Personal Data Treatment Policy

NOTICE OF PRIVACY

This Privacy Notice (hereinafter the "Notice") establishes the terms and conditions under the Akzara SAS Group , identified with NIT 900.983.715-1 and with address at Calle 10 # 36 32 piso 2 de Medellín, will carry out the processing of your personal data.

1. TREATMENT AND PURPOSE:

The treatment that Grupo Akzara SAS will carry out with personal information will be the following:

The collection, storage, use, circulation for the following purposes; Carry out the pertinent steps for the development of the company's corporate purpose in what has to do with compliance with the purpose of the contract entered into with the Holder of the information. Make invitations to events and offer new products and services. Manage procedures (requests, complaints, claims). Carry out satisfaction surveys regarding the goods and services offered by Grupo Akzara SAS. Provide contact information to the commercial force and/or distribution network, telemarketing, research of the Akzara SAS Group . Contact the Owner through telephone means to carry out surveys, studies and/or confirmation of personal data necessary for the execution of a contractual relationship. Contact the Holder through electronic means – SMS or chat to send news related to loyalty campaigns or service improvement. Contact the Holder via email to send statements, account statements or invoices in relation to the obligations derived from the contract entered into between the parties. Provide the services offered by Grupo Akzara SAS and accepted in the signed contract.

2. RIGHTS OF THE OWNER:

As the owner of your personal data, you have the right to:

(i) Free access to the data provided that has been processed.

(ii) Know, update and rectify your information against partial, inaccurate, incomplete, divided, misleading data, or those whose treatment is prohibited or has not been authorized.

(iii) Request proof of the authorization granted.

(iv) Submit complaints to the Superintendence of Industry and Commerce (SIC) for violations of the provisions of current regulations.

(v) Revoke the authorization and/or request the deletion of the data, provided that there is no legal or contractual duty that prevents its deletion.

(vi) Refrain from answering questions about sensitive data. The answers that deal with sensitive data or data on children and adolescents will be optional.

3. MECHANISMS TO KNOW THE PROCESSING POLICY

The Owner can access our Information Treatment Policy, which is published electronically at the web address http://www.akzaraspa.com

PERSONAL DATA PROCESSING POLICY

AIM:

Establish the criteria for the collection, storage, use, circulation and deletion of personal data processed by Grupo Akzara SAS

SCOPE:

This policy applies to all personal information registered in the databases of Grupo Akzara SAS, which acts as the person responsible for the processing of personal data.

OBLIGATIONS:

This policy is mandatory and strict compliance for Grupo Akzara SAS

RESPONSIBLE FOR THE TREATMENT:

Grupo Akzara SAS, a legally constituted commercial company, identified with NIT 900.983.715-1, with main address at Carrera 36 # 1 sur 75 in the city of Medellín, Republic of Colombia. Page www.akzaraspa.com Telephone 604 5886767 in the city of Medellín.

TREATMENT AND PURPOSE:

The treatment that Grupo Akzara SAS will carry out with personal information will be the following:

The collection, storage, use, circulation for the following purposes: Carry out the pertinent steps for the development of the company's corporate purpose in what has to do with compliance with the purpose of the contract entered into with the Holder of the information. Make invitations to events and offer new products and services. Manage procedures (requests, complaints, claims). Carry out satisfaction surveys regarding the goods and services offered by Grupo Akzara SAS. Provide contact information to the commercial force and/or distribution network, telemarketing, research of the Akzara SAS Group .

Contact the Owner through telephone means to carry out surveys, studies and/or confirmation of personal data necessary for the execution of a contractual relationship. Contact the Holder through electronic means – SMS or chat to send news related to loyalty campaigns or service improvement. Contact the Holder via email to send statements, account statements or invoices in relation to the obligations derived from the contract entered into between the parties.

Provide the services offered by Grupo Akzara SAS and accepted in the signed contract.

RIGHTS OF THE HOLDERS:

As the owner of your personal data, you have the right to:

(i) Free access to the data provided that has been processed.

(ii) Know, update and rectify your information against partial, inaccurate, incomplete, divided, misleading data, or those whose treatment is prohibited or has not been authorized.

(iii) Request proof of the authorization granted.

(iv) Submit complaints to the Superintendence of Industry and Commerce (SIC) for violations of the provisions of current regulations.

(v) Revoke the authorization and/or request the deletion of the data, provided that there is no legal or contractual duty that prevents its deletion.

(vi) Refrain from answering questions about sensitive data. The answers that deal with sensitive data or data on children and adolescents will be optional.

ATTENTION OF REQUESTS, QUERIES AND CLAIMS

The Customer Service area is the agency in charge of processing the requests of the holders to make their rights effective. The attention of Petitions, Consultations and Claims will be made in the email akzaraspa@hotmail.com

PROCEDURE FOR THE EXERCISE OF THE RIGHT OF HABEAS DATA

In compliance with the regulations on personal data protection, Grupo Akzara SAS presents the procedure and minimum requirements for the exercise of your rights:

For the filing and attention of your request, we ask you to provide the following information:

Full name and surname / Contact information (Physical and/or electronic address and contact telephone numbers),

Means to receive a response to your request / Reason(s)/fact(s) that give rise to the claim with a brief description of the right you wish to exercise (know, update, rectify, request proof of the authorization granted, revoke it, delete, access to the information) / Signature (if applicable) and identification number.

The maximum term provided by law to resolve your claim is fifteen (15) business days, counted from the day following the date of receipt. When it is not possible to address the claim within said

term, Grupo Akzara SAS will inform the interested party of the reasons for the delay and the date on which their claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the first term. Once the terms indicated by Law 1581 of 2012 and the other norms that regulate or complement it have been fulfilled, the Owner who is denied, totally or partially, the exercise of the rights of access, update, rectification, deletion and revocation, may bring your case to the attention of the Superintendence of Industry and Commerce -Delegation for the Protection of Personal Data-.

VALIDITY:

This Policy for the Treatment of Personal Data is effective as of January 1, 2022.

The databases in which the personal data will be registered will have a validity equal to the time in which the information is maintained and used for the purposes described in this policy. Once that purpose(s) is fulfilled and provided there is no legal or contractual duty to retain your information, your data will be deleted from our databases. The personal data provided will be kept as long as its deletion is not requested by the interested party and as long as there is no legal duty to keep it.