Personal Data Protection Policy

PREAMBLE.- TCW S.A.S. licensee of the brand THE COLOR WEAR for Colombia, in compliance with the provisions of Law 1581 of 2012, and Regulatory Decree 1377 of 2013, implements its Manual of Policies for the Treatment and Protection of Personal Data.

> TCW SAS, will implement all actions to comply with the protection and processing of personal data for which it is responsible, especially to protect the rights to privacy, intimacy and good name and the rights to know, update and rectify the data of the holders collected in the own databases. That is why this manual is applied both to protect personal data and transactional information that it currently processes and those that may be processed in the future, as well as for the treatment of employee and contractor data. BEGINNING.

> - In the treatment of personal data carried out by TCW S.A.S .. All the principles enshrined in Title II, article 4 of the General Regime for the protection of Personal Data, Law 1581 of 2012 and the regulations that develop and complement it apply. C O N S U LTA OF P O L I T I C A OF T R ATA M I ​​E N TO OF PERSONAL DATA. This policy is available to the owners of personal data by the appropriate means of disclosure available to TCW S.A.S. Identified with NIT 802014042-1 as the person responsible for the processing of personal data and at its main headquarters at Calle 110 # 3-79 Bodega 7 Parque Industrial Europark, switch 57 (5) 3861894- 3861887, and on the website www.thecolorwear .com TREATMENT OF PERSONAL DATA- The treatment of personal data is done in the terms and scope of the authorization given by the owner or in application of the special rules when there is a legal exception to do so. RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA.

> - TCW SAS, acts as RESPONSIBLE for the processing of personal data by virtue of the collection that it makes directly of the data of its clients TCW SAS, as responsible for the processing of personal data, may sign alliances or agreements for commercial service offers , loyalty, credit or financial third parties, for which it has obtained the prior, informed and express consent of the owners of the data, thus guaranteeing the rights to data protection. RIGHTS OF THE DATA HOLDER.

- In accordance with the provisions of current applicable data protection regulations, the following are the rights of the holders of personal data:

• Access, know, update, rectify and delete your personal data in front of TCW S.A.S. in her capacity as responsible.

• Request proof of the authorization granted by the owner of the data or by the person responsible for the processing of personal data to TCW S.A.S. for data processing, by any valid means.

• Be informed by TCW S.A.S., upon request, regarding the use that has been given to your personal data.

• Present before the Superintendency of Industry and Commerce, complaints for infractions to the provisions of Law 1581 of 2012, after consulting or requesting TCW S.A.S.

• Revoke the authorization or request the deletion of the data when in the Treatment the principles, rights and constitutional and legal guarantees are not respected.

• Free access to your personal data that has been processed by TCW S.A.S. as responsible for the processing of personal data. CONFIDENTIALITY AND SECURITY OF THE DATABASES.- TCW S.A.S. puts all the human, technical and technological resources that are within its reach, doing its best, to provide security and confidentiality to the personal data for which it is responsible. Regarding confidentiality, TCW S.A.S. undertakes to sign with third parties, in the events that agreements are celebrated to share personal data for the offer of added value services, the respective confidentiality agreements for the purposes of the legal protection of said data. AUTHORIZATION FOR USE OF PERSONAL DATA.

- TCW SAS. As RESPONSIBLE for the processing of personal data and transactional information, it obtains from the owners of the data their clear, prior, express, informed and free of vices authorization, through forms, data collection formats, electronic forms and others means that it has or may have for this purpose. AUTHORIZATION AND CONSENT OF THE HOLDER.

- TCW S.A.S. will request the holders of personal data and transactional information for their authorization and will inform in advance the purpose for the processing of their personal data, except in the cases expressly authorized by law 1581 of 2012 in article 10. MEANS TO GRANT THE AUTHORIZATION.

- TCW S.A.S. You will obtain the authorization through different means, including physical, electronic documents, data messages, the Internet, Websites, or in any other format that in any case allows the consent of the owner through unequivocal conduct through which it is concluded that not having supplied the same by the owner or the person entitled to do so, the data would not have been stored or captured in the database.

The authorization will be requested by TCW S.A.S, through its brand THE COLOR WEAR, prior to the processing of personal data. REVOCATION OF AUTHORIZATION.- The holders of personal data or their representatives may at any time revoke the authorization granted to TCW S.A.S. for the processing of your personal data or request the deletion or elimination of them, as long as it is not prevented by a legal or contractual provision. TCW S.A.S. will establish simple mechanisms that allow the owner to revoke her authorization or request the deletion of her personal data, at least by the same means by which she granted it. For the above, it should be taken into account that the revocation of consent can be expressed in a total way in relation to the authorized purposes, and therefore TCW S.A.S. Any data processing activity must cease, and partially in relation to certain types of processing, in which case it will be these on which the processing activities will cease. In the latter case, TCW S.A.S. You may continue to process personal data for those purposes in relation to which the owner has not revoked their consent. GUARANTEES OF THE RIGHT OF ACCESS.- To guarantee the right of access of the owner of the data TCW S.A.S. will make the respective personal data available to her through any suitable means, including electronic means that allow direct access by the owner to them. TREATMENT TO WHICH THE DATA AND PURPOSE OF THE SAME WILL BE SUBMITTED.

