LEGAL TERMS WARNING: The User understands that the use of this tool means acceptance of this Legal Notice, as well as the general conditions of use. ### SOURCE OF INCOME THE CLIENT, by consenting to any of the contracts that are perfected when making transactions on mascotasbichos.com, declares under oath that his or her income comes from lawful activities, that he or she is not listed negatively on national or international anti-money laundering lists, that he or she is not included in one of the two categories of money laundering (conversion or movement) and that, consequently, he or she is obligated to respond to BICHOS BOUTIQUE SAS for all damages that may be caused as a result of this statement. He or she shall also be liable to third parties. It also declares that its conduct complies with the law and ethics and, consequently, undertakes to implement measures aimed at preventing its operations from being used, with or without its consent and knowledge, as instruments for concealing, handling, investing, or exploiting in any way money or other assets derived from criminal activities, or to give the appearance of legality to these activities. Similarly, it undertakes to act within the legal framework in force in Colombia, complying with all procedures, formalities, and obligations contemplated in the Law and other pertinent regulations, and that any evidence that these principles are not complied with or may be called into question will be sufficient cause to terminate, at the discretion of the compliant Party, the Contract resulting from its acceptance. ### MASCOTAS BICHOS is not responsible for any damages or losses arising from the misuse of the information on the page, since the User understands and accepts that access to this tool, as well as the use that may be made of the services and information contained therein, are the exclusive responsibility of the "user" who performs them. You may make changes to the presentation and configuration of the page, as well as to its content and services, at any time and without prior notice. Please note that some of the text, links, and/or information contained on the page may not be accurate or up-to-date, or may have been received or reported by third parties over whom BICHOS BOUTIQUE SAS has no control. For this reason, BICHOS BOUTIQUE SAS will not be liable for errors or omissions related to information not created by it, nor for any damages or losses that may arise as a result of the use of said information. Furthermore, it should be noted that although this is a secure site, it is not error-free, and consequently, the general information, as well as the characteristics of the advertised products and prices, may vary due to human or technological error, manipulation by unauthorized third parties, viruses, or any other type of invasion or technological manipulation. You may obtain magnetic records in order to provide proof of the operations and/or transactions carried out by the "user." BICHOS BOUTIQUE SAS reserves the right to perform subsequent verifications of any transaction executed by the user, as well as to request confirmation of the transaction from the user. Furthermore, BICHOS BOUTIQUE SAS may reject purchases made by the customer, either partially or totally, from any offer presented on the page. In such case, BICHOS BOUTIQUE SAS will refund the customer the amount corresponding to the value of the rejected transaction. It is important to keep in mind that: #### Account Confidentiality: The user must treat their account, as well as any other identification number or password, with complete confidentiality, regardless of whether these were provided by BICHOS BOUTIQUE SAS or selected by the user. All activities carried out with their account, such as exchanges, inquiries, requests, and other activities, will be their sole responsibility. For the above reasons, whether or not the client has an account on the BICHOS BOUTIQUE SAS website, it is necessary that they have electronic security devices and adopt the necessary measures to prevent, among others: impersonation, the use of their information by third parties, fraud, intrusions, viruses, spyware, and the like. In addition, these security devices can be used to verify the identity of the "user". #### Companies as "users": BICHOS BOUTIQUE SAS assumes that, if the user is billing in the name of a certain company, it is because they have the full capacity and authorization to do so. ### LIMITATION OF LIABILITY BICHOS BOUTIQUE SAS will not, under any circumstances and in any way, be responsible for the content that "users" may incorporate into this tool. At no time does it guarantee the accuracy, veracity, reliability, or updating of the information included in this tool. BICHOS BOUTIQUE SAS assumes no responsibility for not receiving timely notification from the "user" in the event of a breach of personal information in their account. Note: For more information, consult the consumer statute, Law 1480. #### INTELLECTUAL PROPERTY The intellectual property rights of the page are owned by BICHOS BOUTIQUE SAS: The disclosure, reproduction, distribution or public communication of all or part of this tool is strictly prohibited without prior written authorization from BICHOS BOUTIQUE SAS. BICHOS BOUTIQUE SAS has the right to reject the "user" access to the page. The "User" understands that no type of credit approval is carried out in this tool. ### SECURITY & PRIVACY Your information will be kept strictly confidential. mascotasbichos.com uses a security system called SSL (Secure Socket Layer), which is currently the standard used by the world's leading companies to conduct secure electronic transactions. This means that all your personal information cannot be read or captured by third parties as it travels over the internet. #### General Privacy Policy #### Commitment to Security In relation to our Site www.mascotasbichos.com, BICHOS BOUTIQUE SAS, hereinafter MASCOTAS BICHOS, makes this security and privacy statement in order to demonstrate and communicate its commitment to a high ethical level of business practices and equipped with appropriate internal controls. In addition, this statement is made to guarantee its commitment to protecting the personal data of its users. #### Required User Information The "Register" form on our Site asks users for Personal Data such as name, date of birth, email address, physical address, country of reference, identification document, and telephone number. By completing the form or requesting from our website the transfer of information from other sites or social networks such as Facebook, Twitter, Google, etc., the user gives his or her express