At The Juju, we value honesty and transparency. We are committed to building a strong and lasting relationship with our clients, suppliers, and employees, based on trust and mutual benefit; that is why we take responsibility for protecting personal data and their privacy, and for complying with national and international privacy laws.

This Personal Data Protection Policy provides a common framework for the protection of information that Data Subjects have entrusted to The Juju, with the intent to exclusively collect the information that has been voluntarily provided for the purpose of carrying out its activities and providing its services.

The Juju commits to keeping any personal data confidential and to strictly limiting any disclosure in accordance with applicable local laws and regulations.

This information may be obtained through any of the following channels or means: commercial or professional relationship; execution of services; employment relationship; and sending emails requesting information.

Additionally, The Juju may also access other data related to the Data Subjects (as defined below) from information available in public/private databases.

The Juju does not collect or manage files, banks, or records that store information related to personal data, except to contact the data subjects, fulfill legal or contractual obligations, or send information of interest regarding activities carried out in compliance with its corporate purpose.

1. SCOPE

This Personal Data Protection Policy applies to The Juju in Argentina, Colombia, Mexico, Peru, and the United States (“The Juju”) and establishes the guidelines that these companies follow for the collection, processing, use, distribution, transfer, and storage of personal information of Employees, Candidates, Clients, Suppliers, or any other person whose personal information is processed by The Juju.

2. OBJETIVE

This Personal Data Protection Policy informs about our data protection and privacy practices, as well as how personal data is collected and utilized by The Juju.

The purpose of this policy is to establish the criteria for the collection, storage, use, circulation, and deletion of personal data handled by The Juju.

3. DATA PROCESSING RESPONSIBLE

The Juju is responsible for processing the data of Employees, Candidates, Clients, Suppliers, and any other person whose personal information is processed by The Juju. To find out which company is responsible for data processing in your country of residence, you can consult Annex “A” corresponding to that country, which is located at the end of this text.

The data processor is the entity that decides on the processing of personal data. This Policy outlines the purposes or uses for which personal information will be utilized and the means that will be used for such processing.

4. ¿WHAT DATA IS COLLECTED?

The Juju collects and uses personal data after providing notice and obtaining consent, and after adequately informing the individual about the purpose of such collection.

“Personal data” refers to any information relating to a natural person that identifies or makes that person identifiable (a person is identifiable when they can be identified, directly or indirectly, by an identifier – such as a name, location data, or one or more specific factors of the physical, mental, economic, physiological, genetic, cultural, or social identity of that person).

This Policy does not cover anonymous personal data, meaning data that does not allow the identification of an individual or that only allows that individual to be identifiable by incurring disproportionately large expenses in time, cost, or effort.

The types of personal data that The Juju may collect include: full name, surname, age, place of birth, nationality, personal and tax identification numbers, marital status, image, signature, occupation, email address, mobile and/or landline phone number; educational, professional, financial, and asset history; interests; user ID and password for The Juju (when applicable); IP address.

5. PURPOSES OF PROCESING

The Juju may collect personal data to carry out the following operations:

