Personal Data Treatment Policy

1. Data Controller

Legal name: Pagui S.A.S.
Trade name: Arrendati
Location: Medellín, Colombia
Email: hello@arrendati.com

2. Purposes of Data Processing

Personal data will be processed for the following purposes:

• Verify the identity of property owners and tenants through regulated validation services
• Validate property ownership through property registry certificate consultations
• Assess credit risk for rent insurance policy issuance
• Generate and manage digital lease agreements
• Process rent payments and associated services
• Send communications related to contracted services
• Comply with legal obligations and requests from competent authorities
• Improve our products and services

3. Types of Data Collected

We collect the following types of personal data:

• Identification data: Full name, ID number, issuance date, document photograph
• Contact data: Email address, phone number, address
• Financial data: Bank information for payments, credit history (with authorization)
• Property data: Address, property registration number, property certificate information
• Biometric data: Facial recognition for identity validation (with express consent)

4. Data Processors

To fulfill the described purposes, your personal data may be shared with the following data processors:

• Auco.ai: Identity and document validation
• Seguros SURA: Rent insurance policy issuance and management
• Pagui: Electronic payment processing
• Cloud service providers: Secure information storage

All data processors have signed confidentiality and data processing agreements in accordance with Colombian law.

5. Data Subject Rights

As a data subject, you have the right to:

• Access: Access your personal data that has been processed
• Update: Request correction of inaccurate or incomplete data
• Rectify: Request correction of partial, inaccurate, incomplete, or fragmented information
• Delete: Request deletion of your data when not necessary for authorized purposes
• Revoke: Revoke authorization granted for data processing
• File complaints: Before the Superintendence of Industry and Commerce (SIC)

6. Procedure to Exercise Your Rights

To exercise any of your rights, you may send a request to:

• Email: hello@arrendati.com
• Subject: "ARCO Rights Request - [Your name]"

The request must include:

• Full name and identification number
• Clear description of the request
• Supporting documents (if applicable)
• Contact information for response

We will respond within a maximum period of fifteen (15) business days from receipt of the request.

7. Security Measures

We implement technical, human, and administrative measures to protect your personal data:

• Encryption of data in transit and at rest
• Role-based access control
• Continuous security monitoring
• Staff training on data protection
• Periodic security audits

8. Retention Period

Personal data will be retained for the time necessary to fulfill the described purposes and in accordance with applicable legal terms. Once the purpose is fulfilled, data will be securely deleted.

9. Modifications

This policy may be modified at any time. Modifications will be published on this page and, when significant, data subjects will be notified by email.

10. Supervisory Authority

The competent authority for personal data protection in Colombia is the Superintendence of Industry and Commerce (SIC). You may file complaints or inquiries through:

• Website: www.sic.gov.co
• Toll-free line: 01 8000 910 165