SERVICE POLICY, PRIVACY AND PROCESSING OF PERSONAL DATA OF METRO AGROPECUARIO

NOTICE
This Metro Agropecuario Privacy and Personal Data Treatment Policy (hereinafter the "Policy") establishes the mechanisms, guarantees and instruments that the owners of the information we collect and process as Data Controllers in light of the Regulatory Framework (as defined in Section 1 of this Policy).
This Policy is organized according to the Index (as indicated below), in order to establish the general conditions applicable to the processing of personal data carried out by Metro Agropecuario, as well as those provisions applicable to the different owners of said information that establish relationships commercial and legal with Metro Agropecuario, or against which Metro Agropecuario accesses personal information.

Content
Section 1. Principles that guide the Policy
Section 2. Scope of the Policy
Section 3. Rights of Holders
Section 4. Duties of Metro Agropecuario
4.1. General Duty of Metro Agropecuario in the Treatment of Information
4.2. Special Duties of Metro Agropecuario in its capacity as Responsible for the Processing of Personal Data and Personal Credit Data
Section 5. Authorizations, consents, purpose and modifications
5.1. Authorization and consent
5.2. Purposes
5.3. Modifications
Section 6. Security of Information
Section 7. Data and Sensitive Information
Section 8. Use and International Transfer of Protected Information
Section 9. Attention to Claims and Queries
Section 10. Information of the Treatment Manager
Section 11. Annexes

Section 1. Principles that guide the policy.
Metro Agropecuario and its affiliated companies by ties of subordination or control or in a different jurisdiction or territory (hereinafter the "Linked Companies"), in the Treatment of the information collected and accessed from its clients, users, employees, suppliers, subcontractors and any other third party (hereinafter the "Holders"), in the development and course of their business and activities, whether said information is Personal Data and/or Personal Credit Data (hereinafter the "Protected Information"), respects and will respect the rights of each of these subjects, applying and guaranteeing the following guiding principles of the Policy:
Principle of Legality: In the Treatment of Protected Information, the current and applicable provisions that govern the Treatment thereof and other related fundamental rights will be applied, including the contractual provisions agreed by the Company with the Holders, as appropriate.
Principle of Freedom: The Processing of Personal Data and Credit Personal Data will only be carried out with the prior, express and informed consent of the Owner. Personal Data and Personal Credit Data, which do not have the nature of Public Data, may not be obtained or disclosed without prior authorization, or in the absence of a legal, statutory, or judicial mandate that relieves consent.
Principle of Purpose: The Treatment of Protected Information that does not have the character of Public Data, to which it has access and is collected and collected by the Company, will be subordinated and will serve a legitimate purpose, which will be informed to the respective Holder of the Protected Information.
Principle of Veracity or Quality: The Protected Information subject to Treatment must be truthful, complete, exact, updated, verifiable and understandable. The Processing of partial, incomplete, fractional or misleading data is prohibited. The Company shall not be liable to the Owner when data or partial, incomplete or fractional information or information that is misleading, delivered by the Owner without the existence of a way to verify its veracity or quality by the Owner, is subject to Treatment. the Company or the same has been delivered or disclosed by the Holder declaring or guaranteeing, in any way, its veracity or quality.
Principle of Transparency: In the Treatment of Protected Information, the right of the Owner to obtain from the Company, at any time and without restrictions, information about the existence of any type of Protected Information that is of interest (legal, judicial or contractually justified) or ownership.
Principle of Access and Restricted Circulation: The Protected Information will not be available on the Internet or other means of dissemination or mass communication, unless the access is technically controllable to provide restricted knowledge only to the Company, the Related Companies, the Holders or third parties duly authorized. For these purposes, the Company's obligation will be medium, as established by current regulations.
Security Principle: The Information Protected under the Policy subject to Treatment by the Company, will be protected to the extent that the technical resources and minimum standards allow it, through the adoption of technological protection measures, protocols, and administrative measures that are necessary to grant security to electronic records and repositories avoiding their adulteration, modification, loss, consultation, and in general against any unauthorized use or access.
Principle of Confidentiality: Each and every one of the people who in the Company administer, manage, update or have access to Protected Information that is not public in nature, and is found in Information Systems or databases or databases of third parties duly authorized, undertake to keep and maintain strictly confidential and not reveal to third parties all or any of the personal, commercial, accounting, technical, commercial or any other type of information supplied in the execution and exercise of their functions.
The Company and its Related Companies for the Treatment of Protected Information may use the information systems and databases owned by the Company and/or its Related Companies (hereinafter the "Information Systems").
Information Temporality Principle: In the case of Personal Credit Data, they will not be provided to users or third parties when they cease to serve the purpose of the corresponding data bank.

