This Privacy Policy explains how Floorfy, S.L. processes the personal data we collect through the website https://floorfy.com/ (hereinafter, the “Website”), as well as any data we may collect by other means when expressly indicated.

Introduction

In this document, we detail the categories of personal data we process, the purposes of the processing, the legal basis that legitimizes it, the recipients of the data (if any), the retention periods, and the rights of data subjects. In this regard, we are committed to ensuring your personal data is properly protected and to complying with our data protection obligations, particularly Regulation (EU) 2016/679 of April 27, General Data Protection Regulation (“GDPR”), and Organic Law 3/2018 of December 5, on the Protection of Personal Data and guarantee of digital rights (“LOPDGDD”).

We recommend reading this Privacy Policy carefully before using the Website or providing any type of personal information to Floorfy. If you have any questions or wish to exercise your rights under data protection regulations, you can contact us by email at privacy@floorfy.com.

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

Your personal data will be processed by the company Floorfy, S.L. (“Floorfy”), with Tax ID B66704735, whose contact details are as follows:

• Address: C/Sabino Arana 46, 2-2, Barcelona, Spain
• Contact email: privacy@floorfy.com

2. WHAT REQUIREMENTS MUST YOU MEET TO PROVIDE US WITH YOUR PERSONAL DATA?

2.1. Minimum age. To provide us with your personal data, you must be at least 14 years old. However, to contract products or services offered through the Website, you must be at least 18 years old or have the legal capacity required by applicable civil legislation.

2.2. Truthfulness. When you provide us with your personal data, you guarantee that the data and information provided are real, truthful, updated, and belong to you, not to third parties.

Additionally, you must notify us of any changes to the provided data, and you are responsible at all times for the accuracy and truthfulness of the data supplied.

2.3. Age and Accuracy Control. At Floorfy, we reserve the right to verify your age and identifying information at any time, if necessary, including requesting an official identification document or equivalent procedure. In the event of suspected or confirmed fraud or if you are found to be under the indicated age, we may delete, temporarily disable, and/or cancel your account.

3. WHAT DATA PROCESSING DO WE CARRY OUT THROUGH THE WEBSITE AND WHAT ARE ITS MAIN CHARACTERISTICS?

Below, we explain how we process your personal information and provide all relevant details regarding your privacy:

3.1. When you contact us through our channels (contact form, chat, email)

What are the data collection channels?	● Contact form ● Chat ● Emails sent to privacy@floorfy.com or other Floorfy email addresses.
What data do we collect?	Identification and contact information. We collect your identifying data (first and last name) and email address, as well as any additional information you voluntarily include in the communications you send us. We may request additional information if necessary to fulfill your request.
What are the purposes of processing your personal data?	Responding to your requests: The main purpose of processing this data is to respond to your inquiries, resolve your doubts, and/or provide the requested information, as well as follow up on your requests if necessary. Customer service through the Website chat may include automated software (chatbot). This is designed to automatically respond to the most frequent user queries. However, if it cannot provide an adequate or complete answer, the conversation may be forwarded to a human agent for continued personalized assistance. Improving customer service: All information derived from inquiries and support provided to users, as well as how requests are resolved, may be used, in an anonymized and aggregated manner, to improve the service. This includes automating responses, creating FAQ sections, and evaluating the quality of customer service.
What is the legal basis that allows us to process your data? Is the provision of data mandatory?	Consent: The data provided for the above purposes will be processed based on your consent, granted when you voluntarily contact us through the channels provided to request information or make a request. Legitimate interest: All information collected by the customer service department will be processed for statistical purposes to help us improve the quality of the customer service provided. You can request more information on our legitimate interest assessment by contacting us at privacy@floorfy.com. Information that must be provided mandatorily will be marked with an asterisk or similarly indicated. Without this information, we will not be able to handle your inquiries or requests.
How long do we retain your information?	Both the information provided through the chatbot and that received through other customer service channels may be retained for the time necessary to properly manage the inquiry and ensure the quality of the service provided. Once this period has ended, Floorfy will retain such information, blocked, for the time periods established by law to address any potential liabilities and demonstrate compliance with our obligations.
To whom do we disclose your personal information?	We do not make any disclosures beyond those indicated, in general, in Section 4. To whom do we disclose your personal information? In this regard, some of the channels through which you may contact us are managed by service providers who act as Data Processors. You will find more information about how these service providers operate in Section 4.

