Privacy Policy in Colombia

1. Purpose

La presente política de privacidad de datos personales (en adelante, la "Política de Privacidad"), tiene por finalidad informar cómo JELOU S.A (en adelante, "JELOU"), con Registro Único de Contribuyentes Nº 0992939478001, con domicilio en calle Cedros Norte Nro. 215 y Primera Calle, Ciudadela Urdesa, Edificio Buro 215, Guayaquil, Ecuador, realiza el tratamiento de los datos personales que recopila a través de su página web https://www.jelou.ai (en adelante, la "Página Web") o a través de su programa informático Chatbot (en adelante, el "Chatbot"). Estos datos se recolectan mediante la navegación y utilización de la Página Web, el llenado de formularios virtuales y a través de los distintos espacios con los que cuenta la Página Web para consignar datos personales de forma virtual. Asimismo, los datos personales también pueden ser recabados a través del uso del Chatbot.

For these purposes, we will refer to the "Holder" as the person whose data will be collected and processed according to the terms established in the Privacy Policy. Only personal data for which proper consent has been obtained is processed, unless the exceptions established in the applicable regulation for the jurisdiction of the personal data in question apply, as indicated in the Legal Basis of this Privacy Notice.

The processing of personal data derived from this Privacy Policy is legitimate and lawful by virtue of obtaining the Holder's consent and its origin comes directly from them.

2. Legal Basis

This Privacy Notice is regulated by the legislation of your country, in particular, when reference is made to "your country's jurisdiction", "applicable regulation" or "the legislation in force in your country", it should be understood as the regulations listed here corresponding to your country:

3. Retention Period

In principle, the personal data provided by the Holder will be kept for one (1) year from their collection to fulfill the purpose for which they were collected and/or until the Holder revokes their consent, as regulated by the Law and applicable regulations. Personal data is deleted through a secure process after the aforementioned retention period ends.

In some jurisdictions, personal data will be kept for the necessary and reasonable time required to fulfill the purpose for which they were collected and authorized. Once this purpose has been fulfilled, the holder's personal data must be deleted unless their retention is required for compliance with a legal or contractual obligation.

Once the purpose has been fulfilled, your personal data may continue to be processed by us for the following reasons:

• If there is a legal or contractual obligation to keep them;
• If necessary for research, audit and/or regular exercise of our rights in judicial, administrative or arbitration proceedings

4. Banks / Personal Databases

The personal data provided and collected through the website will be stored in the personal database called "WEB USERS", duly registered in the National Registry of Personal Data Protection. The personal data provided and collected through the use of the Chatbot will be stored in the personal database called "POTENTIAL CLIENTS", duly registered in the National Registry of Personal Data Protection and/or in the National Registry of Databases as applicable.

5. Purpose of Processing

Through a virtual form hosted on the Website, JELOU collects personal data of a personal nature, such as names, surnames, phones, emails, address, ID card, RUC number, credit information.

These personal data provided by the Holder will be necessary to provide the online buying and selling services on the JELOU platform. JELOU may perform systematic evaluations of personal aspects and behaviors of its users within the Website, such as the development of profiles, trends and consumption habits, seeking a duly dissociated or at least anonymized treatment of this data, always attending to the security measures, principles and limitations for such purpose, provided in the Law

If the Holder does not provide this data, or provides incorrect or inaccurate data, JELOU will not be able to fulfill the purpose described above and the quality and manner of execution of the services provided by JELOU will be compromised.

Additionally, with the valid consent of the Holder, JELOU may contact them through [phone calls, SMS, emails or other equivalent means], to send advertisements, promotions, discount opportunities, general information. In the event that you do not accept the additional processing of your personal data, this will not affect the access and use of the Website and the services provided there.

Through the use of the Chatbot, JELOU collects personal data of a personal nature, such as names, surnames, phones, emails, address, ID card, RUC number, credit information, messages exchanged between the Chatbot and users, messages between human agents and users, information processed in messages such as images, files and audio, information specifically processed for online contract signing, information necessary for identity verification and user registration in service.

These personal data provided by the Holder will be necessary to provide the JELOU Chatbot services.

Likewise, JELOU will use contact data collected from its users who have contracted the Chatbot service to send recommendations with systems integrated with platforms such as WhatsApp, Facebook, Instagram and other social chat platforms.

6. Transfer and Recipients

The Holder is informed that their information is shared with third parties according to the following detail:

7. Security Measures

JELOU adopts the necessary security measures to guarantee the protection of the Holder's information in order to prevent its alteration, loss, destruction, damage, processing, disclosure and/or unauthorized or illegal access, taking into consideration the nature of the information and the risks to which they are exposed. To protect the Holder's personal data, JELOU has implemented measures that involve at minimum:

• Control and registration of accesses and privileges, as well as their periodic verification.
• Registration of events, logical interactions,
• Identification and authentication of users through password management and use.
• Copies and backups of information in a controlled and authorized manner.
• Security in personal data processing environments.

