ANCCE PRIVACY PROTECTION POLICY

By means of this notice, the NATIONAL ASSOCIATION OF PUREBRED SPANISH HORSE BREEDERS, hereinafter ANCCE, with registered address at Cortijo de Cuarto (Viejo), 41014, Seville and email address [email protected], informs users of its portal regarding its personal data protection policy so that users may determine freely and voluntarily if they wish to provide ANCCE with the personal data that may be required or that may be obtained from users on the occasion of subscribing or registering for any of the services offered by ANCCE on or through the portal. ANCCE reserves the right to modify this policy to adapt it to new legislation or case law, as well as industry practices. In such cases, ANCCE will announce the changes introduced on this page with reasonable notice prior to their implementation.

- File and form registry
- Informative Clause – Second layer
- Additional Information on Data Protection

Common policy in all cases:

Who is responsible for the processing of your data?
ANCCE
Tax ID (CIF): G41071960
Address: Cortijo de Cuarto (Viejo), 41014, Seville
Telephone: +34 954 68 92 60 (option 2)
Email: [email protected]
Website: www.ancce.com

What are your rights when you provide us with your data?
Interested parties have the right to obtain confirmation as to whether or not we are processing personal data concerning them. Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Interested parties have the right to revoke or withdraw the consent granted for the processing of their data for specific purposes at any time. Under certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data or part thereof, in which case we will cease to process the data, except for the fulfillment of legal obligations. In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only retain it for the exercise or defense of claims and for the fulfillment of legal obligations. In certain circumstances, when the processing is carried out by automated means and is based on the consent of the interested parties, they may request the portability of their data so that it is transmitted to another controller. Interested parties may exercise their rights by sending a written request to the Data Controller at the address Cortijo de Cuarto (Viejo), 41014, Seville, or by email to the address [email protected]; forms for exercising these rights can be obtained at www.aepd.es. Likewise, interested parties may file a claim when they have not obtained satisfaction in the exercise of their rights, or obtain additional information regarding their rights before the Spanish Data Protection Agency (www.aepd.es).

Specific policies by section:

1 · Contact and information request section

2 · Data collection of Members and Supporters

3 · Client Invoices

4 · Email

5 · SICAB Registrations

6 · Telephone Calls

7 · Forms

8 · SEPA Direct Debit Mandate

9 · Supplier Orders

10 · Newsletter Subscription

11 · POS, secure payment gateway

1 - Contact and information request section

For what purpose do we process your personal data?
- To respond to your queries, requests or comments submitted through the general contact form on the website.
- To provide the information service regarding sector news through informative circulars sent by email or postal mail.
- To facilitate direct communication between users and members/sellers in the horse or member inquiry forms. In these cases, ANCCE acts as a mere technical intermediary facilitating the sending of the message to the recipient's email, without storing said content or being responsible for private communications between the parties.
- Your data will be kept as long as you maintain your consent for these purposes.
- No automated individual decisions will be made.

What is the legitimacy for processing your data?
We process your data based on your consent when submitting the corresponding form. If you do not provide the requested data, it is impossible to process your query or channel the information request to the member or seller of the horses.

To which recipients will your data be communicated?
In requests for information about horses or members, your contact details are transmitted directly to the member or owner of the corresponding horse to attend to your request. No data will be transferred to other third parties, except to those Public Administrations that request it by virtue of legal provision. No international data transfers will be made.



2 - Data collection of Members and Supporters

For what purpose do we process your personal data?
- To manage the administrative, accounting, economic and tax aspects of members and supporters.
- To provide the information service about sector news through informative circulars sent by email or postal mail.
- To promote and advertise your stud farm by including it in 'El Caballo Español' magazine, on the official website www.ancce.com and in other Association publications.
- Your data will be kept for the duration of the contractual/membership relationship between the parties. Contact data for promotional mailings and the dissemination of the stud farm will be kept as long as you do not revoke your consent.
- No automated individual decisions will be made, nor will profiles be created.

What is the legitimacy for processing your data?
We process your personal data based on the existing contractual and membership relationship between the parties to manage the requested services, and based on your consent for the promotional publication of your stud farm and the sending of informative notices. If you do not provide your data, it would be impossible to establish or maintain said membership relationship.

To which recipients will your data be communicated?
Stud farm data may be published on the website www.ancce.com, in 'El Caballo Español' magazine and in other Association publications for promotional purposes. No data will be transferred to other third parties, except to those Public Administrations that require it by virtue of legal provision. No international data transfers will be made.



