PERSONAL DATA PROCESSING POLICY

The controller of your personal data is CONSEJERÍA JURÍDICA Y EMPRESARIAL S.A.S., identified with NIT 900.755.739-9, with its principal office at Calle 45A No. 14 – 55, Barrio Palermo, Bogotá D.C.

IDENTIFICATION OF THE DATA CONTROLLER

Name of the entity: CONSEJERÍA JURÍDICA Y EMPRESARIAL S.A.S.
NIT: 900.755.739-9, legal entity.
Address: Calle 45A No. 14 – 55, Barrio Palermo, Bogotá D.C.
Website: www.consejuridico.com / www.consejuridico.com.co
Landline: (601) 7048487
Mobile / WhatsApp: +57 301 681 8000
Email: contacto@consejuridico.com

The main purpose of the Personal Data Processing Policy of “CONSEJURIDICO” is to comply with Law 1581 of 2012 and with Article 15 of the Colombian Constitution, and any rules that amend, supplement or regulate them. CONSEJURIDICO adopts and applies this Policy for the Processing of Personal Data and states that it guarantees the privacy, the privacy rights and the good name of individuals during the processing of personal data, in all of its activities, in accordance with the principles set out below.

This Policy covers all administrative, organizational and control aspects that must be observed by management, employees, contractors, clients and third parties in general who have a direct relationship with the entity.

The purpose of this Privacy Policy is to provide a clear explanation of when, why and how we collect and use your personal information, as well as an explanation of your rights.

“CONSEJURIDICO” undertakes to process the information that is entered or transferred to our company in accordance with the rules of Law 527 of 1999, which regulates electronic commerce in Colombia, and Law 1581 of 2012 on the use of confidential data. This Personal Data Processing and Protection Policy replaces and supersedes any previously issued agreements and policies.

This Policy also applies to data processing carried out through digital and automated channels, including web forms, messaging channels, online legal consulting services assisted by artificial intelligence, and the proprietary management system AViGAyL.

This Personal Data Processing Policy is governed by the following rules:

• LAW 527 OF 1999: Defines and regulates access to and use of data messages, electronic commerce and digital signatures.
• LAW 1266 OF 2008: Establishes the general provisions on Habeas Data and regulates the handling of information contained in personal databases.
• LAW 1273 OF 2009: Creates and protects the legal interest of information and personal data, criminalizing conduct such as computer damage, violation of personal data and abusive access to a computer system.
• LAW 1581 OF 2012: Establishes the general provisions for the protection of personal data in Colombia.
• DECREE 1377 OF 2013: Regulates Law 1581 of 2012 on matters relating to the authorization of the Data Subject, the Processing policies of controllers and processors, the exercise of the rights of Data Subjects, international transfers and demonstrated accountability.
• DECREE 886 OF 2014: Regulates Article 25 of Law 1581 of 2012 on the National Database Registry (RNBD) administered by the Superintendence of Industry and Commerce.
• DECREE 1074 OF 2015: Single Regulatory Decree of the Commerce, Industry and Tourism Sector.
• SIC EXTERNAL CIRCULAR 007 OF 2018: Issues instructions on the information security measures that controllers and processors of personal data must adopt.
• SIC EXTERNAL CIRCULAR 002 OF 2021: Establishes the accountability guidelines on personal data protection that controllers and processors must demonstrate.
• And any others that may be issued, as modified or repealed within the legal system.

Through this policy, CONSEJURIDICO, in compliance with its legal and regulatory duty, seeks to give effect to the constitutional guarantee of protection of personal and family privacy of all its users, clients, employees, partners and contractors and others connected to it in any capacity, establishing prompt instruments and controls to ensure appropriate processing of the information provided to it.

This policy sets out the terms, conditions and purposes under which CONSEJURIDICO, as controller of the personal data obtained through its various service channels — physical, digital and automated — processes the information of all persons who, at any time and by reason of the company's activity, have provided personal data (hereinafter the “Data Subject”).