consent for MASCOTASBICHOS and/or third parties that have commercial ties with it, to carry out processing operations of his or her Personal Data such as collection, storage, use, circulation, or deletion, in the terms of this Policy. The Personal Data will be subject to Processing for the development of commercial and transactional activities, for the fulfillment of orders, to answer queries about products and services offered, to carry out studies for statistical purposes, to gain knowledge of the client, to send you information about news, products, services and special offers, for the development of activities related to computerized services, telephone services, collections or other similar nature and to inform users about changes to this Policy. Furthermore, the user expressly consents to MASCOTASBICHOS transferring and/or transmitting their Personal Data, or allowing access to it, to third parties located in Colombia or abroad, including countries that do not provide adequate levels of protection for Personal Data. If MASCOTASBICHOS requests sensitive personal data such as racial or ethnic origin, political orientation, religion, biometric data, etc., the user's response will be optional. MASCOTASBICHOS will process your Personal Data for as long as necessary to fulfill the aforementioned purposes and/or as long as necessary to comply with legal or contractual obligations. #### Capture of User Information When Using the Site During your visit to our Site, it may capture information regarding specific activities of a particular user, generating reports that allow us to view aggregated activity by user. We use cookies to track your shopping cart and to send you specific information related to your interests. Links to Other Sites This Site may contain links to other sites. MASCOTASBICHOS is not responsible for the security or privacy practices, or the content of those sites. Likewise, MASCOTASBICHOS does not endorse any products or services offered on those sites. Likewise, MASCOTASBICHOS is governed by this security policy and privacy statement; therefore, the policies of sites that direct traffic to www.mascotasbichos.com do not apply. #### Data Protection Our Site is protected by a wide variety of security measures, such as change control procedures, passwords, and physical access controls. We also employ other mechanisms to ensure that the information and Personal Data you provide are not lost, misused, or inappropriately modified. These controls include confidentiality policies and periodic database backups. The processing of personal data is carried out in accordance with the regulations applicable to the protection of personal data contained in Law 1581 of 2012, Decree 1377 of 2013, and any other law, decree, or regulation that modifies, regulates, or repeals it. #### Personal Data The user will have at all times the rights to (1) know, update and rectify their personal data with MASCOTASBICHOS, (2) request proof of this authorization from MASCOTASBICHOS, if you grant it, (3) be informed by MASCOTASBICHOS, upon your request, about the use that has been given to your personal data, (4) file complaints with the Superintendence of Industry and Commerce for violations of the provisions of this law and other regulations that modify, add to or complement it, (5) revoke your authorization and / or request the deletion of your data if its processing does not respect the constitutional and legal principles, rights and guarantees, as long as the Superintendence of Industry and Commerce has determined that in the processing MASCOTASBICHOS has incurred in conduct contrary to this law and the Constitution, (6) access free of charge to your personal data that have been subject to processing. #### Communication Channels: For the exercise of your rights, MASCOTASBICHOS has provided the following communication channels: By sending an email to contacto@mascotasbichos.com BICHOS BOUTIQUE SAS NIT: 901074354-8 Address: Calle 97 # 10-26 Telephone: (571) 7024358 Bogotá DC ### PROCESSING OF CONSULTATIONS AND CLAIMS RELATED TO THE PROCESSING OF PERSONAL DATA: #### Consultations As the owner of personal data, you may consult the information held in our databases. Consultations must be submitted through the communication channels stated and will be answered within a maximum period of ten (10) business days, as provided by law. When it is not possible to attend to the query within said term, the interested party will be informed, stating the reasons for the delay and indicating the date on which the query will be attended to, which in no case may exceed five (5) business days after the expiration of the first term. #### Claims The owner of the information may file CLAIMS regarding (i) Personal Data Processed by MASCOTASBICHOS that must be corrected, updated or deleted, or (ii) the alleged breach of the Legal duties by the Company. To file claims, please note the following instructions: The Claim must be filed by the Owner, their successors in title or representatives, indicating the name and identification document of the Owner through the communication channels stated. The claim must be filed through the communication channels stated. It must indicate the address, contact and identification information of the claimant. MASCOTASBICHOS will receive and process claims that refer exclusively to BICHOS BOUTIQUE SAS. It must contain a description of the facts giving rise to the claim and the objective pursued (update, correction or deletion, or compliance with duties). It must be accompanied by all the documentation that the claimant wishes to assert. If the claim or additional documentation is incomplete, MASCOTASBICHOS will require the claimant once within five (5) days following receipt of the claim to correct the deficiencies. If the claimant does not present the required documentation and information within two (2) months following the date of the initial claim, it will be understood that he has withdrawn the claim. The maximum term to address the claim will be fifteen (15) business days counted from the day following the date of its receipt. When it is not possible to address the claim within this term, the interested party will be informed of the reasons for the delay and the date on which their claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the first term. #### More Information If you have any questions about our security and privacy statement or the practices used on this site, you can contact us by sending an email to contacto@mascotasbichos.com. This Policy is effective from the date of its publication and is understood to be in effect for the entire term of the relationship