- The treatment of the data of the holders with whom TCW S.A.S. has established a relationship as RESPONSIBLE for the processing of data and transactional information, for the offer of value-added services, it will do so based on the prescriptions of law 1581 of 2012 and law 1266 of 2008, as applicable, and in general for the fulfillment of its corporate purpose. In any case, personal data may be collected and processed to:

• Granting of incentives and rewards that promote the sale and use of products, such as discounts, others.

• Promote and communicate information related to products, programs, benefit and loyalty campaigns, value-added service offers, both own and third-party products and services. • Develop the corporate purpose of TCW S.A.S. in accordance with its bylaws.

• Check the data of the holders in information centers for commercial purposes and credit services.

• Consult and discuss consumption habits, purchase transactions and hobbies for the offer of own and third-party services, or future allies.

• Contact the owners of the data in order to carry out market studies.

• Share with allied companies, associates, branches, franchises, affiliates and subsidiaries, and third parties with whom they have signed personal data treatment agreements for the offer of value-added services. UPDATING OF THE DATABASES.

- TCW S.A.S., will update its databases permanently, in accordance with the provisions of Law 1581 of 2012. PRIVACY NOTICE.

- TCW S.A.S. has a privacy policy which is an integral part of this manual. DATA TRANSFERS FOR TREATMENT BY NATIONAL AND INTERNATIONAL THIRD PARTIES.- TCW S.A.S. may partially or fully transmit or transfer personal data and transactional information to third parties in the country or abroad, in development of its corporate purpose, for which it requests authorization from its owner and implements the necessary actions to comply with the legal precepts of Colombia, by signing personal data processing agreements. PROCEDURES.

- The procedures described below can only be exercised by the owner, his successors or representatives, provided that the identity or representation is previously proven. PROCEDURE FOR THE EXERCISE OF THE RIGHT OF THE HOLDERS OF THE PERSONAL DATA.-In all the procedures the holder or their representatives must provide the information contained in the following link: thecolorwear.com/treatment-de-datos/ PROCEDURE FOR CONSULTATION ON THE TREATMENT OF DATA BY ITS HOLDERS.-TCW SAS provides the ideal means for consultation, by the holders of personal data, about the processing of their data, which will be informed within the personal data collection forms. The terms to resolve the queries are those indicated by law 1581 of 2012 art. 14. PROCEDURE TO CORRECT, UPDATE, RECTIFY OR DELETE THE DATA.

-TCW S.A.S. In compliance with the General Regime for the Protection of Personal Data, it will proceed to correct, update, rectify or delete personal data at the request of the owner or his representative, in the terms indicated in PROCEDURE FOR THE EXERCISE OF THE RIGHT OF THE HOLDERS OF PERSONAL DATA. The procedure will be the one indicated in article 15 of the General Regime for the Protection of Personal Data. TCW S.A.S., will train those in charge to attend to queries and complaints about the procedural process established by law. Paragraph. The request for deletion made by the owner or her representative will not be accepted, when there is a legal or contractual duty for the personal data to remain in the respective database. PROCEDURE TO REVOKE THE AUTHORIZATION GIVEN TO TCW S.A.S. TO TREAT PERSONAL DATA.- The owner of the personal data or his representative may revoke the authorization given for the processing of their personal data, submitting a request addressed to the person responsible for the treatment in the terms of the PROCEDURE FOR THE EXERCISE OF THE RIGHT OF THE HOLDERS OF PERSONAL DATA.

Paragraph. The revocation request made by the owner or her representative will not be accepted, when there is a legal or contractual duty for the personal data to remain in the respective database. GUARANTEES OF THE RIGHT OF ACCESS.

- TCW S.A.S. guarantees the right of access of the owner of the data, making available to him, at no cost, in a detailed manner, the respective personal data through suitable means for this purpose. VALIDITY OF THE POLICY.- This policy is in force as of the date of its publication and renders without effect the other institutional provisions that are contrary to it. Anything not provided for in this manual will be regulated in accordance with the General Regime for the Protection of Personal Data in force in Colombia. DATA PROCESSING MANAGER It is the person (natural or legal) to whom the person in charge, that is TCW SAS, delegates the processing of personal data stored in a specific database, for the purposes of treatment for which they were collected the data of your customers in each of THE COLOR WEAR stores. TCW S.A.S. will designate the natural person in charge according to the profiles that have been defined for this purpose, by means of communication to said person. Likewise, it will designate the legal person in charge by means of an agreement for the pulling of personal data, in accordance with the format that for this purpose has been developed called "Agreement to share personal databases". APPLICABLE STANDARD LAW 1581 of 2012 "By which general provisions for the protection of personal data are issued" Decree 1377 of 2013 By which Law 1581 of 2012 is partially regulated.