1. Introduction

Treetek SAS, identified with NIT ID 900249042, and located at Centro empresa Cali – Valle del Cauca – Colombia, in compliance with Law 1581 of 2012 and Decree 1377 of 2013, adopts this Personal Data Protection and Processing Policy in order to guarantee the right to privacy, intimacy, and good name of the data subjects whose personal data it collects, stores, and uses in the course of its activities.

2. Guiding Principles

The processing of personal data by Treetek SAS shall be governed by the following principles:

• Legality: Data processing will be carried out in accordance with applicable legal provisions.

• Purpose: Data will be collected and processed for legitimate, specific, and previously informed purposes.

• Freedom: Processing will only be carried out with the prior, express, and informed consent of the data subject.

• Truthfulness or Quality: Data will be accurate, complete, and kept up to date.

• Transparency: The data subject will be guaranteed the right to obtain information about how their data is being processed.

• Restricted Access and Circulation: Processing will be subject to limitations based on the nature of the data and legal regulations.

• Security: Technical, administrative, and human measures will be implemented to protect data against damage, loss, alteration, unauthorized use, or access.

• Confidentiality: Data will be kept confidential even after the relationship with the data subject has ended.

3. Personal Data Collected

Treetek SAS collects personal data from clients, suppliers, employees, and other third parties, such as:

• Full names

• Identification numbers

• Contact information (address, phone, email)

• Employment information

• Financial information

• Other relevant data required for service delivery

4. Purpose of Processing

Personal data will be processed for the following purposes:

• Provision of engineering and consulting services

• Management of commercial and contractual relationships

• Sending information about products and services

• Compliance with legal and contractual obligations

• Human resource management

• Marketing and advertising activities

• Other purposes informed to the data subject at the time of data collection

5. Data Subjects’ Rights

Data subjects have the following rights:

• To access, update, and correct their personal data

• To request proof of consent granted

• To be informed about the use of their personal data

• To file complaints with the Superintendence of Industry and Commerce

• To revoke consent and/or request data deletion

• To access their personal data free of charge

6. Procedure for Exercising Rights

Data subjects may exercise their rights by submitting a written request to [your_email] or [your_address], including their full name, identification number, and a description of the right they wish to exercise.

7. Information Security

Treetek SAS will implement security measures to protect personal data against unauthorized access, loss, alteration, or destruction.

8. Data Transfer and Transmission

In the event of international data transfer or transmission, Treetek SAS will adopt the necessary measures to ensure an adequate level of protection.

9. Policy Modifications

Treetek SAS reserves the right to modify this Policy at any time. Any changes will be communicated to data subjects through the means the company deems appropriate.

10. Contact

For any inquiries or complaints related to this Policy, data subjects may contact us through:

• Email: admon@treetek.com.co

• Phone: +57 316 874 3006

• Address: Centro Empresa