Informativa sulla privacy

Italy — HSM Italia Srl

At WOBI we care about the protection of the personal data that you, as a user (hereinafter, “User” or “Users”), may voluntarily provide to us through the website www.wobi.com (hereinafter, the “Site”).

Please note that this Privacy Policy refers to the Site, understood as all pages and subpages included within it. WOBI therefore accepts no responsibility regarding the different privacy and personal data protection policies contained on the web pages that may be accessed through links included on this Site and not managed directly by WOBI.

Following the entry into force of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter, “GDPR”), we have updated our Privacy Policy in order to properly fulfil the obligations imposed in relation to privacy.

WOBI reserves the right to modify or simply update this Privacy Policy, in whole or in part. Users are therefore invited to visit this section regularly to check its contents.

The purpose of this Privacy Policy is to inform Users about how personal data is collected, processed and protected.

Who is the controller of your personal data?

The controller of your personal data is HSM Italia Srl (hereinafter, “WOBI”), VAT number 04135570960, with operating offices at Via Fontana 18, 20122 Milan, Italy.

For any doubt or request regarding the processing and protection of personal data, you may write to us at any time at info.it@wobi.com.

Come raccogliamo i suoi dati personali?

You may browse the Site without needing to leave us personal information. Nevertheless, WOBI will collect your personal data, such as your name, email address and/or telephone number, or any other type of personal information, in the following cases:

• When you send us a request through the forms available on the Site.
• Quando acquista un servizio o un prodotto offerto da WOBI.
• When you register as a User on the Site.

For what purposes do we process your personal data?

Le informazioni personali che ci fornisce saranno trattate da WOBI per le seguenti finalità:

• Managing and responding to all requests for information or of any other kind submitted by the User through any channel established by WOBI.
• Promoting the products and services offered by WOBI.
• Where necessary, managing registration as a registered User on the Site.
• Where necessary, establishing and managing the contractual relationship between the User and WOBI.
• Creare profili Utente.
• Conducting evaluation questionnaires.
• Where consent is given, sending commercial information by electronic, postal and telephone means (including alerts via SMS or similar messaging tools) about new products and services that may be of interest.

You warrant the authenticity of the data provided, being solely responsible in the event of false or inaccurate statements, as well as for any damage that may be caused to WOBI or to third parties as a result of the information provided.

Qual è la base giuridica del trattamento?

The legal basis for processing your data is the express consent you provide by clicking the “Send” button on the corresponding data collection form or by submitting such data by any other means.

You may withdraw your consent at any time, without prejudice to the lawfulness of processing based on consent given before its withdrawal.

Per quanto tempo conserviamo i suoi dati?

WOBI will process your personal data for as long as a mutual interest exists and until you expressly object to its processing, and in any case for as long as it is required to retain personal data to comply with legal obligations.

A chi comunichiamo i suoi dati?

The personal data collected will not be transferred to third parties, except in cases necessary for the development, control and fulfilment of the stated purposes, in the cases provided for by law, and in specific cases of which the User is expressly informed.

In particular, your personal data may be disclosed to the service providers engaged by WOBI in connection with the stated purposes, always in compliance with the requirements established by applicable legislation.

What rights do you have?

As a data subject, you may exercise the following rights, subject to the exceptions and limits established by data protection legislation:

• Right to withdraw consent given for the processing of your personal data at any time.
• Right of access: you have the right to obtain confirmation as to whether or not personal data concerning you exists, and to have it communicated to you in an intelligible form.
• Right to update and rectification: allows you to correct, modify or update your personal data that is inaccurate or incomplete.
• Right to erasure: allows data to be deleted, except where legal obligations require its retention and/or other legitimate grounds exist for its processing by WOBI.
• Right to restriction of processing: under the legally established conditions, allows processing to be suspended, preventing processing by WOBI and retaining the data solely for the exercise and defence of possible claims.
• Right not to be subject to automated individual decision-making, including profiling.
• Right to object: in certain circumstances and for reasons connected to their particular situation, data subjects may object to the processing of their personal data, except on compelling legitimate grounds or for the exercise or defence of possible claims.
• Right to data portability: the data subject has the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning them provided to the controller, and to transmit that data to another controller without hindrance from the controller to which it was provided.

