COOKIES POLICY

This Cookies Policy is an integral part of the legal texts and Privacy Policy of (i) the website https://dream-marbella.com (hereinafter, the «Website«) owned by IQUO DREAMS SPV, S.L. (hereinafter, «IQUO«), with Tax ID number B22982284, registered address at Paseo de la Castellana, 115-10 Izquierda 28046, Madrid, and email address for privacy purposes: info@iquo.io

Accessing and browsing the Website, as well as accepting the cookie banner and its settings, implies acceptance of the terms and conditions set out in this Cookie Policy.

In order to facilitate navigation on the Website, IQUO informs you that it uses cookies or other files with similar functionality (hereinafter, «Cookies«).

In any case, we inform you that IQUO is responsible for these Cookies and for the processing of the data obtained through them, deciding on the purpose, content, and use of the processing of the information collected. Furthermore, this Website does not install our Cookies on Users’ devices until they have accepted their installation.

• What is a Cookie?

Cookies are files containing small amounts of information that are downloaded to the user’s device when they visit a website, associating only with an anonymous user and their device and sometimes providing evidence that allows access to the user’s personal data.

Cookies are essential for the functioning of the Internet. Their main purpose is to recognize the user each time they access the Website, allowing for better use of both environments, personalizing the services offered on the Website, and providing the user with information that is of interest to them or that may be of interest to them, based on their use of those services. In any case, the user may access their browser settings to modify and/or block the installation of cookies sent from the Website, without this preventing access to the content.

• Use of Cookies by IQUO

Users expressly authorize the use of this information for the purposes indicated, through the channels enabled for this purpose on the Website, without prejudice to their right to refuse, disable, or configure the use of Cookies.

Specifically, IQUO is using Cookies for the purposes set out below. If in the future IQUO uses other Cookies for the purpose of providing more services, the user will be informed of this.

These Cookies will always be installed on the user’s device after consent has been obtained and/or they have been configured.

This Cookies Policy provides general information on all Cookies used on the Website. However, for the user’s information, Cookies that are necessary for the Website to function will be enabled by default and may be disabled and rejected by the user, where applicable, in accordance with current regulations.

• Types and purposes of cookies used on the Website

Third-party cookies are used on the Website. Depending on the entity that manages the data obtained through Cookies, they are grouped as follows:

• Own: Those that are sent to the publisher itself that provides the service requested by the user.

• Third-party cookies: These are not managed by the publisher, but by a third party who manages the data obtained through cookies.

Cookies are also grouped according to their permanence as follows:

• Session cookies: these remain during access and navigation on the site and are deleted once the user leaves the website.

• Persistent: they remain stored on the terminal and can be accessed and processed for a period of time defined by the person responsible for the cookie.

On the other hand, depending on their purpose, cookies are classified as:

• • Technical or necessary cookies

These are cookies that are considered essential for browsing, as they facilitate the user’s use of its features or tools, such as identifying the session, accessing restricted areas, and ensuring browsing security. Without these cookies, the aforementioned functions would be disabled.

IQUO’s technical cookies

In particular, IQUO, through the Website, uses and collects the following technical cookies:

COOKIES	OWNER	PURPOSE	EXPIRATION
_GRECAPTCHA	Third-party (Google)	Protects website forms from spam and brute force attacks	Persistent (6 months)
AEC	Third-party (Google)	Detect spam, fraud, and abuse	Persistent (6 months)
__Secure-STRP	Third-party (Google)	Ensure that the cookie is only sent over encrypted and secure connections (HTTPS)	Persistent (indefinite)

• • Analytical cookies

These cookies are used to analyze user navigation on the Website and to keep track of it. Some of these cookies identify the user, while others only use aggregated data.

