1. DATA CONTROLLER

The website (http://www.rocasalvatella.com/) is an internet domain containing a portal or website whose ownership, in compliance with the provisions of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, is disclosed as follows:

ROCA SALVATELLA S.L
C.I.F: B-64927304
Registered address: Av. Alcalde Barnils 64-68, edifici C, 4ª planta, 08174 - Sant Cugat del Vallès - Barcelona
Telephone: (+ 34) 93.544.24.02
Registry registration: Commercial Registry of Barcelona, volume 40962, folio 1, sheet 370264, 1st inscription

The website of ROCA SALVATELLA S.L. aims to provide users and interested parties with information regarding the entity's activities and services. This website is intended to provide a useful service, and as such, suggestions from users are welcome. However, if you do not agree with any of the conditions contained in this notice, you must stop using the ROCA SALVATELLA S.L. website. Access to it will be subject to the prior and express acceptance of these conditions. The use of certain services offered on this site will also be governed by the specific conditions provided in each case.

The conditions set out below regulate the permitted use of the website http://www.rocasalvatella.com/.

2. WEBSITE MODIFICATIONS AND INTERRUPTIONS OR ERRORS IN ACCESS

ROCA SALVATELLA S.L. reserves the right to make, at any time and without prior notice, modifications and updates to the information contained on the website, its configuration and presentation, and the conditions of access.

ROCA SALVATELLA S.L is not responsible for communication failures, nor does it guarantee the availability and continuous operation of the portal and services. Therefore, ROCA SALVATELLA S.L does not guarantee the absence of interruptions or errors in accessing the website or its content.

ROCA SALVATELLA will carry out, provided that there are no causes that make it impossible or difficult to execute, and as soon as it becomes aware of any errors, disconnections, or lack of updated content, all necessary tasks to rectify the errors, restore communication, and update the content.

3. INTELLECTUAL PROPERTY

Unless expressly indicated otherwise, the content of the website, images, texts, and data are the property of ROCA SALVATELLA S.L. Likewise, the source code, design, and navigation structure are the property of ROCA SALVATELLA S.L. ROCA SALVATELLA S.L. holds the exclusive right to exploit these in any form, particularly the rights of reproduction, distribution, public communication, and transformation. All this material is protected by intellectual property legislation, and its misuse may be subject to sanctions, including criminal penalties.

Consulting or downloading content from the website or any software will not imply the transfer of any intellectual or industrial property rights over them. Authorization for the viewing, printing, and partial downloading of the website's content is granted solely and exclusively if the following conditions are met:

a) That it is compatible with the purposes of the website.

b) That it is not carried out for commercial purposes or for distribution, public communication, or transformation.

c) That none of the website contents are modified in any way.

d) That no graphic, icon, or image available on the website is used, copied, or distributed separately from the accompanying text or other images.

e) That the source is cited.

All information received through these pages, such as comments, suggestions, or ideas, will be considered as transferred free of charge. Please do not send information that cannot be processed in this manner.

4. SECURITY

ROCA SALVATELLA S.L, aware of the risks arising from the new challenges of extending its services across the Internet, has implemented stringent security measures to reduce these risks.

Nevertheless, ROCA SALVATELLA S.L. excludes any liability for damages of any kind that may be due to the presence of viruses or other elements that may cause alterations in the user's computer system (software and hardware), electronic documents, and files, or those of any third party, including those occurring in services provided by third parties through this portal.

Users are informed that the use of electronic data transmission systems and email does not offer absolute security guarantees. The user and ROCA SALVATELLA S.L mutually exonerate each other from any liability arising from events such as non-receipt, delay in receipt, errors, or interception of communications.

5. LINKED CONTENTS AND PAGES

The information contained on this website is for informational purposes only; and in no case does it constitute any form of contractual obligation. The purpose of the links appearing on this page is solely to inform the user about the existence of other sources of information on the subject on the Internet, where they can expand or complete the data offered on this website.

