1. Introduction

The Moné Foundation (hereinafter, “the Foundation”) recognizes the importance of protecting Personal Data and the constitutional right to privacy (Art. 15 of the Constitution) and is committed to ensuring the proper, secure, and transparent handling of the information it collects from its donors, beneficiaries, suppliers, volunteers, and users of its digital platforms.

2. Scope

This policy applies to all Personal Data collected, stored, used, shared, and deleted—whether in physical or electronic form—in connection with the activities carried out by the Foundation through www.fundacionmone.org and other customer service channels.

3. Definitions

• Personal Information: Any information linked or linkable to one or more specific or identifiable individuals (Art. 3 of Law 1581/2012).

• Data Controller: Moné Foundation, registered under Tax ID No. XXXXXXXX-X.

• Data Controller: Individuals or legal entities that process personal data on behalf of the Foundation.

• Headline: A natural person whose personal data is being processed.

• Habeas Data: The right of individuals to access, update, and correct information collected about them in databases.

4. Applicable Principles

The Foundation is governed by the following principles, as set forth in Article 4 of Law 1581 of 2012:

1. Legality: All treatment will be carried out in accordance with the law.

2. Purpose: Collection and use of data for legitimate, explicit purposes that have been disclosed to the data subject.

3. Freedom: Processing is subject to the data subject's free, prior, explicit, and informed consent.

4. Transparency: Data subjects' rights to access their information and to know who is processing it.

5. Security: Implementation of technical, human, and administrative measures to protect information.

6. Confidentiality: The Foundation and its representatives will maintain confidentiality regarding the information to which they have access.

5. Rights of Data Subjects

Policyholders have the right to:

• To know: What data is collected, what it is used for, and with whom it is shared.

• Update and Correct: Request correction of incomplete, inaccurate, or outdated information.

• Delete: Request the deletion of data when the purpose for which it was collected has been fulfilled or when the processing is unlawful.

• Withdraw Consent: You may revoke your consent to the use of your data at any time.

• Submit Inquiries and Complaints: About the processing of your data.

5.1. Procedure

To exercise their rights, data subjects may send a message to privacidad@fundacionmone.org with the following information:

1. Full name and a copy of your ID.

2. A clear description of the request.

3. A way to receive a response.

The Foundation will have 15 business days to acknowledge receipt and up to 30 business days to issue a decision.

6. Purposes of the Processing

The data collected will be used to:

• Administer and manage social programs and projects.

• Support for Donors and Volunteers.

• Sending newsletters, activity reports, and calls to action.

• Comply with legal and tax obligations.

• Improve the browsing experience on www.fundacionmone.org (cookies).