Personal Data Treatment policy hackU S.A.S.

Fecha de última actualización:

HACKU S.A.S. is a company created with the purpose of reinventing the traditional education system, where the whole system is created by, for and in priority benefit of the user. For the fulfillment of this purpose they have created a digital platform where they proceed to offer their entire portfolio of educational content to the user. Therefore, it is essential to make and establish the rules of the game between the user and hackU in the use of the platform.

In accordance with the above, have generated this Privacy Policy and Processing of Personal Data in order to safeguard and protect the information of the owners of the data collected or obtained in the future in the interactions or operations.

Objective

Establish the criteria for the collection, storage, use, circulation and suppression of personal data processed by https://hacku.co/. hackU states that it guarantees the rights of privacy, intimacy and good name in the processing of personal data and, consequently, all its actions will be governed by the principles of legality, purpose, freedom, truthfulness or quality, transparency, restricted access and circulation, security and confidentiality.

All persons who in the exercise of commercial or labor activities provide any type of information or personal data, may know, update and rectify it.

Scope

This policy applies to all personal information of anyone who enters the platform or leaves information in any form or in any of our web pages.

Definitions

Authorization

Prior, express and informed consent of the Data Subject to carry out the Processing of personal data.

Data base

Organized set of personal data that is subject to processing.

Personal data

Any information linked or that can be associated to one or several determined or determinable natural persons.

Private data

It is the data that, due to its intimate or reserved nature, is only relevant to the user who owns it.

Public data

Public data includes, among others, data relating to the marital status of individuals, their profession or trade, and their status as merchants or public servants. This data may be obtained and offered without any reservation whatsoever and regardless of whether it refers to general, private or personal information.

Semi-private data

Semi-private data is data that is not of an intimate, reserved or public nature and whose knowledge or disclosure may be of interest not only to its owner but also to a certain sector or group of people or to politics in general, such as financial and credit data of commercial activity.

Sensitive Data

Sensitive data are understood as those that affect the privacy of the Data Subject or whose improper use may generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership in trade unions, social organizations, human rights or that promote the interests of any political party, among others.

Data Processor

Natural or legal person, public or private, which by itself or in association with others performs the processing of personal data on behalf of the data controller.

hackU

It is the platform through which users interact.

Responsible for the treatment

It is the natural or legal person, public or private, who decides on the purpose of the databases and/or their processing.

Holder

Natural person whose personal data is subject to processing.

Treatment

Any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion.

User

They are those persons, natural or legal, who use the platform or provide the data for the purposes set forth herein.

Principles

In order to guarantee the protection of personal data, https://hacku.co/ will apply the following principles in a harmonious and comprehensive manner, in light of which the processing, transfer and transmission of personal data must be carried out:

Principle of legality in the processing of data

Data processing is a regulated activity, which shall be subject to the legal provisions in force and applicable to the subject.

Principle of finality

The personal data processing activity carried out by https://hacku.co/ or to which it has access will obey a legitimate purpose in accordance with the Political Constitution of Colombia, which must be informed to the respective owner of the personal data.

Principle of freedom

Personal data may only be processed with the prior, express and informed consent of the Data Subject. Personal data may not be obtained or disclosed without prior authorization, or in the absence of legal, statutory or judicial mandate that relieves the consent.

Principle of truthfulness or quality

The information subject to Processing of personal data must be truthful, complete, accurate, updated, verifiable and understandable. The processing of partial, incomplete, fractioned or misleading data is prohibited.

Principle of transparency

In the processing of personal data, https://hacku.co/ will guarantee the Data Subject the right to obtain at any time and without restrictions information about the existence of any type of information or personal data that is of interest or ownership.

Principle of restricted access and circulation

The processing of personal data is subject to the limits deriving from the nature of the data, the provisions of the law and the Constitution. Consequently, the processing may only be carried out by persons authorized by the owner and/or by the persons provided for by law.

Safety principle

The information subject to processing by https://hacku.co/ shall be handled with the technical, human and administrative measures necessary to ensure the security of the records, avoiding their adulteration, loss, consultation, use or unauthorized or fraudulent access.

Principle of confidentiality

All persons who in https://hacku.co/ administer, manage, update or have access to information of any kind that is in databases are obliged to ensure the confidentiality of the information, so they undertake to keep and maintain strictly confidential and not disclose to third parties all information that they come to know in the execution and exercise of their functions, except in the case of activities expressly authorized by the data protection law. This obligation persists and will be maintained even after the end of their relationship with any of the tasks that comprise the Processing.