ROCA SALVATELLA S.L will not be responsible for the results obtained through these links. In any event, ROCA SALVATELLA S.L assumes no responsibility derived from the contents linked from its website, nor does it guarantee the absence of viruses or other elements in them that may cause alterations in the user's computer system (hardware and software), documents, or files, excluding any liability for damages of any kind caused to the user for this reason.

Although links are regularly monitored to prevent this, if any user or third party considers that the content or services provided by the linked pages are unlawful, violate constitutional values or principles, or damage the property or rights of the user or a third party, they are requested to notify ROCA SALVATELLA S.L immediately, especially if the links consist of:

a) Activities or content that could be considered criminal under Spanish criminal law.
b) Activities or content that violate intellectual or industrial property rights.
c) Activities or content that jeopardise public order, criminal investigations, public safety, and national defence.
d) Activities or content that endanger public health protection, respect for human dignity, the principle of non-discrimination, health and child protection, or any other constitutional value or principle.

6. PERSONAL DATA PROTECTION

Personal data linked to this website complies with the requirements of current legislation on personal data protection. ROCA SALVATELLA S.L. will process the personal data collected through this website in compliance with current regulations on data protection.

a) Inclusion in files is absolutely voluntary and is duly notified.
b) Files incorporating personal data will be protected by security measures required by legislation.
c) Data will only be used for the purpose for which it was collected.
d) All individuals added to the created file may exercise their rights of access, rectification, objection, restriction of processing, erasure, and portability of their data.

7. THIRD-PARTY LINKS TO THE WEBSITE

Any third-party link to the website must direct to its home page, with deep linking, framing, and any other use of the website's content for unauthorized third parties being expressly prohibited.

8. MINOR PROTECTION POLICY

Access and use of this website by individuals under 13 years of age who are not duly authorized is prohibited. ROCA SALVATELLA S.L. understands that from the moment a minor accesses this website, they have the permission of their parents, guardian, or legal representative.

ROCA SALVATELLA S.L. reminds adults responsible for minors that it will be their sole responsibility if a minor submits their data to request any service.

9. DATA PROTECTION POLICY

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and its implementing regulations, you are informed that the personal data provided by Users will be incorporated into an automated database owned by and under the responsibility of ROCA SALVATELLA, S.L.

The processing of personal data applies to all personal data provided by the User to ROCA SALVATELLA S.L. at the time of registration on the web portal, as well as any data provided to access any services of other pages or services of the said company.

ROCA SALVATELLA S.L. is subject to the fulfillment of its obligation of secrecy of personal data and its duty to process them confidentially, and assumes, for these purposes, the technical, organizational, and security measures necessary to prevent their alteration, loss, unauthorized processing, or access, in accordance with the provisions of the mentioned regulation and other applicable legislation.

The collection and processing of personal data have the following purposes: provision of services requested by the user; management of potential incidents; checking and verifying the quality of the services offered; sending general information about the development and operation of the service or product requested or contracted by the user.
The user of these services is aware that, for the provision of the service, management, maintenance, and interconnection services with mobile operators of the technical platform used for the storage and processing of personal data and the provision of the service, as well as backup copy making and preservation, are required to be provided by ROCA SALVATELLA S.L.

During the registration process, the User will grant their express authorization and consent to ROCA SALVATELLA S.L. for the processing of their data in accordance with current legislation on personal data protection. Providing certain data (telephone number or email address) required for registration as a CONTACT on ROCA SALVATELLA S.L. websites is mandatory, and ROCA SALVATELLA S.L. may deny registration to interested parties who do not provide such data.

Under no circumstances will ROCA SALVATELLA S.L. use the personal data of data subjects for purposes other than those mentioned above, nor will it disclose them to third parties without the prior and express consent of the data subject. It undertakes to maintain professional confidentiality and to establish the necessary technical and organizational measures to safeguard the information in accordance with the requirements set by the aforementioned Regulation.

Personal data will be kept in our records for a period of one year after the termination of the commercial relationship, and ROCA SALVATELLA S.L. will also maintain its duty of secrecy and data confidentiality during that period.