Section 2. Scope of the Policy.
This Policy will have the same scope of application enshrined in the legal regulations that are part of the Regulatory Framework, and will be extended to regulate and establish the general and comprehensive policies for the Treatment of Protected Information by the Company. Consequently, they will be applicable to all operations carried out by the Company, safeguarding the eventual use or Treatment of the Protected Information carried out, in compliance with legal requirements, by the Related Companies.
In the event that any of the Linked Companies has access to or carries out the legitimate and authorized Treatment of Protected Information of the Holders, without prejudice to the provisions of Section X, the provisions of Section 3 and 4 will be guaranteed as applicable. Before the Holders, the Company will be solely responsible for guaranteeing compliance with these Policies by its Related Companies.
Notwithstanding the general scope indicated in this Section 2, in relation to each of the Holders of Protected Information, in Annex A of this Policy defined in Section 13, the Company has established a specific scope and field of application, with terms and predicable and applicable conditions for each Holder, according to their quality or character.

Section 3. Rights of the Holders.
The Holders will have the rights enshrined in the Regulatory Framework and in the contracts entered into with Metro Agropecuario, as applicable, taking into account the Protected Information subject to Treatment by Metro Agropecuario and/or the Related Companies.
The Owners of whom the Processing of Personal Data is carried out will specifically have the rights provided, but not limited to all those regulations that regulate, add or complement it.
For purposes of interpreting the laws and decrees that are issued in the matter, it will be taken as a parameter of legal and constitutional interpretation. The rights of the Holders will be interpreted in harmony and on a level of balance with the right to information and with the other applicable constitutional rights.
For all Protected Information that is collected by Metro Agropecuario and/or the Related Companies, and that does not have the nature of: (i) Personal Data of a private or semi-private nature; and (ii) Personal Credit Data of a private or semi-private nature, the rights of the Holders will only be those established and contractually agreed with Metro Agropecuario. In any case, when faced with this information, Metro Agropecuario will guarantee its security and confidentiality when subject to it and the guiding principles of the Policies that are applicable to them.
In the case of information or data of a public nature, Metro Agropecuario will guarantee the veracity and quality of the information that shows this quality and that rests in the Information Systems.

Section 4. Duties of Metro Agropecuario.
4.1. General Duty of Metro Agropecuario in the Treatment of Information.
Metro Agropecuario in general, and in accordance with the Regulatory Framework, the legal norms that regulate its legal relations with the Holders, and in particular, the specific obligations that it assumes before the Holders, has as a general duty in the Treatment of Protected Information respecting and guaranteeing at all times the rights of the Holders, guaranteeing, when applicable and according to the nature of the information used, the confidentiality, reserve, security and integrity of the same.
4.2. Special Duties of Metro Agropecuario in its capacity as Responsible for the Processing of Personal Data and Personal Credit Data.
The following shall be special duties of Metro Agropecuario, when it acts as Responsible for the Processing of Personal Data and Personal Credit Data, among others:
4.2.1. Guarantee the Owner, at all times, the full and effective exercise of the right of habeas data.
4.2.2. Request and keep a copy of the respective authorization granted by the Holder, when dealing with Personal Data and private or semi-private Credit Personal Data.
4.2.3. Duly inform the Holder about the purpose of the collection and the rights that assist him by virtue of the authorization granted.
4.2.4. Keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, use or unauthorized or fraudulent access.
4.2.5. Guarantee that the information provided to the Treatment Manager is true, complete, exact, updated, verifiable and understandable.
4.2.6. Update the information, communicating in a timely manner to the Treatment Manager, all the news regarding the data that has previously been provided and adopt the other necessary measures so that the information provided to it is kept up to date.
4.2.7. Rectify the information when it is incorrect and communicate what is pertinent to the Treatment Manager.
4.2.8. Provide the Treatment Manager, as the case may be, only data whose Treatment is previously authorized.
4.2.9. Demand from the Treatment Manager at all times, respect for the security and privacy conditions of the Owner's information.
4.2.10. Process inquiries and claims made.
4.2.11. Inform the Treatment Manager when certain information is under discussion by the Owner, once the claim has been filed and the respective process has not been completed.
4.2.12. Inform at the request of the Owner about the use given to their data.
4.2.13. Inform the data protection authority when there are violations of the security codes and there are risks in the administration of the information of the Holders.