• Obtain, store, compile, exchange, update, collect, process, copy, fix, reproduce, and/or dispose of the data or information, in whole or in part, of those data subjects who grant the necessary authorization in accordance with the law.
• Extend invitations to events and offer services.
• Send information by any known or unknown means (email, physical mail, SMS, phone calls, etc.) regarding campaigns, information about products and services, welcome messages, training events, and other commercial and advertising activities.
• Process job applications, payment of salaries, social benefits, and other compensations.
• Advance selection processes, including the evaluation and qualification of participants, verification of work and personal references, polygraph testing, and consulting information about the data subject stored in judicial background databases, as well as inquiries into risk centers or databases.
• Facilitate hiring processes and affiliation to the Comprehensive Social Security System.
• Develop the contractual relationship and execute either the employment contract or service provision contract entered into.
• Manage medical leaves of employees and handle workplace accidents and/or occupational diseases.
• Manage and fulfill the activities of welfare programs for the data subject and their beneficiaries (children, spouse, or partner).
• Conduct activities related to the exercise of the employer’s sanctioning power.
• Manage and execute contracts entered into with The Juju.
• Fulfill the obligations incurred by The Juju with the data subject employee concerning the payment of salaries, social benefits, and other compensations outlined in the employment contract or as required by law (in the case of employees).
• Contact and notify authorized contacts in case of emergencies occurring during working hours or in connection with the execution of this.
• Carry out the necessary actions for the social purpose of The Juju concerning compliance with the contract entered into with the data subject.
• Contact the data subject to conduct surveys, studies, and/or confirmation of personal data necessary for the execution of a contractual relationship.
• Comply with legal obligations and requirements from competent authorities.
• Conduct advertising and promotional announcements and contacts.
• Create profiles.
• Request information.
• Manage procedures (requests, complaints, claims) and administrative processes such as sending invoices and bills, requests, and petitions, and any document necessary to fulfill the social purpose of The Juju.
• Share with third parties collaborating with The Juju who, in order to perform their functions, need to access information to some extent. Occasionally, we may share your personal information with affiliated companies and/or third-party entities.
• Consult and report to credit bureaus, in accordance with the guidelines set forth in Law 1266 of 2008 and the complementary regulations.
• Advance selection and hiring processes for suppliers.
• Process payments, verify accounts payable and outstanding balances.
• Verify compliance with obligations incurred by Suppliers, as well as those incurred by The Juju with Suppliers.
6. PRINCIPLES REGARDING PERSONAL DATA PROTECTION
• 1. Legality and Transparency:

  The Juju is committed to treating personal data in a fair, legal, and transparent manner.

• 2. Limited Purpose and Strictly Necessary Data:

  The Juju will only process personal data for specific and legitimate purposes and will refrain from any further processing incompatible with those purposes. This means only collecting personal data that is relevant and not excessive for the purposes for which it is needed and used.

  The Juju will ensure that the personal data processed is adequate, relevant, and not excessive concerning the purposes for which it was collected. In other words, data collected and processed will be strictly necessary to achieve the stated purpose.

• 3. Consent and/or Authorization for Data Collection

  The Juju will process personal data only if the data subject has provided free, explicit, and informed consent, which must be documented in writing or by another means that is legally equivalent, according to the circumstances.

  The Juju will require prior authorization from its clients, suppliers, and employees for the processing of personal data provided to The Juju within the framework of the contractual relationship established with The Juju.

  Exceptions to the Prior and Express Authorization of the Data Subjet:

  Authorization will not be required when the data, unless local regulations state otherwise:

  • Is obtained from publicly accessible sources;
  • Is needed for the exercise of functions granted to state authorities or due to a legal obligation;
  • Is limited to data such as name, national identification document, tax or social security identification, occupation, date of birth, and address;
  • Has been obtained through a contractual, scientific, or professional relationship and is necessary for its development or fulfillment.
• 4. Storage:

  The Juju will ensure that:

  • Inaccurate or incomplete data, either in whole or in part, is deleted and replaced, or completed when the inaccuracy or incompleteness of the information becomes known.
  • Data is stored in a manner that enables the exercise of the data subject’s right of access.
  • Reasonable measures are taken to correct or delete inaccurate or incomplete data;
  • Personal data is kept accurate and, where necessary, updated.
  • Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, to meet regulatory or legal requirements, or for the statutory limitation period of potential legal or contractual liabilities.
• 5. Security and Integrity:

  The Juju will take appropriate technical and organizational security measures to keep data secure and to prevent unauthorized access, illegal processing, and unauthorized or accidental loss, destruction, or damage to personal data.

  The Juju adopts the necessary measures to ensure the security and confidentiality of personal data, to prevent its alteration, loss, unauthorized access, or processing, and to detect intentional or unintentional deviations of information, regardless of whether the risks arise from human actions or the technical means used.

• 6. Expiry:

  Data Will be destroyed or archive once it is no longer strictly necessary or relevant to the purposes defined in point 2 or as determined by current regulations.

• 7. Confidentiality:

  The Juju requires the signing of confidentiality agreements by personnel, third parties providing services, and any officials accessing the content of the databases.