The user may access their data at any time and exercise the rights established by law which are listed below: access, rectification, erasure, and portability of data, and restriction or objection to the processing thereof, by submitting a request in writing via post or email to the following address:

ROCA SALVATELLA, S.L. Avda Alcalde Barnils 64-68, 08174 Sant Cugat del Vallés.
Customer Service Telephone: 93 544 24 02
E-mail: info@rocasalvatella.com

The request must include the following information:

- Name, surname, and identity card number, or the company to which they belong if applicable.
- The right being requested and the content of the request.
- Phone number / email to which they wish to apply this right.
- Address for notification purposes.

Furthermore, we inform you that if you consider that your rights are not being respected in the processing of your data, you can file a complaint with the Spanish Data Protection Agency.

10. JURISDICTION

ROCA SALVATELLA S.L and the user, expressly waiving any other jurisdiction, submit any dispute that may arise from accessing or using the Website to the Courts and Tribunals of the city of Sant Cugat del Vallés.

………………………………………………………………………………………………………………………………………………………………………………

COOKIES POLICY

This Website uses first-party and third-party cookies to offer you a better experience and service. By navigating or using our services, the user accepts our use of cookies.

1. WHAT ARE COOKIES?

Cookies are small text files that are installed on the browser of the User's computer, sending an anonymous identification stored on it. They allow a website, among other things, to store and retrieve information about the browsing habits of a user or their equipment. Additionally, they improve browsing since they allow the website to offer the user information that may be of interest depending on how they use its content.

ROCA SALVATELLA S.L. will strive at all times to establish appropriate mechanisms to obtain the User's consent for installing cookies that require it. Notwithstanding the foregoing, it must be taken into account that, in accordance with the Law, it will be understood that (i) the User has given their consent if they modify the browser's settings by disabling restrictions that prevent the entry of cookies, and (ii) the aforementioned consent will not be required for the installation of cookies that are strictly necessary for providing a service expressly requested by the User (via prior registration).

2. THE COOKIES WE USE

Depending on the purpose for which the data obtained through cookies is processed, the Website may use:

- First-party cookies:

These are cookies sent to the user's terminal equipment from equipment or a domain managed by the publisher itself and from which the service requested by the user is provided.

- Third-party cookies:

These are cookies sent to the user's terminal equipment from equipment or a domain that is not managed by the publisher, but by another entity that processes the data obtained through the cookies.

- Technical cookies:

These are cookies that allow the user to navigate through the website or application and use the different options or services existing on it. For example, controlling traffic and data communication, identifying the session, accessing restricted web sections, remembering elements of an order, applying for registration or participation in an event, using security elements during browsing, and storing contents for broadcasting videos or sound.

- Personalisation cookies:

These are cookies that allow the user to access the service with some general predefined characteristics on their terminal or defined by the user themselves. For example, the language, type of browser used to access the service, selected content design, terminal geolocation, and regional settings from where the service is accessed.

- Analysis cookies:

These are cookies that allow tracking and analysis of users' behavior on websites. The information collected through these types of cookies is used to measure activity on websites, applications, or platforms and to create navigation profiles of users on these sites to make service improvements based on user usage data.

- Advertising cookies:

These are cookies that allow efficient management of advertising spaces included on the website or application from which the service is provided. They allow tailoring advertising content so that it is relevant to the user and preventing showing ads that the user has already seen.

- Behavioural advertising cookies:

These are cookies that allow the most efficient possible management of advertising spaces that the publisher may have included on a website, application, or platform from which it provides the requested service. These cookies store information on user behavior obtained through continuous observation of their browsing habits, allowing a specific profile to be developed to display advertisements based on it.

(The cookies we use do not store any personal data or any type of information that can identify you, unless you wish to register voluntarily to use the services we make available or receive information about promotions and content of interest to you.)

Below is a list of the main cookies used on this Website:

a) Name of the Cookie

b) Origin

c) Purpose

3. HOW TO MANAGE COOKIES?

The user has the option to allow, block, or delete cookies installed on their equipment by configuring their browser options:

-  If you use Microsoft Internet Explorer, under the Tools menu option, select Internet Options and access Privacy.