Section 5. Authorizations, consents, purpose and modifications.
5.1. Authorization and consent.
The Processing of Personal Data and Private or Semi-private Credit Personal Data, by Metro Agropecuario and/or the Related Companies, requires the free, prior, express and informed consent of the Holder. Metro Agropecuario will at all times record the authorization delivered by the Owner, through the appropriate means that guarantee that it was granted expressly, freely, prior and informed, such as authorizations in writing, electronically or granted by accepting terms and conditions of services and/or products, the corresponding privacy notice that supports the Processing of Personal Data or any other mechanism that allows accrediting and demonstrating a registration, access or link to services and/or products of Metro Agropecuario .
5.2. Purposes.
The purposes and purposes of the Processing of Personal Data and private or semi-private Credit Personal Data will always be clearly and expressly established in those suitable means, through which Metro Agropecuario requires the authorization of the Holders. Metro Agropecuario will not use private or semi-private Personal Data and Credit Personal Data for purposes other than those expressly authorized by the Holders. In Annex A of this Policy, some of the Personal Data and Credit Personal Data that Metro Agropecuario may collect are established, establishing the purposes of the Treatment of the same, with the purpose that the Holders are informed at all times about the use that of Metro Agropecuario and the Related Companies will advance, or may advance, the same.
5.3. Modifications.
This Policy may be modified and added from time to time, in compliance with the requirements established by the corresponding legal regulations. The duly updated Policy, indicating the update date, will be published in a timely manner on the Metro Agropecuario Web Portal and the Mobile Applications of Metro Agropecuario or of the Related Companies (according to the Web Portal and Mobile Applications are defined in Annex A of this Policy) and may be informed by email. The Owner acknowledges and accepts that with the use of the Web Portal and/or the Mobile Applications, he agrees with this Policy, implying any continuous use of the same the unequivocal acceptance of the same.
Metro Agropecuario, in accordance with the Regulatory Framework, will not be obliged to delete Protected Information from its Information Systems, against which the Owner has a legal or contractual duty with Metro Agropecuario and/or the Related Companies to remain in the Systems of information.

Section 6. Information Security.
In development of the Security Principle established in the current regulations and in accordance with the legal obligations that Metro Agropecuario has, the Company will adopt the technological, operational and administrative measures that are necessary to grant security to the records and Protected Information of the Holders, avoiding its adulteration, loss, consultation, use or unauthorized or fraudulent access.

Section 7. Sensitive Data and Information.
Without prejudice to the specific provisions that may be contemplated in Annex A of this Policy, Metro Agropecuario declares to all Holders that in the event that within the exercise and development of their activities they request the Treatment of Sensitive Data, or actually carry out the Treatment of Sensitive Data for the correct operation or functioning of the different processes and activities of your company, will comply with the guidelines and restrictions established for such purposes by the Regulatory Framework, reiterating that at no time will the Holders be obliged to authorize the Treatment of Data Sensitive. All Holders must expressly consent to Metro Agropecuario and the Related Companies to the Processing of Sensitive Data under this Policy.
Annex A establishes the specific conditions related to Sensitive Data of minor children and adolescents (the "Minor"), and especially regarding the restrictions and limitations established by Metro Agropecuario regarding the contracting and use of their services and/or products by Minors.

Section 8. Use and International Transfer of Protected Information.
In the event that Metro Agropecuario, in the exercise of its own activities, uses, transmits or transfers Protected Information internationally, it will guarantee compliance with the applicable principles established in Section 3 of this Policy. When it comes to the transfer of Personal Data, Metro Agropecuario will comply with the provisions of the regulations.
Specifically, Metro Agropecuario, in the ordinary course of its business, may incorporate the Protected Information into the Information Systems. Metro Agropecuario, as Data Controller, guarantees that the Information Systems fully comply with the Policies and the Regulatory Framework, and consequently, guarantees that any Owner may: (i) know at any time the information that rests in the Information Systems ; (ii) request the updating or rectification of the data incorporated therein; and (iii) request, except in those events provided for in Section 5 (Number 7.3) of the Policy, the deletion of their data by notifying Metro Agropecuario, for which the procedure established in Section 9 of this document will be followed.
The Holder acknowledges with the acceptance of the Policy that, in the event of a sale, merger, consolidation, change of corporate control, substantial transfer of assets, reorganization or liquidation of the Company, the Company may transfer, dispose of or assign the Protected Information to a or more relevant parties, including Related Companies.