between you and MASCOTASBICHOS. This Policy is governed by the laws of the Republic of Colombia. MASCOTASBICHOS reserves the right to modify this Policy at any time and at its sole discretion. However, if its content is substantially modified, MASCOTASBICHOS will notify you of this situation to its contact email address. #### Beware of fraudulent emails. These emails appear to come from a recognized company, using its brand or logo. But in reality, they are designed to obtain personal data in order to commit fraud or involve customers in illegal acts. In some cases, these emails will ask you to enter information such as your email address, password or account number, and PIN. In other cases, the email may contain a virus that detects private information. To avoid the latter, we recommend that you always keep your antivirus updated. Below are some tips to help you identify these emails and avoid falling for the tricks of unscrupulous users. #### Things we will never ask you for via email: Your credit card number or password. Your password at www.mascotasbichos.com. Request to update your details or account information. We will never ask you to update your information on a site other than www.mascotasbichos.com. In the case of contests or campaigns that aim to update our databases, the email we send you will take you directly to the www.mascotasbichos.com home page or to its registration portal hosted at a www.mascotasbichos.com address. Suspicious attachments in emails. www.mascotasbichos.com will never send attachments in its emails, nor will it allow associated businesses to do so, unless you request to receive documents such as your account statements by email. We recommend that you never open an attachment from a sender you don't know. If for any reason you open a suspicious attachment, we recommend running your antivirus software immediately. Sender's Address: Check the information that appears in the From field. If something like mascotasbichos@hotmail.com or another server other than www.mascotasbichos.com appears, it may be a fraudulent email. If you think an email is suspicious, immediately visit www.mascotasbichos.com. If you have any doubts, do not click on the email and go directly to www.mascotasbichos.com and log in to your account. If you can't do this, or if you see something suspicious, contact us. Protect your information: If for any reason you clicked on a suspicious email, we recommend that you immediately go to Your Account at www.mascotasbichos.com and change your password. Although others may have access to your data, if they don't have the correct password, there is nothing they can do. ### General clarifications AUTHORIZATION FOR DATA PROCESSING I have been informed by BICHOS BOUTIQUE SAS. (Data controller) of the following: (i) The data provided in this document will be processed for the following purposes: Sending or using the information for contractual, customer service, marketing purposes (such as consumption analysis, brand traceability, among others), Commercial purposes (such as benefits, promotions, discounts, current campaigns, promotional events, writings, images, data messages, allied brands and programs of own or allied brands, among others), updating data and providing relevant information; Consultation to answer queries about products and services offered, carrying out studies for statistical purposes, customer knowledge. Information, to inform data owners about news, products, services and special offers, for the development of activities related to telephone service, collections or others of a similar nature. (ii) It is optional to answer questions about sensitive data or data of minors; (iii) As the owner of the data and/or representative of the minor, I have the right to know, update, rectify or delete my information or revoke the authorization granted; (iv) In the event that my request is not resolved directly, and subsidiarily, I have the right to file complaints with the Superintendency of Industry and Commerce, in accordance with Law 1581 of 2012, Decree 1377 of 2013 and other complementary regulations; (v) I can exercise my rights and obligations by strictly observing the Data Processing Policy of BICHOS BOUTIQUE SAS. Available at www.mascotasbichos.com I declare that I have provided third-party data with their unequivocal and express authorization. ### PRIVACY NOTICE BICHOS BOUTIQUE SAS is committed to the fair, lawful, legitimate and secure processing of the personal data contained in its information systems. As the party responsible for said processing, it hereby informs that the personal data of its clients, contractors, suppliers and third parties are processed in accordance with the Information Processing Policy, the content of which is available on the website www.mascotasbichos.com . Therefore, the information provided is processed for the purposes and scope set forth in the aforementioned policy, which indicates your rights as the owner of the information to know, update or rectify your data, as well as any other rights provided for in current regulations, which may be exercised through the email address contacto@mascotasbichos.com. ### PERSONAL DATA PROCESSING POLICY #### GENERAL CONSIDERATIONS Article 15 of the Constitution of the Republic of Colombia establishes the right of any person to know, update, and rectify their personal data held in databases or files of public or private entities. It also requires those who possess the personal data of third parties to respect the rights and guarantees provided for in the Constitution when collecting, processing, and distributing such information. Furthermore, in order to balance, justice, and equity with respect to the aforementioned Article 15, Article 20 of the Constitution of the Republic of Colombia establishes the right of any person, Data Controller or Data Processor, to receive truthful and impartial information. BICHOS BOUTIQUE SAS (The Company) is committed to complying with regulations regarding the protection of personal data and respecting the rights of data subjects. Therefore, it adopts the following Personal Data Processing Policy, which is mandatory for all activities involving the processing of personal data and is binding on the Company, its directors, employees, and officers. The Company, within the development of its corporate purpose, receives, transmits and processes Personal Data internally and externally for the mission and support activities it carries out in accordance with its statutes, its corporate purpose, and the law. MANDATORY These policies are of mandatory and strict compliance by BICHOS BOUTIQUE SAS, its administrators, employees in Colombia