To this end, you must submit a written request indicating the right you are exercising, your full name and your address for notifications, together with a copy of your identity card or another valid identity document, addressed to WOBI at Via Fontana 18, 20122 Milan, or to the email address info.it@wobi.com.

In particular, we inform you of your right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if you consider that the processing does not comply with current legislation.

Cookie Policy

Use of this Site (and of any other site managed by WOBI) implies the User's acceptance of the use of cookies (and similar technologies) by WOBI. This Cookie Policy aims to inform the User about how WOBI uses cookies and how they can be managed.

What are cookies?

Cookies are files containing small amounts of information that are downloaded to the user's device when visiting a web page. Cookies store technical information, personal preferences, content personalisation, site usage statistics and links to social networks, all with the aim of adapting the site's content to the user's profile and needs.

Which cookies do we use and for what purpose?

Cookies are small files temporarily saved on the hard drive, allowing the Site to recognise users and store certain information about them in order to enable or improve the service offered. They also make it possible to identify the most visited sections of the Site so that its content can be adapted to the User's needs. Cookies also make it possible to know whether the Site has already been visited by the User; the information the cookie generates about them is only saved if the User allows it.

Types of cookies

• Technical cookies: allow the user to browse a website and use the various options or services it provides, such as web traffic control and data transfer, restricted access to certain pages, making an online purchase or subscription, registering for an event, or using security features.
• Personalisation cookies: allow users to access web services with certain predefined elements established through a series of criteria on the user's computer; these may include language preference, browser type, regional settings, etc.
• Statistical cookies: allow monitoring and analysis of site user behaviour. The information collected is used to measure site performance and to build browsing profiles of users of such sites, applications or platforms, in order to make changes and improvements.
• Advertising cookies: allow the most effective possible management of the advertising space that the publisher may have included on a web page from which the requested service is provided, based on criteria such as content or the frequency with which ads are displayed.
• Behavioural advertising cookies: store information about user behaviour obtained through constant observation of browsing habits, allowing a specific profile to be developed in order to display advertising accordingly.

WOBI uses the following types of cookies: Google Analytics (a web analytics tool provided by Google Inc. used to collect information and analyse how visitors use our site), DoubleClick (collects information about the user's browsing interests, stated preferences, how they interact with the site, ads and web pages visited, optimisation of advertising space, and effectiveness of advertising campaigns), Social networks (each social network uses its own cookies to enable “Like” or “Share” functions), ADFORM (cookies used to measure conversions and carry out retargeting in advertising campaigns) and LinkedIn (collects statistical information on user traffic).

How can you refuse the use of cookies?

The User may allow, block or disable the cookies installed on their computer or mobile device by changing their browser settings (Google Chrome, Microsoft Internet Explorer, Mozilla Firefox, Safari) or through other third-party tools that allow users to identify cookies on each website they visit and disable them.

Many cookies are used to improve the usability and functionality of websites or applications, so if the User decides to disable cookies, some functionality of the services may not work correctly. Alternatively, if the User does not wish data to be collected as described in this clause, they must refrain from using the services. Please note that blocking cookies may compromise all or some of the Site's functionality.

What happens if I disable cookies?

• You will not be able to share content from this Site on Facebook, Twitter or any other social network.
• The Site will not be able to adapt content to your personal preferences, as happens in the online store.
• You will not be able to access the personal area of this Site, such as My account or My orders.
• Online stores: it will not be possible to make an online purchase; you would have to do so by phone or by visiting the physical store, where available.
• It will not be possible to personalise your geographic preferences such as time zone, currency or language.
• The Site will not be able to produce statistics on visitors and traffic, negatively affecting the Site's competitiveness.
• You will not be able to write on the blog, upload photos, post comments or rate content. The Site will also not be able to recognise whether you are a human being or an automated application posting spam.
• It will not be possible to display targeted advertising, which means a reduction in the Site's advertising revenue.
• All social networks use cookies; if you disable them you will not be able to use any social network.

Mexico — Management Focus México, S.A. de C.V.

I. Controller: identity and address

The controller responsible for the processing of Personal Data is MANAGEMENT FOCUS MEXICO, S.A. DE C.V. (hereinafter, WOBI), with address at Paseo de la Reforma No. 150, Colonia Juárez, Alcaldía Cuauhtémoc, Mexico City, C.P. 06600, an entity that undertakes to comply with the provisions of this Privacy Notice, as well as with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter, the “Law”), its Regulations and the Privacy Notice Guidelines.

