request in accordance with current data protection regulations.

If you would like more information about your rights, you can contact us through any of the channels indicated in Section 11.

12. Where can you claim your rights before the Supervisory Authority?

If your rights have not been respected, you can lodge a complaint with a supervisory authority. In Spain, you can write to the Spanish Data Protection Agency (AEPD) at Calle Jorge Juan, 6, 28001 Madrid (Spain) or use the electronic office: https://sedeagpd.gob. In both cases, you must include the relevant documentation. For more information, see www.aepd.es.

13. Updating this Privacy Policy.

Our website www.lyntia.com may modify this Privacy Policy in accordance with new legislative or regulatory requirements or in order to adapt said policy to the instructions issued by the competent authorities.

When significant changes occur, the user will be notified in accordance with the requirements of the law and by means of an informative notice on the website.