In accordance with Law 1581 of 2012 “which establishes general provisions for the protection of personal data” and Single Sectoral Regulatory Decree 1074 of 2015, we inform you that the company SERVICIO AÉREO A TERRITORIOS NACIONALES S.A. (hereinafter SATENA), identified with NIT. 899.999.143-4, acting as the controller of your personal data, maintains strict procedures and policies for the safeguarding of personal data that has been or is collected in the course of our activities. We kindly invite you to read our Personal Data Protection and Processing Policy, which is available for consultation on our website https://www.satena.com/documentos/corporativo/politica-de-habeas-data.pdf or at our offices located at Av. El Dorado #103-08 Entrada 1 Int. 11, in the city of Bogotá D.C.

Your personal data may be included in a database and will be collected, stored, used, shared, and processed securely for the purpose of offering and managing air transport services, in addition to the following specific purposes:

Perform activities necessary for the fulfillment of obligations arising from contracts entered into with data subjects.

Manage and execute commercial transactions through e-commerce platforms.

Provide updated information on itineraries, flight schedules, and possible changes or delays.

Provide customer service, including assistance during the check-in process, baggage handling, and handling complaints and claims.

Send relevant notifications to passengers about their flight, including changes, check-in reminders, and promotions.

Manage loyalty programs, including the accumulation and redemption of miles or points.

Process personal information for security purposes, compliance with civil aviation regulations, and control of access to airports and aircraft.

Process personal data to comply with international regulations on aviation security and data protection, including the processing of passenger data for immigration and customs purposes.

Ensure physical and digital security, service improvement, and experience in commercial establishments or SATENA facilities.

Manage inquiries, complaints, claims, and any other type of assistance required by data subjects.

Carry out promotional and advertising activities for products and services, using contact details and preferences.

Send information from SATENA via physical and/or electronic mail, text messages (SMS and/or MMS), through social networks such as Facebook, Instagram, or WhatsApp, or other similar platforms with push notifications, telephone, or any other means of communication that technology allows.

Offer personalized services based on passenger preferences and behavior, such as seat selection, meal preferences, and entertainment options.

Offer related services, such as car rental, travel insurance, and hotel reservations.

Conduct surveys and studies to measure passenger satisfaction and improve customer service.

Develop administrative functions necessary for the operation of the company, including billing, collections, payments, accounting, among others.

Manage data related to freight transportation transactions.

Implement fraud detection and prevention systems involving the use of personal data in ticket sales transactions.

Comply with all legal and regulatory obligations applicable to the company, including responding to requests for external, internal, and/or competent authority audits.

Identify and manage operational security risks.

Transfer personal data outside the country to third parties with whom SATENA has signed a data processing agreement and to whom it is necessary to transfer such data for the fulfillment of the contractual purpose and/or for interoperability with international systems, where the data collected may be shared with authorities in other countries in compliance with international treaties and aviation security cooperation agreements./li>

Implement security measures to protect personal data and ensure its integrity and confidentiality.

Conduct evaluations and analyses of suppliers, partners, and other interested parties to ensure an appropriate business relationship.

Develop strategies for the prevention of fraud, legal and financial risks, as well as to ensure user safety.

Carry out research and development activities that may contribute to improving processes, products, or services offered.

Carry out activities that respond to the legitimate interests of the company, provided that they do not prevail over the rights and freedoms of the owners.

This notice also informs you that personal data may be shared with third parties located in Colombia and abroad in Argentina, Brazil, and the United States, with whom a Contract for the Transfer and/or Transmission of Personal Data is entered into, as applicable, for the purpose of maintaining the security and protection of the data in accordance with applicable rules and standards.

In accordance with the aforementioned regulations, as the owner of your personal data, you may exercise the following rights: (i) to know, access, update, and rectify your personal data. (ii) Request proof of the authorization granted; (iii) Be informed regarding the use that has been made of your personal data; (iv) File complaints with the competent authorities for violations of the Law; (v) Revoke the authorization and/or request the deletion of the data when the principles, rights, and constitutional and legal guarantees are not respected in the processing.

In accordance with Article 2.2.2.25.2.6. of Decree 1074 of 2015, requests for the deletion of information and the revocation of authorization shall not proceed when the Data Subject has a legal or contractual obligation to remain in the database.

Finally, we inform you that, in order to exercise rights such as access, rectification, deletion, or revocation of authorization, as well as to submit complaints, requests, or claims related to the processing of your personal data, the company has set up SATENA's virtual one-stop shop, which can be found at the following electronic location: https://vuvsatenaprod.azurewebsites.net/Account/Login.aspx so that they may be handled by our personal data protection officer or by the designated department within the SATENA Presidency, who will respond in accordance with the terms set forth in Law 1755 of 2015.

I declare that I have read this privacy notice and that I have had access to the data protection policies contained in the Manual of Policies for the Protection and Processing of Personal Data. Consequently, I grant my express authorization to the Company SERVICIO AÉREO A TERRITORIOS NACIONALES SA (hereinafter SATENA) to process my personal data for the purposes communicated in this Privacy Notice and in the Manual of Policies for the Protection and Processing of Personal Data . Likewise, I expressly authorize the Company to transfer and transmit my personal data locally or internationally, including my name, age, telephone number, email address, location, and address. If the owner is a minor, this authorization for the processing of personal data may only be granted by the legal representative of the child or adolescent, in accordance with the provisions of Articles 7 and 12(b) of Law 1581 of 2012 and Article 2.2.2.25.2.9 of Decree 1074 of 2015. Until the above requirements are met, the minor data subject must refrain from providing any personal data to the Company.