3.2. When you subscribe to our newsletter and other commercial communications

What are the methods of data collection?	● Newsletter subscription form; ● Checkbox for subscribing to the newsletter or receiving commercial information; ● User registration and contracting Floorfy services.
What data do we collect?	Identification and contact data: To send commercial information via electronic means, we use identification data (name) and contact data (email, phone, etc.).
What is the purpose of processing your personal data?	Sending publications and commercial communications related to our products/services: We may send you, via electronic means, our newsletter and other commercial communications related to our products and services.
What is the legal basis that allows us to process your data? Is it mandatory to provide this data?	Consent: If there is no contractual relationship with Floorfy, we process your data based on your consent, requested when you sign up through the specific form or check a box in the contact form. Legitimate interest: If you are a Floorfy client, communications are sent based on our legitimate interest arising from the prior contractual relationship, in accordance with electronic commerce regulations (LSSI). You can unsubscribe from these commercial communications at any time through the mechanism indicated in each email or by notifying us of your wish to unsubscribe by sending an email to privacy@floorfy.com.
How long do we keep your information?	If the sending of commercial communications is based on your consent, we will retain your information for as long as you are subscribed to our distribution list for this type of information. Once you unsubscribe, your information will be blocked for the legally established periods to address any potential liabilities. If commercial information is sent based on our contractual relationship, we will retain all your personal information for as long as the relationship is in effect. Once it ends, Floorfy will block and retain the information for the legally required periods to address potential liabilities and to demonstrate compliance with our obligations.
Who do we share your personal information with?	There are no specific disclosures of your personal data to fulfill the purpose indicated in this section. However, we may use the services of email marketing providers or other advertising and marketing service providers, who will have limited access to the data and will be bound by a duty of confidentiality (for more information on how our service providers act, see Section 4. Who do we share your personal information with? > Service Providers).

3.3 When you maintain a contractual relationship with us (service provision)

What are the methods of data collection?	● Contracting Floorfy Services (signing contracts, accepting quotes, accepting the Website Terms).
What data do we collect?	Identification and contact information: We collect your identification data (first and last names), email and postal address, phone number. Employment details: During the contractual relationship, we may collect data related to the contact person representing the client company or entity (name and surname, professional email address, position and/or department).
What is the purpose of processing your personal data?	To execute and maintain the contractual relationship between the parties. The main purpose of processing this data is to maintain and execute the contractual relationship between the parties, which may include: Managing registration on the Floorfy platform (creating and administering user accounts and profile configuration); administrative, tax, legal, accounting, and commercial management of client data; payment and billing management; sending communications related to service and technical support; handling inquiries and complaints; managing client meetings and visits; providing the services; complying with legal obligations imposed on Floorfy; Ensuring compliance with the terms and conditions of the service. Aggregated analysis on platform usage, aimed at improving service quality, identifying sector needs, and developing new features.
What is the legal basis that allows us to process your data? Is it mandatory to provide this data?	Contract execution. Data processing is necessary to execute the contract between the parties. All data requested and processed by Floorfy for the above purposes is necessary for those purposes. If not provided, the services could not be executed nor the administrative tasks related to them performed.
How long do we keep your information?	All personal information will be processed for the duration of the contractual relationship between the parties. Once this period ends, Floorfy will retain and block such information for the legally established periods to address any potential liabilities and to demonstrate compliance with our obligations.
Who do we share your personal information with?	We do not make any additional disclosures for this processing beyond those generally indicated in Section 4. Who do we share your personal information with? In this regard, we may use service providers to provide certain auxiliary services (for example, management software), who act as Data Processors. You will find more information about how these service providers act in Section 4, mentioned above.

