a) Basic Information on Data Protection:

Joint Controllers

INDITEX (as defined in the Terms and Conditions) and/or the company of the Inditex Group that you are currently employed by (herein after “We”).

Purposes

We will use your personal data to manage your registration as a user of LEAP&Co application (hereinafter “LEAP&Co”), in accordance with the Terms and Conditions, as well as to manage the training plans and evaluations.

Rights

You have the right to access, rectify or delete the data, as well as other rights, as detailed in the additional information.

Additional information

For further information, continue reading the information in this clause.

b) Additional Information:

Joint Controllers: ITX MERKEN, B.V., a Dutch company with registered address in Amsterdam, Nieuwezijds Voorburgwal 307, 1012 RM, and tax identification number NL 855820627B01, and/or the company of the Inditex Group that you are currently employed by.

Purposes and legal basis: We will process your personal data (given name, surname, employee number, store where you work, country, as well as any other data or information which you may provide as a result of using the app) in order to manage your registration as a user of LEAP&Co and manage the training plans and evaluations available.

We are lawfully entitled to use your data for various reasons: (i) the execution of the Terms and Conditions that you accept when registering as a user of LEAP&Co and (ii) the execution of your employment contract with us regarding the training plans that you will carry out or manage/evaluate.

We will process your data while the employment relationship is in effect and will therefore not keep them longer than necessary for the purposes described above, notwithstanding any conservation that may be necessary after the employment relationship has ended for the establishment, exercise or defence of potential claims and/or whenever so permitted by applicable legislation. In any case, the keeping of the personal data after the employment relationship has ended will imply that the Data will be duly kept with access restricted only to those persons with responsibility in the company to defend the claims or liabilities that may potentially arise.

Data recipients: To achieve the purposes set out in this Privacy Policy, We must give access to your data to the companies of the Inditex Group to the extent that these are involved in the development, execution and diffusion of LEAP&Co (whose activities are associated with the sectors of decoration, textiles, ready to wear garments and home furnishings, as well as any other of a complementary nature, including cosmetics and leather goods, as well as the development and provision of support for e-commerce activities) and to third parties that give support to us, as technological services.

Rights: You may at any time exercise your rights of data protection (access, rectification, erasure, right to be forgotten limit the processing, objection, portability, as well as any other that could correspond according to the applicable data protection regulation) as well as to contact the Data Protection Officer for any consult related with data protection, by sending an email to the address dataprotection@inditex.com, with the subject “LEAP&CO” and indicating the right you want to exercise. If necessary, we may request additional information proving your identity, which will be erased once the purpose of identifying you has been fulfilled.

More information: If you have additional doubts about the processing of the personal data, please send an email to dataprotection@inditex.com indicating in the subject line "LEAP&CO".