Section 9. Attention to Claims and Queries.
The Owner or his successors in title who consider that the Protected Information contained in an Information System, or in a database, must be corrected, updated or deleted, or when they notice the alleged breach of any of the duties contained in the Framework Regulatory, they may submit a claim or request to Metro Agropecuario, sending it in the first instance through the following email enabled for this purpose by Metro Agropecuario: support@metroagropecuario.com (hereinafter the "Authorized Email"). For the purposes of proceeding with any request, it is important that the Holder fill out the Complaints and Consultations Form in full (hereinafter the "Form"),
Metro Agropecuario will attend and respond to the claims or requests of the Holders within the periods and terms established for this purpose by the Regulatory Framework.
The Holder, notwithstanding the foregoing, and in the event that his request or claim has not been met by Metro Agropecuario, may in any case subsequently resort to a second instance. In said event, the nature of the Protected Information will be taken into consideration for the presentation of the claim, being appropriate when said information: (i) does not have the nature of public information or is Public Data, and (ii) Metro Agropecuario is in violation of the applicable principles for public information or Public Data.

Section 10. Information of the Treatment Manager.
For all legal purposes, the Responsible for the Treatment of Protected Information will be:
Metro Agropecuario
NIT. 900.123.456-7
Telephone: (+57) 3183181499
Address: CR 12 N° 14-56, Bogota, Colombia.
Website: https://metroagropecuario.com/

Section 11. Annexes.
In order to contemplate specific aspects of the protection of Owners' Protected Information or regulate specific aspects applicable to the Related Companies that may be required by competent authorities or by the applicable law in the jurisdiction where the Related Companies are incorporated or constituted, the Company will establish said stipulations and specific conditions in Annexes to this Policy.

Version: 11-08-2022 1.0 Initial version

Annex A
Chapter 1. Applicable provisions for registered users or clients and visitors (the "Users") to the website: https://metroagropecuario.com/ and/or the mobile applications of Metro Agropecuario (the "Mobile Platforms" hereinafter the "Platforms").

1.1. Protecting him.

Metro Agropecuario is committed to protecting your privacy and personal data. In this sense, in this Chapter 1, in addition to the Protected Information that Metro Agropecuario collects from Users through the Platforms and the purposes of the Treatment of said information, the means and channels through which we obtain your consent to said treatment, noting that Metro Agropecuario will never collect Protected Information without your consent.
Through the Policy and this Annex A, we ensure that any Protected Information that is delivered to or collected from Users, once the registration process on the Platforms is completed, will be kept secure and confidential.
Metro Agropecuario is allowed to clarify and specify to all visitors to the Platforms, that they will not be able to register on them until they grant their authorization for the Treatment of Protected Information. In this sense, our Platforms will require that you give us your prior, express and informed consent by selecting the box that reads: "I have read and agree with the terms and conditions and with the Privacy Policies and Treatment of Personal Data", or with the similar text included in the corresponding Platform. In the event that you do not select said box before clicking on the "REGISTER ME" button, your Protected Information will NOT be stored in the Information Systems. Likewise, we inform you that each time you place an order through the Platforms, a new authorization will be generated.

1.2. Information (including Protected Information) we collect and collect.
With registration on our Platforms, we collect and collect personally identifiable information (IP), which includes, but is not limited to: email, cell phone, telephone, residence address. This information is provided voluntarily during the registration process or in response to explicit requirements presented by Metro Agropecuario.
We may also collect your IP (Internet Protocol) address to help diagnose problems with our server, and to administer the Platforms. An IP address is a number that is assigned to the device through which the Platforms are accessed. Your IP address is also used to help identify our Users within a particular session and to gather broad demographic information.
It is established that at any time Users may request the deletion of their account and information from the Information Systems of Metro Agropecuario, through the procedure provided in Section 11 of the Policy.
Metro Agropecuario automatically collects and stores certain information about the activity of Users within the Platforms. Such information may include, without limitation, the URL they came from (whether they are on our Portal or not), which URL they access next (whether they are on our Portal or not), type of device used, what browser they are using, as well as the pages visited, the searches carried out, the publications, purchases or sales, messages, device identifier, among other information.