IQUO’s analytical cookies

IQUO, through the Website, uses third-party cookies for the security of both environments and for analytical purposes. Specifically, these cookies are:

COOKIES	OWNER	PURPOSE	EXPIRATION
SOCS	Third-party (Google)	Store user cookie choices	Persistent (13 months)

• • Preference or personalization cookies

These cookies allow information to be remembered so that the user can access the service with certain characteristics that may differentiate their experience from that of other users, such as, for example, the language, the number of results to be displayed when the user performs a search, the appearance or content of the service depending on the type of browser, etc.

IQUO’s preference cookies

IQUO, through the Website, uses the following personalization cookies:

COOKIES	OWNER	PURPOSE	EXPIRATION
DV	Third-party (Google)	Store user preferences, such as language and search history, and use of services such as Google Maps	Session
__Secure-ENID	Third-party (Google)	Remember your browsing preferences and other information, such as language	Persistent (13 months)

• • Behavioral advertising cookies

These are cookies that, whether processed by us or by third parties, allow us to analyze your Internet browsing habits so that we can show you advertising related to your browsing profile.

IQUO’s advertising cookies

IQUO uses the following advertising cookies through the Website:

COOKIES	OWNER	PURPOSE	EXPIRATION
NID	Third-party (Google)	Display Google ads on Google services to users who are not logged in	Persistent (6 months)

• User settings to prevent cookies

In compliance with current regulations, users can configure the installation of cookies on the Website through the channels specifically enabled for this purpose. Using this tool, users can accept all cookies, reject them all (in which case, those that are not necessary for the functioning of the website) or configure them gradually.

In particular, users can modify their choice (including revoking their consent) regarding cookies after accepting, configuring, or rejecting them at any time through the following options:

• Through the Cookie Configuration Panel found at the bottom of the Website.
• Through the browser settings.

In this regard, IQUO provides Website users with information that allows them to configure their Internet browser(s) to maintain their privacy and security in relation to Cookies. Therefore, information and links to the official support sites of the main browsers are provided so that each user can decide whether or not to accept the use of Cookies.

It is therefore possible to block cookies using the browser’s configuration tools, or each user can configure their browser to warn them when a server wants to save a cookie:

• If you use Microsoft Internet Explorer, you will find the option in the Tools menu > Internet Options > Privacy > Settings. To learn more, visit this link: https://support.microsoft.com/es-es/office/habilitar-las-cookies-6b018d22-1d24-43d9-8543-3d35ddb2cb52

• If you use Firefox, you will find the option in the Tools menu > Options > Privacy > Cookies. For more information, visit this link: https://support.mozilla.org/es/kb/Borrar%20cookies

• If you use Chrome, go to Options > Advanced Options > Privacy. For more information, visit this link: https://support.google.com/accounts/answer/61416?hl=es

• If you use Opera, you can configure your browser in the Security and Privacy option. For more information, visit this link:  http://help.opera.com/Windows/11.50/es-ES/cookies.html

• If you use Safari, you will find the option in the Preferences/Privacy menu. To learn more, visit this link: http://support.apple.com/kb/HT1677?viewlocale=es_ES

• If you use Microsoft Edge, go to Settings and more > Settings > Privacy, search, and services. For more information, visit this link: https://support.microsoft.com/search/results?query=cookies+Microsoft+Edge&isEnrichedQuery=true

• Information regarding your personal data

In order to exercise any of your data protection rights, as well as to find out about (i) the purposes of the processing and the legal basis for the processing; (ii) the recipients or categories of recipients of the personal data; (iii) international transfers; (iv) retention period; (v) rights of data subjects; and (vi) existence of automated decisions, including profiling, you can access IQUO’s Privacy Policy.

• Changes to the Cookies Policy

This Cookies Policy may be modified in accordance with legislative or regulatory requirements, or in order to adapt said policy to the instructions issued by the Spanish Data Protection Agency. Users are therefore advised to visit it periodically. When significant changes are made to this Cookies Policy, users will be notified by email.

Last update: November 12, 2025.

