AUTHORIZATION FOR ENTRY AND NAVIGATION ON THE WEBSITE www.reforestpeace.org

Through this document I authorize www.reforestpeace.org (hereinafter “RP” or “the Organization”), to process my personal data, as described in this document.

1. Responsible for the processing of Personal Data

RP will be responsible for the processing of your personal data (hereinafter “Personal Data”) that are collected and processed through the website www.reforestpeace.org (hereinafter “web page”), for the purposes described below.

RP is an organization identified with email address [email protected].

2. Personal Data collected, purpose of collection and treatment

RP may collect through its website, and from the moment of access, Personal Data of people who access it without being registered (“unregistered users”).

RP may collect, through the use of cookies (a cookie is defined as a data package that a browser stores on the user’s computer when the user enters the web page, in order to identify past user activity and facilitate future browsing on said page), the following Personal Data, both of non-registered users and registered users: IP address, browsing history, previous selections and other data that will be collected through cookies by the RP website with the domain www.reforestpeace.org.

RP collects and treats your Personal Data to comply with the services offered through its website www.reforestpeace.org, for the normal development of its corporate purpose and the ordinary course of its business, as well as to comply with the legal and contractual obligations that it has acquired with its clients. The purposes for which RP processes your Personal Data are the following:

  1. Allow the correct functioning of the web page enabled by RP.
  2. Allow the use of secure areas, personalized options and to remember previous selections within the web page enabled by RP.
  3. Carry out analysis and studies on the use, navigation and performance of the website, in order to improve its operation.
  4. Create navigation profiles.

Third parties may be involved in the commercial activities carried out by RP. Therefore, the client or user expressly accepts and authorizes RP to transfer and make available to its business partners and suppliers in Colombia and abroad the Personal Data of the users of its website.

RP will treat your Personal Data only in accordance with the purposes and purposes listed above, and in accordance with the principles of legality, quality, purpose, freedom, transparency and restricted access and circulation in the terms provided in Law 1581 of 2012, Decree 1377 of 2013 and any regulation that complements, adds or modifies them.

AUTHORIZATION FOR ENTRY AND NAVIGATION ON THE WEBSITE www.reforestpeace.org 1

3. Rights of the Holders of Personal Data

In accordance with article 8 of Law 1581 of 2012, the holders of Personal Data that are processed by RP have the following rights:

  1. 3.1  Know, update, and rectify your Personal Data before RP. This right can be exercised, among others, against information that is partial, inaccurate, incomplete, divided, misleading information or whose treatment is prohibited or has not been authorized.
  2. 3.2  Request proof of the consent granted to RP for the collection and processing of your Personal Data.
  3. 3.3  Have free access to your Personal Data that is subject to treatment by RP, and in general, be informed of the treatment that RP is giving to your Personal Data. For this, it is important that the procedures established in section 5 of this Policy are met.
  4. 3.4  Revoke the authorization granted to RP and/or request the deletion of their Personal Data when clients consider that RP is not respecting the constitutional and legal principles, rights and guarantees. In these cases, RP will inform you about the implications that the revocation of the authorization or the deletion of your Personal Data from the database may have.
  5. 3.5  If the owner of the Personal Data is not satisfied with the way in which RP treats his Personal Data or has any complaint or claim, he may submit a communication to the RP data protection officer at the email address [email protected]. co.
  6. 3.6  If the RP data protection officer does not resolve the concerns or does not address the complaints made, the holders of personal data can contact the Superintendence of Industry and Commerce to present their concerns, complaints or claims if they consider that RP has violated their rights. of habeas data or the provisions of Law 1581 of 2012, Decree 1377 of 2013 and other regulations that modify, add or complement them. ***

In accordance with all the above, I authorize RP to collect and process my Personal Data, in accordance with what is described in this document.

CLICK TO CONTINUE

AUTHORIZATION FOR ENTRY AND NAVIGATION ON THE WEBSITE www.reforestpeace.org 2

AUTHORIZATION FOR THE PROCESSING OF PERSONAL DATA OBTAINED IN THE USER REGISTRY

Through this document I authorize ReforestPeace (hereinafter “RP” or “the Organization”), to process my personal data, in accordance with what is described in this document.

1. Responsible for the processing of Personal Data

RP will be responsible for the processing of your personal data (hereinafter “Personal Data”) that are collected and processed through the website [www.reforestpeace.org] (hereinafter “web page”), with the purposes which are described below.

RP is an organization with email address [email protected].

2. Personal Data collected, purpose of collection and processing

RP may collect, through its website, Personal Data from the people who carry out the registration process, either as a potential donor (“donor”) or as a potential buyer (“buyer”) (collectively “registered users”).