and the contractors and third parties acting on behalf of BICHOS BOUTIQUE SAS. All employees of BICHOS BOUTIQUE SAS must observe and respect these policies in the performance of their duties. #### PURPOSE OF THE POLICY: With this document, the Company guarantees adequate compliance with the applicable personal data protection law, and for the attention of queries and complaints from the owners of the Personal Data that the Company processes. #### DEFINITIONS. Authorization: Prior, express and informed consent of the data owner to carry out the processing. This may be written, verbal, or through unequivocal conduct that reasonably allows us to conclude that the data subject has granted authorization. Database: The organized set of Personal Data that is subject to Processing, whether electronic or not, regardless of the method of its formation, storage, organization, and access. Query: Request by the data subject or by persons authorized by the data subject or by law to access the information held about them in databases or files. Personal Data: Any information linked to or that can be associated with one or more specific or identifiable natural persons. This data is classified as sensitive, public, private, and semi-private. Sensitive personal data: Information that affects a person's privacy or whose misuse may lead to discrimination, such as information that reveals racial or ethnic origin, political orientation, religious or philosophical beliefs, membership in unions, social organizations, human rights organizations, or that promotes the interests of any political party or that guarantees the rights and guarantees of opposition political parties, as well as data related to health, sexual life, and biometric data (fingerprints, among others). Public personal data: Data classified as such according to the mandates of the law or the Political Constitution and all data that are not semi-private or private. Public data includes, among others, data contained in public documents, public records, official gazettes and bulletins, and duly executed court rulings that are not subject to confidentiality, data related to a person's civil status, their profession or trade, and their status as a merchant or public servant. Personal data held in the commercial register of the Chambers of Commerce are considered public data (Article 26 of the Civil Code). Likewise, public data is that which, by virtue of a decision of the data subject or a legal mandate, is contained in files that are freely accessible and accessible. This data may be obtained and offered without reservation and regardless of whether it refers to general, private, or personal information. Private personal data: Data that, due to its intimate or reserved nature, is only relevant to the data subject. Examples: merchants' books, private documents, information obtained from a home inspection. Semi-private personal data: Data that is not intimate, reserved, or public in nature and whose knowledge or disclosure may be of interest not only to the data subject but also to a certain sector or group of people or society in general, such as, among others, data relating to the fulfillment and non-fulfillment of financial obligations or data relating to relationships with social security entities. Data processor: The person who processes data on behalf of the data controller. "Authorized" refers to the Company and all persons under the Company's responsibility who, by virtue of the Authorization and the Policy, are authorized to process the Data Subject's Personal Data. Authorized includes those authorized. "Authorization" or "Authorized" refers to the authorization that the Company expressly grants in writing, through a contract or other document acting in its place, to third parties, in compliance with applicable law, for the processing of Personal Data, making such third parties the Data Processors of the Personal Data provided or made available. "Request": A request by the data subject or persons authorized by them or by law to correct, update, or delete their personal data, or when they become aware of a presumed breach of the data protection regime, pursuant to Article 15 of Law 1581 of 2012. "Data Subject": A natural person to whom the information refers. Processing: Any operation or set of operations on personal data such as, but not limited to, the collection, storage, use, circulation, or deletion of such information. Transmission: Processing of personal data that involves communicating the same within (national transmission) or outside of Colombia (international transmission) and whose purpose is to carry out processing by the Processor on behalf of the Controller. Transfer: Data transfer occurs when the Controller and/or processor of personal data, located in Colombia, sends the information or personal data to a recipient, who in turn is the controller and is located within or outside the country. Admissibility requirement: The Data Subject or legal successor may only file a complaint with the Superintendency of Industry and Commerce once they have exhausted the consultation or claim process before the Data Controller or Data Processor, in accordance with Article 16 of Law 1581 of 2012. #### PRINCIPLES FOR THE PROCESSING OF PERSONAL DATA. The processing of personal data must be carried out in compliance with the general and specific regulations on the subject matter and for activities permitted by law. In the development, interpretation, and application of this policy, the following principles will be applied harmoniously and comprehensively: 5.1. Principles Related to the Collection of Personal Data. Principle of Freedom: Unless otherwise provided by law, data collection may only be carried out with the prior, express, and informed authorization of the data subject. Personal data may not be obtained or disclosed without the prior consent of the data subject, or in the absence of a legal or judicial order that waives consent. The data subject must be informed clearly, sufficiently, and in advance about the purpose of the information provided; therefore, data may not be collected without a clear specification of the purpose. The principle of freedom must be observed both for data collected through forms and those that are part of the annexes or documents that data owners deliver to BICHOS BOUTIQUE SAS. Principle of Limitation of Collection: Only personal data that is strictly necessary for the fulfillment of the purposes of the processing should be collected, such that the registration and disclosure of data that are not closely related to the purpose of the processing is prohibited. Consequently, everything reasonably possible must be done to limit the processing of personal data to the minimum necessary. That is, the data must be: (i) adequate, (ii) relevant, and (iii) consistent with the purposes for which they were intended. 