Legal

Personal Data Privacy Policy

Version 1.0 — April 2026 — In accordance with Law 1581 of 2012 and Decree 1377 of 2013

1. Data Controller

Sampi Consultores S.A.S.

NIT 901.661.063

Colombia

Email: admin@sampigroup.com

Phone: 305 789 1389

2. Regulatory Framework

This policy is adopted in compliance with Law 1581 of 2012 (Personal Data Protection Law), Decree 1377 of 2013, and other regulations that develop, modify, or replace them.

3. Data We Collect

Sampi Consultores S.A.S. may collect the following personal data in the development of its activities:

We do not collect sensitive data according to the definition of Article 5 of Law 1581 of 2012 (racial origin, health status, sexual orientation, political or religious beliefs).

4. Purposes of Processing

The collected data is used for the following purposes:

5. Legal Basis for Processing

Processing of your personal data is based on:

6. Rights of the Data Owner

Under Article 8 of Law 1581 of 2012, you have the following rights over your personal data:

Know

Know what personal data we have stored and how it is used.

Update and Rectify

Correct inaccurate, incomplete, or outdated data.

Delete

Request data deletion when there is no legal obligation to retain it.

Revoke Authorization

Withdraw the consent granted for processing at any time.

Free Access

Consult your data at least once a month at no cost.

Submit Complaints

Lodge a complaint with the Superintendency of Industry and Commerce (SIC) if you consider your rights have been violated.

7. Procedure to Exercise Your Rights

To exercise any of the above rights, send a request to:

Administration Area — Sampi Consultores S.A.S.

Email: admin@sampigroup.com

Phone: 305 789 1389

Your request must include: full name, ID number, a clear description of the request, and, if applicable, supporting documents. We will address your request within the deadlines established by Law 1581 of 2012: inquiries maximum of 10 business days and claims within 15 business days.

8. Data Transfer and Transmission

Sampi Consultores S.A.S. does not sell, lease, or cede personal data to third parties for commercial purposes. We may share data with:

9. Data Retention

Personal data will be retained for the time necessary to fulfill the purposes described in this policy and applicable legal obligations. Once the period has expired, data will be deleted or anonymized.

10. Cookies and Web Analytics

This site uses Google Analytics to measure traffic and browsing behavior in aggregated form. Google Analytics anonymizes IP addresses before processing them. You can disable this collection by installing the Google Analytics opt-out browser add-on.

We do not use third-party advertising tracking cookies.

11. Information Security

Sampi Consultores S.A.S. implements reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. However, no internet transmission system is entirely secure.

12. Validity and Updates

This policy is effective as of April 2026 and will be reviewed periodically. Updates will be published on this same URL. Continued use of the site following an update implies acceptance of the changes.