Privacy policy

JIMEX PHARMA DE ALEMANIA S.A.S., identified with NIT. 900931436-7, as accredited in the Certificate of Existence and Legal Representation issued by the Chamber of Commerce of Cali -hereinafter THE COMPANY- is a company incorporated in Colombia and is responsible for the processing of personal data collected in Colombia. Our contact details will be via email: info@jimexpharma.com Address: Carrera 66 No. 18A-05 in the municipality of Santiago de Cali. Telephone (057) 602 3876290 - 3174287956. This privacy policy and processing of personal data results from the importance that your privacy has for us, therefore JIMEX PHARMA DE ALEMANIA S.A.S., complies with and promotes compliance with the laws and regulations existing regarding the handling of personal data in Colombia. Accordingly, we want our clients, suppliers, employees and other persons or companies that have or may have a relationship with THE COMPANY to fully understand our practices for collecting and processing personal data, which guarantee the highest possible level of reliability and security. This Privacy Policy and Personal Data Processing -hereinafter, "Privacy Policy"-. This Privacy Policy has been developed in accordance with Colombian law and with THE COMPANY's Data Privacy principles and its detailed guidelines for the Data Privacy Program. The holders of personal data accept the processing of their personal data in accordance with the terms of this Privacy Policy and authorize THE COMPANY to process it under the terms of this policy when they provide their data through the different means or channels to THE COMPANY.

2. PERSONAL INFORMATION COLLECTED.

For JIMEX PHARMA DE ALEMANIA S.A.S., it is of paramount importance that you understand what type of personal information we collect and process, because personal information can be kept manually or electronically and collected on paper, electronic systems, web portal, surveys, WhatsApp, application(s), photos, videos, voice collection systems, emails or removable media. Personal information may or may not be related to personal and business matters, such as identification, names, addresses, telephones or emails, among others. Personal information may or may not be associated with an employee, contractor, user, user's family group, vendor, supplier, partners and/or third parties. Therefore, it is very important that you understand that within the model and policy for data processing, we may collect the following personal information with your authorization, depending on your type of relationship with THE COMPANY.

Name and surname
Date of birth
Gender
Marital status and/or relationship in relation to minors or disabled persons requesting our services.
Nationality
Citizenship card or identification document
Passport number and expiration date (if applicable)
Email
Contact phone number
Address
Credit information (number, bank, type of account).
Personal data of the member (names and surnames, type and identification number).
Address information.
Information and personal data collected through surveys, focus groups or other market research methods.
Information required by sales and/or customer relations representatives in order to respond to requests or complaints.
Demographic information such as, for example, information about your company or business, age, gender, interests, preferences and favorites.
Information about your visits to our websites, including the pages you view, the links and ads you click on, the search terms you enter and other actions you take in relation to the services and websites of JIMEX PHARMA DE ALEMANIA S.A.S.
Likewise, we may also collect certain information from the browser you used to reach our website, such as your Internet Protocol (IP) address, browser type and language, access time, the Uniform Resource Locator (URL) of the website that referred you to our website, and the URL through which you browse our site if you click on a link on our site.
All JIMEX PHARMA DE ALEMANIA S.A.S. databases will be stored in the city of Santiago de Cali – Colombia.
THE COMPANY only uses customer information to transmit it to third parties in charge of handling the information in accordance with and under the terms of this policy. Likewise, it is important that you know the process by which we collect information, understanding that we may ask you to provide us with personal information when you:
Use our website;
Request quotes, services, etc.

customer service or information;
Visit our facilities or communicate with us;
Participate in surveys, contests or other promotional activities;
Subscribe to newsletters, promotional emails or other materials;
Apply for a job, submit your resume or create a candidate profile.
Contact us by any authorized means or channel. To offer you a more systematic and personalized experience in your interactions with JIMEX PHARMA DE ALEMANIA S.A.S., the information collected through one source may be combined with information obtained through other resources of THE COMPANY.
We may also supplement the information collected by us with information obtained by other parties.
• Some services of JIMEX PHARMA DE ALEMANIA S.A.S. may be co-branded and offered jointly with another company or companies. If you register for or use these services, both THE COMPANY and another company(ies) may receive information collected jointly with the co-branded services and use the information in accordance with each company's privacy statement and other agreements entered into with you.