This policy applies to any personal data registration carried out in person and/or virtually for enrollment in any CONSEJURIDICO product or service, including services provided through the web portal, the artificial intelligence legal consulting agent (Jurídico Online) and the AViGAyL management system. The Data Subject registers or provides their information freely and voluntarily and acknowledges having read and expressly accepting this policy.

SCOPE OF APPLICATION: The personal data processing policies must be known and applied by all officers, employees, departments, clients, contractors and suppliers of “CONSEJURIDICO”.

The definitions below follow the provisions of current national legislation on personal data processing and protection:

• a) Authorization: Prior, express and informed consent of the Data Subject to carry out the Processing of personal data.
• b) Privacy notice: Verbal or written communication generated by “CONSEJURIDICO” and addressed to the Data Subject regarding the processing of their personal data, informing them of the existence of this Policy and the purposes of the Processing.
• c) Database: An organized set of personal data that is subject to Processing.
• d) Personal data: Any information linked to, or that may be associated with, one or more identified or identifiable natural persons.
• e) Private data: Data that, because of its intimate or reserved nature, is relevant only to the Data Subject.
• f) Public data: Data that is not semi-private, private or sensitive. Public data includes, among others, data relating to marital status, profession or occupation, and data contained in public records and final judicial rulings.
• g) Semi-private data: Data whose knowledge or disclosure may be of interest to the Data Subject and to a certain sector or group of persons.
• h) Sensitive data: Data that affects the Data Subject's privacy or whose improper use may give rise to discrimination, such as data revealing racial or ethnic origin, political orientation, religious or philosophical convictions, membership of trade unions, social or human rights organizations, health, sex life and biometric data.
• i) Processor: A natural or legal person, public or private, that, by itself or in association with others, carries out the Processing of personal data on behalf of the Controller.
• j) Controller: A natural or legal person, public or private, that, by itself or in association with others, decides on the database and/or the Processing of the data.
• k) Data Subject: A natural person whose personal data is subject to Processing.
• l) Processing: Any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion.
• m) Transfer: A data transfer takes place when the Controller and/or Processor of personal data sends the information or personal data to a recipient, who in turn is a Controller of the Processing and is located inside or outside the country.
• n) Transmission: Processing of personal data that involves communicating it inside or outside the territory of the Republic of Colombia where its purpose is to have a Processor carry out Processing on behalf of the controller.
• o) Automated service system: A technological tool that, through the use of artificial intelligence, processes data entered by the user to generate guidance-oriented legal answers or consultations, without this implying the creation of a formal mandate or legal advisory relationship.
• p) AViGAyL: CONSEJURIDICO's proprietary enterprise management system (ERP/CRM), with access restricted to authorized personnel, which integrates the management of cases, clients, billing and the firm's internal processes.

The PROCESSING OF PERSONAL DATA by “CONSEJURIDICO” is framed by the following principles:

• a) Legality: Processing is a regulated activity that must comply with the law, and the Data Subject must be informed of it.
• b) Freedom: Processing may only be carried out with the prior, express and informed consent of the Data Subject.
• c) Purpose: Processing must serve the purposes stated in this Policy or in the Authorization granted by the Data Subject. Personal Data may not be processed outside the purposes disclosed to and consented by Data Subjects.
• d) Accuracy: The information must be truthful, complete, exact, up to date, verifiable and understandable.
• e) Transparency: The right of the Data Subject to obtain from the Controller, at any time and without restriction, information about the existence of data concerning them must be guaranteed.
• f) Restricted access and circulation: Processing may only be carried out by persons authorized by the Data Subject and/or by the persons provided for in the law.
• g) Security: Information must be handled with the technical, human and administrative measures necessary to secure the records, preventing their tampering, loss, unauthorized or fraudulent consultation, use or access.
• h) Confidentiality: All persons involved in the Processing of personal data that is not public in nature are obliged to keep the information confidential, even after their relationship with any of the tasks involved in the Processing has ended.
• i) Temporality: Controllers and Processors may only collect, store, use or circulate personal data for the period that is reasonable and necessary, in accordance with the purposes that justified the Processing and the administrative, accounting, tax, legal and historical aspects of the information.