2025, IQUO DREAMS SPV, S.L. All rights reserved

IMPLEMENTATION OF COOKIES POLICY

A banner containing the Cookie notice and also the option to configure them, i.e., allowing them to be accepted or rejected separately, must be implemented on the Website. This banner must be visible on the user’s screen, even if the user scrolls or navigates to different sections of the website itself.

It is advisable that the information be provided in layers, including summary information in a first layer and more detailed information in a second layer, all in accordance with the recommendations of the Spanish Data Protection Agency (hereinafter, the «AEPD«) established both in its new Guide on the use of Cookies, published on July 28, 2020, and in its Guide for compliance with the duty to inform.

Taking the above into account, the following must be detailed in the first layer (the cookie banner):

• First layer (Cookie Banner)

• The identity of the data controller;

• A reference to the use of third-party cookies, if any;

• The purpose of the cookies (specifying whether profiles are created based on user browsing and the purpose of these profiles, for example, in cases of offering personalized advertising);

• A link to access the second layer of information («Cookies Policy«), where the rest of the information can be consulted;

• An express acceptance mechanism that allows the cookie notice to be closed by clicking on an «ACCEPT» button; and

• A mechanism in which the user can configure cookies, choosing in a granular way which ones they want to authorize. (A link to a configuration panel must be included, with text similar to the following: «Configure or reject the use of cookies HERE «).

Below is an example of what the banner text should look like:

«We use third-party cookies for analytical purposes and to provide you with a service tailored to your preferences. Click HERE for more information. You can accept all cookies by clicking the «Accept» button, reject them by clicking the «Reject» button, or configure them by clicking the «Configure» button.»

ACCEPT

REJECT

CONFIGURE

Regarding this first-layer example, it is important to note that (i) it must be added as a fixed banner on the website and that (ii) cookies cannot be loaded until the user expressly accepts them (by clicking the «Accept» button). In addition, (iii) the user must be able to withdraw their consent at any time by accessing the Configuration panel enabled by clicking on the «Configure» button.

Furthermore, in this settings panel, the user must be able to separately accept the enabling of cookies by category/purpose (for example, the user must be able to choose to accept analytical cookies but not behavioral advertising cookies), implementing, for example, YES/NO boxes.

Notwithstanding the above, the maximum degree of granularity (cookie-by-cookie selection) should be avoided, as too much information makes decision-making difficult.

Finally, with regard to third-party cookies, it is sufficient to identify them by their name or by the brand with which they are identified to the public, without including the full company name.

• Configuration Panel

The configuration panel should be provided via a link inserted in the cookie banner or first layer of information, so that a pop-up window appears with a table (to make it more visual) so that the user can proceed to accept/reject the enabling of cookie groups separately in a granular manner according to the different categories you use on the Website (except for session/technical cookies (in this case called «necessary»), which are exempt from this consent requirement, but it is advisable to inform users of their existence, as indicated in the Cookie Policy).

This panel must include information on the expiration of the cookie, the developer, etc., and must include a button that allows the user to reject all cookies, in order to comply with the requirement that it be as easy to withdraw consent as it is to give it.

For these purposes, for example, this requirement will be considered satisfied if the configuration panel includes a button to save the user’s cookie choices, expressly specifying in the new AEPD Guide on the use of cookies that if the user saves their choice without having selected any cookies, this will be equivalent to rejecting all cookies.

Taking the above into account, we indicate below how the text should be included in the Configuration Panel, in the case of the button for saving the user’s cookie choice:

«By clicking «Save settings,» your cookie selection will be saved. If you have not selected any options, clicking this button will be equivalent to rejecting all cookies.»

SAVE SETTINGS

The second layer, i.e., the text of the Cookies Policy, should detail the following:

• Second Layer (Cookies Policy)

In addition to the settings panel specified above, the Cookie banner must also include a link to «Click HERE for more information» that redirects the User to the full text of the Cookies Policy that we have included in this Dossier.