**PERSONAL DATA PROCESSING POLICY**

SG TEXMODA S.A.S., a commercial company identified with NIT 900.418.788-5, as the data controller and/or processor, has adopted its Personal Data Processing Policy, expressed in the following terms:

**GLOSSARY**
- **Authorization:** Prior, express, and informed consent of the data subject to carry out the processing of personal data.
- **Privacy Notice:** A physical, electronic, or any other format document generated by the Controller and made available to the Data Subject. The privacy notice communicates to the Data Subject information regarding the existence of the applicable data processing policies, how to access them, and the purpose of processing their personal data.
- **Database:** An organized set of personal data subject to processing.
- **Query:** A request from the data subject or authorized persons to access the information stored in databases or files.
- **Personal Data:** Any information linked to or that may be associated with one or more identifiable individuals.
- **Public Data:** Data classified as public by law or the Constitution, including but not limited to information about a person's marital status, profession, occupation, commercial status, or status as a public servant, which can be obtained without any restrictions.
- **Private Data:** Data that, due to its intimate or reserved nature, is only relevant to the data subject.
- **Sensitive Data:** Data that affects the privacy of the data subject or whose improper use may lead to discrimination.
- **Data Processor:** A natural or legal person, public or private, who, alone or in association with others, processes personal data on behalf of the Data Controller.
- **Data Controller:** A natural or legal person, public or private, who, alone or in association with others, determines the processing of personal data.
- **Data Subject:** A natural person whose personal data is subject to processing.
- **Processing:** Any operation or set of operations on personal data, such as collection, storage, use, circulation, or deletion.
- **Transmission:** Processing of personal data involving the communication of such data within (national transmission) or outside Colombia (international transmission) for processing by the Data Processor on behalf of the Data Controller.

**OBJECTIVE**
To establish the criteria for collecting, storing, using, circulating, and deleting personal data processed by SG TEXMODA S.A.S.

**SCOPE**
This policy applies to all personal information recorded in the databases of SG TEXMODA S.A.S., which acts as the data controller.

**OBLIGATIONS**
This policy is mandatory and strictly applicable to SG TEXMODA S.A.S.

**DATA CONTROLLER**
SG TEXMODA S.A.S., a legally constituted commercial company, identified with NIT 900.418.788-5, with its principal office located at Calle 70 74 a 45 in Bogotá, Republic of Colombia. Website: www.bemiareducotora.com, Phone: 0314754341, Bogotá.

**DATA PROCESSING AND PURPOSE**
The processing of personal data by SG TEXMODA S.A.S. will include collection, storage, use, and circulation for the following purposes:
- Carrying out activities related to the company’s corporate purpose, including the execution of contracts signed with the data subject.
- Sending invitations to events and offering new products and services through various channels, such as client visits, telemarketing, and physical or electronic communications.
- Managing requests, complaints, and claims.
- Conducting satisfaction surveys regarding SG TEXMODA S.A.S. products and services.
- Providing contact information to the sales force and distribution network for telemarketing, market research, and related activities.
- Contacting the Data Subject via phone for surveys, studies, and confirmation of personal data required for contractual relationships.
- Sending information via SMS or chat related to loyalty campaigns or service improvements.
- Sending account statements, invoices, and other contractual information via email.
- Sharing information with third parties with whom SG TEXMODA S.A.S. has contractual relationships, as necessary for fulfilling contractual obligations.
- Disseminating policies, programs, results, and organizational changes.
- Informing about changes in products and/or services.

**RIGHTS OF DATA SUBJECTS**
As a data subject, you have the right to:
- Access your data free of charge and request information on its processing.
- Know, update, and rectify any partial, inaccurate, incomplete, misleading, or unauthorized data.
- Request proof of the authorization granted for data processing.
- File complaints with the Superintendence of Industry and Commerce (SIC) for violations of applicable regulations.
- Revoke authorization and/or request the deletion of data, provided there is no legal or contractual obligation preventing deletion.
- Refuse to provide sensitive data or information regarding minors, as such responses are optional.

**HANDLING REQUESTS, QUERIES, AND CLAIMS**
SG TEXMODA S.A.S. has designated a manager responsible for handling requests related to data protection, available via email at sgtexmoda@miareductora.com.

The company's management is responsible for ensuring the security and proper handling of personal data. You may contact us at Calle 70-74 a 45, Bogotá, phone 4754341, or email sgtexmoda@miareductora.com.

**PROCEDURE FOR EXERCISING HABEAS DATA RIGHTS**
In compliance with data protection regulations, SG TEXMODA S.A.S. provides the following procedure for exercising your rights:

To submit a request, please provide:
- Full name and surname.
- Contact details (physical/electronic address and phone numbers).
- Means to receive a response.
- Reason(s) or facts underlying the claim, including a brief description of the right to be exercised (e.g., access, update, rectification, revocation, deletion).
- Signature (if applicable) and identification number.

The maximum legal timeframe to resolve your claim is fifteen (15) business days from the day following receipt. If the claim cannot be resolved within this period, SG TEXMODA S.A.S. will inform the requester of the delay and provide a new resolution date, which may not exceed eight (8) additional business days.

If the data subject’s rights are denied in whole or in part after exhausting legal timeframes and procedures, they may escalate the case to the Superintendence of Industry and Commerce – Delegation for Personal Data Protection.

**VALIDITY**
This Personal Data Processing Policy is effective as of January 1, 2021.

The personal data recorded in our databases will be retained for as long as necessary to fulfill the purposes described in this policy. Once these purposes are met and there is no legal or contractual obligation to retain the information, the data will be deleted from our databases.