SANTAELLA JEANS SAS PERSONAL DATA PROTECTION POLICY

SANTAELLA JEANS SAS , informs its stakeholders of its General Policy for the Protection of Personal Data. The personal data that SANTAELLA JEANS SAS guards, in its capacity as responsible and/or in charge, will be treated in compliance with the principles and regulations provided for in the applicable Colombian laws, which are aligned with good international practices in the matter. Specifically, SANTAELLA JEANS SAS treats the personal data that is required for the operation of the business and its relationship with interest groups in accordance with the principles of Law 1581 of 2012, in the same way the data is treated in compliance with the legal regulation of the protection of personal data in Colombia in its different regulations.

All personal data will be processed by SANTAELLA JEANS SAS in accordance with the following general purposes:

➢ To exercise the corporate purpose contained in the respective bylaws. ➢ For the fulfillment of the obligations derived from the existing contractual relations with its interest groups.
➢ For the fulfillment of the legal obligations that involve personal data of its interest groups.
➢ For commercial management and relationship with its stakeholders.
➢ For the operation of the web and technology platforms that are managed by SANTAELLA JEANS SAS.
➢ For the provision of value-added and loyalty services in relation to the information it manages about its clients and interest groups.

In each business process, and according to the personal data collected and treatment to be carried out, the particular purposes will be previously informed in the respective privacy notice; name or company name and contact information of the person in charge or in charge of the treatment, and if the treatment will be carried out by a person in charge, in which case such person in charge will be under the direction of SANTAELLA JEANS SAS ; the rights that assist the owner and the mechanisms provided by SANTAELLA JEANS SAS to publicize the personal data protection policy.

Any person who is part of one of the interest groups, in relation to the processing of their personal data, has the right to:

➢ Exercise their right of habeas data consisting of knowing, updating and rectifying the personal data collected from them. And to oppose or request the cancellation of your data in those cases in which such request proceeds in accordance with the Law or the contract signed between the parties.
➢ Evidence the existence of consent granted for information that is not intended to be public.
➢ Exercise the actions that Colombian law recognizes in terms of personal data protection and habeas data.

For the exercise of habeas data, the owner of the personal data or whoever demonstrates a legitimate interest in accordance with the provisions of current regulations, may do so by contacting the customer service area through the email access that allows users to contact the company. Whoever exercises habeas data must accurately provide the contact information requested in order to be contacted in relation to their request and display the charges for the exercise of their rights.

Once the request to exercise Habeas Data has been received, SANTAELLA JEANS SAS will respond to queries and/or claims as indicated in articles 14 and 15 of Law 1581 of 2012.

The treatment of personal data carried out by SANTAELLA JEANS SAS in accordance with this policy will be based on the regulations, procedures and instructions adopted by this institution for compliance with the legislation applicable to the protection of personal information.

This policy has been approved by the highest corporate body of the company on February 12, 2021.