C.I. MEPRECOL S.A. has implemented a comprehensive personal data processing policy in compliance with Law 1581 of 2012, Decree 1377 of 2013, and other applicable regulations. This policy establishes guidelines for the collection, storage, use, circulation, and deletion of personal data. The company ensures compliance with the principles of legality, purpose limitation, freedom, accuracy, transparency, restricted access and circulation, security, and confidentiality, as well as the effective exercise of data subjects’ rights. Likewise, it has adopted the necessary technical, human, and administrative measures to protect information, has procedures in place for handling inquiries and complaints, and keeps its databases updated in the National Database Registry when required, ensuring responsible processing in accordance with current regulations.