3. PROCESSING OF SENSITIVE DATA AND DATA OF MINORS.

According to Law 1581 of 2012, sensitive data is understood to be data that affects the privacy of the owner of said data, or whose improper use may lead to discrimination, such as data that reveals racial or ethnic origin; political orientation; religious or philosophical beliefs; membership in unions, social or human rights organizations; data related to health, sexual life and biometric data. In the event that we collect and process your sensitive data, it will be treated carefully subject to the provisions of Law 1581 of 2012, and this Privacy Policy. Data subjects are informed that they will not be obliged in any event to authorize the processing of sensitive data, and therefore the provision of our services is not conditioned on the delivery of this sensitive information, unless this information is strictly necessary to comply with the obligations of JIMEX PHARMA DE ALEMANIA S.A.S. and failure to have it would make the provision of the service impossible. JIMEX PHARMA DE ALEMANIA S.A.S. takes the privacy of children and adolescents very seriously. Minors may be users of the products and services we offer, provided that they act - through or duly - authorized by their parents or by those who have parental authority over the minor. We will ensure and advocate for the appropriate use of the personal data of minors, guaranteeing that in the processing of their data, their best interests and fundamental rights are respected and, as far as possible, taking into account their opinion, as holders of their personal data.

4. PURPOSES AND USE OF INFORMATION

JIMEX PHARMA DE ALEMANIA S.A.S. will not provide or market your individual information to any external company for use for purposes other than those stated in this policy. We will maintain the confidentiality of your personal information and it will only be used to promote your relationship with THE COMPANY. In addition, internal practices help protect your privacy by limiting access to and use of customer data by employees. If you provide us with personal data, you authorize us to use this information for the purposes stated in accordance with the provisions of this Privacy Policy, and we will not proceed to transfer or disclose it outside of our databases unless (i) you authorize us to do so, (ii) it is necessary to allow our contractors, suppliers or agents to provide the services we have entrusted to them, (iii) we or third parties use it to provide you with our products or services, (iv) it is delivered to entities that provide marketing services on our behalf or to other entities with which we have joint marketing agreements (v) it is related to a merger, consolidation, acquisition or other restructuring process, (vi) we implement a personal data transmission contract under the terms of Decree 1377 of 2013, or (vii) as required or permitted by law or for the purposes developed in this privacy policy. The holders of personal data authorize THE COMPANY to transfer their personal information to other

companies related to JIMEX PHARMA DE ALEMANIA S.A.S., but not limited to parent companies, subsidiaries and affiliates of THE COMPANY, for the development of the purposes described herein. This data processing will be done during the contractual relationship and/or after it, for the purposes described in this Policy. The personal information of employees is contained in

databases and files owned by the employer. THE COMPANY will use your personal information for different purposes, depending on the relationship between THE COMPANY and the owner of the personal data.

4.1. PURPOSES OF PROCESSING FOR CLIENTS

When JIMEX PHARMA DE ALEMANIA S.A.S. requests information from the client, this is done with the purpose of improving the relationship between THE COMPANY and the client. JIMEX PHARMA DE ALEMANIA S.A.S. processes personal data before, during and/or after the contractual relationship, but not beyond the reasonable period required by the purposes listed below:

Offer and provide the services, and support or carry out the operations you have requested, and manage our business relations.
Carry out the necessary steps to comply with the obligations inherent to the services and products contracted with THE COMPANY.
Facilitate the correct execution of purchases and provision of contracted services and products.
Generate optimal communication in relation to our services, products, promotions, billing and other activities.
Demand compliance with our conditions of sale, the terms of the website and/or separate contracts entered into with you if applicable;
Evaluate the quality, personalize and improve our products, services (including content and advertising), technologies, communications and our relationship with you;
Conduct studies on consumer habits, preferences, purchase interest, product testing, concept, service evaluation, satisfaction and others related to our services and products.
To carry out, through any means, directly or indirectly (through third parties), marketing and/or advertising activities, whether our own or those of third parties, sales, billing, collection management, collection, programming, support, market intelligence, service improvement, verifications and queries, control, behavior, habit and enabling of payment methods, fraud prevention, as well as any other activities related to our current and future products and services, for the fulfillment of contractual obligations and our corporate purpose.
To inform about changes in products and services related to the ordinary course of business of JIMEX PHARMA DE ALEMANIA S.A.S.,
To send you communications such as, for example, information about the safety of the products, the status of your operations (for example, order confirmations), information about products and services available through JIMEX PHARMA DE ALEMANIA S.A.S., its related companies, promotional offers and surveys;
To provide assistance and/or support regarding our products and services.
Register, track and validate drivers and trucks with access to the terminals.
Control and prevent fraud in all its forms, and other illegal or prohibited activities.
Protect the security or integrity of the website, our business or our products or services.
Carry out audits.
Business continuity planning.
Verify compliance with the Policies of JIMEX PHARMA DE ALEMANIA S.A.S.
Carry out Legal Compliance Programs.
Rectify the veracity of the information provided.
Other purposes, as informed at the time the information is collected and authorized by the owner.
4.2. PURPOSES OF THE TREATMENT FOR EMPLOYEES AND CANDIDATES

For the case of active and retired workers, pensioners, retirees, related third parties, family group and beneficiaries. JIMEX PHARMA DE ALEMANIA S.A.S. processes personal data provided by its active and retired employees, pensioners, third-party retirees, affiliates, family groups and beneficiaries, to fulfill the following purposes:

Hire, evaluate, develop and terminate employees and contractors.
Enter into and execute employment contracts.
Apply Colombian law and jurisprudence in labor and social security matters.
Comply with obligations contracted with our employees, pensioners and retirees.
Grant benefits to employees and their beneficiaries.
Record relevant information, such as salary updates, training, vacations and birthdays.
Control and prevent fraud in all its forms, and other illegal or prohibited activities.
Verify compliance with THE COMPANY's internal policies.
Carry out audits.
Manage and administer the use of THE COMPANY's corporate assets (such as offices, facilities, computers, etc.).
11.Inclusion in business continuity and emergency response plans.

Supporting professional development and resource management processes.
Business travel management.
Organizing events and conferences.
Informal networking.
Recording information to verify integrity

of information, systems and resources.
Verification of compliance programs with laws.
Development of occupational health programs.
Manage personnel.
Allow access control to facilities, as well as verify identity and access permissions.
Perform security and incident management.
Improve the quality of services.
Manage training programs.
Allow the organization, planning, billing, and administration of working hours.
For business purposes necessary for the safe, effective and efficient performance of THE COMPANY's business activities in the countries in which it operates.
Any other purpose necessary for the proper development of the employment relationship.
Any purpose that is authorized by the owner, as informed at the time the authorization is collected, or the purposes permitted by law.
The personal data collected includes commercial and non-commercial information, and particular data collected by third parties on behalf of JIMEX PHARMA DE ALEMANIA S.A.S. Among the information collected and processed, in addition to that indicated generally in point two (2) of this Policy, is the following (including sensitive information):