In the course of its activities, “CONSEJURIDICO” may collect personal data from: employees, Clients, Suppliers and contractors, attendees of its own meetings and/or training sessions, visitors and any person with whom there is a civil, commercial, labor, administrative or social relationship.

The data that may be collected from Data Subjects includes:

• Identification data: First and last names, type of identification, marital status, sex, signature, family data, place and date of birth and, where applicable, biometric data.
• Location data: Address, telephone and email.
• Sensitive data: Health-related data.
• Socioeconomic data: Financial and asset data and economic activity, as well as data relating to work experience and educational level.
• Case file and court proceeding data: Information relating to the status of court proceedings, procedural actions, parties, claims, evidence and judicial decisions, collected in the exercise of a judicial mandate or of legal advisory and representation activities.
• Data of counterparties and third parties in proceedings: Information on natural or legal persons acting as opposing party, witnesses, experts or other participants in proceedings in which CONSEJURIDICO acts as representative of its clients.
• Data entered through digital channels: Information voluntarily provided through the web portal, contact forms, the WhatsApp Business messaging channel and the artificial intelligence legal consulting service (Jurídico Online).
• Other data such as particular interests and data on criminal and/or disciplinary records.

From the list of personal data above, CONSEJURIDICO will only collect what is considered necessary for the purposes for which it will be processed in each of its activities or processes.

CONSEJURIDICO is committed to the proper use and processing of the personal data contained in its databases, preventing unauthorized third-party access that could learn of, breach, modify, disclose and/or destroy the information held there. To this end, it has security and access protocols for its information systems, storage and processing, including physical security risk controls.

Access to the different databases is restricted even for employees and collaborators. All staff are committed to confidentiality and proper handling of the databases, in line with the guidelines on information processing established by law.

The personal data of clients, users and parties to court proceedings is stored in the proprietary management system AViGAyL, hosted on secure cloud infrastructure (Amazon Web Services), with role-based access controls, two-factor authentication for administrator users, and periodic backups. Access to AViGAyL is restricted to personnel expressly authorized by CONSEJURIDICO's management.

As is publicly known, no Internet transmission is absolutely secure, nor can it be guaranteed to be; the User assumes the hypothetical risk this entails, which the User accepts and acknowledges. It is the user's responsibility to maintain all security controls on their devices or private networks for browsing. Likewise, CONSEJURIDICO may use cookies to identify the user's navigation across its portals.

CONSEJURIDICO has implemented security mechanisms in force in the market that are appropriate to its needs, in compliance with the instructions issued by SIC External Circular 007 of 2018. However, despite the due diligence exercised, CONSEJURIDICO is not liable for any consequence arising from improper or fraudulent access by third parties to the database and/or from any technical failure in its operation.

SOCIAL MEDIA: Social networks such as Facebook, YouTube, Instagram, LinkedIn, TikTok and any others that may come to be used are complementary platforms for disseminating information. All information that users provide on the social networks in which “CONSEJURIDICO” participates as a user does not constitute or form part of the Personal Data subject to the protection of this Policy, and is the sole responsibility of the internet intermediary that administers the platform.

CONSEJURIDICO requests the data necessary for the provision, promotion, marketing and facilitation of its portfolio of services and for interaction with its clients, as well as the data required for billing and payment.

Once your personal data has been provided voluntarily and freely, it is stored according to the service or product acquired. The equipment on which the databases reside is physically protected in a secure location. Only authorized personnel can access it and therefore the personal data of our clients and/or users.

Personal data processed through the AViGAyL system is stored on cloud servers (Amazon Web Services), with security standards that include encryption at rest and in transit, access audit logs and data retention controls in accordance with applicable legal obligations.