II. Personal data subject to processing

By virtue of this Privacy Notice, WOBI informs the Data Subject that it will process the following Personal Data:

Users

• Name.
• Email address, landline and mobile telephone numbers.
• Employment data.
• Browsing data.

Customers

• Name.
• Email address, landline and mobile telephone numbers.
• Employment data.
• Asset and financial data.

In addition, WOBI informs the Data Subject that it will not process Sensitive Personal Data.

Under the terms of Article 8 of the Law, the Data Subject gives their express consent for WOBI to process their Personal Data, including financial and asset-related data.

III. Purposes of processing

Users — Primary purposes

• Maintaining communication with the Data Subject regarding the services offered by WOBI to the general public.
• Sending proposals for services that may be of interest to them at WOBI.

Users — Secondary purposes

• Analysing and evaluating habits, as well as improving the Data Subject's browsing experience on the WOBI website.
• Sending promotional and advertising material about the products and services marketed by WOBI.

Customers — Primary purposes

• Verifying the Data Subject's identity and confirming the accuracy of the personal data provided to WOBI.
• Contacting the Data Subject in order to send proposals for services offered by WOBI and to follow up on them.
• Providing the services contracted by the Data Subject.
• Issuing and retaining the invoices covering the transactions and services contracted by the Data Subject at WOBI.
• Maintaining the communication necessary with the Data Subject to fulfil the contractual obligations arising with them.
• Keeping the Data Subject's information up to date.
• Keeping a record in WOBI's accounting and administrative systems of the Data Subject, the services provided and the payments made or due.
• Handling the Data Subject's rights requests at WOBI.

Customers — Secondary purposes

• Contacting the Data Subject to notify them of Website updates and reports on the processing and status of their personal data.
• Preparing reports on the Data Subject's activity at WOBI.
• Sending promotional and advertising material about the products and services marketed by WOBI.
• Sending promotional and advertising material about the products and services marketed by our commercial partners.

IV. Mechanisms to refuse processing for secondary purposes

If the Data Subject does not wish their Personal Data to be used for all or any of the Secondary Purposes listed above, they must send an email to info.mx@wobi.com with the subject line “Refusal of Processing for Secondary Purposes”. In the body of the email, the Data Subject must specify which purposes they wish to refuse, as well as their identifying details, so that the request can be fulfilled.

V. Transfers of personal data

WOBI informs the Data Subject that it will carry out the following Transfers of their Personal Data:

• Judicial and/or administrative authorities: compliance with legal provisions and exercise of WOBI's rights. Consent not required.
• Our sponsors: sending promotional and advertising material about the products and services marketed by our sponsors. Consent required.

If the Data Subject does not wish their Personal Data to be transferred for the purpose indicated, they must refrain from giving their express authorisation in the “Express consent for the transfer of your personal data” document made available for this purpose. If you do not wish WOBI to carry out the transfer of your personal data, you must send an email to info.mx@wobi.com. You may change your choice at any time.

VI. Means and procedure for exercising ARCO rights

WOBI recognises the Data Subject's ability to exercise ARCO Rights over their Personal Data, which consist of the following:

• Right of Access: to know which of their Personal Data WOBI holds and the purposes of its processing.
• Right of Rectification: to request the correction of their Personal Data where it is out of date, inaccurate, erroneous or incomplete.
• Right of Cancellation: to request the deletion of any record or copy of their Personal Data, whether physical or electronic.
• Right of Opposition: to request that the use of their Personal Data cease.

These rights are exercised by written request sent by email to info.mx@wobi.com with the subject line “Exercise of ARCO Rights”. This email address corresponds to the department that will process such requests and may be contacted by Data Subjects at any time.

The Data Subject must provide the following information:

• Full name and address.
• A clear and precise description of the Personal Data in respect of which they intend to exercise one of the ARCO Rights, together with any document that helps locate it.
• Statement of the ARCO Right they wish to exercise.
• In the case of a Rectification request, the modifications to be made must be indicated, along with documentation supporting the reason for the requested changes.

