PRIVACY POLICY

NORMATIVE

General Principles for the Processing of Personal Information:

All interested parties have the right to control the flow of information that concerns them derived from the Right to Privacy, preventing discriminatory actions from being promoted. This section covers the set of principles and guarantees related to the legitimate treatment of the personal information of the interested parties.

Principle of Informed Consent / Transparency:

When Personal Information is requested, prior to collecting the information, it will be necessary for the interested party to approve and accept their express consent for the processing of their personal information, which must be in writing or through the digital format implemented by Avenue in its different digital pages, through which you are informed about the object of collection.

Consent will not be necessary in the case of personal data with unrestricted access, contained in sources of general public access.

NatuCarebyeme does not sell, rent or share users' personal information. However, said information may be used by NatuCarebyeme in order to improve the services provided through the Website. In the latter case, users will have the possibility of requesting exclusion from the offer of these other services.

Data Limitation Principle:

Only personal information that is relevant to the purpose of NatuCarebyeme may be collected and processed.

Objective Limitation Principle:

Personal information may only be processed for the purpose stated at the time of collection. In the event that a new purpose or object arises in relation to the same information, the express consent of the interested party in which the new object is indicated must be requested again.

Principle of Confidentiality:

The person in charge of the Database, and those who intervene in any phase of the processing of Personal Data, are bound by professional or functional secrecy, even after the end of their relationship with the Database.

Information Quality Principle:

They may only be collected, stored or used of a personal nature for automated or manual processing, when such data is current, truthful, accurate and appropriate for the purpose for which it was collected.

Data Retention Principle:

The data collected can only be archived for the time necessary to fulfill the specific purpose of NatuCarebyeme, unless local law establishes a specific term.

Data Security Principle:

The personal information contained in a Database must be duly protected through appropriate technical and organizational measures. In particular, measures are taken against:

- Unauthorized or accidental disclosure and/or destruction of personal information. - Accidental loss of personal information. - Technical failures in the Databases. - Falsification, theft or illegal use of personal information contained in a Database. - Alteration, copying or unauthorized access to personal information.

NOTICE OF PRIVACY

I hereby give my consent and authorize NatuCarebyeme for the processing and transfer, as well as the handling inside and outside the country of my personal information mentioned below (hereinafter personal information).

NatuCarebye has informed me and consequently, I acknowledge that the purpose of the delivery of personal information is solely related to my interest regarding the Registry of

Shareholders and Final Beneficiaries.

I understand, acknowledge and accept that personal information may be stored in print or electronically and may be accessible by NatuCarebyeme representatives, inside and outside the country in which consent is given.

I understand the content of this format, but if I have any questions about any of the terms in the content, I may request from NatuCarebyeme any clarification that I deem necessary.

I also declare that NatuCarebyeme has my consent to this format.

I state that my consent is voluntary and that NatuCarebyeme does not oblige me to accept this consent form and that I am free to refuse or not deliver it.

This consent is granted for an indefinite period of time. However, I have the right to revoke my consent at any time. Any request regarding personal information, including revocation, must be made by email to the address info@natucare.com From the day the revocation is delivered to the NatuCarebyeme representative, he will have 30 days (thirty days) to be able to respond to my request.

NatuCarebyeme has guaranteed me that personal information will be duly protected, through the implementation of administrative, technical and physical measures aimed at preventing the loss, misuse, unauthorized access, disclosure or alteration of my personal data. NatuCarebyeme will not share personal information with third parties for their independent use without my prior express consent.

This Application collects some Personal Data from its Users.

This document can be printed for reference using the print command in the configuration options of any browser.

Owner and Responsible for the treatment of the Data

Natucarecr.com, San Jose, Costa Rica

Contact email of the Holder: Info@natucarebyeme.com

Types of Data collected

Among the types of Personal Data collected by this Application, either directly or through third parties, are: Tracker; Usage data.

Complete information regarding each category of Personal Data that is collected is provided in the sections of this privacy policy dedicated to that purpose or through specific explanatory texts that are displayed prior to the collection of said Data.

Personal Data may be freely provided by the User or, in the case of Usage Data, will be automatically collected when using this Application.

All the Data requested by this Application are mandatory and the refusal to provide them may make it impossible for this Application to proceed with the provision of the Service. In the cases in which this Application specifically indicates that certain Data is not mandatory, Users are free not to communicate such Data without this having any consequence on the availability or operation of the Service. Users who have questions about which Data is required can contact the Owner.

The use of Cookies - or other tracking tools - by this Application or by the owners of third-party services used by this Application is intended to provide the Service requested by the User, in addition to any other purposes described in this document and in the Cookies Policy, if available.

The User assumes responsibility for the Personal Data of third parties that is obtained, published or shared through this Application and hereby declares that he has the consent of said third parties to provide such Data to the Owner.

Modality and place of processing of the Data collected

Treatment Modalities

The Owner will treat the User Data in an appropriate manner and will adopt the appropriate security measures to prevent unauthorized access, disclosure, alteration or destruction of the Data.

