I. Privacy Policy and Data Protection

In compliance with current legislation, the Public Business Entity FUNDACIÓN MIES VAN DER ROHE (hereinafter, FUNDACIÓN MIES) undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security to the risk of the data collected.

Which laws does this privacy policy incorporate?

This privacy policy is adapted to the current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following regulations:

Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of individuals about the processing of personal data and the free movement of such data (GDPR).

Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).

Royal Decree 1720/2007, of December 21, which approves the Regulations for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).

Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Who is responsible for processing your personal data?

The entity responsible for processing your personal data is the Public Business Entity FUNDACIÓN MIES VAN DER ROHE, with registered office in Barcelona, at C/ Provença, 318, pral. 2a, 08037 Barcelona, with CIF number G59125369, telephone 932 151 011, and email lopd@miesbcn.com.

Who is the Data Protection Officer (DPO)?

The functions of Data Protection Officer (DPO) of the MIES FOUNDATION have been assumed by Mrs. ROSER OLÓNDRIZ SOLER, C/ Provença, 318, pral. 2ª, Barcelona (08037).

Phone: +34 932 151 011

Email: lopd@miesbcn.com

Where are your personal data incorporated and how are they processed?

In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data requested by FUNDACIÓN MIES, through the forms displayed on its websites, will be incorporated and processed in our file in order to facilitate, expedite, and fulfil the commitments established between FUNDACIÓN MIES and the user or the maintenance of the relationship established in the forms that the latter completes, or to respond to a request or inquiry. Likewise, a register of processing activities is maintained specifying, according to its purposes, the processing activities carried out and other circumstances established in the GDPR.

What are the principles applicable to the processing of personal data?

The processing of the user's personal data will be subject to the following principles set forth in Article 5 of the GDPR and in Article 4 and following of the LOPD-GDD:

Principle of lawfulness, fairness, and transparency: The user's consent will be always required after completely transparent information about the purposes for which the personal data is collected.

Principle of purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.

Principle of data minimization: Personal data collected will be only those strictly necessary in relation to the purposes for which they are processed.

Principle of accuracy: Personal data must be accurate and kept up to date.

Principle of storage limitation: Personal data will only be kept in a form that allows the identification of the user for the time necessary for the purposes of the processing.

Principle of integrity and confidentiality: Personal data will be processed in a way that ensures its security and confidentiality.

Principle of proactive responsibility: The data controller will be responsible for ensuring that the above principles are complied with.

What is the legal basis for the processing of your personal data?

The legal basis for the processing of personal data is consent. FUNDACIÓN MIES undertakes to request the express and verifiable consent of the user for the processing of their personal data for one or more specific purposes.

The user will have the right to withdraw consent at any time. Withdrawing consent will be as easy as giving it. Generally, withdrawal of consent will not affect the use of the website.

What purposes do we process your personal data for?

Personal data is collected and managed by FUNDACIÓN MIES to facilitate, expedite, and fulfil the commitments established between the website and the user or the maintenance of the relationship established in the forms that the latter completes or to respond to a request or inquiry.

Specifically, FUNDACIÓN MIES may process the personal data obtained from the owner thereof, for the following purposes:

1. Contact. Manage the data of individuals who contact the MIES FOUNDATION via email, and send communications regarding the inquiries and requests received, as well as information about the services and activities carried out by the MIES FOUNDATION.

2. Newsletter Subscription. Manage the data of individuals who contact the MIES FOUNDATION through the form provided to the user and send information about the services and activities conducted by the MIES FOUNDATION, as well as updates from the online store SHOPMIES.

The personal data provided to FUNDACIÓN MIES will be kept if the interested party does not request its deletion. In any case, the data will only be stored for as long as necessary to comply with any legal obligations.

What is the origin of the personal data we process?

The personal data processed by FUNDACIÓN MIES is voluntarily communicated by the interested parties at the time of express acceptance of the privacy policy, by completing the forms made available by FUNDACIÓN MIES to the user.

Who are your personal data communicated to?

Your personal data will only be disclosed with your unequivocal consent or in compliance with legal obligations to the competent authorities: Tax Administration, courts, and other public administrations with jurisdiction over the matter.

If it is necessary for the personal data provided to FUNDACIÓN MIES to be processed by professional advisors or service providers, they will act as data processors in accordance with the contract signed for this purpose and in compliance with the provisions of the GDPR.

No transfers of data to third countries or international organizations are made.

Can minors give consent for the processing of their personal data?

In accordance with Articles 8 of the GDPR and 7 of the LOPD-GDD, only those over 14 years of age may give legal consent for the processing of their personal data by FUNDACIÓN MIES. If the person is under 14 years of age, the consent of the parents or guardians for the processing will be required, and it will only be considered valid to the extent that they have authorized it.

How long do we keep your personal data?

Personal data is kept for the time necessary for the provision of the service or until the interested party withdraws their consent. Subsequently, the data will be deleted in accordance with the provisions of data protection regulations, which implies their blocking, and will only be available upon request by courts and tribunals, the Public Prosecutor's Office, or competent public administrations during the statute of limitations period for any actions that may arise, and once this period has elapsed, they will be completely deleted.

What are your rights?

The Interested parties may exercise the following rights before FUNDACIÓN MIES:

• Right of access: request a copy of their personal data that FUNDACIÓN MIES has stored.

• Right of rectification or deletion: request the rectification of inaccurate data, request their update, or their deletion.

• Right of limitation: request the limitation of the processing of personal data, in which case we will only keep them for the exercise or defence of claims.

• Right to object to processing: request that FUNDACIÓN MIES stop processing the data, in the manner indicated, except for legitimate, compelling reasons or due to the exercise or defence of possible claims that must continue to be processed.

Right to data portability: request that their data be processed by another controller, in which case, FUNDACIÓN MIES will facilitate the portability.

The data subject may, at any time, withdraw their consent for the specific processing of their personal data. However, this will not affect the legality of the processing based on the consent given prior to its withdrawal.

The data subject may exercise the rights described above by means of a written request addressed to FUNDACIÓN MIES VAN DER ROHE, at the postal address C/ Provença, 318, pral. 2a, Barcelona, 08037, or by sending an email to the address lopd@miesbcn.com . In both cases, the identity of the data subject must be verified by attaching a photocopy of a valid identity document, as this concerns the exercise of a very personal right.

However, interested parties may also contact the Catalan Data Protection Authority to file a complaint about the exercise of their rights or any other matter related to compliance with data protection regulations (more information at https://apdcat.gencat.cat).

II. Acceptance and changes in this privacy policy

It is necessary for the user to have read and agree to the conditions regarding the protection of personal data contained in this privacy policy, as well as to accept the processing of their personal data so that the data controller can proceed with the processing, during the periods and for the purposes indicated. The use of the website will imply acceptance of its privacy policy.

FUNDACIÓN MIES reserves the right to modify its privacy policy, in accordance with its own criteria, or motivated by a legislative, jurisprudential, or doctrinal change by the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the user. It is recommended that the user periodically check this page to stay informed of the latest changes or updates.