EU AI ACT ART. 50 APPLICABLE 2 AUG 2026 · MACHINE-READABLE MARKING ENFORCEABLE 2 DEC 2026 ART. 50 TRANSPARENCY BREACHES — FINES UP TO €15M / 3% GLOBAL TURNOVER FINAL CODE OF PRACTICE (10 JUN 2026): SIGNED METADATA + WATERMARK + PUBLIC DETECTION EU AI ACT ART. 50 APPLICABLE 2 AUG 2026 · MACHINE-READABLE MARKING ENFORCEABLE 2 DEC 2026 ART. 50 TRANSPARENCY BREACHES — FINES UP TO €15M / 3% GLOBAL TURNOVER FINAL CODE OF PRACTICE (10 JUN 2026): SIGNED METADATA + WATERMARK + PUBLIC DETECTION

Privacy Policy

This policy establishes the basis on which VOTTUN S.L. will treat any personal information that it may collect, process and protect, provided through the website https://aiact50.com/ (hereinafter the "Website") respecting at all times the principles of legality, loyalty and transparency, as well as the rest of the obligations and guarantees established in the current regulations.

1. Who will process your personal data?

  • Data controller: VOTTUN S.L (hereinafter VOTTUN)
  • Registered address: Avenida Alcalde Barnils 64-68, mod C 1, Edificio Testa, 08174 Sant Cugat del Vallès, Barcelona
  • TAX ID: B67319046
  • E-mail: [email protected]

2. For what purposes are the data processed and on what basis of legitimacy does the processing rely?

Your personal data will be processed in accordance with the purposes specified at the time of collection and on the legal bases provided for in the applicable regulations.

3. What data will be processed?

The data to be processed by VOTTUN within the framework of the relationship with the data subject and depending on the purpose of the processing shall include, but not be limited to, the following categories:

  • Private contact data and identification data (name and surname, address, email, landline or cell phone number, ID card or similar document, IP address).
  • Data related to employment and organization (company, department, position, responsibilities, functions).
  • Data relating to professional and training circumstances (career, job data, period of employment, tasks, activities, studies, qualifications, evaluations).
  • Financial data for billing management (bank account).
  • Data relating to photographs and videos on personal image. When attending activities and events organized by VOTTUN, the person concerned may be photographed or videotaped. Such photographs and videos are used by VOTTUN to inform you of the events it organizes as well as to provide you with information or communications that may be of interest to attendees.

In addition, in order to analyze the performance of our services, data derived from the use and contracting of our products and services will be used.

4. Obligation to provide data

The forms provided on the Website will identify the information that must be filled in. If the user does not provide the information marked as mandatory, VOTTUN will not be able to process the request.

5. How long will we keep the data?

VOTTUN will retain users' personal data only for the time necessary to fulfill the purposes for which it was collected, as long as the consent granted has not been withdrawn. Subsequently, if necessary, the information will be kept blocked for the legally established periods.

In the case of data provided in relation to job applications, it will be retained for one year from the date of the last update. After this period, if it has not been updated, the data will be deleted unless you indicate otherwise.

You can obtain more information at [email protected].

6. To whom will your data be communicated?

The personal data processed will not be communicated to third party companies, except with the prior information and express consent of the interested party.

In addition, we inform you that certain data, within the framework of the regulations in force or of the contractual relationship you maintain with VOTTUN, may be communicated to:

  • Public administrations with competence in VOTTUN's sectors of activity, when so established by current regulations.
  • The State Security Forces and Corps by virtue of the provisions of the Law.
  • Banks and financial institutions for the collection of the services offered.
  • Other professionals in the legal field, when such communication is required by law, or for the execution of the contracted services.

7. International data transfers

In the event that we transfer personal data or exchange personal data with third parties outside the European Economic Area, we will ensure that we and the persons or companies to whom we transfer personal data take appropriate protection measures in accordance with existing data protection legislation, in particular by using the safeguards of Chapter V of the GDPR, such as standard contractual clauses or such other mechanisms as may be appropriate from time to time.

8. Rights of the interested party

In accordance with the provisions of the applicable regulations, VOTTUN informs the data subject that he/she has the following rights:

  • Access: allows the data subject to obtain information on whether or not VOTTUN is processing personal data concerning him/her and, if so, the right to obtain a copy of the personal data being processed.
  • Rectification: allows you to correct errors and modify data that are inaccurate or incomplete.
  • Deletion: allows data to be deleted and no longer processed by VOTTUN, unless there is a legal obligation to keep it and/or there are no other legitimate reasons for VOTTUN to process it.
  • Limitation: under the legally established conditions, allows the processing of data to be stopped, so that VOTTUN avoids processing in the future, and will only keep the data for the exercise or defense of claims.
  • Opposition: in certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data. VOTTUN will cease to process the data, except for compelling legitimate reasons, or for the exercise or defense of possible claims.
  • Portability: allows the data subject to receive his or her personal data and to be able to transmit it directly to another controller in a structured, commonly used and machine-readable format.

VOTTUN guarantees the adoption of the necessary measures to ensure the exercise of these rights free of charge. You can exercise them through the following channels:

  • By email: [email protected]
  • By post: Avenida Alcalde Barnils 64-68, mod C 1, Edificio Testa, 08174 Sant Cugat del Vallès, Barcelona, to the attention of VOTTUN customer management.

Likewise, if the interested party considers that he/she has not obtained full satisfaction in the exercise of his/her rights, he/she may file a complaint before the Spanish Data Protection Agency (AEPD) located at Calle de Jorge Juan, 6, 28001 Madrid or through www.aepd.es.

9. Security measures

VOTTUN is committed to keeping your Personal Data secure, taking all reasonable precautions to do so. To this end, we implement all necessary technical and organizational measures in accordance with this Policy and applicable laws and regulations to protect your Personal Data against any unauthorized access, modification or disclosure, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.

We also contractually require our service providers and partners to apply an adequate level of security for the proper protection of personal data.

10. Changes to this privacy policy

This Policy may change over time due to possible changes in the criteria followed by the supervisory authority responsible for data protection at any given time. VOTTUN therefore reserves the right to modify this policy in order to adapt it to these criteria, as well as to new health, jurisprudential or legislative developments.