PRIVACY NOTICE

In order to protect personal data, R&G Espinosa International Adjusters SAS has designed a privacy policy that allows us to properly handle the data we collect, store or update, as well as share it, inside and outside the national territory, with entities with which we work.

Data Controller

In compliance with Law 1581 of 2012 and Decree 1074 of 2015, R&G Espinosa International Adjusters SAS, identified with NIT number 900556237, domiciled at Carrera 19 No. 114 – 09 Glas Haus Office 302, phone No. 601 7944848 and email normatividad@rygespinosa.com, colombiaclaims@rygespinosa.com is the data controller of personal data that it collects, stores and uses in the development of its activities as insurance adjusters in Colombia.

Purpose of processing personal data

The personal data collected by R&G Espinosa International Adjusters SAS will be processed for the following purposes:

• Evaluate, manage and process insurance claims.
• Comply with contractual and legal obligations to insurers, supervisory entities and other stakeholders.
• Perform internal audits and quality controls.
• Respond to queries, petitions and requests from the owners of the information.
• Comply with the requirements of the Superintendence of Industry and Commerce (SIC) and the Financial Superintendence of Colombia.
• Protect the security and confidentiality of the information processed.
• Manage employee information for hiring, payroll, benefits, social security, and compliance purposes.
• Manage the relationship with suppliers, including the assessment, contracting and compliance with commercial and tax obligations.

To carry out the purposes described in this privacy notice, we will use the following personal data:

• Identification data: Name, marital status, handwritten and electronic signature, identification number, place and date of birth, nationality, photographs, age, among others.
• Contact data: Information that allows to keep contact or reach its owner, such as: domicile, email, mobile phone, among others.
• Financial data: Bank information for payments or refunds.
• Policy and claims data: Policy number, claim details, policy, financial statements.
• Employment data: Job position, salary, working hours, performance evaluations and social security data.
• Sensitive data (when applicable): Medical history in cases of healthcare or life insurance, data on accidents or losses, health condition in case of disabilities or accidents at work.
• Academic data: Curriculum Vitae and diplomas.

We do not use or store sensitive personal data such as: ideological data, data on political opinions, data on trade union membership, data on sex life, data on ethnic or racial origin.

Rights of Data Subjects

According to Law 1581 of 2012, personal data subjects are entitled to:

• Know, update and rectify their personal data.
• Request the deletion of their data when appropriate.
• Revoke the authorization granted for the processing of their personal data.
• Be informed about the use of personal data.
• File complaints with the Superintendence of Industry and Commerce for alleged non-compliance with regulations.

Mechanism for the exercise of rights

Data subjects may exercise their rights by submitting a written request through the following channels:

• E-mail: normatividad@rygespinosa.com and colombiaclaims@rygespinosa.com
• Street address: Cra. 19 No. 114 – 09 Glas Haus Office 302
• Phone No.: +57 601 7944848

Transfer and Transmission of Personal Data

Personal data may be shared with:

• Policyholders with whom claims will be managed.
• Regulatory and governmental entities when required by law.
• Companies that provide technological and information security services under confidentiality agreements.
• Entities in charge of the administration of social security and labor benefits in the case of employees.
• Tax authorities and control bodies where necessary for compliance with legal obligations with respect to suppliers and employees.

In addition, we inform you that your personal data is shared inside and outside the country with the following people, companies, organizations and authorities assigned to us, for the following purposes:

Security Measures

R&G Espinosa International Adjusters SAS implements technical, administrative, and organizational security measures to guarantee the protection of personal data, in accordance with Decree 1074 of 2015 and the cybersecurity regulations applicable in Colombia.

Changes to the Privacy Notice

This privacy notice may be updated at any time. Any changes will be informed through the company's official channels.

Revocation of consent

The personal data subject has the right to revoke at any time the authorization granted for its processing. However, it is important to note that in certain cases it will not be possible to immediately comply with this request or suspend the use of the data, as we may be subject to legal obligations that require us to continue processing the data. In addition, the withdrawal of consent could affect the performance of service with our company.

Contact for inquiries and complaints

For any inquiries about the processing of personal data, the data subjects can contact mail normatividad@rygespinosa.com  or visit our offices at Carrera 19 No. 114-09 office 302.

By accepting this privacy notice, the data subject authorizes the processing of his/her personal data as provided herein.

Sincerely,

R&G Espinosa International Adjusters