Information collected

hackU only collects personal data provided directly by the USER for the purpose of registration, and for the purpose of:

Send you commercial information about offers, promotions and other data that motivate you to use THE PLATFORM.
Send you all the content related to the product or service purchased on the platform.
Classify and position information to users.
Analyze the main needs of the users, carry out diagnostics and analyze all the information data related to them. To do so, it may provide this information to other companies to facilitate the fulfillment of such diagnosis. - Sending information, advertising, marketing, among others.
Any related activity.

The personal data stored for the registration of the USER will be kept for archiving purposes, record of the contractual relationship, execution of outstanding balances and sending commercial information related to the service offered on THE PLATFORM.

Because of this, HACKU may preserve the following USER information:

Identifying information: For example, name, address, landline or cell phone number, NIT, citizenship card, aliens card, passport or identity card, mailing address, etc. electronic address.
Banking and payment information: e.g. credit card information, account number, etc.
Needs and requirements based on your current situation.

hackU Obligation

In accordance with current regulations on personal, private and sensitive data, HACKU will use such information solely and exclusively to fulfill the functions and obligations described above, as well as those arising from our contractual obligations.

HACKU in turn will use such information for statistical purposes, marketing, contact with the USER, sending documentation, advertising or notifications, transfer to allies or third parties for support in carrying out the diagnosis, among others, unless the user expressly or verbally states to remove, correct or delete your information from the database.

Obligations of the holder

It will be the user or the business who, at the time of performing any type of act or legal business through THE PLATFORM. The OWNER may expressly or tacitly state, through the use of the

The consent to the policy for the handling of such information. It will be required, however, that such consent is free, prior, express and informed consent of the owner of the personal data for the treatment of these, except in cases expressly authorized by law.

The owner may express his/her authorization in the following ways: (i) in writing and (ii) when formalizing his/her entry in THE PLATFORM. The authorization may be provided by the holder, who must sufficiently prove his identity; by the assignees of the holder, who must prove such capacity; the representative and/or attorney-in-fact of the holder, upon proof of representation or power of attorney.

Lack of authorization from the owner

The user's or merchant's authorization shall not be required for the use or delivery of the data provided in the following cases:

When such information is required by a public or administrative entity in the exercise of its constitutional or legal functions. When there is a court order to that effect.
In the event of medical and/or sanitary emergencies.
Processing of information authorized by law for historical, statistical or statistical purposes. scientists.
Data related to the Civil Registry of persons.
Others established by law.

Purpose of the processing of personal data

Coordinate and develop the activities of assistance and identification of the needs of our USERS, holders of personal data. Including the elaboration of statistics.
Necessary to make corrective actions to provide better technical assistance and response time.
Evaluate and analyze the proper functioning of our websites by doing, for example, statistical studies on the frequency and visiting hours of our USERS.
Adopt measures that allow HACKU to execute strategies aimed at developing better tools within THE PLATFORM.
Respond to all requests and requests made by USERS and have the elements to contact them.
Archive and record of the contractual relationship.
Sending information or data to third parties that allow us to accompany and advise them in a more efficient way.
to businesses.
Send commercial offers related to what is offered on THE PLATFORM.
Delivery of content in accordance with the product or service purchased within the platform.

Rights of the data subject with respect to his or her data

All USERS OR TRADERS are holders of the personal data, as well as their heirs or attorneys-in-fact, who may exercise the following rights:

Know, update, rectify and request the deletion of data held by the company.
Be informed of the uses that are being made of your data.
File the respective complaints and claims before the policy or before the Superintendence of Industry and Commerce, to be informed of the filing, time for its response and to receive a clear, complete and understandable answer for the user.
To revoke the authorization provided to the company for the use of data.
Others established by law.

Authorization for the use of personal data of users and merchants

By subscribing to THE PLATFORM. The USER authorizes HACKU to collect, store, use and transfer his/her personal data, under the conditions set forth above. HACKU is responsible for the treatment and correction of your data in those cases where it is required by the USER. HACKU will not be responsible for the personal data collected directly by the USER in the exercise of its purpose.

All personal data that is not public data will be treated by hackU as confidential, even if the contractual relationship has ended.