Data entered through the artificial intelligence legal consulting service (Jurídico Online) is processed to generate the guidance-oriented response requested and may be stored for service improvement, audit and quality control purposes, for the period established in this Policy.

Taking into account subsection a) of Article 12 of Statutory Law 1581 of October 17, 2012, the personal data that “CONSEJURIDICO” collects, stores, uses, circulates and otherwise processes is managed by “CONSEJURIDICO” and its personnel authorized for that purpose, ensuring its confidentiality, and will only be used in accordance with the guidelines set by the Constitution, the law governing its activities, and current legislation on personal data.

• Personal information in human resources activities. In carrying out its selection, hiring and welfare activities for candidates to work with the entity, and with the prior authorization of the Data Subjects, it collects and stores their personal data and, on occasion, that of their family members, in order to carry out the selection and hiring processes and to maintain the employment relationship.
• Personal information of contractors and suppliers. It uses the personal information collected through its contracting and procurement process in order to obtain the product and/or service required to carry out its activities, as well as to meet payment obligations and legal, accounting and registration obligations.
• Personal information in customer service activities. For the customer service process and the handling of petitions, complaints and claims, it collects personal information from applicants in order to fulfill its contractual and/or legal obligations and to respond appropriately to their requests.
• Personal information in communications activities. It collects personal information from its clients and its clients' employees in order to send information considered to be of interest to them by physical or electronic means.
• Processing of Sensitive Data. When “CONSEJURIDICO” processes sensitive data, it will do so solely and exclusively with the prior and express authorization of the Data Subject.
• Processing of data of children and adolescents. In general, “CONSEJURIDICO” does not process this type of data in its day-to-day operations. However, if required, it will be done only with the express authorization of the legal representative of the child or adolescent, ensuring respect for their fundamental rights.
• Processing of data in court proceedings and under legal mandate. In the exercise of legal representation and advice, CONSEJURIDICO processes the data of parties to court proceedings, including data of counterparties and third parties, for the sole purpose of fulfilling the object of the mandate conferred by the client. This processing is carried out in accordance with the powers granted in the services agreement or power of attorney, and subject to the duty of professional secrecy established in the Lawyers' Disciplinary Code.
• Processing of data in digital channels and AI services. Data entered by users through the web portal, WhatsApp Business or the Jurídico Online service is processed in accordance with the purposes described in this Policy and with the security measures specific to each channel. Use of the Jurídico Online service implies acceptance of its Terms and Conditions, available at consejuridico.com/en/juridiconline.

The authorization for the processing of your personal data allows CONSEJURIDICO to collect, transfer, store, use, circulate, delete, share, update and transmit it, for the purpose of fulfilling the following purposes:

1. The processing of personal data protected by our legal system, and contact data (name, identification, activity, physical and email addresses, social media, telephone, etc.).
2. Carrying out the company's core processes and onboarding clients, advancing the processes and matters, and addressing the legal needs raised by the client.
3. Validating information in compliance with the legal "know your customer" requirement applicable to CONSEJURIDICO.
4. Managing all the information necessary to comply with the legal, tax, and commercial, corporate, accounting and financial registration obligations of "CONSEJURIDICO".
5. Complying with internal processes for the review and verification of information and documentation during the selection and administration of suppliers and contractors.
6. Fulfilling the service agreements entered into with clients.
7. Providing its services according to the particular needs of its clients, including verifying the affiliations and rights of the individuals to whom the contractors of "CONSEJURIDICO" will provide services, as well as using Personal Data for marketing and/or commercialization of new services or products.
8. Fraud and money laundering control and prevention, including but not limited to consulting restrictive lists, and all information required for SARLAFT.
9. The processes of archiving, system updating, and protection and custody of information and databases.
10. Activities related to personnel selection, review of résumés and verification of data provided by the candidate, as well as the hiring and departure of staff members of the entity and the oversight of contractual relationships.
11. Processes within "CONSEJURIDICO" for operational development and/or systems administration purposes, including the maintenance and improvement of the AViGAyL management system.
12. Carrying out collection and receivables recovery actions, by virtue of the agreements and documents reached with the clients of "CONSEJURIDICO".
13. The transmission of data to third parties with whom contracts have been entered into for this purpose, for commercial, administrative, marketing and/or operational purposes.
14. Requesting and receiving from its clients, whether natural or legal persons, and from public-law entities and/or private companies, the personal, academic, employment and social security information held in their databases.
15. Handling requests, petitions, complaints and claims that may arise from the performance of the Company's corporate purpose.
16. Issuing invitations to events and/or training sessions, its own and/or third parties', and recording data and images of attendance at its own events and/or training sessions for historical, statistical and quality purposes.
17. Providing guidance-oriented legal consulting through digital channels and the artificial intelligence agent Jurídico Online, processing the data entered by the user to generate automated responses of an informational nature, without this constituting formal legal advice or an attorney-client relationship.
18. Improving and developing CONSEJURIDICO's digital services, including analyzing queries made through Jurídico Online for training and improvement of the system, after anonymizing the data where possible.
19. Any other purposes determined by the controllers in processes of obtaining Personal Data for its Processing, in order to comply with legal and regulatory obligations and with the policies of "CONSEJURIDICO".

The scope of the authorization includes the power for CONSEJURIDICO to send you messages with institutional content, notifications, account statement information, balances, pending installments and other information relating to CONSEJURIDICO's portfolio of services, by physical mail, email, WhatsApp Business, calls and text messages to landline or mobile phone.

5.3 Use of data for commercial and educational communications

Personal data collected through our digital services may be used to send educational, informational and commercial communications related to legal services, provided that you have expressed your acceptance at the time of creating your account or starting a consultation.

You may cancel these communications at any time by clicking the unsubscribe link, or by writing to consejuridico@gmail.com.

The data will not be shared with third parties for those third parties' own commercial purposes. The information will be used exclusively by Consejurídico S.A.S. for purposes of its relationship with its own clients and users.

“CONSEJURIDICO” has a video surveillance system using fixed cameras installed at strategic locations inside its offices and premises, as established in the data processing rights for employees and natural persons, stating that the information collected will only be used for the security of employees, natural persons, and the property and assets contained there. Such information may be used as evidence whenever required, before any authority or official or private organization that requests it.

“CONSEJURIDICO” informs its employees and visitors of the existence of security mechanisms by means of notices posted in visible places about video surveillance, and they acknowledge that they are being recorded in accordance with the terms and authorize it for the purposes provided herein.

CONSEJURIDICO offers, through its digital platform, the “Jurídico Online” service, which allows users to obtain basic legal guidance through an artificial intelligence agent. Use of this service involves the processing of personal data under the following specific conditions:

a) Nature of the service:

The Jurídico Online service generates guidance-oriented responses using artificial intelligence. The responses do not constitute formal legal advice, do not create an attorney-client relationship, and cannot be construed as a binding legal opinion. The output generated by the system is automated and does not undergo individual human review for each query.

b) Data collected:

To provide the service, the following is collected: the user's basic identification data (name and email or telephone number), the content of the queries submitted, and the data necessary to process payment of the service fee.

c) Specific purposes of the processing:

• Generating the guidance-oriented response requested by the user.
• Processing payment of the fee corresponding to the service.
• Improving the models and the quality of the service, after anonymizing the data where technically possible.
• Complying with the tax and accounting obligations arising from the transaction.
• Handling petitions, complaints and claims related to the service.

d) Data retention:

Data entered in the Jurídico Online service will be retained for the time necessary to fulfill the purposes described and for the applicable legal period. The user may request deletion of their data at any time, provided that there is no legal obligation to retain it.

e) Limitation of liability:

CONSEJURIDICO is not responsible for the decisions the user makes based on the responses of the artificial intelligence agent. For matters requiring professional legal advice, the user must contact a lawyer directly.