1.3. Purposes of the Treatment of Protected Information of Users.
By virtue of the quality of intermediary that Metro Agropecuario holds between consumers and the suppliers of the products – that is, restaurants and other commercial establishments, and mainly in order to provide an excellent service so that Users can carry out operations in an agile and securely, Metro Agropecuario requests and stores Protected Information.
The final and ultimate purpose of collecting this information is based on the fact that our intermediary relationship can be successfully completed. In other words, the information we collect is collected and saved in order to be able to provide this information to the restaurants affiliated with Metro Agropecuario, in such a way that the final consumption relationship, between consumer and supplier of the product, can be completed successfully. . The foregoing does not prevent this information from being used by the Company so that, through the Platforms, we can offer Users services and functionalities that are better suited to their needs, allowing us to send them to them through different means and channels ( including email,
Taking into account the foregoing, the Protected Information that we collect has the following purposes:
Provide restaurants and other suppliers of the products with the necessary information to coordinate and formalize the consumer relationship of said products.
Get in touch, whenever the Company deems it appropriate and convenient, in order to offer you by different means and channels (including email, PUSH notifications and short text messages (SMS)), offers for other products and/or services published on the platforms.
Develop internal studies on the interests, behavior and demographics of Users in order to better understand their needs and interests and give them a better service or provide them with related information.
Improve our commercial and promotional initiatives to analyze the pages most visited by Users, the searches carried out, improve our content offer, personalize said content, presentation and services.
Carry out a rating of the service provided and authorize the updating of the information published through content moderation, which can be eliminated or modified by Metro Agropecuario.
Send information or messages about new products and/or services, display advertising or promotions, banners, of interest to our Users, news about Metro Agropecuario, in addition to any other information that we deem appropriate. The User may at any time request to be excluded from the lists for the sending of promotional or advertising information.
Share Protected Information with service companies or "outsourcing" companies, which will receive the information as Treatment Managers, and will contribute to improving or facilitating the operations of Metro Agropecuario, including said third parties, among others, but not limited to: means of payment, insurance or intermediaries in the management of payments. These companies generally have information confidentiality policies similar to those of Metro Agropecuario. However, Metro Agropecuario will ensure that the minimum standards are met, by signing agreements or conventions whose purpose is the privacy of your Protected Information. However, Metro Agropecuario is not responsible for the improper use of Protected Information of Users made by these companies, when directly and within their activity, said companies hold the status of Data Controller. Such a situation may arise when, in some cases, these service providers are the ones who collect information directly from the User (for example, if we ask them to carry out surveys or studies). In such cases, you will receive notification about a service provider's involvement in such activities, and it will be at your discretion what information you want to provide to them and what additional uses you authorize the providers to make of your Protected Information. In the event that you provide, on your own initiative, additional information to said service providers directly, such providers will use that information in accordance with their own personal data processing policies,
Provide the Protected Information to the entities that intervene in the resolution of disputes between them, such as insurance companies or competent courts to resolve such disputes.
International transfer of Information Systems to Related Companies for marketing purposes.
Improve our information security mechanisms, in order to prevent fraud and the implementation of unauthorized tools or activities

Provisions regarding age to access Metro Agropecuario products and/or services.
The products and/or services provided through the Platforms are only available to those who have the legal capacity to contract. Therefore, those who do not comply with this condition must refrain from providing personal information to be included in our Information Systems.

Use of Cookies.
As a User of the Platforms, you know and accept that Metro Agropecuario may use a tracking system through the use of cookies. Cookies are small files that are installed on the hard drive, with a limited duration in time that help to personalize the services. We also offer certain features that are only available through the use of cookies. These are used in order to know the interests, behavior and demographics of those who visit or are visitors to our Platforms (especially the Portal) and thus better understand their needs and interests and give them a better service or provide them with related information. . We will also use the information obtained through cookies to analyze the pages browsed by the User and the searches performed,
Additionally, Metro Agropecuario uses cookies so that the User does not have to enter their password as frequently during a browsing session, counting and corroborating registrations, User activity and other commercial concepts and agreements, always with the objective of the User's benefit. . Metro Agropecuario will not use them for other purposes. It is established that the installation, permanence and existence of cookies on the User's computer or access device depends on the User's exclusive will and can be deleted from it whenever he wishes. To find out how to delete cookies from the system, it is necessary to review the "Help" section of the browser.
You can also find cookies or other similar systems installed by third parties on certain pages of the Portal. Metro Agropecuario does not control the use of cookies by third parties.