-  If you use Firefox, for Mac under the Preferences menu option, select Privacy and access the Show Cookies section; for Windows, under the Tools menu option, select Options, access Privacy, and then Use custom settings for history.

-  If you use Safari, under the Preferences menu option, select Privacy.

-  If you use Google Chrome, under the Tools menu option, select Settings (Preferences on Mac), access Advanced, and then the Content Settings option under the Privacy section, and finally tick Cookies in the Content settings dialogue box.

However, disabling them could change the functioning of the website. Please consult your browser's instructions and manuals for further information.

In case of blocking the use of cookies in your browser, it is possible that some services or features of the Website may not be available.

4. COOKIES POLICY UPDATE

It is possible that, due to new interpretations made by the competent regulatory body, judges, or Courts, this cookies policy may undergo some modification. Therefore, users are requested to check its content regularly.

Last review: 25 May 2018

………………………………………………………………………………………………………………………………………………………………………………


INFORMATION PROCESSING POLICIES AND PROCEDURES MANUAL OF ROCA SALVATELLA BOGOTA SAS

ROCA SALVATELLA BOGOTA SAS, with registered address at Calle 104 18 A, No 52, office 302, Bogotá, and telephone number (+57-1) 3153844670 (hereinafter “RS BOGOTA”), informs the Data Subjects of Personal Data processed in any way by RS BOGOTA of this Information Processing Policies and Procedures Manual (the “Policy”), thereby complying with Law 1581 of 2012 and Decree 1377 of 2013.

The main objective and purpose of this Policy is to inform Personal Data Subjects of their rights, as well as the procedures and mechanisms put in place by RS BOGOTA to make those Data Subjects' rights effective, and to inform them of the scope and purpose of the Processing to which their Personal Data will be subjected if the Data Subject grants their express, prior, and informed consent.

1. GENERAL DEFINITIONS

The following terms used in this Policy will have the definition provided here, or the meaning given to them by applicable law or case-law, as such law or case-law may be amended from time to time.

a) “Consent”: The prior, explicit, and informed consent of the Data Subject to carry out the Processing of their Personal Data.

b) “Database”: The organized set of Personal Data subject to Processing, electronic or otherwise, regardless of the method of creation, storage, organization, and access.

c) “Financial Data”: Any Personal Data referring to the rise, execution, and termination of monetary obligations, regardless of the nature of the contract originating them, whose Processing is governed by Law 1266 of 2008 or regulations complementing, modifying, or adding to it.

d) “Personal Data”: Any information of any kind connected to or associated with one or several determined or determinable natural or legal persons.

e) “Public Data”: Personal Data qualified as such by law or the Political Constitution and which is not semi-private, private, or sensitive. Examples of public data include, among others, data relating to marital status, profession or trade, merchant or public servant status, and details that can be obtained without reserve.

f) “Sensitive Data”: Personal Data that affects the Data Subject's intimacy or whose misuse can generate discrimination, such as those revealing trade union membership, racial or ethnic origin, political orientation, religious, moral, or philosophical convictions, membership of trade unions, social or human rights organizations, or membership of organizations promoting the interests of any political party or guaranteeing the rights and guarantees of opposition political parties, as well as data relating to health, sexual life, and biometric data.

g) “Data Processor”: The natural or legal person, public or private, who individually or jointly with others, processes Personal Data on behalf of the Data Controller.

h) “Authorised Party”: RS BOGOTA and all persons under the responsibility of RS BOGOTA, who by virtue of the Consent and this Policy are authorized to Process the Data Subject's Personal Data. The Authorised Party includes the category of Enabled Parties.

i) “Habilitation”: The authorization granted expressly and in writing via contract or equivalent document by RS BOGOTA to third parties, in compliance with applicable law, for Personal Data Processing, turning such third parties into Data Processors of the Personal Data delivered or made available.

j) “Data Controller”: The natural or legal person, public or private, who individually or jointly with others, decides on the Database and/or Personal Data Processing.

k) “Data Subject”: The natural or legal person to whom the information in a Database relates, and who is the subject of the right to habeas data.