3.4 When you apply for a job offer at Floorfy

What are the means of data collection?	● Application for a job offer on the Website or on other platforms (LinkedIn, etc.)
What data do we collect?	Identification and contact information. Identification and contact data: first name, last name, email address, phone number, city or place of residence. Data included in the CV: academic background, professional experience, technical or computer skills, languages, certifications, and any other information you have voluntarily included. Data obtained during the selection process: (if applicable) results from interviews, technical tests, references provided, observations from the selection managers, and professional evaluations. If applicable, public profiles available on professional networks such as LinkedIn or job portals, provided that the link has been included in the CV and made public voluntarily. Special category data only if necessary and voluntarily provided, such as disability certificates for compliance with legal obligations regarding labor inclusion.
What are the purposes of processing your personal data?	Manage your participation in the selection process, which includes evaluating your application according to the job profile and conducting interviews or tests related to the selection process, as well as contacting you to request further information, schedule interviews, or communicate process results. If applicable and always with your consent, keep your CV for future vacancies that may fit your professional profile.
What is the legal basis that allows us to process your data? Is it mandatory to provide this data?	Application of pre-contractual measures at the request of the data subject (art. 6.1.b of the GDPR), when you voluntarily apply for a job offer or submit your application to participate in a selection process. In case we decide to keep your CV for future selection processes, the processing will be based on your consent, which you may withdraw at any time. All requested and processed data will be necessary for the indicated purposes. If you do not provide them, it will not be possible to evaluate your application or include you in the corresponding selection processes, which could prevent the application of pre-contractual measures or, if applicable, the formalization of an employment relationship.
How long do we keep your information?	Your data will be kept for the time necessary to manage the corresponding selection process. If you are not selected, and you give us your consent, we may keep your CV for a maximum period of 12 months to consider you for future processes.
To whom do we disclose your personal information?	We do not make any additional disclosures to carry out this processing other than those indicated, in general, in Section 4. To whom do we disclose your personal information? In this regard, we may turn to service providers. You will find more information about how these service providers act in Section 4.

3.5 Browsing the Website (cookies)

On this Website, we use cookies or other tracking and tracing tools to gather information about how users use the Website.

For more information about the processing we carry out through these tracking tools, visit our Cookies Policy.

3.6 Floorfy profiles on social networks.

Floorfy has profiles on the main social networks, such as Facebook, X (formerly Twitter), Instagram, LinkedIn, or YouTube.

When you follow any of our pages on social networks, the processing of your data will be governed by the terms of use, privacy policies, and access rules of the respective social network, which have been previously accepted by the user.

Floorfy, in this regard, will process your data for the purposes of properly managing its presence on the social network, informing you about activities, products, or services, as well as for any other purpose allowed by the social network policies.

Please note that we have no influence over the information the social network collects or how it processes it, so we recommend you stay informed about the purpose and scope of the information collected through these social networks.

4. TO WHOM DO WE DISCLOSE YOUR PERSONAL INFORMATION?

Generally, Floorfy will not disclose your data to third parties. However, in addition to the disclosures specifically indicated in the section where we explain the characteristics of the different operations (point 3), we inform you about the communications we may generally make, which affect all the previous processing and its legal basis.

1. Service providers essential to perform the service we offer you, (for example, IT hosting companies or commercial communication platforms). Nevertheless, these entities have signed the corresponding confidentiality agreements and will only process your data according to our instructions, and may not use them for their own purposes or apart from the service they provide us.
2. Public authorities. We may disclose to the competent public authorities the data and any other information in our possession or accessible through our systems when there is a legal obligation to do so, as well as when required, for example, to prevent or investigate abuse of services or fraudulent activities through our Website or webpage. In these cases, the personal data you provide will be retained and made available to administrative or judicial authorities.
3. In case of a corporate transaction: In the event of a merger, acquisition, sale of all or part of its assets, or any other type of corporate operation involving a third party, we may share, disclose, or transfer user data to the successor entity (even during the pre-operation phase).
4. To third parties after aggregation or anonymization: we may disclose or use aggregated or anonymized data (i.e., data that cannot be linked to an identified or identifiable natural person) for any purpose.
5. To third parties with the user's consent or other legitimate basis: If we want to share data with third parties outside the scope of this Privacy Policy, consent will be requested in all cases or you will be informed about it and its legal basis.