3 - Client Invoices

For what purpose do we process your personal data?
- To manage the contracted services, as well as the tax, accounting and administrative management of our clients.
- Your data will be kept for the duration of the contractual relationship between the parties and, subsequently, for the periods legally required by tax and commercial legislation.
- No automated individual decisions will be made, nor will profiles be created.

What is the legitimacy for processing your data?
We process your personal data based on the execution of the contract for the provision of services or the commercial contract established between the parties and the fulfillment of applicable legal obligations. If you do not provide your data, it would be impossible to establish or maintain the commercial relationship between the parties.

To which recipients will your data be communicated?
Data will not be communicated to third parties, except to banking entities (for collection management) and those Public Administrations (such as the Tax Agency) that require it by virtue of legal obligation. No international data transfers will be made.



4 - Email

For what purpose do we process your personal data?
- To respond to your queries, requests or suggestions sent by email, as well as to manage the relationship with the entity.
- Your contact data will be kept as long as you maintain your consent for this purpose or do not request its deletion.
- No automated individual decisions will be made, nor will profiles be created.

What is the legitimacy for processing your data?
We process your personal data based on your consent when sending us the email. If you do not provide your data, it would be impossible to manage or respond to your request.

To which recipients will your data be communicated?
Your data will not be communicated to third parties, except to those Public Administrations that require it by virtue of legal provision or obligation. No international data transfers will be made.



5 - SICAB Registrations

For what purpose do we process your personal data?
- To manage the registration and relationship with the participants of the International Purebred Spanish Horse Trade Fair (SICAB).
- To publish photographs and/or videos of the participants along with their identification data in the official event catalog, on corporate websites, social networks and other media. Likewise, images of the award winners accompanied by their family members may be published.
- To broadcast the activities and competitions of the event through the platform www.sicab.tv live and on-demand.
- To provide the information service about sector and event news through informative circulars sent by email or postal mail.
- Your data will be kept for the duration of the contractual relationship/event and for the legally required periods. Contact data will be kept as long as you do not revoke your consent.
- No automated individual decisions will be made, nor will profiles be created.

What is the legitimacy for processing your data?
We process your data based on the execution of the contractual registration relationship for the event, ANCCE’s legitimate interest in disseminating the event and the interested party’s consent for the publication of images and the sending of information.

To which recipients will your data be communicated?
Data and audiovisual material may be transferred for the preparation of the Official Event Catalog, as well as for its dissemination on corporate websites, the www.sicab.tv platform and media outlets. The dissemination of images through social networks may entail international data transfers inherent to said platforms. No data will be transferred to other third parties, except to those Public Administrations that require it by virtue of legal obligation.



6 - Telephone Calls

For what purpose do we process your personal data?
- To attend to queries, requests or procedures carried out through telephone support.
- To record the telephone call for reasons of service quality or security of the management carried out.
- Your telephone recording and associated data will be kept as long as you maintain your consent for this purpose or during the legally required periods.
- No automated individual decisions will be made, nor will profiles be created.

What is the legitimacy for processing your data?
We process your personal data based on your consent granted by accepting the recording and continuing the call. If you do not provide your data or do not give your consent, it will not be possible to process your request through this channel.

To which recipients will your data be communicated?
Data will not be communicated to third parties, except to those Public Administrations that require it by virtue of legal provision. No international data transfers will be made.



7 - Forms

For what purpose do we process your personal data?
- To process and manage the requests, services or queries sent through the different forms available at ANCCE.
- To send information regarding the status of your request, as well as informative communications about events, activities and services of the Association by any means, including electronic ones.
- Your data will be kept while your request is being processed, as long as you do not revoke your consent for informative mailings and during the legally required periods.
- No automated individual decisions will be made, nor will profiles be created.

What is the legitimacy for processing your data?
We process your data based on the consent given when completing and sending the corresponding form, as well as in the application of pre-contractual or contractual measures for the provision of the requested service. If you do not provide the data required in the mandatory fields, it will not be possible to process your request.

To which recipients will your data be communicated?
Data collected through the forms will not be transferred to third parties, unless the nature of the request requires its communication to official bodies or competent Public Administrations by virtue of legal obligation. No international data transfers will be made.



8 - SEPA Direct Debit Mandate

For what purpose do we process your personal data?
- To manage the collection of membership fees, services, Studbook procedure fees and other concepts derived from the membership or contractual relationship by direct debit.
- To perform the accounting, tax and administrative management corresponding to the processed collections.
- Your data will be kept for the duration of the contractual or membership relationship between the parties and, subsequently, during the periods legally required by the applicable commercial, tax and banking legislation.
- No automated individual decisions will be made, nor will profiles be created.

