SERVIDOMÉSTICAS S.A.S., identified with NIT 900.533.052-5, domiciled in the city of Medellín, in compliance with Articles 15 and 20 of the Political Constitution of Colombia, Law 1581 of 2012, Regulatory Decree 1074 of 2015, the guidelines of the Superintendence of Industry and Commerce (SIC), and any regulations that modify, supplement, or complement them, establishes the following Personal Data Processing Policy.

FIRST – DEFINITIONS The following definitions shall apply in accordance with current regulations:

a) Authorization: Prior, express, and informed consent of the data subject for the processing of their personal data.
b) Database: An organized set of personal data that is subject to processing.
c) Personal data: Any information linked to or that can be associated with one or more identified or identifiable natural persons.
d) Sensitive data: Data that affects the privacy of the data subject or whose improper use may result in discrimination.
e) Biometric data: Data that allows identification of an individual by biological or behavioral characteristics.
f) Data processor: The party that processes personal data on behalf of the data controller.
g) Data controller: The party that determines the purpose and means of the processing of personal data.
h) Processing: Any operation on personal data, including collection, storage, use, circulation, or deletion.
i) Transfer: Sending personal data to a third party acting as a data controller, inside or outside the country.
j) Transmission: Communication of personal data inside or outside the national territory for processing by a data processor.

SECOND – PURPOSE OF DATA PROCESSING
SERVIDOMÉSTICAS S.A.S. collects and processes personal data for the following purposes:

a) To execute contractual relationships with users, suppliers, employees, and contractors.
b) To manage requests, complaints, and claims.
c) To comply with legal, labor, commercial, accounting, and tax obligations.
d) To conduct satisfaction surveys and internal studies.
e) To send commercial and promotional information, subject to prior authorization.

THIRD – DATA COLLECTED
The data collected includes, among others: name, identification, address, email, phone number, employment and financial data, biometric data (when expressly required and authorized), and sensitive data (with prior express authorization).

FOURTH – AUTHORIZATION
All personal data processing requires the prior, express, and informed consent of the data subject, except in legal exceptions. Such authorization may be given in writing, verbally, or through unequivocal conduct.

FIFTH – RIGHTS OF DATA SUBJECTS
Data subjects have the right to:

a) Access, update, and correct their personal data.
b) Request proof of the authorization granted.
c) Be informed about the use of their data.
d) Revoke authorization or request data deletion.
e) File complaints with the SIC.
f) Access their data free of charge.

SIXTH – DATA TRANSMISSION AND TRANSFER
The transmission and transfer of data to third parties will only be carried out:

a) With the authorization of the data subject;
b) By court order or as legally permitted;
c) Using contractual mechanisms that ensure proper processing by the third party.

SEVENTH – INFORMATION SECURITY
SERVIDOMÉSTICAS S.A.S. implements technical, human, and administrative measures to protect personal data against unauthorized access, loss, alteration, or destruction. In the event of security incidents, it will notify the data subjects and the SIC as required by law.

EIGHTH – PROCEDURE FOR INQUIRIES AND CLAIMS
Data subjects may exercise their rights through:

a) Email: administracion@servidomesticas.com
b) Offices: Carrera 43A No. 14 – 109, Office 412, Medellín.
Response times will comply with those established in Law 1581 of 2012.

NINTH – DUTIES OF SERVIDOMÉSTICAS S.A.S.
a) Ensure the data subject can fully exercise their habeas data rights;
b) Safeguard information securely;
c) Process inquiries and claims;
d) Inform the SIC of risks in data management;
e) Record legends such as “claim in process” or “information under judicial review” when applicable;
f) Refrain from circulating blocked or legally disputed information.

TENTH – DATA CONTROLLER
The data controller is SERVIDOMÉSTICAS S.A.S., through its administrative department. Contact: administracion@servidomesticas.com

ELEVENTH – EFFECTIVENESS AND UPDATES
This policy is effective as of July 15, 2025, and will be reviewed and updated annually or when required by regulatory changes or SIC decisions.

SERVIDOMÉSTICAS S.A.S.
July de 2025