• 8. Provision of Sensitive Data

  Sensitive personal data refers to information that affects the privacy of the Data Subject or whose misuse can lead to discrimination, such as data revealing racial or ethnic origin, political orientation, religious or philosophical beliefs, membership in unions, social organizations, human rights organizations, or those promoting the interests of any political party or guaranteeing the rights and guarantees of opposition political parties, as well as data relating to health, sexual life, and biometric data. Data relating to minors is also recognized as sensitive.

  The Juju will never require anyone to provide sensitive data.

  Sensitive data may only be collected and processed when justified by authorized reasons of general interest. They may also be processed for statistical or scientific purposes when the data subjects cannot be identified.

  The formation of files, banks, or records that store information that directly or indirectly reveals sensitive data is prohibited, unless there is consent from the data subjects.

  Data relating to criminal or contraventional records may only be processed by the competent public authorities within the framework of the relevant laws and regulations.

• 9. International Transfer of Personal Data:

  A transfer to a third country or an international organization of personal data that is being processed or intended to be processed after such transfer may only occur if adequate safeguards or other specific exceptions are in place. Data transfer rules apply to internal transfers within The Juju as well as to external transfers.

7. TRANSFER OF PERSONAL DATA

The personal data collected by The Juju may be communicated/transferred to:

• Any member of The Juju and/or related, affiliated, controlled, controlling, subsidiary, representative, or associated companies of The Juju; and
• Third-party service providers for data processing and treatment, respecting the lawful grounds and purposes for which they were collected.

The Juju will require those who transfer personal data to comply with appropriate standards of confidentiality, protection, and security, especially when third parties are in countries that do not have adequate data protection legislation according to the parameters established by the authorities and local regulations.

8. RIGHTS OF THE DATA SUBJECTS

Data subjects may exercise their rights of access, rectification, deletion, and confidentiality regarding their personal data. For this, please consult Annex “A” corresponding to your country.

9. EXERCISE OF RIGHTS

Requests for the exercise of the rights mentioned in the previous point and/or any questions related to this Personal Data Protection Policy may be sent to the addresses listed in Annex “A” for your country.

10. REPRESENTATIONS ON THE USE OF PERSONAL DATA

The Juju guarantees that:

• It will not sell or rent personal data to any third party without the consent of the data subject;
• It will take commercially reasonable precautions to protect personal data from loss, misuse, unauthorized access, disclosure, alteration, and destruction;
• It will not process personal data except:
• i. In conjunction with other data in such a way that the identity cannot be reasonably determined (e.g., statistical compilations);
• ii. As required by law, for example, in response to a subpoena or search warrant;
• iii. To external auditors who have agreed to keep the data confidential;
• iv. As necessary to protect the rights, safety, or property of The Juju, its users, or others; this may include, for example, sharing information with other organizations or public authorities for identification, fraud prevention, and/or risk reduction.
11. WEBSITES:

The websites owned by The Juju do not use cookies and comply with GDPR. Furthermore, The Juju has no way of identifying the IP address of users or visitors.

12. CHANGES TO THIS PERSONAL DATA PROTECTION POLICY

The Juju reserves the right to modify this Personal Data Protection Policy as necessary, for example, to comply with changes in laws, regulations, practices, and procedures of The Juju, or requirements imposed by data protection authorities.

In such cases, The Juju will inform candidates and other individuals of any significant changes to this policy. The Juju will publish all changes on relevant internal and external websites.

ANNEX “A”

ARGENTINA

1. Data Processing Responsible:

In Argentina, The Juju is the data processing responsible through: THE JUJU S.A. (CUIT: 30-71400935-0).

2. Rights of Data Subjects:
• 1. Right to be informed

  The data subject has the right to obtain clear, transparent, and understandable information about how we use their personal data and about their rights.

• 2. Right to Withdraw Consent

  The data subject may withdraw their consent for our processing of their data when such processing is based on consent. The withdrawal of consent will not affect the legality of the processing based on consent prior to its withdrawal.

• 3. Right of Access

  The data subject can inquire about what personal data The Juju holds about them.

• 4. Right of Rectification

  If the personal data is inaccurate, erroneous, or incomplete, the data subject may request that it be modified.