AViGAyL is CONSEJURIDICO's proprietary enterprise management system (ERP/CRM), developed in-house and hosted on secure cloud infrastructure. This system integrates case management, clients, billing, proceeding tracking and the firm's internal administration.

The processing of personal data through AViGAyL is governed by the following guidelines:

• Access to the system is restricted to personnel authorized by CONSEJURIDICO's management, with differentiated access profiles according to each user's role and functions.
• The data stored in AViGAyL includes client information, case files, contracts, billing data and communications related to the matters handled by the firm.
• AViGAyL's infrastructure has technical security measures that include encryption of data at rest and in transit, periodic backups, access audit logs and information integrity controls.
• The data stored in AViGAyL will not be shared with unauthorized third parties, except in the cases provided by law or when necessary to fulfill the mandate conferred by the client.
• The system may integrate artificial intelligence functions for information analysis and support of internal management, under the same principles of confidentiality, security and purpose established in this Policy.

For the processing of the Data Subject's personal data, the Data Subject's prior, express and informed authorization is required, which must be obtained by any means that can be consulted later. Under Article 10 of Law 1581 of 2012, authorization from the Data Subject is not required in the following cases:

• Information required by a public or administrative entity in the exercise of its legal functions or by court order.
• Data of a public nature.
• Cases of medical or health emergency.
• Processing of information authorized by law for historical, statistical or scientific purposes.
• Data related to the Civil Registry of Persons.

In the case of sensitive data, its processing is prohibited except when:

• The Data Subject has given explicit authorization for such processing, except in cases where the law does not require authorization to be granted.
• The processing is necessary to safeguard the vital interest of the Data Subject and the Data Subject is physically or legally incapacitated.
• The processing concerns data that is necessary for the recognition, exercise or defense of a right in a judicial proceeding.
• The processing has a historical, statistical or scientific purpose.

The information subject to processing may be provided to: the Data Subjects; their successors or their legal representatives; public or administrative entities in the exercise of their legal functions or by court order; and third parties authorized by the Data Subject or by law.

Proof of authorization. The authorization may be contained in a physical or electronic document, a data message, or any suitable technical or technological mechanism that enables later consultation, or that allows it to be concluded, unequivocally, that, had the Data Subject not engaged in a specific conduct, the data would never have been captured and stored in the database, as in the case of acceptance buttons on the website where, without the user's agreement by clicking, it is impossible to continue browsing or sharing information.

“CONSEJURIDICO” will comply with the provisions of current regulations on the handling and processing of the data collected in the exercise of its functions and will ensure that it guarantees:

• The Data Subject's right to update, access and rectify their personal data, and to be clearly informed about the use and purpose of the collection of their personal data, as well as the quality and security of the personal data collected by the entity in carrying out its corporate purpose.
• Entering into the relevant transmission agreements with the processors of personal data, undertaking to give the use previously authorized by the Data Subject, taking into account Article 25 of Decree 1377 of 2013.
• Keeping a copy of the authorization granted by the Data Subject and complying with all applicable current regulations on the protection, handling and processing of personal data.
• Implementing the technical, administrative and human security measures described in SIC External Circular 007 of 2018 and demonstrating accountability under the terms of SIC External Circular 002 of 2021.