Data processorand channels of attention usersor businesses

The USER, directly or through duly authorized persons, may consult their personal data at any time and especially whenever there are changes in the INFORMATION PROCESSING POLICIES. To do so, a written request must be addressed to hackU's operations area, which will be in charge of data processing and may be contacted through the following channels:

Email: iwill@hacku.co

Cellular: 3116256757

Physical address: Calle 15 # 35-133 INT 401, Medellín.

Claims and inquiries

The holder or its assignees who consider that the information contained in a database should be corrected, updated or deleted, or when they notice the alleged breach of any of the duties or wish to consult something relevant to the management of their information, may file a claim and / or consultation with HACKU which will be managed as follows:

1. The claim and/or consultation shall be formulated by means of a request addressed to the Data Controller, with the identification of the Data Subject, the description of the facts that give rise to the claim, the address, and accompanied by the documents to be asserted. If the claim is incomplete, the interested party will be required within five (5) days after receipt of the claim to correct the faults. After two (2) months from the date of the requirement, without the applicant submitting the required information, it will be understood that the claim has been abandoned.

Complaints and/or queries may be made by e-mail to: iwill@hacku.co

Additionally, these requests may be made through the "contact us" section of our website.

2. Once the claim and/or complete consultation is received, a legend will be included in the database within two (2) working days stating "claim and/or consultation in process" and the reason for it. Said legend shall be maintained until the claim and/or consultation is decided.

3. The maximum term to address the claim and / or consultation will be fifteen (15) working days from the day following the date of receipt. When it is not possible to address the claim within that period, the interested party will be informed of the reasons for the delay and the date on which the claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the first term.

4. In the case of a claim, a complaint may only be filed before the Superintendence of Industry and Commerce once the consultation or claim process has been exhausted before the Data Controller or Data Processor.

Physical notifications

If you wish to submit your complaint by physical means, it should be addressed to this address. The procedure to be treated will follow the procedure described above. Calle 15 # 35-133 INT 401 in the city of Medellin, Antioquia, Colombia.

Current

This policy is effective as of May 30, 2023.

Privacy notice hackü, s. de R.L. de C.V. for Mexico

In hackÜ, S. de R.L. de C.V. we are convinced that our main asset is our users, that is why we apply guidelines, policies, procedures and privacy programs to protect your information.

As a user of hackÜ, S. de R.L. de C.V. you have the opportunity to access a reliable and efficient service, with the assurance that your personal data will be protected. The security of your information is our priority, that is why we protect it through the use, application and maintenance of high technical, physical and administrative security measures.

Such right and obligation is enshrined in the second paragraph of article 16 of the Political Constitution of the United Mexican States, in addition to the above, on July 5, 2010 the Federal Law for the Protection of Personal Data in Possession of Private Parties (hereinafter the "Law") was published in the Official Gazette of the Federation, whose provisions clearly contribute to our goal of protecting your personal data. You may access the contents of the Law through the portals that the Federal Government, through the Ministry of the Interior and the Chamber of Deputies of the Congress of the Union, have on the Internet at the following addresses: http://www.ordenjuridico.gob.mx and http://www.diputados.gob.mx.

By virtue of the aforementioned, we inform you that in compliance with our Privacy Program and the Law, the personal data we obtain by virtue of the services you request from hackÜ, S. de R.L. de C.V. will be treated confidentially through the systems and schemes provided for such purposes.

Responsible for the processing of your personal data

The person responsible for the treatment of your personal data will be hackÜ, S. de R.L. de C.V.

Address of the person in charge

For the purposes of this privacy notice, hackÜ, S. de R.L. de C.V. indicates its address as Montes Urales 619, Primer Piso, Col. Lomas de Chapultepec IV Sección, C.P. 11000, Alcaldía Miguel Hidalgo, Mexico City.

Purposes of the processing of your personal data, as well as personal data that may be collected and processed.

hackÜ, S. de R.L. de C.V. will collect the personal data necessary to provide the services you have requested, as well as to comply with the obligations contracted with our users, and to evaluate the quality of the service we provide.

For the aforementioned purposes, the categories of personal data to be collected and subject to processing are: (i) identification data; (ii) contact data; and (iii) other similar data required to provide the services contracted and/or requested by the competent authorities.