• 5. Right to Deletion or Erasure

  The data subject may request deletion of their personal data were permitted by applicable data protection laws and regulations.

• 6. Right to Object and Restrict Processing

  The data subject has the right to object at any time to the processing of their personal data by The Juju when such processing is based on legitimate interest, and to request the restriction of the processing of their personal data when authorized by applicable data protection laws and regulations.

• 7. Right to Data Portability

  If the data subject meets the conditions established by applicable data protection laws and regulations, they have the right to receive a subset of their personal data and to transmit it from The Juju to another data controller. They may also request the direct transmission from The Juju to another controller when technically feasible.

• 8. Right to File a Complaint

  The data subject has the right to contact the National Directorate of Personal Data Protection, the regulatory body for Law 25.326, to file a complaint regarding The Juju’s data protection and security practices.

3. Exercise of Rights

The data subject can exercise their rights regarding their personal data by sending a postal letter to Monroe 899, Autonomous City of Buenos Aires, Argentina (C1428BKC) – attention: Compliance of THE JUJU, or by sending an email to legales@untold.email. In any case, they must send the request to exercise their rights along with a legible copy of their identification document.

4. Jurisdiction and Applicable Law:

The Privacy Policy and Annex “A,” with respect to Argentina, regarding the interpretation, validity, execution, or compliance thereof, you and The Juju declare that you submit to the exclusive jurisdiction of the competent Courts of the Autonomous City of Buenos Aires, expressly waiving any other venue and/or jurisdiction that may correspond to you.

————

COLOMBIA

1. Data Processing Responsible:

In Colombia, The Juju is the data processing responsible through: THE JUJU S.A.S (NIT: 901.264.146-8), email legales@untold.email

2. Definitions

Personal Data: Any information linked to or that can be associated with one or several identified or identifiable natural persons, such as names, landline and mobile numbers, email addresses, identification numbers, among others.

Data Processing Responsible: Natural or legal person, public or private, that by itself or in association with others carries out the processing of personal data on behalf of the Data Processing Responsible.

Personal Data Processing Policy: The document that establishes the terms, conditions, purposes, and duration to which the processing of the data will be subject by the Data Processing Responsible.

Data Controller: P Natural person whose personal data is subject to processing, i.e., the owner of the information processed by the data controller.

Treatment: Any operation or set of operations that are performed on personal data, are treatment operations: the collection, storage, use, circulation or deletion.

