GOODNEWS PRIVACY NOTICE

Effective Date: July 27, 2020

This privacy notice (“Notice”) outlines our policies and practices regarding the processing of your personal data.

Accordingly, this Notice explains how your personal data is collected, used, and disclosed by GoodNews. It also informs you how to access and update your personal data and make certain choices about how your personal data will be used.

This Notice covers our data collection activities online and through other means, including personal data we collect through our channels, such as websites, apps, third-party social media, customer service centers, points of sale, and events. Additionally, we inform you that we combine personal data collected through this website with data collected through other channels and sources, such as events or physical points of sale.

This Notice provides information on the following aspects:

• SOURCES OF PERSONAL DATA

This Notice applies to personal data we collect from you or about you through the methods described below, from the following sources:

GoodNews Websites: Consumer-oriented websites operated by or for GoodNews, including those we operate under our own domains/URLs and sites we manage on third-party social networks like Facebook or Instagram (“Websites”).

GoodNews Mobile App: Includes consumer-targeted mobile apps operated by or for GoodNews, such as smartphone apps.

Email, Text Messages, or other Electronic Messages: Electronic communications between you and GoodNews.

GoodNews Points of Sale: Attendees present at any GoodNews point of sale who will show and assist you with the purchase or ordering of coffee or any other product.

Data from Other Sources: Third-party Social Networks (such as Facebook or Google) or market research.

• PERSONAL DATA SUBJECT TO COLLECTION

Depending on the method of contact through which you interact with GoodNews, we collect various types of information about you, as described below:

• Contact Information: This includes any information that allows us to contact you, such as your name, mailing address, email address, social media, or phone numbers.

• Account Registration Information: Any information requested to grant you access to your account profile. This includes your identifier, email address, username, password in an irreversible form, and/or security question and answer, among others.

• Demographic and Interest Information: Any information describing your distinctive demographics. This includes your date of birth, age or age range, gender, geographic location (e.g., postal code), favorite products, hobbies and interests, home and lifestyle information, among others.

• Technical Information about Computing/Mobile Devices: Any information about the computer system or other technological device you use to access one of our websites or apps. This includes the internet protocol (IP) address you use to connect your computer or device to the internet, the type of operating system, and the type and version of web browser. If you access a GoodNews website or app via a mobile device such as a smartphone, the collected information will also include your mobile device’s unique identifier, advertising ID, geographic location, and other similar mobile device data.

• Website Usage Information: While you browse and interact with our websites, we use automated data collection technologies to gather certain information about your actions. This information includes the links you click on, the pages or content you view, the time you spend doing so, as well as other similar information and statistics about your interactions, such as content response times, download errors, and the duration of visits to specific pages. This information is obtained using automated technologies such as cookies and web beacons. It is also collected through the use of third-party tracking services. You have the right to object to the use of such technologies (see “Cookies / Similar Technologies” section).

• Market Research and Consumer Feedback: This includes information you voluntarily share with GoodNews about your experience with our products and services.

• Consumer-Generated Content. Refers to any content you create and share with GoodNews on third-party social networks or upload to one of our websites or apps. This includes the use of third-party social network apps like Facebook. Such content refers to photos, videos, personal stories, or other similar media or content, among others, as well as posts or private messages you may leave on GoodNews social network pages. When allowed, we collect and publish consumer-generated content about activities such as contests and other promotions, website community features, consumer-targeted events, and third-party social networks.

• Third-Party Social Network Information. Refers to any information you publicly share on a third-party social network (such as Facebook) or that is part of your profile on such networks, to which you have authorized the sharing of this information with GoodNews. This information includes basic account information (such as your name, email address, gender, date of birth, current city, profile picture, username, friends list, etc.) and any additional or additional activities that you allow the third-party social network to share, among others. We receive your third-party social network profile information (or part of it) every time you download or interact with a GoodNews web app on one of these networks, such as Facebook. This also happens when you use a social network feature integrated into a GoodNews website or when you interact with GoodNews through a third-party social network. For more information on how GoodNews obtains your information from a third-party social network, or to opt out of sharing it, you should visit the relevant third-party social network website.

• Financial and Payment Information. This includes any information we need to complete an order; the information you use to make a purchase, such as debit or credit card data (cardholder name, card number, expiration date, etc.), or other payment methods (if available). In any case, both GoodNews and our payment processing providers handle financial and payment information following applicable laws and regulations and security standards.

• Email. We analyze your interactions with our content (e.g., clicking, opening an email) to provide you with personalized information based on your interests and preferences.

• COOKIES / SIMILAR TECHNOLOGIES, LOG FILES, AND WEB BEACONS

• Cookies/Similar Technologies. See our COOKIE NOTICE for information on how to manage your settings, detailed information on the cookies we use, and the purposes for which we use them.

• Log Files. We collect information through log files that record website activity and gather statistics about user browsing habits. These entries are generated automatically and help us troubleshoot errors, improve performance, and maintain the security of our websites.