5.2. Principles Related to the Use of Personal Data. Principle of Purpose: The processing must obey a legitimate purpose in accordance with the Constitution and the Law, which must be informed to the owner. The data subject must be informed clearly, sufficiently, and in advance about the purpose of the information provided. Therefore, data may not be collected without a specific purpose. Principle of Temporality: Personal data will be retained only for the reasonable and necessary time to fulfill the purpose of the processing and the legal requirements or instructions of the supervisory and control authorities or other competent authorities. Data will be retained when necessary to comply with a legal or contractual obligation. To determine the duration of processing, the regulations applicable to each purpose and the administrative, accounting, tax, legal, and historical aspects of the information will be considered. 5.3. Principles Related to the Quality of Information. Principle of Truthfulness or Quality: The information subject to processing must be truthful, complete, accurate, up-to-date, verifiable, and understandable. The processing of partial, incomplete, fragmented, or misleading data is prohibited. Reasonable measures must be taken to ensure that the data is accurate and sufficient and, when requested by the Data Subject or when BICHOS BOUTIQUE SAS determines, it must be updated, corrected, or deleted when appropriate. 5.4. Principles Related to the Protection, Access, and Circulation of Personal Data. Security Principle: Each person associated with BICHOS BOUTIQUE SAS must comply with the technical, human, and administrative measures established by the entity to ensure the security of personal data, preventing its adulteration, loss, consultation, use, or unauthorized or fraudulent access. Transparency Principle: The processing must guarantee the right of the data subject to obtain, at any time and without restrictions, information about the existence of data that concerns them. Restricted Access Principle: Only the following persons will be permitted access to personal data: The data subject; Persons authorized by the data subject; Persons who, by legal mandate or court order, are authorized to know the information of the data subject. Principle of Restricted Circulation: Personal data may only be sent or provided to the following persons: The data subject, Persons authorized by the data subject, Public or administrative entities exercising their legal functions or by court order. Principle of Confidentiality: All persons involved in the processing of personal data that are not public in nature are required to guarantee the confidentiality of the information, even after their relationship with any of the tasks comprising the processing has ended, and may only provide or communicate personal data when this corresponds to the development of the activities authorized by law. Any new project within the Company that involves the Processing of Personal Data must be consulted with the INFORMATION SECURITY OFFICER, who is the person and department in charge of data protection to ensure compliance with the policy and the measures necessary to maintain the confidentiality of the Personal Data. 6. PROCESSING TO WHICH THE PERSONAL DATA WILL BE SUBJECTED AND ITS PURPOSE. BICHOS BOUTIQUE SAS will process (collect, store, use, among others) personal data in accordance with the conditions established by the owner, the law, or public entities to specifically fulfill the activities inherent to its corporate purpose, such as the contracting, execution, and marketing of BICHOS BOUTIQUE SAS's goods and services. The processing of personal data may be carried out through physical, automated, or digital means, depending on the type and method of collecting the personal information. BICHOS BOUTIQUE SAS may also process personal data, among others, for the following purposes: To exercise its right to sufficiently know the user with whom it intends to establish relationships, provide services, and assess the present or future risks of said relationships and services. Carry out the pertinent procedures for the development of the pre-contractual, contractual and post-contractual stages with BICHOS BOUTIQUE SAS, regarding any of the products or services offered by BICHOS BOUTIQUE SAS, whether or not it has acquired, or regarding any underlying business relationship it has with it, as well as comply with Colombian or foreign law and the orders of judicial or administrative authorities; Carry out marketing, sales and promotional activities, telemarketing (telephone marketing), customer service, brand activation activities, prizes and promotions, directly or through third parties derived from commercial alliances or any link; Implement relationship strategies with clients, suppliers, shareholders and other third parties with whom the Company has contractual or legal relationships; Make invitations to events, improve products and services or offer new products, and all those activities associated with the commercial relationship or link existing with BICHOS BOUTIQUE SAS, or any that may have; Manage procedures (requests, complaints, claims), conduct satisfaction surveys regarding the goods and services of BICHOS BOUTIQUE SAS or related companies and business partners of BICHOS BOUTIQUE SAS; Disclose, transfer, and/or transmit personal data within and outside the country to the parent companies, subsidiaries, or affiliates of BICHOS BOUTIQUE SAS or to third parties as a result of a contract, law, or legal link that requires it, or to implement cloud computing services. The data collected or stored about BICHOS BOUTIQUE SAS employees through the completion of forms, by telephone, or with the delivery of documents (résumés, annexes) will be processed for all matters related to legal or contractual labor matters. Pursuant to the foregoing, BICHOS BOUTIQUE SAS will use personal data for the following purposes: (1) To comply with laws such as, among others, labor law, social security, pensions, occupational risks, family compensation funds (Comprehensive Social Security System), and taxes; (2) To comply with the instructions of the competent judicial and administrative authorities; (3) To implement labor and organizational policies and strategies. These purposes will apply to data collected or stored on BICHOS BOUTIQUE SAS employees by completing forms, by telephone, or with the delivery of documents (resumes, annexes) that will be processed for everything related to labor matters of a legal or contractual nature. To order, catalog, classify, divide, or separate the information provided by data owners. To verify, corroborate, check, validate, investigate, or compare the information provided by data owners with any information that is legitimately available to it, such as business relationships. Access, consult, compare and evaluate all information about the Holder that is stored in the databases of any credit risk, financial, judicial or security background center, whether state or private, national or foreign, or any commercial or services database, that allows establishing in a comprehensive and complete historical manner, the behavior as a debtor, user, client, guarantor, endorser, affiliate, beneficiary, subscriber, taxpayer and/or as a holder of financial, commercial or any other type of services. For the security purposes of people, property and facilities of BICHOS BOUTIQUE SAS and may be used as evidence in any type of process, with respect to data (i) collected directly at security points, (ii) taken from documents provided by people to security personnel and (iii) obtained from video recordings made inside or outside the facilities of BICHOS BOUTIQUE SAS, these will be used for the security purposes of people, property and facilities of BICHOS BOUTIQUE SAS and may be used as evidence in any type of process. Know, store and process all information provided by data owners in one or more databases, in the format it deems most convenient. Carry out all tax, accounting, fiscal and billing procedures. BICHOS BOUTIQUE SAS, in the development of its corporate purpose and its relationships with third parties, understood as clients, employees, contractors, subcontractors, creditors, strategic and commercial allies, subordinates, among others; constantly collects data whose owners grant their authorization to carry out the processing to which this personal data will be subjected, among others for the following purposes: To develop commercial activities, carry out promotional, marketing and/or advertising campaigns, to comply with the obligations derived from the contracts entered into with its clients, suppliers and employees; to comply with legal provisions or judicial decisions; to respond to inquiries about products and services offered, to conduct studies for statistical purposes, customer knowledge; to inform data owners about news, products, services and special offers; to develop activities related to telephone service, collections or other similar nature, also for administrative, informational, marketing and sales purposes. In relation to the foregoing, BICHOS BOUTIQUE SAS may carry out the following Treatment to which the collected personal data will be subjected: 1. Obtain, store, compile, safeguard, exchange, update, collect, process, reproduce and/or dispose of the data or partial or total information of those owners who grant it the due authorization in the terms required by law and in the formats and media that it deems convenient for each case. 2. Classify, order, separate the information provided by the data owner. 3. Extend the information obtained in the terms of the Habeas Data law, to the companies with which it contracts the services of capture, collection, storage and management of its databases prior to the due authorizations obtained in this regard. 4. Transfer or transmit the data or partial or total information to its subsidiaries, businesses, companies and/or affiliated entities and strategic allies that operate or not in another jurisdiction or territory. RIGHTS OF DATA OWNERS. Data subjects have the right to: Access, Rectify, Cancel, Oppose, Know, update, and rectify their personal data. To this end, it is necessary to first establish the person's identification to prevent unauthorized third parties from accessing the data subject's data. Obtain a copy of the authorization. Inform about the use that BICHOS BOUTIQUE SAS has given to the data subject's personal data. Process inquiries and complaints following the guidelines established by law and in this policy. Access the request for revocation of the authorization and/or deletion of personal data when the Superintendency of Industry and Commerce has determined that BICHOS BOUTIQUE SAS's processing of personal data has involved conduct contrary to Law 1581 of 2012 or the Constitution. The Data Subject may also revoke authorization and request the deletion of the data when there is no legal or contractual obligation imposing the obligation to remain in the database or file of the Controller or Processor. The request to delete information and the revocation of authorization will not be applicable when the data subject has a legal or contractual obligation to remain in the database of the Controller or Processor. Free access to your personal data. The information requested by the data subject may be provided by any means, including electronic means. DUTIES OF BICHOS BOUTIQUE SAS WHEN ACTING AS CONTROLLER OF PERSONAL DATA. All those obliged to comply with this policy must bear in mind that BICHOS BOUTIQUE SAS is obliged to comply with the duties imposed by law. Therefore, they must act in such a way as to comply with the following obligations: 8.1. Duties of BICHOS BOUTIQUE SAS towards the data subject. Guarantee the data subject, at all times, the full and effective exercise of the right to habeas data, that is, to know, update, or rectify their personal data. Request and retain, under the conditions established in this policy, a copy of the respective authorization granted by the data subject. Clearly and sufficiently inform the data subject about the purpose of the collection and the rights they have by virtue of the authorization granted. Inform, at the data subject's request, about the use of their personal data. Process inquiries and complaints under the terms indicated in this policy. 8.2. Obligations of BICHOS BOUTIQUE SAS regarding the quality, security, and confidentiality of personal data. Observe the principles of truthfulness or quality, security, and confidentiality under the terms established in this policy. Keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, use, or unauthorized or fraudulent access. Update the information when necessary. Rectify personal data when appropriate. 