l) “Transfer”: Personal Data Processing involving communication inside or outside of the Republic of Colombia when its purpose is for a Data Processor to perform Processing on behalf of the Data Controller.

m) “Transmission”: Personal Data Processing activity involving communicating personal data, internally or with third parties, inside or outside of the Republic of Colombia, when such communication aims for the recipient of the Personal Data to perform any Processing activity.

n) “Personal Data Processing”: Any systematic operation and procedure, electronic or otherwise, allowing the collection, conservation, sorting, storage, modification, linking, use, circulation, evaluation, blocking, destruction, and in general, processing of Personal Data, as well as its transfer to third parties through communications, consultations, interconnections, assignments, data messages.
o) “Habeas Data”: Fundamental right of any person to know, update, rectify, and/or delete personal information and data collected and/or processed in public or private databases, in accordance with applicable law and regulations.

2. PRINCIPLES

RS BOGOTA, in the performance of its business activities, will collect, use, store, transmit, and carry out various operations on Data Subjects' personal data. In all Personal Data Processing carried out by RS BOGOTA, the Controllers, Processors, and/or third parties with whom Personal Data is shared must comply with the principles and rules established by law and this Policy to guarantee the Data Subjects' right to Habeas Data and thus comply with RS BOGOTA's legal obligations.

These principles are:

a) Prior Consent: All Personal Data Processing will be carried out once the prior, express, and informed Consent of the Data Subject has been obtained, unless the Law provides an exception to this rule. If the Personal Data was obtained prior to the Law, RS BOGOTA will seek the relevant ordinary and alternative means to contact Data Subjects and obtain their retroactive consent, following the provisions of Decree 1377 of 2013 and concordant regulations.

b) Authorised Purpose: All Personal Data Processing activities will be carried out with the purposes mentioned in this Policy, or in the Consent granted by the Data Subject, or in the specific documents regulating each type or process of Personal Data Processing. The purpose of the specific Processing of Personal Data must be disclosed to the Data Subject at the time of obtaining their Consent. Personal Data may not be processed outside the purposes informed and consented to by the Data Subjects.

c) Data Quality: Personal Data subject to Processing must be true, complete, accurate, updated, verifiable, and understandable. When dealing with partial, incomplete, fractioned, or misleading Personal Data, RS BOGOTA must refrain from Processing it, or request the Data Subject to complete or correct the information.

d) Provision of Information to the Data Subject: When requested by the Data Subject, RS BOGOTA must provide them with information regarding the existence of Personal Data concerning the requester. This information will be delivered by the RS BOGOTA department responsible for personal data protection.

e) Restricted Circulation: Personal Data may only be Processed by RS BOGOTA personnel who are authorized to do so, or by those whose functions include performing such activities. Personal Data may not be delivered to individuals who do not possess Consent or have not been Enabled by RS BOGOTA to perform the Processing.

f) Temporality: RS BOGOTA will not use the data subject's information beyond a reasonable period required by the purpose disclosed to the Data Subject.

g) Confidenciality: RS BOGOTA must always perform Processing with the necessary technical, human, and administrative measures to keep the data confidential and prevent it from being altered, modified, consulted, used, accessed, deleted, or known by unauthorized individuals or by authorized and unauthorized people in a fraudulent manner, or from being lost. Any new project involving Personal Data Processing must consult this Processing Policy to ensure compliance with this rule.

i) Confidentiality and Subsequent Processing: Any Personal Data that is not Public Data must be treated as confidential by the Controllers, even after the contractual relationship or link between the Data Subject and RS BOGOTA has ended. Upon termination of such link, such Personal Data must continue to be processed in accordance with this Policy and applicable law.

j) Individuality: RS BOGOTA will keep separate databases for those where it acts as a Processor from those in which it is the Controller.

k) Necessity: Personal Data may only be Processed during the time and to the extent that the purpose of its Processing justifies.