contact data (for example, name, work address, home address, e-mail address, telephone numbers);
demographic data (for example, date of birth, sex, education);
employment data (for example, background, experience, promotions, training, performance, disciplinary sanctions)
organizational data (for example, position, functions, salary level, professional interests);
data about your dependents (for example, marital status, children);
data about work time and absences from work (for example, absences, vacations, work schedule);
financial data (for example, salary, benefits, banking information, information about shareholdings);
social data (for example, photos, information about awards and recognitions, results of team events);
medical data (for example, information about occupational health); and
computer data (for example, metadata about communications, requests and access permissions).
Within the organization of JIMEX PHARMA DE ALEMANIA S.A.S., the information collected will only be disclosed to internal recipients who must know it because they are employees or contractors of THE COMPANY. The data may also be disclosed to external recipients (such as payroll service providers, health insurance and technology services), upon entering into a data transmission contract or authorization from the data owner, in accordance with the provisions of article 25 of Decree 1377 of 2013 on the protection of personal data. Through the contract, the agent agrees to use the data only for the purposes for which it was disclosed, using appropriate security measures, to retain it only as long as necessary, and not to disclose it without authorization. Personal data may be disclosed to internal and external recipients only (1) for the purposes of fulfilling the employment contract; (2) with the consent or authorization of the person in question; (3) in accordance with a collective bargaining agreement; (4) for the purposes of THE COMPANY's legitimate interests; (5) as commercially necessary; (6) as permitted or required by law or judicial process; (7) as part of an investigation into possible criminal conduct; (8) in "emergency cases," for example when it is of vital importance to the individual in question. THE COMPANY's active and retired employees, pensioners, retirees, and contractors must cooperate in keeping their data accurate, complete, up-to-date, verifiable, and understandable, and notify any changes to it. THE COMPANY does not acquire personal information in a covert manner. However, in exceptional circumstances where required by law and/or to protect THE COMPANY's interests and when THE COMPANY has reasonable grounds to suspect that the JIMEX PHARMA DE ALEMANIA S.A.S. policy has been breached, or that a crime has been committed and there are no other means of investigation, THE COMPANY may obtain personal data in this manner, but only in accordance with applicable law. THE COMPANY also processes personal data of job candidates, in order to know and evaluate the academic and work history, skills, knowledge and abilities of the candidates; rectify the veracity of the information provided and for other purposes, as informed at the time the information is collected and authorized by the candidate.

Among the information collected and processed, in addition to that indicated generally in point two (2) of this Policy, is the following (including sensitive information):

Professional or occupation
Titles
Academic profile (college, university, etc.)
Professional profile (jobs, background, etc.)
Membership in professional or academic associations
Salaries and work hours
Performance evaluations
The information provided by candidates to fill a position at JIMEX PHARMA DE ALEMANIA S.A.S., will remain stored for a period of two (2) years from the date of the last processing, or for the time necessary to meet the provisions applicable to the subject matter in question and the administrative, accounting, tax, legal and historical aspects of the information and any other legal and/or contractual obligation of THE COMPANY.

4.3. PURPOSES OF PROCESSING FOR CONTRACTORS AND SUPPLIERS

JIMEX PHARMA DE ALEMANIA S.A.S. processes personal data provided by contractors and suppliers, as part of the process of acquiring goods or services supplied to THE COMPANY, before, during and/or after the contractual relationship, for the fulfillment of the following purposes:

Hiring, evaluating and selecting potential suppliers.
Establishing business relationships to acquire goods or services.
Entering into and executing contracts.
Control and payments for goods and services received.
Compliance with fiscal and legal aspects with government and regulatory entities.
Communication of policies and procedures on how to do business with suppliers.
Consultations, audits and reviews derived from the business relationship with the supplier.
8. Any purpose that is authorized by the owner, as informed at the time the authorization is collected, or the purposes permitted by law.

Among the information collected and processed, in addition to that indicated in general terms in point two (2) of this Policy, is the following (including sensitive information):

1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13.

Company names or names of natural persons. Trade names.
Type of contract
Profession or occupation

Work history
Academic and professional profile
Organizational data (position, functions, salary level, professional interests) Information on payments to the social security system.
Tax and fiscal identification information.
Banking information for payments via transfer.
Contacts.
Copy of supporting documents for tax and banking information.
Any other support required according to the nature of the contracting of the purchase or service being carried out.