Emails, SMS and PUSH notifications.
We may send you emails, short SMS text messages, or PUSH notifications as part of a process inherent to the development and provision of our services, or in the following circumstances: After the registration process, notifying you of your account information
.
The e-mails or PUSH notifications established in our Terms and Conditions, in relation to the order procedure –read email of receipt of the order, order confirmation, etc.–
E-mails or PUSH notifications with reminders of the services we offer (especially those that you have not used yet or have not used in a considerable time).
E-mails or PUSH notifications with news and updates, as part of a Newsletter. ➢ Promotional emails or PUSH notifications.
E-mails or PUSH notifications to offer related services.
In any case, in each of the e-mails we send, we will always offer the possibility of canceling the subscription (opt-out) to stop receiving them in the future.

1.7. Security and storage.
We use various security techniques to protect Protected Information from unauthorized access by visitors to the Platforms, especially to the Portal, from within or outside the Company.
Within its legal obligations, Metro Agropecuario will report to the competent authorities those incidents, illegal interceptions or violation of its Information Systems by unauthorized persons, adopting the corrective and preventive measures of the case, within its reach to mitigate or solve these situations. In any case, Metro Agropecuario is not responsible for violations or effects on its systems, due to events that are beyond its reasonable control and the standards required for the provision of its services, for which we will not be equally responsible for improper use of the information obtained by these fraudulent means and due to the lack of diligence of the Users in the fulfillment of their obligations and duties when registering within the Platforms.
For the deletion procedures, there is the total elimination of the data for those manual and electronic databases that do not manage referential integrity. For databases with referential integrity, the partial deletion of the data includes the execution of validated scripts to go sequentially through the tables and fields of the databases that store personal data and the personal information will be updated by a set of symbols. asterisk (*) or similar, anonymizing it in a non-reversible way and eliminating the personally identifiable information of the holder
Backup copies may contain Protected Information for up to a period of two (2) years, which are inaccessible to the environments and tools used in production and are only used to perform disaster recovery procedures.

Chapter 2. Provisions applicable to candidates or potential collaborators of Metro Agropecuario and Related Companies (the "Candidates"), collaborators or current or retired employees of Metro Agropecuario under a labor or similar relationship (hereinafter the "Collaborators"), family group and / or beneficiaries of the Collaborators (hereinafter the "Linked Beneficiaries").

2.1. Protecting the Protected Information of Candidates, Collaborators and Linked Beneficiaries.
Metro Agropecuario is committed to protecting the privacy and Protected Information of Candidates, Collaborators and Beneficiaries Linked to Metro Agropecuario. In this sense, in this Chapter 2, in addition to the Protected Information that Metro Agropecuario collects from the previous Holders and the purposes of the Treatment of said information, the means and channels through which we obtain your consent for said treatment is described, noting that Metro Agropecuario will never collect Protected Information without your consent.
Through the Policy and this Annex A, we ensure that any Protected Information that is delivered or collected from the Holders indicated in the title of this Chapter 2, will be kept secure and confidential.

2.2. Mechanisms of authorization and granting of consent.
With the formalization of an employment relationship, the Company will collect information and data from Collaborators, and in some cases, said information will have the nature of Protected Information. Given that Linked Beneficiaries may be financially dependent on our Collaborators, and by virtue of labor legislation, it may be required to obtain Protected Information from Linked Beneficiaries to proceed with affiliations in social security systems, health service providers or other entities. competent entities, or to develop or comply with applicable legal provisions, which is why the Collaborator acknowledges and accepts with the signing of the Work Contract, apprenticeship contract, internship agreement, among other documents, as well as the Treatment Authorization form of Personal Data,
The Collaborator, by signing the corresponding contract, and the Personal Data Processing Authorization form, is unequivocally giving their prior, express and informed consent for the Processing of their Protected Information, and that of their Linked Beneficiaries, by Metro Agricultural for the purposes described in the corresponding authorization, and those contemplated in the following numeral 2.4.
Candidates acknowledge and accept that by participating in Metro Agropecuario's personnel selection processes, signing the Personal Data Processing Authorization form and/or sending the information and documentation necessary for participation in a process of selection, unequivocally constitutes the prior, express and informed consent for the Treatment of your Protected Information by Metro Agropecuario for the purposes described in the corresponding authorization and those contemplated in the following numeral 2.4.

