PERSONAL DATA MANAGEMENT POLICY OF Grupo Fucsia SAS

The purpose of this Personal Data Management Policy is to establish the guidelines and standards that ensure the proper treatment of personal information, as well as to explain the procedure for handling queries and complaints related to personal data submitted by the owners of said information.

This policy has been prepared in accordance with the provisions of the Colombian Political Constitution and in compliance with the data protection regime, which includes Law 1581 of 2012, Regulatory Decree 1377 of 2013, Decree 886 of 2014, External Circular 002 of 2015, Decree 1074 of 2015, External Circular 005 of 2017, Decree 090 of 2018 and other complementary provisions and regulations that repeal or modify them, with the purpose of safeguarding the rights to privacy and habeas data of the owners of personal information.

For the purposes of this policy, the person responsible for processing our consumers' information will be: Grupo Fucsia SAS, identified with NIT: 901677049-4, domiciled at Cra. 6 # 17-59 Pereira email: info@fucsaiboutique.com and cell phone: 3102721697

At Grupo Fucsia SAS we request information from our customers to improve the experience and communication regarding products, services and promotions. We collect data such as your name, email and address, which are provided to us when registering on our site or placing an order. For security reasons, information about your payment methods is not requested directly and is kept private between the user and our electronic payment system provider.

We reserve the right to update or modify the Terms and Conditions at any time without prior notice, so we recommend that you review this section each time you use our site. By accessing and using our website, you agree to be bound by the Terms and Conditions, and all applicable laws will be governed by and construed in accordance with Colombian law.



Authorization: Expression of the prior, express and informed consent of the owner for Fucsia Boutique or its Managers to process the owner's personal data.

Privacy Notice: Physical, electronic or any other format document provided by Fucsia Boutique, which informs the owner about the existence of the applicable personal data processing policies, the way to access them and the characteristics of the treatment that will be given to the personal data.

Database: Organized set of personal data that are subject to processing, including physical and electronic files. Fucsia Boutique's databases are detailed in section VI of this policy.

Personal Data: Any information linked to or that can be associated with one or more specific or identifiable natural persons, according to Law 1581 of 2012.

Public Data: Personal Data classified as public by law or the Political Constitution, such as marital status, profession or occupation, among others.

Sensitive Data: Personal data whose use may affect the privacy of the holder or generate discrimination, such as those that reveal racial origin, political orientation, religious beliefs, health, sexual life and biometric data.

Data Protection Officer: Person within Fucsia Boutique responsible for supervising and controlling the application of the personal data protection policy, under the direction of the Board of Directors.

Owner: Natural person whose personal data is processed.

Processing: Any operation on personal data carried out by Fucsia Boutique or its managers, such as collection, storage, use, circulation or deletion.

Transfer: Sending personal data to a recipient responsible for processing, as established by Law 1581 of 2012.

Transmission: Communication of personal data within or outside Colombian territory, for the purpose of processing by the person in charge on behalf of Fucsia Boutique.

RIGHTS OF THE OWNER OF THE INFORMATION

Holders of personal information have the right to exercise the right of Habeas Data before the data controller, being able to access, know, rectify or oppose the processing of their personal data. The rights of holders are described below:

1. Right to Knowledge: The owner may know whether his/her data has been processed, its origin, the form of authorization and whether it has been transferred to third parties, as well as the identification of said third parties.

2. Right to Update: The owner has the right to update the information that is kept.

3. Right of Rectification: The owner may verify the accuracy of his/her information and request the correction of inaccurate, incomplete or erroneous data.

4. Right to Object: The owner may object to the processing of his or her personal information when its use is excessive or inappropriate, indicating the data to be cancelled in order to block or eliminate unauthorized processing.

PROCEDURE FOR EXERCISING THE RIGHTS OF THE PERSONAL INFORMATION OWNER

The information holder may exercise his/her rights at any time through the enabled channels: Cra 6 # 17-59 Pereira email: info@fucsiaboutique and cell phone: 3102721697. A query or claim may be submitted, each with its respective procedure:

1. Query:
a. Procedural: To know the personal information in the databases of the person responsible, the origin of the data, and to whom it has been transferred.

b. Response time: The query will be answered within a maximum of ten (10) business days from receipt of the request.

c. Extension: If the request cannot be attended to within the deadline, the interested party will be informed of the reason and the new date, without exceeding five (5) additional business days.

d. Information to be provided: All information contained in the individual registration of the holder will be provided.

2. Claim:
a. Proceedings: When the owner considers that the information should be corrected, updated or deleted.

b. Response time: Maximum of fifteen (15) business days from the day following receipt.

c. Incomplete claim: The interested party will be required to rectify it within five (5) days.

d. Withdrawal: If the incomplete application is not responded to within two (2) months, it will be understood as withdrawal.

e. Identification of the procedure: A "claim in process" legend will be included in the database within a period of no more than two (2) business days.

f. Jurisdiction: If it is not competent to resolve, it will be transferred to the appropriate authority within a maximum of two (2) business days.

DATA DELETION

The owner may request Fucsia Boutique to delete his/her personal data when:

- Please consider that you are not being treated in accordance with the law.
- They are no longer necessary for the purposes of collection.
- The conservation period has been exceeded.

This deletion may be total or partial. However, the right to cancellation is not absolute and may be denied in certain circumstances according to the regulations.

INFORMATION SECURITY AND SECURITY MEASURES

Fucsia Boutique has implemented technical, human and administrative measures to protect the security of records and prevent their unauthorized use. These measures are contained in information security documents reserved for internal use.

PERIOD OF VALIDITY OF THE DATABASES

The validity of the databases will coincide with that of Fucsia Boutique, except in cases of specific activities whose duration will be until its completion.

VALIDITY AND UPDATE OF THE POLICY

This policy is effective as of January 1, 2022.