Terms and Privacy

This policy reflects the type of information that PERFILES Y SOLUCIONES LOGÍSTICAS S.A.S. (hereinafter the “Company”) collects, stores, uses, transmits, treats, and transfers, as well as the purposes of its treatment, and the general guidelines that will be applied to guarantee the adequate treatment of any personal information.

Party responsible for the processing of any personal data

• Business Name: PERFILES Y SOLUCIONES LOGÍSTICAS S.A.S.
• N.I.T.: 900.592.737 – 3
• Notification Address: Cartagena, Avenida 3ra No 25 – 53 Piso 20, Edificio Torres del Puerto
• Email: juridica@leangroup.com
• Web Portal: https://www.leangroup.com/solutions/leanstaffing
• Telephone: 3100610

Compiled data

As a Private User, we collect your personal data to provide you with a better service. To create an account, you must provide your name, email address, telephone number, and a password.

You may also include your academic information, work experience, skills, location, and a photograph, and upload your resume in Word or PDF format (in Spanish or English). We store information associated with psychometric tests, audio recordings, web portal usage tracking, and session duration.

As a Business User, you must provide the company’s identification data and contact details of the person acting on its behalf, including full name, email address, and password.

As an Employee, you must provide personal identification and contact details, academic and employment information, civil status, nationality, number of children, military record, health and pension data (EPS, AFP, benefits compensation fund, ARL), bank details, clothing sizes, and other relevant employment-related information. If sensitive data is collected, you will be informed in advance, and providing such data will be optional.

As a Contractor/Supplier/Client/Lessor (individual or legal entity), we collect contact information such as telephone numbers, physical or business address, email, identification data, bank certification, and legal documentation (certificate of existence and legal representation, commercial registration, and/or RUT).

Data treatment and purpose policy

PERFILES Y SOLUCIONES LOGÍSTICAS S.A.S. will inform data subjects about how their data will be used through Privacy Notices. In general, the Company will handle the collected information as follows:

Private User and Business User Information

• Carry out the development of the company’s corporate purpose.
• Develop commercial and promotional campaigns.
• Conduct satisfaction surveys.
• Store information in a database and analyze for statistical purposes visitors accessing the company’s website and applying to job offers.
• Analyze usage data for statistical purposes regarding service inquiries through the company’s website.
• Contact users for potential commercial or employment relationships, as applicable.
• Other uses as defined under PERFILES Y SOLUCIONES LOGÍSTICAS S.A.S. privacy policy.

Employee Information

• Publish, transmit, and promote welfare activities organized by the Company through its networks and communication channels.
• Maintain updated contact information.
• Verify identity and data accuracy.
• Build and update employment records.
• Verify and manage leaves, disabilities, and health-related processes with the social security entities.

Contractor / Supplier / Lessor Information

• Execute contracts or purchase orders.
• Comply with tax and accounting obligations.
• Conduct due diligence required by the Superintendency of Companies.
• Use information for commercial, promotional, and informative purposes.
• Handle and respond to requests, complaints, claims, and suggestions.

Shareholder Information

• Gather shareholder data to issue calls for ordinary or extraordinary meetings of the General Assembly of Shareholders.
• Report exogenous information to the DIAN (tax and customs entity).
• Conduct due diligence required by the Superintendency of Companies.

Limit on retention of personal information

PERFILES Y SOLUCIONES LOGÍSTICAS S.A.S. will retain personal data for the duration of the contractual or commercial relationship and for the period required to meet legal obligations. Generally:

• Labor Data (Employees): Retained during the employment relationship plus twenty (20) additional years.
• Commercial and Accounting Data (Business/Private Users, Lessors, Shareholders, Contractors, Suppliers): Retained during the civil or commercial relationship plus ten (10) additional years.

Transfer of information

The Company may transfer Employees and Private Users’ information to Business Users to comply with contractual obligations. Data subjects will be informed of applicable policies through Privacy Notices.

Information ownership rights

As the owner of your personal data, you have the right to:

• Know, update, and rectify your data with the Company.
• Request proof of authorization (when applicable).
• Be informed about how your data is used.
• File complaints with the Superintendency of Industry & Commerce for policy or legal violations.
• Revoke authorization and/or request deletion when rights or guarantees are violated.
• Access your personal data free of charge through the designated channels.

Information relating to minors

If you are under 18, please do not provide personal data. The Company does not collect or process information from minors.

Sensitive / confidential information

Unless requested, do not send or disclose sensitive data. When required, it will be collected with prior express consent. The Company will only request such data (racial or ethnic origin, union membership, political or religious beliefs, sexual orientation, biometric, or health information) when legally necessary.

Video surveillance

For security and compliance, the Company uses video surveillance systems in its offices and facilities. Privacy notices will be posted indicating the purpose, sensitivity, and voluntary nature of the data collected.

Inquiries and claims

Data subjects or their legal representatives may submit requests to access, update, correct, delete, or revoke authorization through the channels provided by the Company.

All inquiries received outside business hours will be processed on the next business day.

Requests must include:

• Full name of the data owner or representative.
• Type and number of ID document.
• Email or physical address and contact number.
• Purpose and reasons for the request.
• Copy of ID of the data owner and representative, if applicable.
• Authenticated document proving representation, if applicable.
• Signature of the petitioner or legal representative.

If incomplete, the Company will request correction within five (5) days. If no response is received within two (2) months, the request will be considered withdrawn. Once complete, the Company will mark the record “Request in process” within two (2) business days until resolved.

Queries

Queries will be answered within ten (10) business days of receipt. If more time is needed, the reason and extended response date will be communicated, not exceeding five (5) additional business days.

Claims

Claims will be addressed within fifteen (15) business days. If more time is required, the Company will notify the claimant, with an extension not exceeding eight (8) additional business days.

Deletion of data / Revocation of authorization

The data owner may request deletion or revocation if the Superintendency determines a policy or legal breach. However, requests may be denied when:

• The data owner has a legal or contractual obligation to remain in the database.
• Deletion interferes with pending judicial or administrative proceedings or obligations.
• The data is necessary for the protection of legal interests, public interest actions, or compliance with obligations.

In such cases, data will be restricted for its intended purpose and handled confidentially.

Validity and modifications

This Policy is effective as of its issuance and may be modified as required by applicable law. Any substantial modifications will be published for ten (10) business days on https://www.leangroup.com/solutions/leanstaffing
prior to implementation.

Date of Issuance: 09/06/2020
Date of Last Modification: 11/30/2021