3. Obligations of The Juju
• Ensure that the Data Subject can fully and effectively exercise their rights at all times.
• Seek to obtain the express authorization from the data subject for any type of processing and keep a copy of that authorization.
• Clearly and explicitly inform their users, employees, suppliers, and third parties from whom they obtain data about the processing to which the data will be subjected, the purpose of such processing, and the rights that the data subjects have as a result of the granted authorization. To this end, the company must design a strategy to inform them about the respective processing for each event, mechanism, or data request made.
• Inform data subjects in each case about the voluntary nature of their response and the provision of the requested information.
• In all cases where data is collected, inform data subjects of their rights regarding their data.
• Maintain information under necessary security conditions to prevent alteration, loss, unauthorized or fraudulent access, use, or disclosure.
• Inform the identification, physical or electronic address, and telephone number of the area responsible for data processing.
• At all times, ensure that the data subject can fully and effectively exercise their right to access and request information about the data stored about them in the database, request the updating or correction of data, and process inquiries, all of which will be conducted through the inquiry or complaint mechanisms provided in this manual.
• Safeguard the records of personal data stored, preventing their deterioration, loss, alteration, unauthorized or fraudulent use, and update and rectify the data periodically and in a timely manner whenever the data subjects report any changes or requests.
• Ensure that the information provided to the Data Processor is accurate, complete, correct, updated, verifiable, and understandable.
• Update the information by communicating promptly to the Data Processor all developments regarding the data previously provided and adopt any necessary measures to keep the supplied information updated.
• Rectify information when it is incorrect and communicate the relevant changes to the Data Processor.
• Provide the Data Processor, as appropriate, only with data whose processing has been previously authorized in accordance with the provisions outlined in this Manual.
• Require the Data Processor at all times to respect the conditions of security and privacy of the Data Subject’s information.
• Process inquiries, complaints, and requests made in accordance with the terms indicated in the Law or this Manual.
• Adopt an internal manual of policies and procedures to ensure compliance with Law 1581 of 2012, particularly regarding the handling of inquiries, complaints, and requests.
• Notify the Data Processor when certain information is under discussion by the Data Subject, once the request has been made and the corresponding process has not been concluded.
• Upon request from the Data Subject, provide information regarding the use of their data.
• Inform the data protection authority (Superintendency of Industry and Commerce) of any violations of security codes and risks in the administration of the information of the Data Subjects.
• Comply with the instructions and requirements issued by the Superintendency of Industry and Commerce.
4. Rights of Personal Data Subjects:
• Right of Access: The data subject has the right to access their personal data that has been processed free of charge. The information requested by the data subject can be provided by any means, including electronic ones, as required by the data subject. The information will correspond in full to what is held in the databases or files managed by The Juju;
• Right to Rectification: If personal data is inaccurate, erroneous, or incomplete, the data subject may request modifications;
• Right to Proof of Authorization: The data subject can request proof of the authorization granted;
• Right to Information: The data subject has the right to be informed about the use of their personal data, upon request through the designated channels.
• Right to File Complaints: The data subject has the right to file complaints with the Superintendency of Industry and Commerce (SIC) for violations of the applicable regulations and to request the deletion of personal data when it has been determined that The Juju’s processing has violated the current regulations or the Constitution;
• Right to Withdraw Consent: The data subject may revoke their consent and/or request the deletion of their data, provided there is no legal or contractual obligation that prevents their elimination; and
• Right to Refusal of Sensitive Data: The data subject may refrain from answering questions about sensitive data. Responses regarding sensitive data or personal data relating to minors will be voluntary.

The Juju will process any inquiries or complaints regarding the Personal Information collected and processed through the designated channels in accordance with the procedure established in Articles 14 and 15 of Law No. 1581 of 2012.

5. Exercise of Rights:

The data subject may exercise their rights regarding their personal data by sending a postal letter to – Street 100 No. 7 – 33, Tower 1, Office 601, Bogotá D.C., Colombia (C110911) – attention: Compliance of THE JUJU, or by sending an email to legales@untold.email. In any case, they must send the request to exercise their rights along with a legible copy of their identification document.

These rights may be exercised by the data subject, their beneficiaries, or anyone explicitly authorized by the data subject for this purpose.

The maximum term established by law to resolve your complaint is 15 business days, counted from the day following the date of receipt. When it is not possible to address the complaint within this timeframe, the respective company of The Juju will inform the interested party of the reasons for the delay and the date on which their complaint will be addressed, which shall not exceed 8 business days following the expiration of the initial term. Once the terms specified by Law 1581 and any other regulations that govern or complement it have been fulfilled, the data subject whose rights of access, rectification, deletion, and revocation have been denied, in whole or in part, may bring their case to the Superintendency of Industry and Commerce – Delegation for the Protection of Personal Data.

6. Procedure for Handling Requests, Complaints, or Claims:

The Juju, in compliance with the provisions of the General Data Protection Regulation in Colombia, will proceed to correct, update, rectify, or delete personal data at the request of the data subject or their representative, fulfilling the legal requirements.

If the request is incomplete, The Juju will require the interested party, within five (5) business days from the date of receipt, to remedy the deficiencies.

The requested information must be presented by the requester within two (2) months following the request; if not provided, it will be understood that the requester has withdrawn their request.

The maximum term for The Juju to address the request is fifteen (15) business days, counted from the day following the date of receipt. When it is not possible to attend to the request within this timeframe, the interested party will be informed of the reasons for the delay and the date on which their request will be addressed, which cannot exceed eight (8) business days following the expiration of the initial term.

The deletion of personal data will not be granted based on a request made by the data subject or their representative when there is a legal or contractual obligation for personal data to remain in the respective database.