Likewise, we inform you that this Privacy Policy only refers to the collection, processing, and use of information (related to personal data) by us through the interaction you have with our Website. Access to third-party websites that you may reach through links from the Website have their own privacy policies over which we have no control. Therefore, before providing any personal information to them, we recommend that you inform yourself about their Privacy Policies.

5. ARE YOUR PERSONAL DATA TRANSFERRED TO THIRD COUNTRIES OUTSIDE THE ECONOMIC AREA?

Some of our service providers are located in countries outside the European Economic Area (“EEA”).

The location of these companies outside the EEA implies an international transfer of your personal data, which could mean a lower level of protection than that established by European regulations. However, at Floorfy we have applied measures so that such transfers do not result in a lower degree of protection of your personal data.

In this regard, the service providers located outside the EEA have a valid mechanism to carry out international transfers: (i) either they are located in a country or territory declared adequate by the European Commission, in the case of U.S. companies they may be certified by the EU-U.S. Data Privacy Framework (Data Privacy Framework or DPF); or (ii) they have signed the corresponding standard contractual clauses approved by the European Commission (“SCC”), an agreement signed between both entities by which the non-EU company guarantees that it applies European data protection standards.

Therefore, the use of these providers does not lead to a lower level of protection of your personal data than that of providers located in the European Union.

You can consult the content of the SCC and the EU-U.S. Data Privacy Framework adequacy decision at the following links:

• → https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_en
• → https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en

Below, we indicate which international transfers are made from Floorfy:

Name	Country	Transfer Mechanism
Amazon Web Services, Inc.	United States	Data Privacy Framework
Google LLC	United States	Data Privacy Framework
HubSpot, Inc.	United States	Data Privacy Framework

6. WHAT RIGHTS CAN YOU EXERCISE AS A DATA SUBJECT?

You can exercise the rights guaranteed by law regarding the processing of your personal data by contacting us via email at privacy@floorfy.com.

Any rights request we receive will be resolved as soon as possible and, in any case, within the maximum deadline established by law from the moment we receive it. In some cases, we may request a copy of your identity document or other identification to verify your identity if necessary.

The rights you have as a data subject are the following:

1. Right to withdraw consent given

   You can revoke your consent related to all processing based on it at any time. However, withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

2. Right of access

   You have the right to know which data is being processed, if applicable, and, if so, obtain a copy of it, as well as to obtain information related to:

   • the origin and recipients of the data;
   • the purposes for which they are processed;
   • whether there is automated decision-making, including profiling;
   • the data retention period; and
   • the rights established by the regulations.
3. Right to rectification

   You have the right to obtain the rectification of your personal data or to complete them when they are incomplete.

4. Right to erasure

   You have the right to request the deletion of your personal data if they are no longer necessary for the purpose for which they were collected or, if applicable, if we are no longer authorized to process them.

5. Right to data portability

   You have the right to request data portability in the case of processing your data based on your consent or the execution of a contract, as long as the processing has been done by automated means. If you exercise this right, you will receive your personal data in a structured, commonly used, and machine-readable format. However, you may also request, when possible, that your data be transmitted directly to another company.

6. Right to restriction of processing of your personal data

   You have the right to restrict the processing of your data in the following cases:

   1. When you have requested the rectification of your personal data during the period we verify their accuracy.
   2. When you believe we are not authorized to process your data. In that case, you can request us to limit their use instead of requesting deletion.
   3. When you consider that it is no longer necessary for us to process your data but want us to keep them for the exercise or defense of claims.
   4. In cases where processing is based on our legitimate interest and you have exercised your right to object, you can ask us to limit the use of your data during the verification of the prevalence of such interests against yours.
7. Right to object

   You have the right to object at any time to the processing of your personal data based on our legitimate interest, including profiling.

   Unsubscribe from commercial communications: Remember that you can object at any time to receiving this type of communication by sending us an email at privacy@floorfy.com. You can also unsubscribe from this service by following the instructions provided at the bottom of each electronic communication we send you.

8. Right to file a complaint with the Supervisory Authority

   Remember that at any time, if you believe we have violated your data protection rights, you may file a complaint with the relevant Supervisory Authority, in the case of Spain, the Spanish Data Protection Agency (www.agpd.es).