8.3. Obligations of BICHOS BOUTIQUE SAS when processing personal data through a data processor. Provide the data processor only with personal data whose processing has been previously authorized. Ensure that the information provided to the data processor is truthful, complete, accurate, up-to-date, verifiable, and understandable. Promptly communicate to the data processor any updates regarding the data previously provided and adopt other necessary measures to ensure that the information provided remains up-to-date. Promptly inform the data processor of any corrections made to personal data so that the data processor can make the appropriate adjustments. Demand that the data processor respect the security and privacy conditions of the Data Subject's information at all times. Inform the data processor when certain information is being disputed by the Data Subject, once the claim has been filed and the respective process has not been completed. 8.4. Obligations of BICHOS BOUTIQUE SAS regarding the Superintendency of Industry and Commerce. Inform you when security code violations occur and there are risks in the management of the owners' information. Comply with the instructions and requirements issued by the Superintendency of Industry and Commerce. DUTIES OF BICHOS BOUTIQUE SAS WHEN ACTING AS THE PERSON IN CHARGE OF PERSONAL DATA. If BICHOS BOUTIQUE SAS processes data on behalf of another entity or organization (Data Controller), it must comply with the following duties: Guarantee the owner, at all times, the full and effective exercise of the right to habeas data. Keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, use or unauthorized or fraudulent access. Promptly update, rectify or delete the data. Update the information reported by those responsible for the treatment within five (5) business days from its receipt. Process queries and complaints made by the owners in the terms indicated in this policy. Refrain from circulating information that is being disputed by the data subject and whose blocking has been ordered by the Superintendency of Industry and Commerce. Allow access to the information only to persons authorized by the data subject or empowered by law to do so. Inform the Superintendency of Industry and Commerce when security code violations occur and there are risks in the management of the data subjects' information. Comply with the instructions and requirements issued by the Superintendency of Industry and Commerce. AUTHORIZATION. 10.1. Authorization for Data Processing. Those obligated to comply with this policy must obtain prior, express, and informed authorization from the data subject to collect and process their personal data. This obligation is not necessary when the data is public. To obtain authorization, the following instructions must be followed: First, before the person authorizes it, they must be clearly and expressly informed of the following: The processing to which their personal data will be subjected and the purpose thereof; The optional nature of the response to questions asked when these relate to sensitive data or the data of children and adolescents; The rights you have as the data subject as provided for in Article 8 of Law 1581 of 2012; The identification and physical or electronic address of BICHOS BOUTIQUE SAS. Secondly, you will obtain the data subject's consent through any means that may be consulted later, such as the website, forms, formats, activities, contests, in person or on social networks, PQR (Purchase Agreement), data messages, or Apps. Proof of compliance with the obligation to inform and consent must be left. Authorization may also be obtained from unequivocal conduct on the part of the Data Subject that reasonably allows us to conclude that they gave their consent for the processing of their information. Such conduct must be very clear so as to avoid any doubt or confusion about the willingness to authorize the processing. 10.2. Authorization for the processing of sensitive data. When collecting sensitive data, the following requirements must be met: The authorization must be explicit. The Data Subject must be informed that they are not required to authorize the processing of said information. The Data Subject must be explicitly informed in advance which of the data to be processed are sensitive and the purpose of the processing. 10.3. Authorization for the processing of data of children and adolescents (NNA). When collecting and processing data of children and adolescents, the following requirements must be met: Authorization must be granted by persons authorized to represent the children and adolescents. The child's representative must guarantee their right to be heard and assess their opinion on the processing, taking into account their maturity, autonomy, and ability to understand the matter. They must be informed that answering questions about children and adolescents' data is optional. BICHOS BOUTIQUE SAS ensures that the processing of personal data of children and adolescents will be carried out respecting their rights, which is why, in its commercial and marketing activities, it must have the prior, express, and informed authorization of the parent or legal representative of the child or adolescent. NATIONAL OR INTERNATIONAL TRANSFER OF PERSONAL DATA. BICHOS BOUTIQUE SAS may transfer data to other data controllers when authorized by the data subject, by law, or by an administrative or judicial order. INTERNATIONAL AND NATIONAL DATA TRANSMISSIONS TO PROCESSORS. BICHOS BOUTIQUE SAS may send or transmit data to one or more processors located within or outside the territory of the Republic of Colombia in the following cases: When it has authorization from the owner. When, without authorization, a data transmission contract exists between the Controller and the processor. PROCEDURES FOR DATA HOLDERS TO EXERCISE THEIR RIGHTS The procedures for data owners to exercise their rights to know, update, rectify, and delete information, or revoke their authorization, are detailed below. Data owners' rights may be exercised by the following authorized persons in accordance with Article 20 of Decree 1377 of 2013: By the Data Owner, who must sufficiently prove their identity through the various means made available to BICHOS BOUTIQUE SAS. By their successors in title, who must prove such status. By the Data Owner's representative and/or attorney, upon prior accreditation of representation or power of attorney. By stipulation in favor of or for another. The rights of children or adolescents will be exercised by the persons authorized to represent them. That for the full and effective exercise of the rights that assist the owners of the data BICHOS BOUTIQUE SAS has provided the following means through which they can present all their queries, complaints and / or claims contacto@mascotasbichos.com The guidelines for handling queries and claims: All queries made by persons authorized to know the personal data held by BICHOS BOUTIQUE