Data processing will be carried out using computers and/or IT tools, following organizational procedures and modalities strictly related to the stated purposes. In addition to the Owner, in some cases the Data may be accessed by certain categories of authorized persons, related to the operation of this Application (administration, sales, marketing, legal department and system administration) or external contractors who provide services to the Owner (such such as external providers of technical services, courier companies, hosting companies, computer companies, communication agencies) that will be appointed by the Holder as Treatment Managers, if necessary. An updated list of said persons may be requested from the Holder at any time.

Legal basis of the Treatment

The Owner may process the Personal Data of the User, if one of the following conditions is met:

When Users have given their consent for one or more specific purposes. Notice: Under several different laws, the Owner may be authorized to process Personal Data until the User objects to it (“opt-out”), without the need for consent or any other legal basis. However, this will not be applicable when the processing of Personal Data is subject to European regulations on the protection of Personal Data;

When obtaining Data is necessary for the fulfillment of a contract between the User and/or any other pre-contractual obligation thereof;

When the treatment is necessary for the fulfillment of a legal obligation of obligatory compliance by the User;

When the treatment is related to a task carried out in the public interest or in the exercise of official powers granted to the Holder;

When the treatment is necessary for the purpose of a legitimate interest pursued by the Owner or a third party.

In any case, the Owner is at your disposal to define the specific legal bases that apply to the treatment and, in particular, if obtaining Personal Data is a contractual or statutory requirement or a necessary requirement to formalize a contract.

Place

The Data is processed at the Owner's offices, as well as in any other place where the parties involved in said processing process are located.

Depending on the location of Users, Data transfers may involve the transfer of User Data to a country other than your own. For more information on the place of processing of such transferred Data, Users may consult the section containing details on the processing of Personal Data.

Users will also have the right to know the legal bases of Data transfers to another country outside the European Union or to any international organization that is governed by International Public Law or that is made up of two or more countries, such as the UN, and also know the security measures taken by the Owner to safeguard their Data.

In the event that said Data transfer takes place, Users may obtain more information by consulting the relevant sections of this document or by requesting the Owner, through the contact information that appears in the contact section.

retention period

Personal Data will be processed and kept for the time necessary and for the purpose for which they were collected.

Therefore:

The Personal Data collected for the formalization of a contract between the Owner and the User must be kept as such until said contract has been fully formalized.

The Personal Data collected in the legitimate interest of the Owner must be kept for the time necessary to fulfill said purpose. Users can find specific information related to the legitimate interest of the Owner by consulting the relevant sections of this document or by contacting the Owner.

The Owner may keep the Personal Data for an additional period when the User consents to such processing, provided that such consent remains in force. In addition, the Owner will be obliged to keep Personal Data for an additional period whenever it is required to comply with a legal obligation or by order issued by the authority.

Once the conservation period has expired, the Personal Data must be deleted. Therefore, the rights of access, modification, rectification and data portability cannot be exercised once said period has expired.

Purpose of the Processing of the Data collected

The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes: Registration and authentication, Label Management, Statistics and Viewing content from external platforms.

Users can find specific information on the Personal Data used for each purpose in the "Detailed Information on the Processing of Personal Data" section.

Detailed information on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Statistics

The services contained in this section allow the Owner to monitor and analyze web traffic and can be used to track User behavior.

Google Analytics (Google LLC)

Google Analytics is a web analytics service provided by Google LLC (“Google”). Google uses the Data collected to track and examine the use of this Application, to prepare reports on its activities and to share them with other Google services.

Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Processed Personal Data: Usage Data; Tracker.

Place of treatment: USA – Privacy Policy – Opt Out.

Label Management

This type of service helps the Owner to centrally manage the tags or scripts that are needed in this Application.

This assumes that User Data passes through these services, which may result in the retention of User Data.

Google Tag Manager (Google LLC)

Google Tag Manager is a tag management service provided by Google LLC.

Personal Data processed: Tracker.

Place of treatment: USA – Privacy Policy.

Registration and authentication

By registering or authenticating, the User allows this Application to identify him and give him access to the dedicated services.

Depending on what is indicated below, the registration and authentication services may be provided by the assistance of third parties. In such case, this Application may access some Data stored by the third party service used for registration or authentication.

Some of the services listed below may also collect Personal Data for segmentation and profiling purposes; For more information, please refer to the description of each service.

Google OAuth (Google LLC)

Google OAuth is a registration and authentication service provided by Google LLC and connected to the Google network.

Personal Data processed: different types of Data, as specified in the Privacy Policy of the service.

Place of treatment: USA – Privacy Policy.

View content from external platforms

This type of service allows viewing content hosted on external platforms directly from the pages of this Application and interacting with them.

This type of services can collect web traffic data for the pages in which they are installed even if the User does not use them.

Google Fonts (Google LLC)

Google Fonts is a font family display service provided by Google LLC that allows this Application to incorporate such content into its pages.

Processed Personal Data: Usage Data; Tracker.

Place of treatment: USA – Privacy Policy.

User rights

Users may exercise certain rights with respect to the processing of Data by the Owner.

In particular, Users have the right to do the following:

Withdraw your consent at any time. Users have the right to withdraw their consent when they have previously granted it for the processing of their Personal Data.