The request must also be accompanied by: a copy of the official identification of the Data Subject or their representative; a document and/or information demonstrating that the personal information is held by WOBI; and, where the Data Subject does not submit the request in person, proof of representation by means of a public deed or power of attorney signed before two witnesses, together with official identification of both the Data Subject and the representative.

Once the request is received, WOBI will send an acknowledgement of receipt by email. It will then respond to the request by email within a period not exceeding 20 (twenty) business days from receipt, provided that WOBI has sufficient information to handle the request.

In order to have sufficient information to handle the request, WOBI may ask for additional information within 5 (five) business days of receiving it. From the date of WOBI's request, the Data Subject has 10 (ten) business days to respond. In this case, the 20 (twenty) business day period will begin on the day following the day on which the Data Subject responded to the request.

If the request is deemed valid and the Data Subject has proven their identity and entitlement to the ARCO Right exercised, Access to the Personal Data, the requested changes, the Cancellation or the response to the Opposition will be carried out within a maximum of 15 (fifteen) business days from the date the request was answered.

In the case of requests for Access to Personal Data, delivery will proceed once the identity of the applicant or representative has been verified. Such delivery will be made in simple copies at the address indicated herein, or in electronic documents to the email address from which the request was sent.

Where the purpose of the request is Opposition, the processing of the Personal Data will cease on the business day immediately following the date on which the affirmative response was communicated to the Data Subject.

VII. Means and procedure for withdrawing consent

At any time and for any reason, the Data Subject may withdraw the authorisation given to WOBI for the processing of their Personal Data. WOBI states that, for the fulfilment of certain purposes, withdrawal of consent may mean that the relationship between the Data Subject and WOBI cannot continue.

Withdrawal is carried out by sending an email to info.mx@wobi.com with the subject line “Withdrawal of Consent”, stating in the body of the message: the Data Subject's full name; the date from which they wish the withdrawal to take effect; and a copy of the official document proving their identity. Where the Data Subject does not submit the request in their own right, the person doing so must prove their representation by means of a public deed or power of attorney signed before two witnesses, together with official identification of both parties.

WOBI will respond to the request by email within 20 (twenty) business days from the date of receipt, applying the same additional-information provisions described in the previous section.

VIII. Department responsible for handling requests

If the Data Subject wishes to withdraw their consent, limit the use and disclosure of their information, or Access, Rectify, Cancel or Oppose the Processing of their Personal Data, they must do so through WOBI's Personal Data Protection Department, email info.mx@wobi.com.

IX. Means to limit the use or disclosure of personal data

In order to guarantee the protection of Data Subjects' Personal Data, WOBI undertakes to enter into legal agreements, adopt privacy, personal data protection and information security policies enforceable within its organisation, and implement technological, physical and administrative security measures.

WOBI stores personal information in limited-access databases located in controlled facilities with security mechanisms. WOBI undertakes to treat the information provided by the Data Subject as confidential.

WOBI also provides alternative mechanisms to the exercise of ARCO Rights so that Data Subjects can limit the use and disclosure of their Personal Data. To avoid receiving advertising, you may register with the Public Registry to Avoid Advertising (REPEP) of the Federal Consumer Protection Agency (PROFECO), at https://repep.profeco.gob.mx/.

We also inform you that, where applicable, you have the right to approach the Personal Data Protection Unit (UPDP) of the Ministry of Anti-Corruption and Good Governance (SABG) to assert your rights.

If the Data Subject wishes to know more about this section, they may send an email to info.mx@wobi.com with the subject line “Limitation of Use or Disclosure”.

X. Personal data retention period

In compliance with the quality principle, all of the Data Subject's Personal Data will be retained for the time necessary to fulfil the purposes for which it was collected. It will then be subject to a blocking period prior to its cancellation.

XI. Changes to the privacy notice

The Data Subject is informed that this Privacy Notice may be modified at the time and in the manner determined by WOBI, always in accordance with the applicable legislation. WOBI informs Data Subjects that changes will be notified by publishing the updated version on the website and/or by sending an email to the address provided by the Data Subject.

XII. Cookie policy

Cookies are text files stored on the computer used by the Data Subject when using the website. Cookies help WOBI give you a better experience when browsing the website and allow that experience to be improved.

WOBI uses cookies on its website; however, each Data Subject may accept or reject their use through the settings on the devices they use. It is important to note that if you do not accept the use of cookies, some website functionality may not be available.

