POLICY AND AUTHORIZATION FOR THE TREATMENT OF INFORMATION AND PERSONAL DATA BY MONOIC STUDIOS

By accepting and granting this authorization, the user authorizes MONOIC LLC to collect, store, use, circulate, and delete personal data, sensitive data, and cookies provided by the users when using the website wwww.monoicstudios.com (hereinafter referred to as the "Portal").

The user of the Portal, acting as the owner of the personal data covered by Law 1581 of 2012, grants explicit authorization for the processing of the personal data shared, except in cases where by law the granting of such authorization is not required. Once authorized, MONOIC STUDIOS may process the data described in this policy for the professional, commercial, administrative, and advertising purposes contemplated therein, without implying the commercialization or circulation of the processed data, applying the exceptions established by law.

PRIVACY NOTICE

This Privacy Notice establishes the terms and conditions under which MONOIC LLC, with its main address in the city of Bogotá, Colombia (hereinafter, "MONOIC STUDIOS"), and the Portal, will process your personal data. The processing that will be carried out with the personal information includes the collection, storage, use, commercial use, and circulation of personal data of the Users and all related activities.

RIGHTS OF THE DATA SUBJECT

As the owner of their personal data, the User of MONOIC STUDIOS has the right to:

Access free of charge to the provided data that have been subject to processing.
Know, update, and rectify their information that is partial, inaccurate, incomplete, fractionated, or leading to error, or those whose processing is prohibited or has not been authorized.
Request proof of the granted authorization.
Revoke the authorization and/or request the deletion of the data, provided that there is no legal or contractual duty preventing their deletion.
Refrain from answering questions about sensitive data. Responses regarding sensitive data or data about minors will be optional.
MECHANISMS TO KNOW THE TREATMENT POLICY

The Owner can access our Information Processing Policy, which is published at www.monoicstudios.com

POLICY ON PERSONAL DATA PROTECTION

The objective of this data protection policy is to establish the criteria for the collection, storage, use, circulation, and deletion of personal data processed by MONOIC STUDIOS. This policy applies to all personal information registered in the databases of the MONOIC STUDIOS Portal, which acts as the data controller. This policy is of mandatory and strict compliance for MONOIC STUDIOS.

DATA PROCESSOR

MONOIC STUDIOS, with its main address in the city of Bogotá, Republic of Colombia, and website www.monoicstudios.com

DEFINITIONS

This data processing policy will include expressions that will have the meaning assigned to them here or, failing that, the meaning granted by law.

AUTHORIZATION: The prior, express, and informed consent of the data subject for MONOIC STUDIOS to carry out the processing of their personal data.
AUTHORIZED: Those who have been authorized in the authorization to process the personal data of the owner.
PERSONAL DATA DATABASE: An organized set of personal data that are subject to processing by a natural or legal person.
PERSONAL DATA: Information of any kind related to natural or legal persons.
PUBLIC DATA: Personal data that the law qualifies as public and not semi-private, private, or sensitive. Examples include data regarding the civil status of individuals, their profession or occupation, their status as a merchant or public servant, and those that can be obtained without any reservation.
PRIVATE DATA: Personal data that, due to its intimate or reserved nature, is relevant to the Data Subject.
SEMIPRIVATE DATA: Personal data known and of interest to both the Data Subject and a certain sector of people or society in general, so it is not intimate, reserved, or public.
SENSITIVE DATA: Personal data that are related to the privacy of the Data Subject, whose misuse may lead to discrimination. Examples include data revealing racial, ethnic, political, religious, moral, or philosophical characteristics, and data related to health, sexual life, and biometric data.
PROCESSOR: The natural or legal person who processes personal data on behalf of the controller.
HABEAS DATA: The right that the Data Subject of personal data has to demand from the administrators of such data access, inclusion, exclusion, correction, addition, update, and certification of the data, as well as limitation in their disclosure, publication, or assignment.
RESPONSIBLE PARTY: The one who can make decisions about the database and the processing of personal data.
DATA SUBJECT: Natural or legal person to whom the data included in a database refer. The data subject is the one who has data protection rights.
TRANSMISSION: The communication of personal data when it is intended to carry out processing by the processor on behalf of the controller.
TRANSFER: Occurs when the controller and/or processor of personal data sends the information or personal data to a recipient, who in turn is responsible for the processing and is located inside or outside the country.
PROCESSING: Any operation or set of operations on personal data, such as collection, storage, use, circulation, or deletion.
USER: Natural or legal person who accesses, navigates, or uses the services or carries out any type of activity through the Portal. It refers to consumers, potential consumers, and service beneficiaries by a consumer of the services offered by the Portal.
PROCESSING AND PURPOSE

The processing that MONOIC STUDIOS will carry out with personal information includes the collection, storage, use, commercial use, circulation of personal data of the Data Subjects, and all related activities, including, but not limited to, the following:

Providing the services offered to users on the monoicstudios.com Portal
Providing users with necessary information, through the Portal, about the services and/or products offered, to formalize the consumer relationship of such services and/or products.
Using Personal Data to offer services or products.
Internal development and operation processes of the Portal.
Transmission of data to third parties for commercial, administrative, marketing, and/or operational purposes.
Processing all the necessary information for compliance with tax obligations and commercial, corporate, and accounting records.
Fraud and money laundering control and prevention, consultation on restrictive lists, and all necessary information required to execute anti-money laundering procedures.
Maintaining and processing any type of information related to the user to offer them services and products.
PRINCIPLES OF DATA PROCESSING

The following principles will be applied in the development of data processing:

Principle of legality: Processing is a regulated activity that must comply with what is established by law and other provisions that develop it;
Principle of purpose: Processing must obey a legitimate purpose according to the Constitution and the law, which must be informed to the Data Subject;
Principle of freedom: Processing can only be carried out with the prior, express, and informed consent of the Data Subject. Personal data cannot be obtained or disclosed without prior authorization, or in the absence of a legal or judicial mandate that relieves consent;
Principle of truth or quality: Information subject to processing must be truthful, complete, accurate, current, verifiable, and understandable. Processing of partial, incomplete, fractionated, or misleading data is prohibited;
Principle of transparency: The Data Subject's right to obtain information from the Data Controller or Processor at any time and without restrictions about the existence of data concerning them must be guaranteed in processing;
Principle of access and restricted circulation: Processing is subject to the limits derived from the nature of personal data, the provisions of the law, and the Constitution. In this sense, processing can only be done by persons authorized by the Data Subject and/or by persons provided for by law; Personal data, except for public information, may not be available on the Internet or other means of disclosure or mass communication unless access is technically controllable to provide restricted knowledge only to Data Subjects or authorized third parties according to this law;
Principle of security: Information subject to processing by the Data Controller or Processor referred to in this law must be handled with the technical, human, and administrative measures necessary to provide security to the records, avoiding their alteration, loss, consultation, unauthorized use or access, or fraudulent;
Principle of confidentiality: All persons involved in the processing of personal data that do not have a public nature are obliged to guarantee the confidentiality of the information, even after their relationship with any of the tasks comprising the processing has ended, and may only provide or communicate personal data when this corresponds to the development of activities authorized by law and the terms of this.
DATA SUBJECT RIGHTS

As the owner of their personal data, the User of www.monoicstudios.com has the right to:

Access free of charge to the provided data that have been subject to processing.
Know, update, and rectify their information that is partial, inaccurate, incomplete, fractionated, or leading to error, or those whose processing is prohibited or has not been authorized.
Request proof of the granted authorization.
Revoke the authorization and/or request the deletion of the data, provided that there is no legal or contractual duty preventing their deletion.
Refrain from answering questions about sensitive data. Responses regarding sensitive data or data about minors will be optional.
ATTENTION TO REQUESTS, CONSULTATIONS, AND CLAIMS

The user service area is the department in charge of processing the requests of the Data Subjects to enforce their rights. For this purpose, the user must direct their communications to the email contacto@monoicstudios.com, or to the telephone (+57) 321 274 6511, where requests for updating, correction, or deletion of Personal Data, among others authorized by law, will be received, processed, and answered.

PROCEDURE FOR THE EXERCISE OF THE HABEAS DATA RIGHT

In compliance with the rules on personal data protection, MONOIC STUDIOS presents the procedure and minimum requirements for the exercise of your rights:

For the submission and attention of your request, we ask you to provide the following information:

Full name and surname
Contact details (physical and/or electronic address and contact telephone numbers)
Means to receive a response to your request
Reason(s)/fact(s) that give rise to the claim with a brief description of the right you wish to exercise (know, update, rectify, request proof of the granted authorization, revoke it, delete, access the information)
Signature (if applicable) and identification number.
The maximum term provided by law to resolve your claim is fifteen (15) business days, counted from the day following the date of receipt. When it is not possible to address the claim within this term, MONOIC STUDIOS will inform the interested party of the reasons for the delay and the date on which their claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the first term.

Once the terms established by Law 1581 of 2012 and other regulations that regulate or complement it have been met, the Data Subject to whom the exercise of the rights of access, updating, rectification, deletion, and revocation is denied, in whole or in part, may report their case to the Superintendence of Industry and Commerce - Delegation for the Protection of Personal Data.

Accordingly, the following specific procedures will apply:

CONSULTATIONS OF PERSONAL DATA

Data Subjects may consult their personal information contained in any database. MONOIC STUDIOS must provide all the information contained in the individual record or that is linked to the identification of the Data Subject. The consultation will be made through the means enabled by MONOIC STUDIOS, as long as proof of it can be kept.

The consultation will be addressed within a maximum term of ten (10) business days counted from the date of receipt. When it is not possible to address the consultation within this term, the interested party will be informed, stating the reasons for the delay and indicating the date on which their consultation will be addressed, which in no case may exceed five (5) business days following the expiration of the first term.

CLAIMS

The Data Subject who considers that the information contained in a database must be corrected, updated, or deleted, or who notices the alleged breach of any of the duties contained in the law, may submit a claim to MONOIC STUDIOS, which will be processed under the following rules:

The claim will be formulated by means of a request addressed to MONOIC STUDIOS, with the identification of the Data Subject, a description of the facts giving rise to the claim, the address, and accompanying the documents that want to be asserted. If the claim is incomplete, the interested party will be required within five (5) days following the receipt of the claim to remedy the failures. Two (2) months after the date of the request, without the applicant presenting the required information, it will be understood that they have withdrawn the claim.
If the recipient of the claim is not competent to resolve it, they will transfer it to the corresponding authority within a maximum term of two (2) business days and inform the interested party of the situation.
Once the complete claim has been received, a legend stating "claim in process" and the reason for it will be included in the database within a term not exceeding two (2) business days. This legend must be maintained until the claim is decided.
The maximum term to address the claim will be fifteen (15) business days counted from the day following the date of its receipt. When it is not possible to address the claim within this term, the interested party will be informed of the reasons for the delay and the date on which their claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the first term.
In any case, the Data Subject may only file a complaint with the Superintendence of Industry and Commerce once they have exhausted the consultation or claim procedure before MONOIC STUDIOS.

EFFECTIVENESS

This Policy for the Processing of Personal Data is effective as of June 17, 2024. The databases in which personal data are registered will be kept as long as their deletion is not requested by the interested party and as long as there is no legal or contractual duty to keep their information. Once the established term has expired, their data will be deleted from our databases.

MONOIC LLC