Objection to the processing of your Data. Users have the right to object to the processing of their Data if such processing is carried out on a legal basis other than consent. For more information, please refer to the corresponding section below.

Access to your Data. Users have the right to know if their Data will be processed by the Owner, to obtain information on certain aspects of the treatment, in addition to obtaining a copy of the Data subject to treatment.

Verify and request the modification. Users have the right to verify the accuracy of their Data and request that they be updated or corrected.

Restrict the processing of your Data. Users have the right, in certain cases, to restrict the processing of their Data. In this case, the Owner will process your Data for the sole purpose of storing it.

Erase or remove Personal Data. Users have the right, in certain cases, to obtain the deletion of their Data by the Owner.

Receive your Data and transfer it to another controller. Users have the right to receive their Data in a standard, structured, mechanically readable format and, if technically possible, to have it transferred to another controller without any impediment. This provision shall apply provided that the Data has been processed through automated means and that the processing is based on the User's consent, on a contract to which the User forms part or that appears in the User's pre-contractual obligations.

Make a complaint. Users have the right to file a claim with the competent authority for the protection of personal data.

Details on the right to object to processing

When the processing of Personal Data is of public interest, in the exercise of official powers granted to the Owner or due to a legitimate interest of the Owner, Users may oppose said processing explaining a reason in relation to their particular situation to justify their objection.

Users should know that, however, in the event that their Personal Data is processed for commercial purposes, they can oppose such processing at any time without the need for justification. To find out if the Users' Personal Data is being processed by the Owner for commercial purposes, they should consult the relevant sections of this document.

How to exercise these rights

Any request to exercise the rights of the User can be addressed to the Owner through the contact information provided in this document. Said requests will be processed by the Holder at no cost as soon as possible and always within a period of one month.

Additional information on the collection of Data and its treatment

Legal defense

The User's Personal Data may be used for the legal defense of the Owner before a court or in the judicial phases prior to a possible lawsuit derived from the inappropriate use of this Application or related Services.

The User declares to know that the Holder may be required by the public authorities in order to reveal Personal Data.

Additional information about the User's Personal Data

In addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services or the collection and processing of Personal Data.

System log and maintenance

For reasons related to operation and maintenance, this Application and any other service, provided by third parties, that is used, may collect a system log; that is, files that record the interaction with this Application and that may contain Personal Data, such as the User's IP address.

Information not contained in this privacy policy

Additional information on the collection and processing of Personal Data may be requested from the Owner at any time. Contact information is listed at the beginning of this document.

How “Do Not Track” requests are processed

This Application does not allow “Do Not Track” requests.

To determine if any of the third-party services you use accept “Do Not Track” requests, please read their privacy policies.

Modification of this privacy policy

The Owner reserves the right to modify this privacy policy at any time, notifying Users through this page and, if possible, through this Application and/or if technically and legally possible, directly notifying Users. , in case the Holder has the necessary contact information for this purpose. It is strongly recommended that you check this page frequently, taking as a reference the date of the last update indicated at the bottom of the page.

In the event that the changes affect the processing activities carried out based on the consent of the User, the Owner must obtain, if necessary, the new consent of the User.

Definitions and legal references

Personal Data (or Data)

Personal data constitutes any information that, directly, indirectly or in relation to other information – including a personal identification number – allows the identification of a natural person.

Usage Data

The information collected automatically by this Application (or by third-party services used by this Application) may include: IP addresses or domain names of the computers used by the User that connects to this Application, URI (Uniform Resource Identifier), the time of the request, the method used to make the request to the server, the dimensions of the file obtained in response, the numerical code indicating the status of the server's response (successful result, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal coordinates of the visit (for example, the time spent on each of the pages) and details relating to the itinerary followed within the Application , with special reference to the sequence of pages consulted, to the parameters related to the operating system and the computer environment of the User either.

User

The individual who uses this Application, who, unless otherwise indicated, must coincide with the Interested Party.

Interested

The natural person to whom the Personal Data refers.

Processor (or Data Supervisor)

The natural or legal person, public administration, agency or any other institution, that processes the Personal Data on behalf of the Data Controller, described in this privacy policy.

Responsible for the Treatment (or Holder)

The natural or legal person, public administration, agency or any other institution, acting alone or jointly with others, determines the purposes and measures for the processing of Personal Data, including security measures relating to the operation and use of this App. Unless otherwise specified, the Data Controller is the Owner of this Application.

This application

The means through which the User's Personal Data has been collected and processed.

Service

The service provided by this Application, as described in the definitions and legal references (if available) and on this page or application.

European Union (or EU)

Unless otherwise indicated, all references to the European Union in this document include all current Member States of the European Union and the European Economic Area.

Cookies are Trackers that consist of small amounts of data stored in the User's browser.

Tracker

Tracker means any technology - eg Cookies, unique identifiers, web beacons, embedded scripts, entity tags and fingerprinting - that allows Users to be tracked, for example by accessing or storing information on the User's device.

Legal information

This privacy policy has been drafted based on the provisions of multiple laws, including Arts. 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

This privacy policy applies only to this Application, unless otherwise stated in this document.

PRIVACY POLICY

HELP

SUBSCRIBE