From the moment the suppliers provide information, they give their consent to JIMEX PHARMA DE ALEMANIA S.A.S., to keep in its records all the information that is provided through any means. All personal information collected may be stored and processed in Colombia or any other country in which THE COMPANY or its related companies, subsidiaries or representatives have facilities and when using THE COMPANY's services and products. Companies affiliated or related to THE COMPANY are also subject to a data privacy policy, to ensure that personal information transmitted between affiliates is treated appropriately. By accepting this Privacy Policy, you agree to any transfer of information outside the country. Our intention is to send email messages or any other means, tool or channel available, only to customers, suppliers, contractors or individuals who have authorized to receive these messages. By accepting this Privacy Policy, the holders of personal data authorize us to send them, by different means and means (including email, SMS or text messages, etc.), information about products and services, and offers of products and services that we believe may be of interest to you. At any time, you have the right to opt out of receiving communications from JIMEX PHARMA DE ALEMANIA S.A.S., in the future.

We may share your personal information with related companies of THE COMPANY, in order to carry out the operations you request or to make our business or that of our related companies more suited to your needs. We may also disclose your personal information for reasons related to law enforcement, fraud prevention, or other legal actions as required by applicable law or regulation; or if THE COMPANY reasonably believes it is necessary to protect its customers, employer, or the public. In addition, we may share your personal information with business partners who help JIMEX PHARMA DE ALEMANIA S.A.S. to carry out the operations you request, or with business partners with whom we have co-branded products or services,

so that they can offer their products and services, or who help THE COMPANY to

personalize, analyze and/or improve our communication or relationship with you and, finally, only with business partners who share THE COMPANY's commitment to protect your personal information. Except for the cases detailed above, we will not disclose your personal information to third parties for their own marketing purposes unless you have authorized us to do so.

5. VALIDITY OF THE PROCESSING OF INFORMATION AND PERSONAL DATA

The information provided will remain stored for as long as necessary to allow us to fulfill the purposes set forth herein and to comply with legal and/or contractual obligations under our responsibility, especially in accounting, fiscal and tax matters or for as long as necessary to comply with the provisions applicable to the matter in question and the administrative, accounting, fiscal, legal and historical aspects of the information, or in any event provided for by law.

6. HOW DO WE USE COOKIES AND WEB BEACONS?

JIMEX PHARMA DE ALEMANIA S.A.S. may use cookies and web beacons on its websites and on the electronic devices used to access them, in order to increase the functionality and accessibility of the websites, verify that users meet the criteria required to process their requests and to adapt its products and services to the needs of users, being able to obtain the following general information:

Device language
Links displayed
Length of browsing time
The site visited before entering THE COMPANY's website.
The websites visited
The IP address
The type of browser and operating system used
Date and time of browsing.
Cookies, web beacons and other similar technologies can be disabled and deleted by the User whenever he or she wishes. For this purpose, the User can consult and/or request help from the Internet browser he or she uses. 7. SECURITY AND CONFIDENTIALITY OF INFORMATION JIMEX PHARMA DE ALEMANIA S.A.S. is committed to protecting the security of your personal information. We have established information security policies, procedures and standards, the objective of which is to protect and preserve the integrity, confidentiality and availability of information, regardless of the medium or format in which it is found, its temporary or permanent location or the way in which it is transmitted. Third parties hired by us are also obliged to adhere to and comply with information security policies and manuals, as well as the security protocols that we apply to all our processes. Every contract with third parties (contractors, employees, external consultants, temporary collaborators, etc.) that involves the processing of information and personal data, includes a confidentiality agreement that details their commitments to the protection, care, security and preservation of the confidentiality, integrity and privacy of the same. In order to protect your personal information from any unauthorized access, use or disclosure, we use a variety of security procedures and technologies. While we strive to protect your personal information, JIMEX PHARMA DE ALEMANIA S.A.S. cannot ensure or guarantee that your personal information or the private communications you send us will always remain private and, therefore, you do so at your own risk.