RP may collect, through the use of cookies (a cookie is defined as a data package that a browser stores on the user’s computer when the user enters the web page, in order to identify past user activity and facilitate future browsing on said page), the following Personal Data: IP address, browsing history, previous selections and other data that will be collected through the cookies of the web page.

RP may collect the following Personal Data during the user registration process: name, date of birth, identification number, marital status, sex, email address, home address, residence address, phone numbers, and financial information. Additionally, RP may collect information on the property(ies) that the planter registers and that can be directly linked to the third party; this information includes the name of the land, its location, commercial value, information about the ownership of the land, boundaries, area, purchase dates, forest characteristics, and cadastral information.

RP collects and processes your Personal Data to comply with the services offered through its website www.reforestpeace.org, for the normal development of its corporate purpose and the ordinary course of its business, as well as to comply with the legal and contractual obligations that it has acquired with its clients. The purposes for which RP processes your Personal Data are the following:

  1. 2.1  Allow the correct functioning of the web page enabled by RP.
  2. 2.2  Allow the use of secure areas, personalized options and to remember previous selections within the web page enabled by RP.
  3. 2.3  Carry out analysis and studies on the use, navigation, and performance of the website, in order to improve its operation.
  4. 2.4  Create navigation profiles.
  5. 2.5  Know and obtain information on the properties with a forestry vocation that are available for sale.
  6. 2.6  Advertise on your website the properties with a forestry vocation that are available for planting.
  7. 2.7  Maintain contact with their clients in the development of the commercial relationship that exists between them and RP.

AUTHORIZATION FOR THE PROCESSING OF PERSONAL DATA OBTAINED IN THE USER 1 REGISTRY

  1. 2.8  Verify and corroborate the veracity of the information provided by customers.
  2. 2.9  Check the background of users, including verifications in the Clinton List and in the Office of Foreign Assets Control (OFAC for its acronym in English).
  3. 2.10  Carry out credit studies on the properties registered on its website.
  4. 2.11  Transmit Personal Data to third parties so that they carry out due diligence processes.
  5. 2.12  Provide information and/or answer questions regarding the services offered by RP to its clients.
  6. 2.13  Put potential buyers and potential sellers of land with a forestry vocation in contact with each other.
  7. 2.14  Carry out studies and statistical analysis, marketing activities, promotion, offering of RP services or companies with which it has or maintains commercial relations.

Third parties may be involved in the commercial activities carried out by RP. Therefore, the client or user accepts and expressly authorizes RP to transfer and make available to its business partners and suppliers in Colombia and abroad the Personal Data of its clients or users.

RP will treat your Personal Data only in accordance with the purposes and purposes listed above, and in accordance with the principles of legality, quality, purpose, freedom, transparency and restricted access and circulation in the terms provided in Law 1581 of 2012, Decree 1377 of 2013 and any regulation that complements, adds, or modifies them.

3. Rights of the Holders of Personal Data

In accordance with article 8 of Law 1581 of 2012, the holders of Personal Data that are processed by RP have the following rights:

  1. 3.1  Know, update, and rectify your Personal Data before RP. This right can be exercised, among others, against information that is partial, inaccurate, incomplete, divided, misleading information or whose treatment is prohibited or has not been authorized.
  2. 3.2  Request proof of the consent granted to RP for the collection and processing of your Personal Data.
  3. 3.3  Have free access to your Personal Data that is subject to treatment by RP, and in general, be informed of the treatment that RP is giving to your Personal Data. For this, it is important that the procedures established in section 5 of this Policy are met.
  4. 3.4  Revoke the authorization granted to RP and/or request the deletion of their Personal Data when clients consider that RP is not respecting the constitutional and legal principles, rights and guarantees. In these cases, RP will inform you about the implications that the revocation of the authorization or the deletion of your Personal Data from the database may have.
  5. 3.5  If the owner of the Personal Data is not satisfied with the way in which RP treats his Personal Data or has any complaint or claim, he may submit a communication to the RP data protection officer at the email: [email protected]. co.
  6. 3.6  If the RP data protection officer does not resolve the concerns or does not address the complaints made, the holders of personal data can contact the Superintendence of Industry and Commerce to present their concerns, complaints or claims if they consider that RP has violated their rights.

AUTHORIZATION FOR THE PROCESSING OF PERSONAL DATA OBTAINED IN THE USER 2 REGISTRY

of habeas data or the provisions of Law 1581 of 2012, Decree 1377 of 2013 and other regulations that modify, add, or complement them.

***

In accordance with all the above, I authorize RP to collect and process my Personal Data, in accordance with what is described in this document.