• Web Beacons. Web beacons (also known as “web beacons”) are small strings of code that send a graphic image on a web page or in an email for data transfer. Information collected through them may include information such as the IP address, as well as information about how a user responds to an email campaign (e.g., the time an email is opened, where the user links from the email, etc.). We may use web beacons on our websites or include them in emails we send you. We use web beacon information for various purposes, such as website traffic reports, unique visitor accounts, advertising, email auditing and reporting, and personalization, among others.

• USE OF PERSONAL DATA

The following paragraphs describe the various purposes for which we collect and use your personal data, as well as the different types of personal data collected for each purpose. Please note that not all of the uses described below will be relevant to every individual:

• Customer Service

• Why do we use your personal data?

We use your personal data for customer service purposes, including responding to your inquiries. This typically requires the use of certain personal contact information and information regarding the reason for your inquiry (such as order status, technical issue, product question/complaint (transmitted through our communication channels or social media, for example), general question, etc.).

• Legitimate Interests

Improving and developing new products and services tailored to your needs.

• Data Controller

Joint data controllers.

• Promotions, Contests, and Marketing

• Why do we use your personal data?

We use your personal data with your consent, as necessary, to provide you with information about products or services (such as marketing communications, campaigns, or promotions). This is done through means such as email, advertisements, SMS, phone calls, and postal mail within the limits allowed by applicable laws. Some of our campaigns and promotions take place on third-party websites and/or social media. This use of your personal data is voluntary, meaning you can object to its processing for these purposes. For more information about our contests and other promotions, please refer to the official rules or information posted with each contest or promotion.

• Legitimate Interests

Improving and developing new products and services tailored to your needs. Knowing which products best suit your interests. Knowing preferences and audience types.

• Data Controller

Joint data controller.

• Third-Party Social Networks

• Why do we use your personal data?

We use your personal data when you interact with third-party social network features, such as “Like,” to provide you with ads and address you on third-party social networks. For more information on how these features work, the profile data we obtain from you, and how to opt out, please review the relevant third-party social network privacy notices.

• Legitimate Interests

Improving and developing new products and services tailored to your needs. Knowing which products best suit your interests. Knowing preferences and audience types.

• Data Controller

GoodNews Barcelona 2020, S.L.

• Order Processing

• Why do we use your personal data?

We use your personal data to process and ship your orders, inform you about their status, correct addresses, and perform identity verification and other activities to detect fraud. This involves using certain personal data and payment information.

• Data Controller

GoodNews Barcelona 2020, S.L.

• DISCLOSURE OF PERSONAL DATA

We share your personal data with the following recipients:

Service Providers: These are external companies we use to help us manage our business (such as order fulfillment, payment processing, fraud detection and identity verification, website operation, market research companies, support services, promotions, website development, data analysis, CRC, etc.). Service providers and their selected staff can only access and use your personal data on our behalf for specific tasks they have been requested to perform, following our instructions, and are required to protect your personal data and not disclose it.

Credit Reporting Agencies/Collection Agents: To the extent permitted by applicable laws, credit reporting agencies and collection agents are external companies we use to help us verify your creditworthiness (especially for invoice orders) or collect outstanding invoices.

Third-party companies that use personal data for their own marketing purposes: Except in situations where you have given your consent, we do not license or sell your personal data to third-party companies for their own marketing purposes. Your identity will be disclosed when your consent is requested.

• RETENTION OF YOUR PERSONAL DATA

In accordance with applicable laws, we will use your personal data for as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal requirements.

• YOUR RIGHTS REGARDING YOUR PERSONAL DATA

Access to Your Personal Data: Where permitted by law, you, your successors, representatives, and/or agents have the right to access, review, and request a physical or electronic copy of the information we hold about you. You also have the right to request information about the origin of your personal data.

These rights can be exercised at datos@goodnewsco.es and by providing a copy of your ID card or equivalent information.

Additional Rights: Where permitted by law, you, your successors, representatives, and/or agents may: (i) request the erasure, portability, correction, or revision of your personal data; (ii) object to the processing of data; (iii) restrict the use and disclosure of your personal data; and (iv) withdraw consent to any of our data processing activities.

These rights can be exercised at datos@goodnewsco.es and by providing a copy of your ID card or equivalent information.

Please note that, in certain circumstances, we may not be able to delete your personal data without also deleting your user account. We may be required to retain some of your personal data after you have requested deletion to meet our legal or contractual obligations. Applicable laws may also allow us to retain some data to fulfill the corresponding legal obligations.

When available, our websites have a specialized feature that allows you to review and modify the personal data you have provided. Please note that we require our registered consumers to verify their identity (such as login identification/email address or password) before they can access or make changes to their account information. This helps prevent unauthorized access to your account.

We hope to be able to satisfy any concerns you may have about how we process your personal data. However, if you have any issues to resolve, you also have the right to file a complaint with your corresponding data protection authority. www.aepd.es.