What is the legitimacy for processing your data?
We process your personal data based on the execution of the contractual or membership relationship existing between the parties, as well as the express authorization granted by signing the SEPA direct debit mandate. If you do not provide this data, it will not be possible to process payment through this channel.

To which recipients will your data be communicated?
Your banking data will be transferred to the corresponding financial entities for the management and processing of collections, as well as to Public Administrations that require it by virtue of legal obligation. No international data transfers will be made.



9 - Supplier Orders

For what purpose do we process your personal data?
- To manage the commercial, contractual and operational relationship with our goods and services suppliers.
- To carry out the corresponding administrative, accounting, tax and billing management.
- Your data will be kept for the duration of the contractual relationship between the parties and, subsequently, during the periods legally required by commercial and tax legislation.
- No automated individual decisions will be made, nor will profiles be created.

What is the legitimacy for processing your data?
We process your personal data based on the execution of the commercial contract or the pre-contractual/commercial relationship established between the parties, as well as the fulfillment of applicable legal obligations. If you do not provide your data, it would be impossible to establish or maintain the commercial relationship.

To which recipients will your data be communicated?
Your data will not be communicated to third parties, except to banking entities (for payment of services/orders) and those Public Administrations or the Tax Agency when current legislation so requires by virtue of legal obligation. No international data transfers will be made.



10 - Newsletter Subscription

For what purpose do we process your personal data?
- To manage the sending of the entity's newsletter, in order to inform about activities, events, notices, sector news and news related to the Association and the Studbook.
- Your data will be kept as long as you do not revoke the consent provided or request to unsubscribe from this service.
- No automated individual decisions will be made, nor will profiles be created.

What is the legitimacy for processing your data?
We process your personal data based on your consent granted when subscribing through the corresponding form. If you do not provide the requested data, it will not be possible to process your subscription or send you the newsletter.

To which recipients will your data be communicated?
Data will not be communicated to third parties, except to those Public Administrations that require it by virtue of legal obligation. No international data transfers will be made.



11 - POS, secure payment gateway

For what purpose do we process your personal data?
- To manage the electronic collection of fees, processing of Studbook services or fees, event registrations, activities and other concepts associated with the Entity.
- To perform the accounting, administrative and tax management derived from the economic transactions carried out.
- Data will be kept for the time necessary to process the payment and, subsequently, during the periods legally required by tax, commercial and administrative legislation.
- No automated individual decisions will be made, nor will profiles be created.

What is the legitimacy for processing your data?
The legal basis for processing is the execution of the contractual or pre-contractual relationship initiated when requesting payment for the service, as well as the fulfillment of legal obligations regarding commercial and tax matters.

To which recipients will your data be communicated?
Payments made electronically are managed through the secure virtual POS platform and the collaborating banking entities in charge of processing the operation. No data will be transferred to other third parties, except by legal obligation to the competent Public Administrations. No international data transfers will be made.



ANCCE provides users with the appropriate technical resources so that, beforehand, they can access this Privacy Policy notice or any other relevant information and can provide their consent so that the Entity may proceed with the processing of their personal data. Except in fields where otherwise indicated, the provision of personal data is voluntary, and the lack of response does not imply a decrease in the quality or quantity of the corresponding services.

:: Purposes
The purposes for which the personal data you provide us will be used are clearly defined in the previous sections for each of the sections subject to data collection.

:: Exercise of rights
The procedure for exercising your rights is defined in the common policy section of this document and may be exercised at any time by communication sent to [email protected].

:: Accuracy and truthfulness of the data provided
Users guarantee and respond, in any case, to the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated.

Users have recognized, and may exercise, the rights of access, rectification, deletion, opposition, limitation of processing and portability, as well as the right not to be subject to automated decisions and to be informed of transfers made, by contacting ANCCE through the email address [email protected].

ANCCE is not responsible for the truthfulness of information that is not self-elaborated and for which another source is indicated; therefore, it does not assume any responsibility regarding hypothetical damages that might arise from the use of said information.

ANCCE reserves the right to update, modify or eliminate the information contained in its portals and web platforms, and may even limit or deny access to said information.

ANCCE is exonerated from liability for any damage or harm that the user may suffer as a result of errors, defects or omissions in the information provided, provided that it comes from sources external to the Entity.

Date of last update: July 29, 2026