PERSONAL DATA PROCESSING POLICIES

IDENTIFICATION OF THE DATA CONTROLLER COMPANY NAME AND IDENTIFICATION:

CENTER AGAINST EFFECTS OF AGE S.A.S, identified with NIT. 900.297.847-0, hereinafter referred to as THE COMPANY, the company provides various appliance services with aesthetic objectives and manual procedures for the same purpose, for which it will have one or more medical offices in its facilities that will be (are) attended by medical professionals and paramedics duly qualified and licensed to carry out this professional activity in the specialty event of outpatient, elective consultation and in the normal procedures of the medical specialty that you select.

The company was incorporated with a private document dated June 1, 2009 and registered in the Chamber of Commerce on July 3, 2009, in book 9, under number 9022 ADDRESS AND ADDRESS: THE COMPANY is domiciled in the city of Medellin , and its main office is located at Calle 2 20-50 office 807 in the city of Medellin. EMAIL: callcenter@ceutecuida.com TELEPHONE: (+57) 300 912 03 80

TREATMENT TO WHICH THE DATA WILL BE SUBJECTED AND PURPOSE OF THE SAME

The treatment of the personal data of the person with whom THE COMPANY has established or will establish a relationship, permanent or occasional, will be carried out within the legal framework that regulates the matter. In any case, personal data may be collected and processed to: Develop the social objective of THE COMPANY in accordance with its legal statutes.

Comply with applicable tax and commercial regulations. Comply with the provisions of the Colombian legal system in labor and social security matters, among others, applicable to former employees, current employees and candidates for future employees. Carry out surveys related to the services or goods of THE COMPANY. Send commercial information about THE COMPANY. Develop programs in accordance with its statutes. Fulfill all your contractual commitments.

RIGHTS OF THE HOLDER OF THE INFORMATION

In accordance with the provisions of the applicable current regulations on data protection, the holders of personal data have the right to: Access, know, update and rectify their personal data before THE COMPANY in its capacity as data controller. This right could be exercised, among others, against partial, inaccurate, incomplete, divided, misleading data, or those whose treatment is expressly prohibited or has not been authorized. Request proof of the authorization granted to THE COMPANY for data processing, by any valid means, except in cases where said authorization is not necessary.

Be informed by THE COMPANY, upon request regarding the use that has been given to your personal data. Submit to the Superintendence of Industry and Commerce, complaints for violations of the provisions of Law 1581 of 2012 and other regulations that modify, add or complement it, after processing a consultation or request before THE COMPANY. Revoke the authorization and/or request the deletion of the data. Free access to your personal data that has been processed, at least once every calendar month, and whenever there are substantial changes to this policy that lead to new queries. These rights may be exercised by: The owner, who must sufficiently prove their identification by the different means made available by THE COMPANY. The holder’s successors, who must prove such quality. The representative and/or attorney of the owner, prior accreditation of the representation or empowerment Other in favor or for which the owner has stipulated.

RESPONSIBLE AND IN CHARGE OF THE PROCESSING OF PERSONAL DATA.

THE COMPANY will be responsible for the processing of personal data. The department called “Administrative and Financial Management” will be in charge of processing personal data. Any communication on the matter must be made through the email callcenter@ceutecuida.com.

PROCEDURE FOR THE ATTENTION OF QUERIES, CLAIMS, REQUESTS FOR RECTIFICATION, UPDATE AND DELETION OF DATA.

The owners or their successors inhabitants may consult the personal information of the owner that rests in THE COMPANY, who will provide all the information contained in the individual record or that is linked to the identification of the owner. Likewise, THE COMPANY provides the mechanism through which the owner can raise claims for the purpose of updating, rectifying, deleting the data or revoking the authorization definitively.

The owner can raise claims for the purpose of updating, rectifying, deleting the data or revoking the authorization permanently. In any case, regardless of the mechanism implemented for the attention of consultation requests, the same

They will be attended to within a maximum term of fifteen (15) business days from the date of receipt.

When it is not possible to respond to the query within said term, the interested party will be informed before the expiration of 15 days, stating the reasons for the delay and indicating the date on which the query will be addressed, which in no case may exceed (5 ) business days following the expiration of the first installment. Queries can be made to the email callcenter@ceutecuida.com

INFORMATION SECURITY MEASURES

In compliance with the security principle established in current regulations, THE COMPANY will adopt the technical, human and administrative measures that are necessary to grant security to the records, avoiding their adulteration, loss, consultation, use or unauthorized or fraudulent access. VALIDITY This policy is effective as of March 1, 2021