At TULA FAMILY SL we take the protection of our users’ and clients’ personal data very seriously. This Privacy Policy describes how we collect, use and protect personal information when you use our website www.tula-family.com (hereinafter, the “Website”). The processing of personal data complies with the provisions of Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD). Data Controller

• Owner: TULA FAMILY SL
• Tax ID (CIF): B21969373
• Registered Office: Calle Maestro Albéniz 8, Entreplanta, 03202 Elche (Alicante, Spain)
• Contact Email: [email protected]

Personal Data We Collect We may collect the following categories of data:

• Identification data: name, surname(s), ID/NIE, postal address.
• Contact data: email address, telephone number.
• Billing and payment data: where applicable.
• Browsing data: IP address, browser, operating system, pages visited, cookies.
• Uploaded documentation: electricity bills or other documents uploaded by the user to the Website to obtain offers.

Purposes of Data Processing The personal data provided by the user through the Website will be processed for the following purposes:

1. Management of user requests (registration, submission of bills, information queries, etc.).
2. Provision of contracted services.
3. Sending commercial communications and promotions related to TULA FAMILY SL products and services (always with the user’s prior consent).
4. Improvement of user experience on the Website through analysis of browsing habits and cookies.

Legal Basis for Processing The legal bases legitimising the processing of your data are:

• Performance of a contract or pre-contractual measures (when you request a service or send us your bill).
• Compliance with legal obligations applicable to TULA FAMILY SL.
• Explicit consent (for commercial communications and non-essential cookies).
• Legitimate interest of TULA FAMILY SL in improving its services and Website security.

Data Retention Period Personal data will be kept only for as long as strictly necessary to fulfil the purpose for which they were collected and, where applicable, for the legally required periods.

• Customer data: for the duration of the contractual relationship and subsequently for 6 years in accordance with tax obligations.
• Browsing/cookie data: as indicated in the Cookie Policy.
• Commercial communications: until the user withdraws consent.

Data Disclosure to Third Parties TULA FAMILY SL will not disclose your personal data to third parties except where legally required or when strictly necessary to provide the requested services (for example, to electricity supply companies to generate the requested offer). In such cases, the corresponding data processing agreements will be signed to guarantee confidentiality and data security. User Rights The user may exercise the following rights at any time:

• Access to their personal data.
• Rectification of inaccurate or incomplete data.
• Erasure of their data (“right to be forgotten”).
• Objection to the processing of their data.
• Restriction of processing.
• Data portability to another controller.

These rights may be exercised by sending a written request along with a copy of your identification document to: 📧 [email protected]
📮 TULA FAMILY SL, Calle Maestro Albéniz 8, Entreplanta, 03202 Elche (Alicante, Spain) The user also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they believe their rights have been violated. Data Security TULA FAMILY SL has adopted the necessary technical and organisational security measures to ensure the confidentiality, integrity and availability of personal data, preventing their alteration, loss, unauthorised processing or access. Modifications TULA FAMILY SL reserves the right to modify this Privacy Policy at any time to adapt it to legislative, judicial or sector practice changes. Any such modifications will be announced on this same page with reasonable notice before implementation.