7. HOW DO WE GUARANTEE THE CONFIDENTIALITY OF YOUR INFORMATION?

The security of your personal data is a priority for us. Therefore, Floorfy has implemented all necessary security measures to ensure effective use and processing of the personal data provided by the user, safeguarding their privacy, confidentiality, and integrity, using the technical means necessary to prevent alteration, loss, unauthorized access, or processing of your data, according to the state of technology at each moment.

Consequently, we comply with the recommended security standards to protect them. However, it is impossible to guarantee their security completely due to the very nature of the internet and because there may be malicious actions by third parties beyond our control.

We commit to act quickly and diligently in case the security of the data is threatened or compromised, and to inform you about it if relevant.

8. CHANGES TO THIS POLICY

At Floorfy, we may modify the content of the privacy policy at any time, especially when legislative, jurisprudential, or interpretative changes by the competent authorities affect the data processing carried out by Floorfy through this Website. Any new version of this Privacy Policy will come into effect on the published effective date.

If the revised version includes a substantial change affecting the processing of your data, we will notify you at least 30 days in advance by posting a notice on our website or by sending you an email. Nevertheless, we recommend that you periodically review this Privacy Policy to stay informed about how your personal data is processed and protected, as well as your rights.

This Privacy Policy was last modified on June 2, 2025.

COOKIE POLICY

On this Website, https://floorfy.com/ (hereinafter, the “Website”), we use cookies or other tracking and tracing tools to collect information about how users use the Website.

1. WHAT IS A COOKIE?

A cookie is a file installed in the browser of your device (computer, mobile, etc.) with the purpose of storing and retrieving data. Other tracking technologies are also used, such as beacons, tags, and command sequences to collect and track information and to improve and analyze our Service.

Cookies can serve many purposes, depending on their configuration: for example, saving preferences (such as language, currency, or country), collecting usage statistics (such as audience/traffic measurement), enabling technical functionalities (such as playing audiovisual content or remembering products added to the “cart”), analyzing user behavior or navigation on the Website, among others.

2. WHO IS RESPONSIBLE?

The entity responsible for processing the information collected through cookies is Floorfy, S.L. (Floorfy), with Tax ID B66704735 and address at C/Sabino Arana 46, 2-2, Barcelona, Spain.

If you have any questions related to the use of cookies, please send an email to privacy@floorfy.com and we will respond as soon as possible.

3. WHAT DATA IS COLLECTED THROUGH COOKIES?

When you access the Website, even if you have not registered, the following information may be collected through cookies:

• Device information: During the use of the Website, we collect information about the mobile device you use to access the Website. The information we obtain includes the device model, operating system and version, unique device identifier, and network.
• Information about your location: We also obtain your IP address, time zone, and, if applicable, your mobile service provider, which allows us to get a general location.
• Information about the user's navigation: We collect information about how you use the Website. Specifically, frequency of use, sections you visit, use of specific functions, etc.

4. WHAT TYPES OF COOKIES EXIST?

According to their purpose, we can classify cookies into the following:

1. Technical cookies: These cookies are strictly necessary to browse the Website as they allow basic functions such as navigating from one section to another. They handle technical aspects like identifying profiles or sessions and managing tool preferences in the use, interaction, and location of access to content. Also belonging to this category, due to their technical nature, are those cookies that enable the most efficient management of advertising spaces included on the Website, without collecting user information for purposes other than merely managing the space in question, such as personalizing that advertising content or other contents.
2. Statistical cookies: These cookies measure and collect statistical information related to the user's use of the Website, such as the time spent on it, the number of visits, or the visited contents. This information helps understand how users interact with the Website, evaluate site performance, which pages or sections are more or less visited, including quantifying the impact of ads placed on the Website (if applicable). With this information, errors can be fixed, the Website design improved, or the content offered through it enhanced.
3. Preference or personalization cookies: Preference cookies allow the Website to remember user information so that they access the service with certain characteristics that can differentiate their experience from that of other users. For example, their preferred language or the region from which they access, the number of results to show when the user performs a search, the appearance or content of the service depending on the type of device from which the user accesses the service.
4. Behavioral advertising cookies: These cookies enable the management of advertising spaces that the Website may include, based on the user’s browsing profile. These cookies store information about users' navigation obtained through continuous observation of their browsing habits, developing a specific profile of the user. This allows ads appearing in these spaces to be personalized for the user according to those habits.