23. Information (including Protected Information) we collect and collect.
In front of Candidates: Metro Agropecuario may collect, among other things, the following information:
Names and surnames.
Type and identification number.
Nationality.
Date of Birth / Place of Birth
Gender.
Civil status.
Contact landlines and cell phones.
Postal and electronic addresses (personal and/or work).
Profession or occupation.
Academic profile.
Professional profile.
I am sending an updated resume.

In front of Collaborators: Metro Agropecuario may collect, among other things, the following information:
Names and surnames.
Type and identification number.
Birthdate.
Gender.
Civil status.
Residence phone.
Cell phone.
Postal and electronic addresses (personal and/or work).
Profession or occupation.
Academic profile.
Professional profile.
Updated resume.
Admission date.
Date of Birth / Place of Birth
Nationality.
Blood type.
Parents name.
Previous employments).
Physical deficient.
Degree of kinship or affinity with any Collaborator.
Contract Type.
Term contract.
Post.
Salary.
functions.
Monthly day.
Weekly day.
TIPE of pay.
Bank payment.
Unemployment Fund.
Health Fund.
Pension Fund.
Compensation Box.
Health provider entity – Prepaid Medicine.
Clinical histories.
Entrance/exit physical exams.
Biometric data (photograph, video recordings, voice recordings, fingerprint)

In relation to Linked Beneficiaries: Metro Agropecuario may collect, among other things, the following information:
Name (Linked Beneficiary).
Collaborator name of which the Linked Beneficiary
is Effective date (date of entry into the Company).
Date of birth (of Linked Beneficiary).
Nationality.
Department.
Country.
Sex.
Kinship or affinity with Collaborator.

2.4. Purposes of the Treatment of Protected Information of Candidates, Collaborators and Linked Beneficiaries.

Within the ordinary course of our activity, and in order to develop and execute the labor relations necessary to comply with our corporate purpose and current regulations, Metro Agropecuario will process Protected Information based on the authorization received from the Candidates, Collaborators and Linked Beneficiaries, for, among others, the following purposes:

Purposes of the Treatment of Protected Information of Candidates:
Contact with the Candidate within the specific selection process.
Verify and obtain references of natural or legal persons, indicated in resumes, forms or documents accompanied or delivered to Metro Agropecuario and/or the Related Companies during the selection process and/or that have been entered and/or incorporated directly by the Candidate in Information Systems.
Consolidate said information in the Information Systems or in a database managed by third parties duly authorized by Metro Agropecuario or the Related Companies, which allow and facilitate both Metro Agropecuario and the Related Companies: (a) the administration and control of their selection processes; (b) send the Candidate information on employment and business opportunities; (c) the study, analysis and evaluation of the Candidates who participate in open and current selection processes; (d) for internal control and auditing required by Metro Agropecuario or the Related Companies; and (e) to respond promptly, only by delivering the information specifically requested, the requirements of a legal or judicial order made by control bodies, competent and judicial authorities,

Purposes of the Treatment of Protected Information of Collaborators:
Carry out welfare activities for Collaborators within the Company.
Keep the exact residence information of the Collaborators when it is required to make home visits as an admission procedure or for the development of accompaniment activities within the welfare programs or when correspondence is required.
Carry out epidemiological surveillance activities framed in the occupational health program.
Contact a family member in case of an emergency within the Company.
Keep a record of dates of entry and age of Contributing Collaborators to the AFP (Pension Fund Administrator) and to provide support in the pension application process.
Offer support to Collaborators in procedures before the EPS, due to inconsistencies in personal attention and Linked Beneficiaries.
Provide support to Collaborators in proceedings before the Family Compensation Fund, due to inconsistencies in care or personal affiliation and Linked Beneficiaries.
Decision-making in labor matters regarding the execution and termination of the employment contract, either by the legal area of the Company or its external advisor.
Make payments, affiliations and registration of news to entities that provide social security services, legal contributions, parafiscal payments, AFC accounts, to health, pension and severance entities, including for the Collaborator and if required, of your Linked Beneficiaries (spouse, children and dependents).
Provide personal and financial information to third parties for the payment of loans, per diems, flights, payroll or different accounts that you report.
Prior notification to the risk centers, make the report to national or territorial control entities (DIAN, UIAF, among other entities).
Contact for future hiring or job offers inside and outside the country.
The other necessary and that is presented in the environment of work execution.