3. PROCESSING AND PURPOSES

Personal Data collected and processed by RS BOGOTA must be subject strictly and only to the purposes outlined below. Likewise, Processors or third parties accessing Personal Data by virtue of law or contract will maintain the Processing within the following purposes:

a) Managing all necessary information for compliance with tax obligations and RS BOGOTA's commercial, corporate, and accounting records.

b) Complying with RS BOGOTA's internal processes regarding vendor and contractor management.

c) Incorporation into databases or automated personal data files owned and managed by RS BOGOTA. For this purpose, the Data Subject will be provided with appropriate technical resources so that they can access the Privacy Notice, this Policy, or any other relevant information prior to granting their consent for the automated processing of their Personal Data.

d) Using Personal Data for marketing and/or commercialising new services or products.

e) Any other purposes determined by the Controllers in Personal Data collection processes and communicated to the Data Subjects at the time of data collection.

f) Fraud and money laundering prevention and control, including but not limited to consultation on restrictive lists, and all necessary information required for SARLAFT.

g) Archiving, system updating, data protection, and custody processes of RS BOGOTA's information and databases.

h) Internal processes within RS BOGOTA, for development, operational, and/or system administration purposes.

i) Transferring data to third parties with whom contracts have been entered into for this purpose, for commercial, administrative, marketing, and/or operational purposes, including but not limited to issuing badges, personalized certificates, and certifications to third parties, in accordance with applicable legal provisions.

j) Maintaining and processing by computer or other means any information related to the client's business to provide appropriate services and products.

k) Any other purposes determined by the Controllers during Personal Data collection processes to comply with legal and regulatory obligations, as well as RS BOGOTA policies.

4. RIGHTS OF THE PERSONAL DATA SUBJECT

According to the law, Personal Data Subjects have the following rights:

a) To know, update, and rectify their Personal Data with RS BOGOTA or the Data Processors. This right may be exercised, among others, against partial, inaccurate, incomplete, fractioned, or misleading data, or data whose Processing is expressly prohibited or has not been authorized.

b) To request proof of the Consent granted to RS BOGOTA, unless the law indicates that such Consent is not necessary.

c) To submit requests to RS BOGOTA or the Data Processor regarding the use given to their Personal Data, and to receive such information.

d) To file complaints with the Superintendency of Industry and Commerce for violations of the law.

e) To revoke their Consent and/or request the removal of their Personal Data from RS BOGOTA's databases, when the Superintendency of Industry and Commerce has determined through a definitive administrative act that RS BOGOTA or the Data Processor has engaged in conduct contrary to the Law, or when there is no legal or contractual obligation to keep the Personal Data in the Controller's database.

f) To request access and access their Processed Personal Data free of charge, in accordance with Article 21 of Decree 1377 of 2013.

g) To be informed of changes to this Policy's terms in a prior and efficient manner before the implementation of new modifications or, failing that, of the new information processing policy.

h) To have easy access to the text of this Policy and its modifications.

i) To easily access Personal Data registered with RS BOGOTA to effectively exercise the rights granted to Data Subjects by Law.

j) To know the department or person authorized by RS BOGOTA to whom they can submit complaints, inquiries, claims, and any other request regarding their Personal Data.

Data Subjects may exercise the rights granted to them by law and carry out the procedures established in this Policy by presenting their citizenship card or original identification document. Minors may exercise their rights personally or through their parents or adults holding parental authority, who must prove this with relevant documentation. Likewise, rights may be exercised by successors under title who prove such status, the data subject's representative and/or proxy with appropriate accreditation, and those who have made a stipulation in favor of another or for another.

5. DEPARTMENT RESPONSIBLE FOR HANDLING REQUESTS, INQUIRIES, AND CLAIMS

RS BOGOTA has designated the Management Department as responsible for receiving and handling requests, complaints, claims, and inquiries of all kinds related to Personal Data. The designated person or department will process inquiries and claims regarding Personal Data in accordance with the law and this policy.

Some of the specific functions of this department in relation to Personal Data include:

a) Receiving requests from Personal Data Subjects, processing and responding to those grounded in the Law or these Policies, such as: requests to update Personal Data; requests to know Personal Data; requests to delete Personal Data when the Data Subject presents a copy of the decision from the Superintendency of Industry and Commerce, in accordance with the Law, requests for information on the use of their Personal Data, requests to update Personal Data, requests for proof of the Consent granted when applicable by Law.

b) Responding to Personal Data Subjects regarding requests that are not applicable under the Law.