Also hackÜ, S. de R.L. de C.V. may use your personal data for: (i) marketing, advertising and commercial prospecting; (ii) to offer you, if applicable, other products and services of our own or of any of our affiliates, subsidiaries or associates; (iii) other similar to those already mentioned.

Choice of data subjects to limit the use or disclosure of data

You have the right to limit the use or disclosure of the data and information that you place in our possession, as well as that which we obtain by other means and which has a direct relationship with your person or institution, for which you must indicate the limits of the use or disclosure of the data at the time of making them available to us, or at the time you become aware of those that we have obtained by other means.

If you do not express limitation for the use or disclosure of your personal data, it will be understood that you have given your consent without any limitation for its use and disclosure.

Transfer of personal data

hackÜ, S. de R.L. de C.V. may transfer your personal data to Mexican or foreign third parties, when the transfer: (i) is provided for in a Law or Treaty to which Mexico is a party; (ii) is necessary by virtue of a contract entered into or to be entered into in the interest of the holder, by hackÜ, S. de R.L. de C.V. and a third party; (iii) is necessary or legally required to safeguard a public interest, or for the procurement or administration of justice; (iv) is necessary for the recognition, exercise or defense of a right in a public interest, or for the procurement or administration of justice. and a third party; (iii) is necessary or legally required for the safeguarding of a public interest, or for the procurement or administration of justice; (iv) is necessary for the recognition, exercise or defense of a right in a judicial process; (v) is necessary for the maintenance or fulfillment of a legal relationship between hackÜ, S. de R.L. de C.V. and the holder; and (vi) in general when it is necessary for the provision of the contracted service.

Revocation of knowledge

You have the right to access, rectify and cancel your personal data, as well as to oppose the processing thereof or revoke the consent you have given us for such purpose, through the procedures that we have implemented and that are established in the Law. To learn about these procedures, requirements and deadlines, you can consult them in the Law or contact us at tatiana@hacku.co.

We also inform you that your personal data may be transferred and processed inside and outside the country, by persons other than this company. In that sense, your information may be shared with our affiliates or associates and competent authorities in the exercise of their powers, the above in order to provide the contracted service, as well as when the authority requires them and upon verification of their need and powers. If you do not express your opposition to the transfer of your personal data, it will be understood that you have given your consent to do so.

ARCO Rights

You or your duly accredited legal representative, may limit the use or disclosure of your personal data; as well as exercise, when appropriate, the rights of Access, Rectification, Cancellation or Opposition that the Law provides by means of a free written document containing the requirements set forth in the Law, which must be accompanied by the documents that prove the identity of the holder (official identification with photograph) or in its case the legal representation of the holder in terms of the common legislation, and submit it at the offices of hackÜ, S. de R.L. de C.V., which will channel your request to the department or personnel in charge of such process, which will process the requests of the holders for the exercise of the ARCO rights in a term no longer than 20 working days from the date of receipt. It is important to mention that the exercise of any of the aforementioned rights is not a prerequisite nor does it prevent the exercise of any other right. You may request information and guidance for the preparation of your free writing in our offices, by telephone at the number provided to you or by e-mail to the mail provided for that purpose.

The response to requests that comply with the aforementioned requirements may be notified to the promoter via e-mail (when the e-mail address is provided), by courier or by fax, in addition to being available at hackÜ's offices,

S. de R.L. de C.V. upon proof of identity by any of the means indicated above. We also inform you that you have the right to initiate a Rights Protection Procedure before the Federal Institute of Access to Information and Data Protection (www.ifai.gob.mx) within 15 business days from the date you receive the response from hackÜ, S. de R.L. de C.V., or from the end of the period of 20 business days from the date of receipt of your request for the exercise of rights and you have not received any response.

Modifications to the privacy notice

We reserve the right to make changes or updates to this privacy notice at any time, in order to comply with new legislation, internal policies or new requirements for the provision or offering of our services.

These modifications will be available to the public through the following means: (i) on our website [privacy notice section]; (ii) through the e-mail address you have provided to us; (iii) or by contacting us at 5559257321.

Any modification to this notice may be consulted on the official website of hackÜ, S. de R.L. of C.V. being the same https://www.hacku.co , in our offices, or by contacting us at the telephone numbers or e-mail provided for that purpose.

Other hackÜ, S. de R.L. de C.V. contact details

Website address: https://www.hacku.co E-mail:

iwill@hacku.co

Validity