At DataScope SpA (hereinafter “DataScope,” which includes our corporate group and affiliated companies, including, but not limited to, DataScope SpA, DATASCOPE SOLUTIONS CORP, and DataScoper MX SA de CV), we care about your privacy and the protection of your personal data that we need to collect and use to provide you with our services; including the collection of information through digital forms, data analysis, and related services (hereinafter the “Services”).

Through this Privacy Policy we inform you about the categories of data we access to provide the Services, the purposes for which that information is used; about your rights as the data subject; and, in general, all relevant information you should know regarding the processing of your personal data in the context of the provision of our Services.

By accepting this Privacy Policy you consent to the processing of your personal data in the manner and under the conditions set forth in this Policy and you declare that the personal data you provide to us belong to you, are up to date, and are accurate. You must inform us of any correction, update, or adjustment we should make to your data. Unless you expressly notify us otherwise, we will understand that your data have not undergone changes.

2. Data Controller

The data controller is the entity that decides on the purposes and means of processing personal data, regardless of whether the data are processed directly by it or through a third-party data processor or agent.

The controller of the personal data processing activities described in this Privacy Policy is DataScope SpA:

Company name: DataScope SpA.

Tax ID (RUT): 76.558.257-1

Address: _________________

Legal representative: Nicolás Serrano Moreau De La Meuse.

If you have any questions about this Policy or, in general, regarding the processing of your personal data, you can contact us at info@mydatascope.com

3. Lawful bases for processing your personal data

The lawful basis for processing your personal data will, as a rule, be the consent you give when you accept this Privacy Policy. The consent you provide us to process your personal data extends strictly to the purposes and conditions set forth in this Privacy Policy.

Notwithstanding the foregoing, when we must comply with legal obligations or requirements from an authority, our lawful basis will be legal authorization, and in that case we will not need your consent to process personal data. Likewise, to the extent permitted by law, we may process your personal data relying on other lawful bases, such as performance of a contract, when the processing is strictly necessary to provide you the Services, or legitimate interest, for example when we process your data to safeguard the security of your information.

However, we will always process your personal data in accordance with the purposes communicated in this Privacy Policy.

4. Sources of collection of your Personal Data

DataScope collects information about you in the following ways:

• Data you provide directly to DataScope through our website and mobile application.
• Data resulting from the use of the Services, including information generated from the integration of data for report generation.
• Data you provide through the contact channels established by DataScope, which includes any information you provide when making inquiries or complaints in connection with the use of our Services.
• Data we obtain from publicly accessible sources, i.e., any personal data obtained from sources considered public by applicable law and to the extent that legislation permits their use.

5. Personal data we collect

We may access the following categories of personal data:

• Identification and contact data: Includes data such as your first and last name, RUT, email address, phone number, and other contact details. Also, identification and contact data of the company or legal entity that contracts the Service.
• Credentials: Includes data such as your national identification number or identity card number, passwords or access keys, or other information for authentication and access to the application and website. Likewise, identification data, passwords, access keys, or other information of the company or legal entity that contracts the Service.
• User content: Includes data such as communications and files you provide us when using our Services.
• Service payment information: Includes data such as your payment account number and type, client RUT, and other identifying information to keep proof that payment was made.
• Device information: Includes data such as IP address, location, browser type, operating system, and internet service provider.

6. How we use your information

We use your information to:

• Provide and manage the Services you contract, which may involve interacting with third parties on your behalf to facilitate the operations you request and analyzing and processing data you provide.
• Provide customer support and improve our Services. For this, we will use automated tools in the analysis of your data. Regarding the use of these tools, we will make available to you the information you are entitled to access under the law and this Privacy Policy.
• Anonymize your data, generate and display statistics, whenever possible, in aggregated form.
• Comply with our legal obligations and protect our rights.
• Prevent fraud, abuse, and any other unlawful conduct in relation to applicable regulations, and, in general, comply with the legal and regulatory obligations of DataScope and orders from competent authorities.
• Maintain and safeguard the security and integrity of our Services; prevent, detect, and investigate potentially prohibited or illegal activities related to the use of our Services.
• Provide information about the Services used to the competent authority when applicable, for example, regarding reports of findings.
• Protect the legitimate interests and rights of DataScope or its related companies, for example, process your data when necessary in the context of a due diligence process, a sale or transfer of all or part of DataScope’s business or assets to a third party.
• Facilitate onboarding or registration processes of the data subject in case they wish, in the future, to contract or access other services offered by DataScope. This processing seeks to simplify the user experience and avoid requesting information already provided, while at all times safeguarding the security and confidentiality of their data.

