PERSONAL DATA PROCESSING POLICY

Maja Jewels SAS with email contacto@majajewels.com and telephone number (57) 3117640294, will be responsible for data processing and, as such, may collect, store, and use data for the following purposes:

• PROCESSING OF CUSTOMER PERSONAL DATA:

The purpose of processing personal data provided by MAJA JEWELS customers is: (I) to have the personal information provided when signing contracts with our customers in order to comply with the obligations derived from them, (II) to make offers and promotions, (III) to carry out evaluations and/or surveys related to our customers' satisfaction level regarding the products and services we offer and provide, and (IV) to send commercial communications related to the products and services we offer and provide.

• PROCESSING OF SUPPLIER PERSONAL DATA:

The purpose of processing personal data provided by MAJA JEWELS suppliers is: (I) to store and classify the information provided by suppliers for easy identification, (II) to consult, compare, and evaluate all information about the supplier found in judicial background databases or legitimately constituted state or private, national or foreign authorities, or any commercial or service database that allows for a comprehensive assessment of supplier behavior, including consultations in lists for the prevention and control of money laundering and terrorism financing, (III) to analyze, process, evaluate, and compare information provided by suppliers, (IV) to send information of interest and invitations to events scheduled by MAJA JEWELS (V) to comply with Colombian or foreign law and with orders from judicial and/or administrative authorities, (VI) to issue certifications related to the data subject's relationship with MAJA JEWELS (VII) to provide information to inspection, surveillance, control, regulatory bodies or internal or external auditors, (IX) to make payments for services rendered or products sold by the supplier, (X) for the preparation of invitations to quote, (XI) to comply with all obligations derived from the contractual relationship with suppliers.

• PROCESSING OF FINANCIAL PERSONAL DATA:

MAJA JEWELS will process your financial personal data only when this information is necessary to carry out invoicing, portfolio management, collection, and payment processes for products and services that have been provided or supplied by MAJA JEWELS, and for sending invoices either electronically, physically, or by any means agreed upon with you.

GENERAL:

MAJA JEWELS collects your Personal Data through various information sources such as personal or work electronic messages, through the website https://majajewels.com/ or physical correspondence, through existing information in MAJA JEWELS databases in accordance with the provisions of article 10 of Decree 1733 of 2013, through voice messages, information archived in MAJA JEWELS computers and electronic devices, internet access, correspondence or through any other electronic device for communications and any other technological resource. MAJA JEWELS collects your Personal Data in person from all buyers at points of sale, commercial events such as fairs, among others.

RIGHTS OF THE DATA SUBJECT

Your rights as the data subject are those provided for in the Constitution and Law 1581 of 2012, especially the following:

1. a) Access the provided data that has been processed free of charge.
2. b) Request the updating and rectification of your information regarding partial, inaccurate, incomplete, fragmented, misleading data, or data whose processing is prohibited or has not been authorized.
3. c) Request proof of the authorization granted.
4. d) File complaints with the Superintendence of Industry and Commerce (SIC) for violations of current regulations.
5. e) Revoke authorization and/or request the deletion of data, unless there is a legal or contractual duty that makes it imperative to retain the information.
6. f) Refrain from answering questions about sensitive data or about data of children and adolescents.

You may exercise these rights through the channels or means provided by MAJA JEWELS for public attention, to the email contacto@majajewels.com for the attention of requirements related to the processing of your personal data and the exercise of the rights mentioned in this authorization.

• MECHANISMS TO KNOW THE PROCESSING POLICY:

The Data Subject can access our Data Processing Policy, which is published on the website.

Any question or query regarding your Personal Data collected and processed by MAJA JEWELS will be received by our responsible staff, for which you must send a written description of your query to the email contacto@majajewels.com. The responsible person will resolve your question or query within ten (10) business days following the date on which the question or query is received. If it is not possible for the responsible person to respond to your claim within the mentioned term, MAJA JEWELS will inform you of the situation and explain the reason for the delay. In any circumstance, MAJA JEWELS will respond to you within five (5) business days following the expiration of the initial ten (10) business days. The consent granted by you may be revoked at any time, by prior, written, and signed notice addressed to MAJA JEWELS, to the aforementioned email address, under the terms established by law. If you consider that the information contained in the MAJA JEWELS database is subject to correction, updating, or deletion or if you consider that MAJA JEWELS is not complying with its obligations established in Law 1581 of 2012, you must file a complaint with MAJA JEWELS, which will be processed in accordance with the procedure established in article 15 of Law 1581 of 2012.

Policy effective date and database expiration date

This privacy policy became effective on April 1, 2021, and your Personal Data will remain in the MAJA JEWELS database until they fulfill the purpose for which they were collected, or at the end of the established time period when there is a legal provision.