Privacy Policy

BASIC INFORMATION ON DATA PROTECTION

This Privacy Policy governs the processing of data collected by Europerfil, SA (hereinafter, the “Company”) through this Website (hereinafter, the Website).

The User warrants that any information provided is true, accurate, complete and up to date, and accepts responsibility for any direct or indirect damage that may arise from a failure to comply with this obligation. Where the User provides personal data relating to third parties, the User warrants that they have informed such third parties of the content of this Privacy Policy and have obtained their prior consent to provide their personal data to the Company

Where personal data are requested through the relevant forms made available on the Website, the User must provide, at a minimum, those data marked with an asterisk or otherwise identified as mandatory or required in the relevant form or data collection channel. Failure to provide such required data will prevent the Company from accepting and processing the User’s request.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

• Company name: Europerfil, SA
• Registered office: CR TOLEDO N402, KM 9,2 28021 VILLAVERDE (MADRID)
• Data Protection Officer:
  Email: proteccion.datos@arcelormittal.com
  Postal address: Carretera de Toledo Km 9.2 280121 Madrid

WHAT IS THE SOURCE OF THE PERSONAL DATA WE PROCESS?

The personal data processed by the Company are those provided directly by the User or obtained through the User’s interactions and the forms available on the Website. Accordingly, the User is always the source of the personal data processed.
 

FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA AND ON WHAT LAWFUL BASIS?

The personal data provided by the User may be processed by the Company for any of the purposes listed below, depending on the type of data provided by the User and the interactions carried out by the User through the Website.

In particular, the Company may process data for the following purposes:

• Use of the website:
  • Purpose: To ensure the security of the Website, measure the effectiveness of online advertising, and compile statistics.
  • Data processed for this purpose: Website browsing data.
  • Lawful basis: The Company’s legitimate interests, consisting of implementing appropriate technical and organisational measures to ensure website security, proper technical operation and service improvement.
     
• User management:
  • Purpose: Management of and assistance with user registration and activity.
  • Data processed for this purpose: Identification data, contact data and web browsing data.
  • Lawful basis: Legitimate interests of the controller.
     
• Sending commercial communications and alerts:
  • Purpose: To send information, through any channel, including electronic means, regarding news, activities, events, and other updates of the Company or of third parties, which may include commercial information about products, services, offers or promotions.
  • Data processed for this purpose: Identification, contact and preference data.
  • Lawful basis: Consent of the data subject.
     
• Handling User enquiries:
  • Purpose: Management and response to enquiries and communications submitted by Users.
  • Data processed for this purpose: Identification data and contact data.
  • Legal basis: Consent of the data subject.
     
• Compliance with the Company’s legal obligations in relation to the website:
  • Purpose: Compliance with legal obligations applicable to the Company in connection with the Website, where such processing is necessary.
  • Data processed for this purpose: Identification data, contact data and website browsing data.
  • Lawful basis: Compliance with legal obligations applicable to the Company.
     
• Management of job applications:
  • Purpose: To manage job applications.
  • Data processed for this purpose: Identification data, contact data, academic data and professional data.
  • Lawful basis: Consent of the data subject.

WHAT PERSONAL DATA DO WE PROCESS?

The personal data processed by the Company because of interactions carried out by Users through the Website derive from the personal data provided by Users through the forms made available by the Company, as well as data provided through the interaction of any other User with the Website.

Specifically, the Company may process the following categories of data:

• Identification data: First name, surname, user IP address.
• Contact data: Company name, company activity, postal address, email address, telephone number, postal code, city and country.
• Browsing data: Information collected through cookies.

TO WHOM ARE YOUR DATA DISCLOSED?

Data may be disclosed with Public Authorities where necessary for the fulfilment of the Company’s legal obligations.

No international transfers of Users’ personal data outside the European Economic Area (EEA) are envisaged. However, should any international transfer take place, it will be carried out in compliance with the requirements of applicable regulations, through the adoption of appropriate legal safeguards, which may consist of (i) the execution of Standard Contractual Clauses approved by the European Commission; or (ii) another valid legal mechanism ensuring an adequate level of protection equivalent to that provided within the EEA.

HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

Personal data will be retained for the period established by law or for as long as necessary to comply with applicable legal obligations.

WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

The User has the right to access their personal data and to obtain confirmation as to whether such data are being processed, as well as to request the rectification of inaccurate data or, where appropriate, to request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

Where applicable, the User may request the restriction of the processing of their data, in which case the data will only be retained for the purpose of exercising or defending legal claims. The User also has the right to object to the processing of their data and request the right to data portability.

To exercise data protection rights and to withdraw the consent given, the User may contact the Company at Carretera de Toledo Km 9.2, 28021 Madrid, or by email at proteccion.datos@arcelormittal.com.

For further information on the processing of personal data, the User may contact the Company’s Data Protection Officer at proteccion.datos@arcelormittal.com or at Carretera de Toledo Km 9.2, 28021 Madrid.

The User also has the right to lodge a complaint with the Spanish Data Protection Agency (http://www.aepd.es), particularly where the User considers that their rights have not been adequately satisfied.

Date of last update: 9 February 2026.