SAS will be channeled EXCLUSIVELY through the channels that BICHOS BOUTIQUE SAS has designated for this purpose. In any case, it is necessary to leave proof of the following: Date of receipt of the query Identity of the applicant Once the identity of the owner has been verified, the required personal data will be provided. The response to the query must be communicated to the applicant within a maximum period of ten (10) business days from the date of receipt thereof. When it is not possible to respond to the query within this period, the interested party will be informed, stating the reasons for the delay and indicating the date on which their query will be addressed, which in no case may exceed five (5) business days after the expiration of the first term. In order to adequately address queries, it will be necessary to have the identification of the person who, in accordance with the law, is authorized to consult and/or complain about personal data. The purpose of complaints is to correct, update, or delete data or to file a complaint for the alleged breach of any of the duties established for the data protection regime and in this policy. The claim must be submitted by means of a request addressed to BICHOS BOUTIQUE SAS that contains the following information: Name and identification of the data owner or the legitimate person Accurate and complete description of the facts that give rise to the claim Physical or electronic address to send the response and inform about the status of the process Documents and other pertinent evidence that you wish to assert If the claim is incomplete, the interested party will be required within five (5) days following receipt of the claim to correct the deficiencies. After two (2) months from the date of the request, if the applicant does not present the required information, it will be understood that he has withdrawn the claim. The maximum term to attend to the claim will be fifteen (15) business days counted from the day following the date of its receipt. When it is not possible to attend to the claim within this term, the interested party will be informed of the reasons for the delay and the date on which his claim will be attended to, which in no case may exceed eight (8) business days following the expiration of the first term. BICHOS BOUTIQUE SAS is committed to guaranteeing the exercise of the rights of the owners of personal data, which may be exercised by written communication sent to the email address contacto@mascotasbichos.com PERSON OR AREA RESPONSIBLE FOR THE PROTECTION OF PERSONAL DATA. The INFORMATION SECURITY OFFICER is the person and department in charge of the data protection function, which can be contacted via email contacto@mascotasbichos.com VIDEO SURVEILLANCE. BICHOS BOUTIQUE SAS uses various video surveillance media installed in different internal and external locations of our facilities or offices. BICHOS BOUTIQUE SAS informs about the existence of these mechanisms by posting video surveillance announcements in visible locations. The information collected will be used for the security of people, property, and facilities. This information may be used as evidence in any type of process before any type of authority or organization. EFFECTIVE DATE OF THIS POLICY AND VALIDITY PERIOD OF THE DATABASE. This policy was approved after the enactment of Law 1581 of 2012 and amended to incorporate certain aspects established by Decree 1377 of June 27, 2013, and is therefore in force as of July 2, 2013. The database will be valid for a reasonable and necessary period of time to fulfill the purposes of the processing, taking into account the provisions of Article 11 of Decree 1377 of 2013. DATA OF THE DATA CONTROLLER. Company name: BICHOS BOUTIQUE SAS Address: cll 97 # 10-26 Email: contacto@mascotasbichos.com Telephone: in Bogotá 571 7024351 Website: www.mascotasbichos.com INFORMATION SECURITY POLICIES BICHOS BOUTIQUE SAS will adopt the necessary technical, administrative and human measures to ensure the security of personal data with which it processes, protecting the confidentiality, integrity, use, unauthorized and / or fraudulent access of these data. Mandatory security protocols have been implemented for all personnel with access to personal data and information systems. The internal security policies under which the owner's information is kept to prevent its adulteration, loss, consultation, use or unauthorized or fraudulent access are included in the security policies manual for the protection of personal data. In all events that BICHOS BOUTIQUE SAS carries out that collect data, a Personal Data Protection notice will be included with the following text: "By participating in the event, all participants declare that they know and authorize BICHOS BOUTIQUE SAS in a free, prior, voluntary, express and duly informed manner to collect, register, process, disseminate, compile, exchange, update and dispose of the data or partial information that they provided, and for the purposes of participating in the Event; as well as to transfer said data to third parties with which it has commercial and transactional links for the fulfillment of orders, answering questions about products and services offered, for the performance of studies for statistical purposes, customer knowledge, to inform its customers of news, products, services and special offers, as well as telephone service, collections or other services of a similar nature of its own brands or third parties. The Processing of personal data will be from the beginning of the Event until the day BICHOS BOUTIQUE SAS is dissolved and liquidated. ADJUSTMENTS TO THE INFORMATION PROCESSING POLICY (IPP) In order to maintain the validity of the ITP, BICHOS BOUTIQUE SAS may adjust and modify the ITP, indicating the update date on the website or through the use of other means, such as data messages, physical materials at points of sale, etc. 6. You must inform us that the product will be available to MASCOTASBICHOS to be collected at the same place where we delivered it to you. Remember that the product must be in the same condition in which it was delivered. 7. If you are not the owner of the payment method used to make the transaction, remember that the person who must submit the request directly to the financial institution since BICHOS BOUTIQUE SAS is the owner. 8. If you request the reversal of periodic payments, you can notify your financial institution or BICHOS BOUTIQUE of your decision to revoke the authorization to make payments by said means. 9. Remember that the payment reversal request applies as long as your purchase was paid electronically. For example, debit and credit cards.