The Customer Service contact details are:

Physical address: Calle 104 18 A No 52, Oficina 302

E-mail address: habisambra@rocasalvatella.com

Telephone: (+57) 3153844670

6. PROCEDURES TO EXERCISE THE RIGHTS OF THE PERSONAL DATA SUBJECTS

6.1. INQUIRIES

RS BOGOTA will provide mechanisms so that the Data Subject, their successors under title, representatives and/or proxies, those who have stipulated in favor of another or for another, and/or representatives of minor Data Subjects, can submit inquiries regarding the Data Subject's Personal Data held in RS BOGOTA's Databases.

These mechanisms can be physical, electronic via the email of the responsible department, Hernando Abisambra (habisambra@rocasalvatella.com), or by telephone through the customer service line (+57) 3153844670.

Regardless of the medium, RS BOGOTA will keep proof of the inquiry and its response.

a) If the requester has the capacity to submit the inquiry in accordance with the accreditation criteria established in Law 1581 of 2012 and Decree 1377 of 2013, RS BOGOTA will compile all information on the Data Subject contained in their individual record or linked to their identification within RS BOGOTA's databases, and make it known to the requester.

b) RS BOGOTA will respond to the requester, provided they have the right to do so as the Data Subject, their successor under title, proxy, representative, party of a stipulation for another, or legal guardian in the case of minors. This response will be sent within ten (10) business days from the date the request was received by RS BOGOTA.

c) If the request cannot be handled within the period set in the previous section, the requester will be contacted to inform them of the reasons why their request status is pending. For this purpose, the same or a similar medium used by the requester to submit their request will be used.

d) The final response to all requests will not exceed fifteen (15) business days from the date the initial request was received by RS BOGOTA.

6.2. PETITIONS AND CLAIMS

RS BOGOTA provides mechanisms so that the Data Subject, their successors under title, representatives and/or proxies, those who stipulated for another, and/or representatives of minor Data Subjects, can submit petitions or claims regarding (i) Personal Data processed by RS BOGOTA that needs to be corrected, updated, or deleted, or (ii) the alleged breach of duties imposed on RS BOGOTA by law.

These mechanisms can be physical, electronic via the email of the responsible department, habisambra@rocasalvatella.com, or by telephone through the customer service line (+57) 3153844670.

a) The petition or claim must be submitted by the Data Subject, their successors under title, representatives, or accredited persons in accordance with Law 1581 of 2012 and Decree 1377 of 2013, as follows:

- It must be directed to RS BOGOTA electronically to the address habisambra@rocasalvatella.com; physically to the address Calle 104 18 A No 52, Oficina 302 of Bogotá; or by telephone through the service line (+57) 3153844670.

- It must contain the name and identification document of the Data Subject.

- It must contain a description of the facts giving rise to the petition or claim and the objective pursued (update, correction, deletion, or compliance with duties).

- It must indicate the address, contact, and identification details of the claimant.

- It must be accompanied by all documentation the claimant wishes to assert.

- Before handling the petition or claim, RS BOGOTA will verify the identity of the Personal Data Subject, their representative and/or proxy, or proof that there was a stipulation in favor of another. For this purpose, it may request the original citizenship card or identification document of the Data Subject, as well as the special or general powers of attorney or sheets of paper necessary depending on the case.

b) If the petition, claim, or additional documentation is incomplete, RS BOGOTA will request the requester once, within five (5) days after receiving the claim, to remedy the omissions. If the requester does not submit the required documentation and information within two (2) months from the date of the initial request, it will be understood that they have withdrawn it.

c) If, for any reason, the person receiving the petition or claim within RS BOGOTA is not competent to resolve it, they will forward it to the competent department within two (2) business days of receiving the claim and inform the requester of such transfer.

d) Once the petition or claim has been received with complete documentation, a legend saying