7. How we disclose or transfer your information

To fulfill the purposes of processing your data set forth in this Privacy Policy, DataScope may disclose or allow access to your personal data to third parties, who may be located in Chile or abroad.

When DataScope discloses or transfers your data to third parties it will only share and transmit those data necessary to fulfill the purpose that motivated the disclosure. Likewise, it will make its best efforts to ensure that all data are processed with absolute confidentiality, securely, and only for the purposes that motivated the disclosure and under DataScope’s instructions when we act as the principal in such disclosure or transfer. In this regard, DataScope will seek that such third parties, prior to receiving such information, assume obligations and responsibility for care, secrecy, and confidentiality equivalent to those incumbent on DataScope, in accordance with applicable law.

In particular, DataScope may disclose or transfer your personal data to the following third parties:

• Service Providers. We may disclose your data to the providers we hire to render the services necessary to operate or improve the functioning of our Services. These providers access your data under a mandate for the processing of DataScope’s data and act following our instructions and supervision.
• Related Companies. We may disclose your personal data to companies that belong to the same corporate group as DataScope and that operate according to common policies and processes.
• Corporate restructuring. In the event of a merger, acquisition, sale, or transfer of all or part of DataScope’s business or assets, or in the case of corporate reorganization, we will disclose or transfer your personal data to the successor of the business or assets, or to anyone evaluating being such successor in a due diligence process.
• Regulators and other authorities. DataScope may disclose your data to administrative and/or judicial authorities that, in the exercise of their functions and within their competence, require information from DataScope. Once DataScope discloses data to the respective authority, that authority acts as the controller of those data.

8. Retention of your information

Your personal data will be retained for the time necessary to fulfill the purposes indicated in this Privacy Policy. The specific retention period for your data depends on the type of data, the purposes for which it was collected, and our legal retention obligations. Thus, unless you request termination of the Services and/or deletion of your personal data, DataScope will store and process your data in accordance with this Privacy Policy. If you request deletion of your account or personal data, DataScope may retain your personal data after accepting such request:

• To comply with legal or regulatory retention obligations; and
• If there are claims, judicial and/or administrative actions pending or whose statute of limitations has not expired.

In these cases, your data may only be used to fulfill the purposes that motivated the retention and may not be used for other purposes.

9. Your rights

As a data subject, you have the following rights:

• Access: Request information about the personal data we hold and process about you, know its origin and recipients (if any), and the purpose of storage.
• Rectification: Request that incorrect, inaccurate, ambiguous, or incomplete data be corrected when you can substantiate it.
• Blocking: Request the temporary suspension of any processing of data, except storage, when you have voluntarily provided your data.
• Deletion: Request the deletion of personal data when they are obsolete, their processing lacks a legal basis, or when you have provided them voluntarily.
• Portability: Request and receive a copy of the personal data concerning you that we process, in a structured, commonly used, and machine-readable electronic format.
• You also always have the right to revoke, without retroactive effect, the consent you have given for the processing of your data.

To exercise your rights as a data subject, you must submit a written request, which must be sent by email to payments@mydatascope.com and must contain, at a minimum, the following information:

• First name;
• Last name;
• Local identification number (RUT/CURP/RUC, etc.);
• Email address of the account;
• Phone number; and
• Indicate which right or rights you wish to exercise.

Please note that, for the security of your data and the data of other data subjects for whom we are responsible, we may reasonably require you to verify your identity before responding.

10. External links and features

Our services may contain links to third-party websites, such as social networks. We are not responsible for the practices of those sites. DataScope is not responsible for the processing of your personal data carried out by third parties, including, without limitation, any third party that operates any website, application, or platform where our Service is made available to collect and analyze data. Any personal data you provide through third-party websites, applications, or other means will be governed by their own privacy policies, which we recommend you read carefully.

11. Security of your information

At DataScope, we take measures to protect your information by implementing internationally recognized security standards, conducting periodic testing, and continuously monitoring our platform. Nevertheless, no system is completely secure, so we will notify you of any security breach so that you can take appropriate measures.

12. Changes to our Privacy Policy

We may modify this policy at any time, for which we will request your consent. The most current version will be available on our website.