Purposes of the Treatment of Protected Information of Linked Beneficiaries:
Keep the exact residence information of Associates and Linked Beneficiaries when it is required to make home visits as an admission procedure or for the development of accompanying activities within the welfare programs or when sending is required of correspondence.
Contact him in case of an emergency presented within the Company regarding the Collaborator.
Advance when necessary the procedures before Family Compensation Funds, entities that provide social security services and health providers, and other entities the affiliations as beneficiaries of the Collaborator that are necessary.
The others directly related to the Treatment of Protected Information of Collaborators that requires by virtue of a legal or contractual mandate, the Treatment of Protected Information of Linked Beneficiaries.

2.5. Provisions related to the age to be a Metro Agropecuario Collaborator.

Within its Collaborator hiring processes, Metro Agropecuario complies with the applicable labor regulations regarding the minimum age to hire Minors under an employment relationship and any other figure contemplated by law.

Chapter 3. Provisions applicable to suppliers of Metro Agropecuario (the "Suppliers").
3.1. Protecting Suppliers' Protected Information.
Metro Agropecuario is committed to protecting the privacy and Protected Information of Suppliers.
Through the Policy and this Annex A, we ensure that any Protected Information that is delivered to or collected from Suppliers will be kept secure and confidential.
Mechanisms of authorization and granting of consent.
The Company will collect information and data from Suppliers, and in some cases, said information will have the nature of Protected Information. The Supplier, by signing the corresponding contract, and the Personal Data Processing Authorization form, is unequivocally giving its prior, express and informed consent for the Processing of its Protected Information by Metro Agropecuario for the purposes described in the authorization. corresponding, and those contemplated in the following numeral 3.4.
The Suppliers acknowledge and accept that by signing the Personal Data Processing Authorization form and/or sending the information and documentation necessary for the execution of a contract with Metro Agropecuario, it unequivocally constitutes prior, express and informed consent. for the Treatment of your Protected Information by Metro Agropecuario for the purposes described in the corresponding authorization and those contemplated in the following numeral 3.4.
Information (including Protected Information) we collect and collect.

Metro Agropecuario may collect, among other things, the following information:
Business Name / Trade Name / Trade Sign and other names that identify the Supplier.
Tax identification information (NIT, among others).
Bank information for payments.
Contact persons in the execution of the corresponding contract.
Copy of supporting documents of the Supplier's financial, tax and banking information.
Postal address, email, telephone number and/or other identification data of the Provider.

3.4. Purposes of the Treatment of Protected Information of Suppliers.
The information collected may be used for the following purposes:
Carry out evaluations and selection of potential suppliers.
Establish business relationships to acquire goods or services in favor of the Company and/or the Related Companies.
Control, administration and management of payments for goods and services received.
Compliance with tax and legal provisions with competent entities and authorities (including government entities and regulatory authorities).
Qualitative and quantitative evaluations of service levels of providers.
Consultations, audits and reviews derived from business and service relationships with the Supplier.
Any other activity necessary for the effective fulfillment of the commercial relationship between the Supplier and Metro Agropecuario.
In the case of Personal Credit Data, your financial and credit information is included in the databases that are constituted for this purpose and that meet the requirements established by law for its creation and administration, and at all times the Company verifies the credit behavior in credit bureaus.
Control and prevention of fraud.
Control and prevention of money laundering and terrorist financing.
Verification and monitoring of transactions carried out.
Audit and verification of the history of incidents related to money laundering, financing of terrorism and/or fraud.
Compliance with obligations related to the prevention and control of money laundering, financing of terrorism, and/or fraud.
Comply with requirements made by competent authorities.
Consultation and reporting of information before operators of data banks of credit and financial content.
Commercial and advertising purposes related to products and/or services offered and provided by the Company and/or Related Companies.
Consolidate said information in an Information System managed by the Company or the Related Companies.