To disable the use of cookies, the Data Subject may consult the documentation for their browser: Firefox, Google Chrome, Microsoft Edge, Opera or Safari.

Colombia — WOBI Colombia S.A.S.

1. Legal basis and scope

The right to Data Protection is intended to allow all individuals to know, update and rectify the information collected about them in files or databases. This constitutional right is set out in articles 15 and 20 of the Political Constitution; in Statutory Law 1581 of 2012, which establishes general provisions for the Personal Data Protection Law (LEPD); in Decree 1074 of 2015; and in chapter 25, section 3, article 2.2.2.25.3.2 of Decree 1074 of 2015, which partially regulates Law 1581 of 2012.

When the Data Subject gives consent for their data to form part of the database of an institution, whether public or private, legal entity or natural person, this is done through the data controller, who assumes a series of obligations: to process such data securely and carefully, to safeguard its integrity, and to act as the body to which the Data Subject may turn for monitoring and control of the information, being able to exercise the rights of consultation and complaint.

Although responsibility for data processing lies with the controller, its competences are exercised through the functions of its staff. Staff of the controlling institution with direct or indirect access to databases containing personal data must be familiar with data protection regulations, the organisation's data protection policy and the Habeas Data Policies and Procedures Manual, and must comply with the data security obligations corresponding to their functions and position.

To ensure compliance with its security obligations, WOBI COLOMBIA SAS appoints four security officers responsible for developing, coordinating, controlling and verifying compliance with the security measures set out in the Habeas Data Policies and Procedures Manual.

This policy applies to all personal data recorded in databases processed by the controller and is addressed to all data users, both internal staff and external staff of WOBI COLOMBIA SAS.

All users identified in this Security document are obliged to comply with the security measures established for data processing and are subject to the duty of confidentiality, even after their employment or professional relationship with the controlling organisation has ended. The duty of confidentiality, set out in article 4(h) of the Data Protection Law (LEPD), is formalised through a confidentiality agreement signed between the user and the controller.

Applicable regulatory framework

• Statutory Law 1581 of 2012 (Congress of the Republic): “Establishing general provisions for the protection of personal data”. It develops the constitutional right of all individuals to know, update and rectify information collected about them in databases or files, and the other rights, freedoms and constitutional guarantees referred to in article 15 of the Political Constitution, as well as the right to information enshrined in article 20.
• Law 1273 of 2009 (Congress of the Republic): amends the Criminal Code and creates a new protected legal interest called “protection of information and data”, fully preserving systems that use information and communication technologies, among other provisions.
• Decree 1377 of 2013 (Presidency of the Republic): partially regulates Law 1581 of 2012.
• Decree 1074 of 2015 (Presidency of the Republic): issues the Single Regulatory Decree for the Commerce, Industry and Tourism Sector.

2. Definitions

Definitions established in article 3 of the LEPD and chapter 25, section 1, article 2.2.2.25.1.3 of Decree 1074 of 2015.

• Authorised access: authorisation granted to a user to use certain resources. In automated devices it is the result of correct authentication, generally through entering a username and password.
• Authentication: procedure for verifying a user's identity.
• Authorisation: prior, express and informed consent of the Data Subject for the processing of personal data.
• Privacy notice: verbal or written communication generated by the controller and addressed to the Data Subject for the processing of their personal data, informing them of the existence of the applicable information processing policies, how to access them, and the intended purposes of processing.
• Database: an organised set of personal data subject to processing.
• Password: a secret key allowing access to devices, information or databases that were previously inaccessible. It is used in user authentication that enables authorised access.
• Access control: mechanism allowing access to devices, information or databases through authentication.
• Backup copy: a copy of the data in a database on a medium that allows its recovery.
• Personal data: any information linked to or that can be associated with one or more determined or determinable natural persons.
• Public data: data that is not semi-private, private or sensitive. Public data includes, among others, data relating to individuals' civil status, their profession or trade and their status as a merchant or public servant.
• Sensitive data: data affecting the Data Subject's privacy or whose misuse may lead to discrimination, such as data revealing racial or ethnic origin, political orientation, religious or philosophical convictions, membership of trade unions, social or human rights organisations, as well as data relating to health, sexual life and biometric data.
• Data processor: a natural or legal person, public or private, who, alone or in association with others, processes personal data on behalf of the controller.
• Identification: the process of recognising users' identity.
• Incident: any anomaly affecting or that may affect data security, constituting a risk to the confidentiality, availability or integrity of the databases or of the personal data they contain.
• User profile: group of users granted access.
• Protected resource: any component of the information system, such as databases, programs, media or equipment, used for the storage and processing of personal data.
• Security officer: one or more persons designated by the controller for the control and coordination of security measures.
• Information system: set of databases, programs, media and/or equipment used for the processing of personal data.
• Data controller: a natural or legal person, public or private, who, alone or in association with others, decides on the database and/or the processing of the data.
• Medium: material on whose surface information is recorded or on which data can be stored or retrieved, such as paper, video tape, CD, DVD, hard disk, etc.
• User: a person authorised to access data or resources, or a process that accesses data or resources without identification of a person.
• Data Subject: a natural person whose personal data is subject to processing.
• Processing: any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion.
• Transfer: occurs when the controller and/or processor of personal data located in Colombia sends the information or personal data to a recipient who is in turn a controller and is located inside or outside the country.
• Transmission: processing of personal data involving its communication within or outside the territory of the Republic of Colombia where the purpose is processing by the processor on behalf of the controller.