The Data Subject is informed of the rights that personal data protection laws grant, listed below, and which CONSEJURIDICO guarantees through compliance with the defined procedures:

• a) To access, update and rectify their personal data with “CONSEJURIDICO”. This right may be exercised, among other cases, with respect to partial, inaccurate, incomplete or fragmented data, data that may be misleading, or data whose processing is expressly prohibited or has not been authorized.
• b) To request proof of the authorization granted, except where expressly exempted as a requirement for processing, in accordance with Article 10 of Law 1581 of 2012.
• c) To file with the Superintendence of Industry and Commerce any petitions, complaints or claims that may be warranted, as provided in Law 1581 of 2012 and other rules that amend, supplement or complement it.
• d) To revoke the authorization and/or request the deletion of data when constitutional and legal principles, rights and guarantees are not respected.
• e) To request the deletion of their personal data provided that there is no legal duty requiring “CONSEJURIDICO” to keep the Data Subject's data in the entity's database.
• f) In the case of personal data of children and adolescents, Article 7 of Statutory Law 1581 of 2012 will be taken into account.
• g) To be informed by the Entity, upon request, about the use it has made of their personal data.
• h) To access free of charge their personal data subject to processing.

To submit queries, claims or complaints, or to exercise your rights as a user or client, you may contact any of the Customer Service channels that CONSEJURIDICO has made available, and they will be handled within the times established by Law 1581.

1. Regardless of the mechanism used to file consultation requests, they will be handled within a maximum of fifteen (15) business days from the date of receipt. When it is not possible to handle the query within that period, the interested party will be informed before the fifteen (15) days expire, stating the reasons for the delay and the date on which the query will be handled, which in no case may exceed five (5) business days following the expiry of the first period.
2. To submit a request for correction, update or deletion of data, or to file a claim for alleged breach of CONSEJURIDICO's data protection duties, you may submit the request in writing and in person at the corresponding offices. The request or claim must be made by a communication addressed to CONSEJURIDICO, stating the full name of the Data Subject, a description of the facts giving rise to the request or claim, the residential address and the contact telephone number, and must attach the documents you wish to have considered as evidence.
3. If the request or claim is incomplete, you will be required, within five (5) days following receipt of the claim, to correct the deficiencies. If two (2) months pass from the date of the requirement without the applicant submitting the required information, the claim will be deemed withdrawn.
4. Requests for update, correction, rectification or deletion of data will be answered within the following fifteen (15) business days, counted from the day after the date the complete claim is received. When it is not possible to handle it within that period, the interested party will be informed before the expiry of that period of the reasons for the delay and the date on which their claim will be handled, which in no case may exceed five (5) business days following the expiry of the first period.
5. The Data Subject may consult their personal data free of charge at least once each calendar month and whenever there are changes to the Information Processing Policy that give rise to new consultations.
6. The Data Subject's right of access, upon prior verification of their identity and legitimacy, is guaranteed, at no cost, to their personal data through various means, mainly electronic, that allow the Data Subject direct access to it.

“CONSEJURIDICO” has made the following communication channels available to handle the different requests, petitions, complaints and claims from Data Subjects regarding the handling of personal data:

Offices: Calle 45A No. 14-55, Barrio Palermo, Bogotá D.C.
Email: contacto@consejuridico.com
Website: www.consejuridico.com / www.consejuridico.com.co
Landline: (601) 7048487
WhatsApp Business / Mobile: +57 301 681 8000

Petitions, complaints and claims received through the different channels described will be forwarded to the Legal Director of “CONSEJURIDICO”, who will respond within the periods established by Law.

“CONSEJURIDICO” reserves the right to modify, at any time and unilaterally, its personal data processing policies and procedures. Any change will be published and announced. In addition, previous versions of this personal data processing policy will be kept.

Continued use of the services, or failure by the Data Subject to opt out of them after notification of the new guidelines, constitutes acceptance of the same.

By accepting this personal data processing policy, the Data Subject declares that they are aware that CONSEJURIDICO may provide this information to related entities and allies, to judicial or administrative entities and other State bodies that, in the exercise of their functions, request this information. The Data Subject also accepts that it may be subject to internal or external audit processes by companies in charge of this type of control. All of the above is subject to the confidentiality of the information.

The personal data processing policy takes effect from its publication on the website www.consejuridico.com. The current version is 2.0, published in June 2026, which replaces in its entirety the previous version of September 2020.