7. Processing of Minors’ Data

The Juju seeks not to collect information from minors under the age of 18 in the course of its economic activity. Their data may only enter our databases with the express consent of the minor’s legal representative.

Notwithstanding the above, in the event that we receive data from minors, such data will be subject to the rules outlined below.

The processing of personal data of children and adolescents is prohibited unless it concerns publicly available data, in accordance with Article 7 of Law 1581 of 2012, and provided that such processing meets the following parameters and requirements:

1. It must respond to and respect the best interests of children and adolescents.
2. It must ensure respect for their fundamental rights.

If the above requirements are met, the legal representative of the child or adolescent will grant permission prior to the exercise of the minor’s right to be heard, an opinion that will be valued considering the minor’s maturity, autonomy, and ability to understand the matter.

According to the Colombian Constitutional Court, the personal data of individuals under the age of 18 may be processed as long as the prevalence of their fundamental rights is not jeopardized, and it unequivocally fulfills the principle of protecting their best interests. Nonetheless, any collection and use of data from minors registered in The Juju’s databases, or that may be requested, requires the express authorization of the child’s legal representative, giving them the opportunity to exercise the rights of access, cancellation, rectification, and opposition concerning the data of their dependents.

Every responsible and authorized party involved in the processing of personal data of children and adolescents must ensure its proper use. For this purpose, the principles and obligations established in Law 1581 of 2012 and the regulatory decree must apply.

Families and society must ensure that those responsible for the processing of minors’ personal data comply with the obligations set forth in Law 1581 of 2012 and the regulatory decree.

In light of the above, The Juju will only process data from minors with the respect of the principles mentioned in obtaining authorization and as long as the best interests of the minors are respected in the processing of that data.

8. VII. Jurisdiction and Applicable Law:

The Privacy Policy and Annex “A,” with respect to Colombia, shall be governed by the laws of the Republic of Colombia. In the event of any dispute or disagreement regarding the interpretation, validity, execution, or compliance thereof, you and The Juju declare that you submit to the exclusive jurisdiction of the competent Courts of the City of Bogotá, expressly waiving any other venue and/or jurisdiction that may apply.

The competent authority in the Republic of Colombia for the protection of personal data is the Data Protection Delegation of the Superintendence of Industry and Commerce, and the applicable regulations regarding data protection are Law 1581 of 2012, Decree 1377 of 2013, and other related norms.

——-

MÉXICO

1. Data Processing Responsible:

In Mexico, The Juju is the data processing responsible through: THE JUJU AGENCY S.A. DE C.V. with R.F.C. – JAG200903TC0.

2. Rights of Data Subjects:
• 1. Right to be Informed

  The data subject has the right to obtain clear, transparent, and understandable information about how we use their personal data and about their rights.

• 2. Right of Access

  The data subject can inquire about what personal data The Juju holds about them.

• 3. Right to Rectification

  If personal data is inaccurate, erroneous, or incomplete, the data subject may request modifications.

• 4. Right to Cancellation

  The data subject can request the cancellation of their personal data when allowed by applicable data protection laws and regulations.

  The cancellation of personal data will lead to a blocking period, after which the data will be deleted. The Juju may retain it exclusively for the purposes of liabilities arising from processing.

  When personal data has been transmitted prior to the date of rectification or cancellation and continues to be processed by third parties, the responsible party must inform them of the rectification or cancellation request, so they can also process it.

  The Juju will not be obliged to cancel personal data when:

  • It relates to the parts of a private, social, or administrative contract and is necessary for its development and fulfillment;
  • It must be processed by legal provision;
  • It obstructs judicial or administrative proceedings linked to tax obligations, the investigation and prosecution of crimes, or the updating of administrative sanctions;
  • It is necessary to protect the legally protected interests of the data subject;
  • It is necessary to perform an action in the public interest;
  • It is necessary to comply with a legally acquired obligation by the data subject;
  • It is subject to processing for the prevention or medical diagnosis or the management of health services, provided that such processing is carried out by a health professional bound by a duty of secrecy.
• 5. Right to Object:

  The data subject has the right to object at any time to the processing of their personal data by The Juju.