3. Data protection principles

Article 4 of the Data Protection Law (LEPD) establishes principles for the processing of personal data that must be applied harmoniously and comprehensively in the development, interpretation and application of the Law:

• Principle of legality: data processing is a regulated activity that must comply with the LEPD, Decree 1074 of 2015 and other implementing provisions.
• Principle of purpose: processing must serve a legitimate purpose in accordance with the Constitution and the Law, which must be communicated to the Data Subject.
• Principle of freedom: processing may only be carried out with the prior, express and informed consent of the Data Subject. Personal data may not be obtained or disclosed without prior authorisation, or in the absence of a legal or judicial mandate replacing consent.
• Principle of accuracy or quality: the information subject to processing must be truthful, complete, accurate, up to date, verifiable and comprehensible. Processing of partial, incomplete, fragmented or misleading data is prohibited.
• Principle of transparency: the Data Subject's right to obtain from the controller or processor, at any time and without restrictions, information about the existence of data concerning them must be guaranteed.
• Principle of restricted access and circulation: processing is subject to the limits arising from the nature of the personal data, the provisions of the LEPD and the Constitution. Personal data, except public information, may not be available on the internet or other mass communication media, unless access is technically controllable.
• Principle of security: the information subject to processing must be handled with the technical, human and administrative measures necessary to provide security to records, preventing their alteration, loss, unauthorised or fraudulent consultation, use or access.
• Principle of confidentiality: all persons involved in the processing of personal data that is not public in nature are obliged to guarantee the confidentiality of the information, even after their involvement in the processing has ended.

Data processing requires the prior and informed authorisation of the Data Subject by any means that can be consulted later, except in the following cases exempted by article 10 of the LEPD: information required by a public or administrative entity in the exercise of its legal functions or by court order; data of a public nature; medical or health emergencies; processing of information authorised by law for historical, statistical or scientific purposes; and data relating to the Civil Registry.

When requesting authorisation from the Data Subject, the controller must clearly and expressly inform them of the processing to which their data will be subject and its purpose; the optional nature of their response where the questions concern sensitive data or data of children and adolescents; the rights they have as a Data Subject; and the identification, physical address, email address and telephone number of the controller, keeping evidence of compliance with this duty.

4. Special categories of data

4.1. Sensitive data

Under article 6 of the LEPD, the processing of sensitive data is prohibited, except where:

• The Data Subject has given explicit authorisation for such processing, except in cases where the law does not require such authorisation.
• Processing is necessary to safeguard the vital interest of the Data Subject and they are physically or legally incapacitated. In such cases, legal representatives must give their authorisation.
• Processing is carried out in the course of the legitimate activities and with appropriate guarantees by a foundation, NGO, association or other non-profit body with a political, philosophical, religious or trade-union purpose, provided that it relates exclusively to its members or to persons who maintain regular contact by reason of its purpose. In such cases, the data may not be supplied to third parties without the Data Subject's authorisation.
• Processing relates to data necessary for the recognition, exercise or defence of a right in judicial proceedings.
• Processing has a historical, statistical or scientific purpose. In this case, measures must be adopted to remove the identity of the Data Subjects.

