CL

Personal Data Treatment and Protection Policy

CLOUDLAB LATAM, in compliance with Colombian Law 1581 of 2012 and related regulations, as well as international standards (GDPR - General Data Protection Regulation of the European Union), informs its clients, employees, contractors and suppliers of its personal data treatment policy.

1. Data Controller

CLOUDLAB LATAM will be responsible for the processing of personal data collected in the course of its commercial activities.

2. Purpose of Processing

Personal data will be used for contractual, administrative, commercial purposes and compliance with legal obligations.

3. Rights of Data Subjects

Personal data subjects have the right to: (i) Know, update and rectify their data; (ii) Request proof of the authorization granted; (iii) Be informed about the use given to their data; (iv) File complaints with the Superintendence of Industry and Commerce; (v) Revoke authorization or request deletion of data in cases permitted by law.

4. International Data Transfer

CLOUDLAB LATAM may transfer data to third countries, provided they have adequate levels of protection in accordance with international standards.

5. Security Measures

The company will implement reasonable technical, administrative and organizational measures to ensure the security of personal data and prevent its loss, unauthorized access, alteration or disclosure.

6. Validity

This policy enters into force as of March 10, 2026 and will remain in effect while CLOUDLAB LATAM uses personal data.

Effective as of March 10, 2026.