In compliance with Law 1581 of 2012, which issues provisions for the protection of personal data, TRAVEX SAS, in its role as data controller, informs the following general guidelines: TRAVEX SAS, identified with Tax ID: 901097924-5, headquartered at Calle 73 # 0 - 64 in Bogotá, with the website www.travex.com.co.

These terms and conditions apply to any registration of personal data carried out in person and/or virtually to access any of our services. The data subject provides or registers their information freely and voluntarily and acknowledges having read and expressly accepted these terms and conditions.

1. 1. USE OF COOKIE TECHNOLOGY

   TRAVEX SAS reserves the right to use so-called “cookies” on any use of the Portal. Cookies are small data files generated on the user's computer that allow us to obtain the following information:

   • The date and time of the user's last visit to our website.
   • The content layout the user chose during their first visit to our website.
   • Security elements involved in controlling access to restricted areas.

   However, users are informed of the possibility of disabling this usage on their devices. Through these “cookies,” once registered, other users can see whether you are online, allowing quicker and more fluid contact with you.

2. 2. Data Processing Policy

   Through this policy, TRAVEX SAS, in compliance with Law 1581 of 2012, which issues provisions for the protection of personal data, aims to enforce the constitutional guarantee of privacy, establishing mechanisms and controls to ensure the proper treatment of the information it manages.

   This policy establishes the terms, conditions, and purposes under which TRAVEX SAS, as the controller of personal data obtained through various in-person or virtual service channels, processes the information of all individuals who at any time have provided personal data as part of the organization’s activities. The data subject provides or registers their information freely and voluntarily and acknowledges having read and expressly accepted these terms and conditions.

3. 3. PURPOSE OF DATA PROCESSING

   The Personal Data requested by TRAVEX SAS will be used for the following purposes:

   • Your Personal Data will be included in one or more databases to facilitate efficient communication with you through any means of contact, related to our services, promotions, events, advertising campaigns, email marketing, benefits, conditions or applicable policies, support channels, and/or social media.
   • To inform about changes in our services or new ones related to the contracted or acquired service(s).
   • To evaluate service quality.
   • To create and report statistical information, satisfaction surveys, studies, and market analyses, including the possibility of contacting you for these purposes by TRAVEX SAS.
   • To identify, collect, and associate the data with information about your browsing preferences on TRAVEX SAS's website, as well as geolocation data and/or specific location generated by mobile devices, to improve user experience, understand browsing behavior, and deliver segmented information and/or advertising related to our own or third-party products and services.
   • To transmit this data to third parties acting as data processors or involved in operational processes within Colombia.
4. 4. RIGHTS OF THE DATA SUBJECT

   The data subject is informed of the rights granted by personal data protection laws, which are listed below and guaranteed by TRAVEX SAS through compliance with the defined procedures:

   • To know, update, and correct your Personal Data held by TRAVEX SAS, in its capacity as the data controller.
   • To request proof of the Authorization granted to TRAVEX SAS, in its capacity as the data controller.
   • To be informed by TRAVEX SAS, upon request, about the use that has been made of your Personal Data.
   • To file complaints before the Superintendence of Industry and Commerce for violations of the provisions of Law 1581 of 2012 and other regulations that modify, add to, or complement it, once the consultation or claim process with the data controller has been exhausted.
   • To revoke the Authorization and/or request the deletion of the data when the Treatment does not respect constitutional and legal principles, rights, and guarantees.
   • To access your Personal Data that has been subject to Treatment free of charge.
   • If you want to know, update, correct, or delete your personal data, you can do so through the following means:
   • Email: contacto@travex.com.co
   • Phone: +571-3124508313
5. 5. INFORMATION SECURITY

   TRAVEX SAS is committed to the proper use and processing of personal data contained in its databases, avoiding unauthorized access by third parties who could become aware of, compromise, modify, disclose, and/or destroy the information stored therein.

   To this end, it has security protocols and access controls for information systems, storage, and processing, including physical measures to mitigate security risks.

   Access to the various databases is granted only to the company departments that require the use of personal data. Additionally, all staff members are committed to the confidentiality and proper handling of the databases, in accordance with the data processing guidelines established by law.

6. 6. PROCESSING OF MEDICAL RECORD DATA

   As part of our experiential training activities and field programs, TRAVEX SAS may collect and process sensitive personal data related to participants’ health through the completion of medical forms. This information is requested solely and exclusively for the purpose of preserving the safety and physical integrity of participants during program activities.

   The data collected in the medical forms will be processed under strict criteria of confidentiality, protection, and restricted access. Only authorized personnel from the safety and logistics team will have access to this information, which will be used exclusively to:

   • Identify relevant health conditions requiring preventive attention.
   • Design on-site care and attention strategies.
   • Activate medical protocols in case of an emergency.
   • Facilitate appropriate support and response from staff trained in first aid.

   The processing of this data is carried out in compliance with Article 6 of Law 1581 of 2012 and Decree 1377 of 2013, based on the principles of necessity, proportionality, and purpose. At all times, the rights of the data subject will be respected, and they may know, update, correct, or revoke the authorization for data processing in accordance with the channels and procedures established by TRAVEX SAS.