4.2. Rights of children and adolescents

The processing of personal data of children and adolescents is prohibited, except where the data is public in nature and where such processing responds to and respects the best interests of children and adolescents and ensures respect for their fundamental rights.

Once the above requirements are met, the legal representative of the child or adolescent will give authorisation after the minor has exercised their right to be heard, an opinion that will be assessed taking into account their maturity, autonomy and capacity to understand the matter.

Every controller and processor involved in the processing of the personal data of children and adolescents must ensure its appropriate use, complying at all times with the principles and obligations set out in the LEPD and Decree 1074 of 2015. The rights of access, correction, deletion, revocation or complaint for infringement over the data of children and adolescents will be exercised by the persons empowered to represent them.

4.3. Rights of Data Subjects

In accordance with article 8 of the LEPD and chapter 25, section 4 of Decree 1074 of 2015, Data Subjects may exercise a number of rights in relation to the processing of their personal data. These rights may be exercised: by the Data Subject, who must sufficiently prove their identity; by their successors, who must prove such status; by the Data Subject's representative and/or attorney, upon proof of representation; by stipulation in favour of another; and, in the case of children and adolescents, by the persons empowered to represent them.

• Right of access or consultation: the Data Subject's right to be informed by the controller, upon request, of the origin, use and purpose given to their personal data.
• Correction claim: the right to have partial, inaccurate, incomplete, fragmented or misleading data updated, rectified or modified, as well as data whose processing is expressly prohibited or has not been authorised.
• Deletion claim: the right to have data deleted where it is inadequate, excessive or does not respect constitutional and legal principles, rights and guarantees.
• Revocation claim: the right to render ineffective the authorisation previously given for the processing of their personal data.
• Infringement claim: the right to request that non-compliance with data protection regulations be remedied.
• Right to request proof of the authorisation given to the controller, except where it is expressly exempted as a requirement for processing under article 10 of the LEPD.
• Right to lodge complaints with the Superintendence of Industry and Commerce for infringements: the Data Subject or their successor may only lodge such a complaint once they have exhausted the consultation or claim procedure with the controller or processor.

5. Authorisation of the processing policy

In accordance with article 9 of the LEPD, the prior and informed authorisation of the Data Subject is required for the processing of personal data. By accepting this policy, any Data Subject who provides information relating to their personal data consents to the processing of their data by WOBI COLOMBIA SAS, under the terms and conditions set out herein.

The Data Subject's authorisation will not be required in the case of: information required by a public or administrative entity in the exercise of its legal functions or by court order; data of a public nature; medical or health emergencies; processing of information authorised by law for historical, statistical or scientific purposes; and data relating to the Civil Registry.

6. Data controller

The controller of the databases covered by this policy is WOBI COLOMBIA SAS, whose contact details are: email mmaldonado@wobi.com and telephone 6017940930.

In the course of its activities, WOBI COLOMBIA SAS processes personal data relating to natural persons that is contained and processed in databases intended for legitimate purposes, in compliance with the Constitution and the Law.

In accordance with Law 1581 of 2012 and with the authorisations given by data subjects, WOBI COLOMBIA SAS will carry out operations including data collection, storage, use, circulation and/or deletion, and delivery of data to third-party entities as processors or controllers. This data processing will be carried out exclusively for the purposes authorised and provided for in this Policy and in the specific authorisations granted by the data subject. Personal data will likewise be processed where a legal or contractual obligation exists, always under the guidelines of WOBI COLOMBIA SAS's Information Security policies. In all cases, personal data may be processed for the purpose of internal and external control and audit processes and evaluations carried out by supervisory bodies.

Databases and purposes

Employees. Data will be used for the following purposes: requesting identification and contact data, academic data and employment, professional and financial history data; processing employment registration and engagement or service contracts; sending content related to the functions of the role; implementing workplace wellbeing initiatives; distributing job offers for personnel selection processes; communicating institutional information; updating the data of employees, contractors or suppliers; running enrolment processes for courses and activities organised by the Institution; verifying the identity of suppliers in the systems managed; inviting candidates to interviews and home visits; verifying employment and personal references, work experience and professional background; producing uniform and equipment items; sending information by email; delivering and assigning equipment to staff; drafting management reports; reporting to the social security system and compensation funds for the employee and their beneficiaries; using photographic images and videos for corporate purposes; obtaining and providing data of employees' children for recreational and wellbeing activities; employment evaluations and certifications, promotions, transfers and exit interviews; internal audit and control processes; mandatory institutional reports; and deactivation of information systems upon termination of the employment contract.