8. Communications and Subsequent Processing

JELOU commits not to disclose or share the personal data provided by the Holder without their valid consent, except in the following cases:

• When necessary for the purpose for which the information was collected.
• When the information holder is informed before disclosure or at the time of information collection and their prior and express consent is obtained.
• When there are information requests from administrative or judicial authorities by virtue of requests and orders in the exercise of their functions and the scope of their powers provided by Law.
• When there are requests from administrative authorities aimed at subsequent processing of data for historical, statistical or scientific purposes, provided that such data are duly dissociated or at least anonymized
• In general, information requests by virtue of relevant legal provisions.
• When they are data of a public nature;
• When faced with medical or health emergency cases;
• When they are Data related to the Civil Registry of Persons.

9. Use of Cookies on the Website

The use of cookies on the website can be consulted in our cookie policy, which is available at the following link

10. Exercise of Rights

The Holder can exercise the rights of access, rectification, opposition, cancellation, revocation, portability, deletion, elimination, updating, inclusion, annulment, limitation of processing, not to be subject to a decision based solely on automated assessments, limitation of use, disclosure of personal data, and other rights enshrined in the applicable legislation, through a request that can be sent to the following email address: claims@jelou.ai and including, at minimum, the following information:

• The name and email address of the Holder or any other means to receive responses.
• A document that proves the identity of the applicant and, if applicable, that of their representative with the respective authorization.
• The clear and precise description of the personal data with respect to which the Holder seeks to exercise any of the rights and the specific request.

Sin perjuicio de lo anterior, JELOU podrá conservar determinada información del Titular que solicita la baja, a fin de que sirva de prueba ante una eventual reclamación contra JELOU.

La duración de dicha conservación no será superior al plazo de prescripción legal de dichas responsabilidades. En caso de que la información sobre interacciones lógicas del usuario con la Página Web no puedan ser eliminadas por limitaciones técnicas, estos datos serán anonimizados para que no puedan servir para identificar o hacer identificable al Titular.

De considerar que no ha sido atendido en el ejercicio de sus derechos, el Titular puede presentar una reclamación ante la Autoridad Nacional de Protección de Datos Personales por medio de los canales que esta institución tenga habilitados.

Como titular de los datos personales tiene el ejercicio de los siguientes derechos:

(i) Acceder en forma gratuita a los datos proporcionados que hayan sido objeto de tratamiento. (ii) Conocer, actualizar y rectificar su información frente a datos parciales, inexactos, incompletos, fraccionados, que induzcan a error, o a aquellos cuyo tratamiento esté prohibido o no haya sido autorizado. (iii) Solicitar prueba de la autorización otorgada. (iv) Presentar ante la Superintendencia de Industria y Comercio (SIC) quejas por infracciones a lo dispuesto en la normatividad vigente. (v) Revocar la autorización y/o solicitar la supresión del dato, siempre que no exista un deber legal o contractual que impida eliminarlos. (vi) Abstenerse de responder las preguntas sobre datos sensibles.Tendrá carácter facultativo las respuestas que versen sobre datos sensibles o sobre datos de las niñas y niños y adolescentes.

11. Portability of Personal Data

At the express request of the Holder, JELOU may return the personal data collected from them, in a compatible, updated, structured, common, interoperable and machine-readable format, preserving its characteristics, or deliver them to another controller defined by the Holder.

JELOU will carry out this transfer or communication in an economically and financially efficient, expeditious and unhindered manner.

The portability of the Holder's data will not take place in the case of information inferred, derived, created, generated or obtained from analysis or processing carried out by JELOU.

12. Revocation of Consent

The Holder may revoke the authorization and consent granted to JELOU for the processing of their personal data, by submitting a written request sent to the email mentioned above.

The Holder or their heirs may request the correction, updating or deletion of data, or report non-compliance through a claim or request sent to the email mentioned above, which includes identification, description of the facts, address and relevant documents.

The request for deletion of information and revocation of authorization will not be valid if the Holder has a legal or contractual obligation to remain in the database.

13. Modifications to the Privacy Policy

JELOU expressly reserves the right to modify, update or complete this Privacy Policy at any time. Any modification, update or extension produced in this policy will be immediately communicated through the Website.

In case of a substantial change in the processing policies, regarding the identification of the Controller and the purpose of Processing personal data, JELOU through the Website will inform the Holder of these changes before or at the time of implementing the new policies. If it is a change in the purpose of processing personal data, JELOU will request new data authorization from the Holder.

14. Mechanisms to Know the Processing Policy

The Holder can access our Information Processing Policy, which is published here.

15. Applicable Legislation and Conflict Resolution

The terms of the Privacy Policy are governed by and construed in accordance with the laws of Ecuador and the applicable legal framework according to section 15 where the other applicable jurisdictions are specified.