8. RIGHTS OF PERSONAL DATA OWNERS AND PROCEDURES FOR THE EXERCISE OF YOUR RIGHTS

By accepting this Privacy Policy, you freely, expressly and previously declare that you have been informed of the rights granted to you by law as the owner of your personal data and which are stated below:

(i) Know, update and rectify your personal data before the entity responsible for the processing or in charge of the processing of your personal data.
(ii) Request proof of the authorization granted to the data controller, except when it is expressly excepted as a requirement for processing.
(iii) Be informed by the data controller or the data processor, upon request, regarding the use that has been given to the personal data.
(iv) File complaints with the Superintendency of Industry and Commerce for violations of the personal data protection regime.
(v) Revoke the authorization and/or request the deletion of personal data in accordance with Law 1581 of 2012.
(vi) Access free of charge once a month to your personal data that has been processed, in accordance with current regulations.
(vii) In the event that the personal data is not collected by JIMEX PHARMA DE ALEMANIA S.A.S. directly from the owners, but is provided to THE COMPANY, for example, by an employee, the employee must inform the owner that the information will be provided The Company gives THE COMPANY. In the event that, on the occasion of contracts entered into with third parties, they must process information, clauses establishing restrictions or requirements on the handling of this information may be added to these contracts.
(viii) The procedures for exercising your rights will be the following: (i) The owners, authorized persons or successors in title may consult their personal information that is in our databases, in which case we will provide them with the requested information, after verifying the legitimacy to present said request. The query will be attended to within a maximum term of ten (10) business days counted from the date of receipt of this. When it is not possible to attend to the query within said term, you will be informed of the reasons for the delay, indicating the date on which your query will be attended to, which in no case may exceed five (5) business days following the expiration of the first term. (ii) Claims. If the owners, authorized persons or successors in title consider that the information contained in a database must be corrected, updated or deleted, or when they notice the alleged non-compliance of any of the duties contained in the Regulation, they may file a claim with us, which will be processed under the following rules:

1. Your claim must be made by means of a request addressed to JIMEX PHARMA DE ALEMANIA S.A.S., with your identification, the description of the facts that give rise to the claim, your address, and accompanying the documents that you wish to assert. If the claim is incomplete, we will require you within five (5) business days following receipt of the claim to correct the deficiencies. After two (2) months from the date of the request, without you submitting the required information, we will understand that you have withdrawn the claim.

In the event that we are not competent to resolve your claim, we will forward it to the appropriate party within a maximum period of two (2) business days and will inform you in a timely manner. If applicable, once the complete claim has been received, a legend stating “claim in process” and the reason for this will be included in the database within a period of no more than two (2) business days.
The maximum period for addressing the claim will be fifteen (15) business days counted from the day following the date of receipt. When it is not possible to address the claim within said period, you will be informed of the reasons for the delay and the date on which your claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the first period. Holders of personal data may exercise their rights to know, update, rectify and delete their personal data by sending their request in writing to the address: Carrera 66 No. 18A-05 in the city of Santiago de Cali – Colombia, in accordance with this Privacy Policy.

Holders may revoke their consent to the processing of their Personal Data at any time. To do so, it will be necessary to send a written communication to Carrera 66 No. 18A-05 in the municipality of Santiago de Cali. Telephones (057) 602 3876290 – 3174287956 in Colombia, which must contain the same requirements indicated for the exercise of the rights of the holders, indicating the Personal Data for which you wish to revoke your consent. Within a period of no more than 15 (fifteen) business days from receipt of your email, we will revoke the requested Data. At any time, the owners may limit the consent for the processing of their Personal Data for marketing and promotion purposes by sending a written communication to the following email address: The area for handling requests, queries or complaints before which the owner of the information may exercise their rights is: info@jimexpharma.com Address: Carrera 66 No. 18A-05 in the municipality of Santiago de Cali. Telephone (057) 602 3876290 – 3174287956

9. MODIFICATIONS AND VALIDITY OF THE PRIVACY POLICY.

We may modify the terms and conditions of these privacy policies at any time. If we decide to introduce any material change to our privacy policies, this will be announced on the website or in a widely circulated national newspaper and by publishing an updated version of the privacy policies. The databases will be valid indefinitely, in accordance with the purposes and uses of the information.