Depending on the entity that manages them:

1. First-party cookies: are those sent to the user’s device from equipment or a domain managed by the Website owner, in this case, Floorfy, and from which the requested service is provided to the user.
2. Third-party cookies: are those sent to the user’s device from equipment or a domain not managed by the Website owner but by another entity that processes the data obtained through the cookies.

Depending on the time they remain active:

1. Session cookies: Designed to collect and store data during the time the user is browsing the Website and are deactivated when navigation ends.
2. Persistent cookies: These store data, and these can be accessed and processed for a period defined by the cookie owner, which can range from a few minutes to several years.

5. WHICH COOKIES DO WE SPECIFICALLY USE ON OUR WEBSITE?

On our Website, we use the following cookies:

6. WHAT IS THE LEGAL BASIS THAT ALLOWS US TO PROCESS YOUR DATA THROUGH COOKIES? IF APPLICABLE, ARE THEY MANDATORY?

The processing of the information collected through cookies and other tracking devices of non-technical functionality is based on your consent, which we request when you access the Website via an informational pop-up. For this type of cookies, you can withdraw your consent at any time as explained in the section regarding consent withdrawal.

The processing of information collected through technical cookies does not require consent, as it is based on the legitimate interest of Floorfy. Technical or necessary cookies cannot be disabled because otherwise the correct functioning of the Website would be compromised. Generally, they are only set in response to actions taken when requesting services from us, such as setting your preferences related to the cookies themselves, logging in, or completing forms. If disabled, this could limit the use of some Website services by restricting access to certain functionalities, resulting in a less satisfactory experience.

7. TO WHOM DO WE DISCLOSE YOUR PERSONAL INFORMATION? ARE THERE INTERNATIONAL DATA TRANSFERS?

We use some third-party cookies, which are cookies collected and managed by a third party, so these entities will receive your personal data collected through the cookies for the purposes specified for each cookie. This type of cookie is listed in the table in section 5 as "Third-Party Cookies." The table identifies the third party managing each cookie (see the "Domain" section in the Cookies table). In some cases, some providers of "first-party" cookie services might also collect your data for their own purposes, such as improving their tool. In these cases, we will also identify them as "Third-Party Cookies" in the section 5 table.

You can find information about transfers to third countries that, where applicable, are performed by the third parties identified in this cookie policy in their respective policies.

8. HOW CAN YOU ACCEPT, DENY, OR WITHDRAW CONSENT FOR COOKIE USE ON THIS WEBSITE?

When you first access our Website, a window appears where you can indicate whether you accept cookies or if you want to configure or reject them, except for strictly necessary ones. Likewise, you can withdraw previously granted consent at any time.

If you wish to withdraw your consent related to the Cookie Policy at any time, you have two options: (i) withdraw your consent through the buttons enabled for this purpose in this Cookie Policy; or (ii) delete the cookies stored on your device through your Internet browser settings and configurations.

Keep in mind that if you accept third-party cookies, you must delete them from the browser options or from the system offered by the third party itself.

You can find more information on how to disable cookies depending on your browser at the following links:

• Internet Explorer:

  https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

• Firefox:

  https://support.mozilla.org/en/kb/habilitar-y-deshabilitar-cookies-sitios-web-rastrear-preferencias

• Chrome:

  https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en

• Safari:

  https://support.apple.com/en-us/guide/safari/sfri11471/mac for iOS: https://support.apple.com/en-us/HT201265

9. WHAT RIGHTS CAN YOU EXERCISE AS A DATA SUBJECT?

The rights you have as a data subject regarding the protection of your personal data are indicated in the section "What rights can you exercise as a data subject?" within the Privacy Policy.

10. CHANGES TO THIS POLICY

We may update the Cookie Policy of our Website periodically. Therefore, we recommend you review this policy each time you access our Website to stay properly informed about how and for what purposes we use Cookies.