• 6. Right to Data Portability

  The data subject has the power to receive the personal data they have provided to The Juju and transfer it to other controllers without hindrance from the previous one.

  In this case, The Juju will provide their data in a structured, commonly used, and machine-readable format.

3. Exercise of Rights:

The data subject may exercise their rights regarding their personal data by sending a postal letter to THE JUJU AGENCY S.A. DE C.V. at Av. Álvaro Obregón 171, Colonia Roma Norte, Cuauhtémoc, Mexico City (C06700) – attention: Compliance of THE JUJU, or by sending an email to legales@untold.email. In any case, they must send the request to exercise their rights along with a legible copy of their identification document.

4. Jurisdiction and Applicable Law:

The Privacy Policy and Annex “A,” with respect to Mexico, shall be governed by the laws of the United Mexican States. In the event of any dispute or divergence related to the interpretation, validity, execution, or compliance thereof, you and The Juju declare that you submit to the exclusive jurisdiction of the competent Courts of Mexico City, expressly waiving any other venue and/or jurisdiction that may correspond to you.

————

PERÚ

1. Data Processing Responsible:

In Peru, The Juju is the data processing responsible through THE JUJU AGENCY S.A.C. (RUC: 20608591762).

2. Rights of Data Subjects:
• Right to be informed: To obtain detailed, simple, explicit, unequivocal information prior to their collection regarding how we use their personal data and about their rights. Additionally, they have the right to access information about themselves that is subject to processing in public or private databases.
• Right to Update, Include, Rectify, and Delete Their Personal Data: When such data is partially or totally inaccurate, incomplete, when omissions, errors, or falsehoods are identified, when it is no longer necessary or relevant for the purposes for which it was collected, or when the established retention period for its processing has expired.
• Right to Prevent Supply: Especially when it affects their fundamental rights.
• Right to Object to Processing: When there are well-founded and legitimate reasons related to a particular personal situation.
• Right to Compensation: When affected as a result of non-compliance with this Law No. 29733.
3. Exercise of Rights:

Data subjects may exercise their rights regarding their personal data by sending a postal letter to Av. El Derby Nº 254, Office 2202, Santiago de Surco, Lima (C15023) – attention: Compliance of THE JUJU, or by sending an email to legales@untold.email. In any case, they must submit their request to exercise their rights along with a legible copy of their identification document.

4. Jurisdiction and Applicable Law:

The Privacy Policy and Annex “A,” with respect to Peru, shall be governed by the laws of the Republic of Peru. In the event of any dispute or divergence related to the interpretation, validity, execution, or compliance thereof, you and The Juju declare that you submit to the exclusive jurisdiction of the competent Courts of Lima, expressly waiving any other venue and/or jurisdiction that may apply to you.

————-

ESTADOS UNIDOS DE AMÉRICA

1. DATA CONTROLLER OF THE PERSONAL DATA:

The Juju Agency LLC is in charge of your personal data.

2. PRIVACY RIGHTS:

You have the right to:

• Know how your personal information is used;
• Access, request and receive the personal information we have collected in a portable manner;
• Object to having your data sold or shared; and
• Request that we delete your personal data.
3. EXERCISE OF RIGHTS:

You may request a copy of the following:  (1) The categories of Personal Information we collected about you; (2) The categories of sources from which the Personal Information is collected; (3) The business or commercial purpose for collecting or selling (if applicable) the Personal Information; (4) The categories of third parties with whom we share Personal Information and the categories of Personal Information shared; and (5) The specific pieces of your Personal Information we have collected, used or disclosed (if applicable).

You may request that we delete your Personal Information.  Note that deletion requests are subject to certain limitations, for example, we may retain Personal Information as permitted by law, such as for tax or other record keeping purposes.

You have the right not to be discriminated against in service or price if you exercise your privacy rights, and we will love you just as much if you do exercise them. To request a copy of Personal Information we have collected about you, or to request that your information be deleted, please send an email to legales@untold.email. You will need to provide your name, email address, and country / state of residence. You may authorize another person (your “agent”) to submit a request on your behalf.

To submit a request via e-mail phone, contact +1 (347) 371 0818. To submit a request via e-mail: legales@untold.email.