Visitors. Data will be used for the following purposes: authorising entry to the various areas or departments; sending information by text message and email for promotional and/or informational purposes; and monitoring and controlling entry surveillance within the institution and the provision of institutional services. The above purposes are illustrative and not exhaustive.

Customers. Data will be used as follows: for the Money Laundering and Terrorist Financing Risk Management System; sending communications by physical mail, text message and/or email; keeping a purchase history; using images for corporate purposes; commercial management via telephone calls; and sending your information to the various partner companies and/or sponsors of each of the events held that require it. The above purposes are illustrative and not exhaustive.

Suppliers. Data will be used for the following purposes: requesting offers and commercial proposals for products and services; analysing the feasibility of each product and/or service; sending communications by email; submitting reports to the various supervisory bodies; reviewing and verifying pre-contractual and contractual processes; providing information in internal audit processes; sending information about the institution's products, services or news; and consulting restrictive lists (police, attorney general's office, comptroller's office, SARLAFT and any others required by Colombian regulations). The above purposes are illustrative and not exhaustive.

7. Browsing data

The navigation system and the software required for the operation of this website collect certain personal data whose transmission is implicit in the use of Internet communication protocols.

By its very nature, the information collected could allow users to be identified through its association with third-party data, even though it is not obtained for that purpose. This category of data includes the IP address or domain name of the device used by the user to access the website, the URL address, the date and time, and other parameters relating to the user's operating system.

This data is used for the sole purpose of obtaining anonymous statistical information about the use of the website or checking its correct technical operation, and is deleted immediately after being verified.

8. Cookies and web bugs

This website does not use cookies or web bugs to collect personal data from the user; their use is limited to facilitating the user's access to the website. The use of session cookies, which are not permanently stored on the user's device and disappear when the browser is closed, is limited to collecting technical information to identify the session in order to facilitate secure and efficient access to the website.

They will also be used to improve your experience, understand how our Services are used and personalise them. For example, we use cookies to provide our Services and other services based on the use of our website. We may also use cookies to understand which articles in our Help Centre are most popular in order to show you relevant content related to our Services. In addition, we may use cookies to remember the options you have chosen, such as language preferences, in order to provide you with a more secure experience and otherwise personalise our Services according to your interests.

If you do not wish to allow the use of cookies, you may reject them or delete existing ones by configuring your browser and disabling JavaScript in the browser's security settings.

9. Contact for Data Subjects

Martha Maldonado is responsible for handling petitions, queries and claims, before whom the data subject may exercise their rights, at the following email address: mmaldonado@wobi.com.

10. Procedures for exercising the Data Subject's rights

10.1. Right of access or consultation

In accordance with chapter 25, section 4, article 2.2.2.25.4.2 of Decree 1074 of 2015, the Data Subject may consult their personal data free of charge at least once each calendar month, and each time there are substantial changes to the information processing policies that warrant new consultations.

For consultations more frequent than one per calendar month, WOBI COLOMBIA SAS may only charge the Data Subject for shipping, reproduction and, where applicable, document certification costs. Reproduction costs may not exceed the cost of recovering the relevant material. To this end, the controller must demonstrate such costs to the Superintendence of Industry and Commerce when required.

The Data Subject may exercise the right of access or consultation of their data by means of a written communication addressed to WOBI COLOMBIA SAS, sent by email to mmaldonado@wobi.com, with the subject line “exercise of the right of access or consultation”. The request must contain:

• Full name of the Data Subject.
• Photocopy of the Data Subject's national ID and, where applicable, of the person representing them, together with the document proving such representation.
• The specific request for access or consultation.
• Address for notifications, date and signature of the applicant.
• Documents supporting the request, where applicable.

The Data Subject may choose one of the following formats to receive the requested information: on-screen display; in writing, with a copy or photocopy sent by certified or ordinary mail; email or another electronic means; or another system appropriate to the configuration of the database or the nature of the processing.

Once the request is received, WOBI COLOMBIA SAS will resolve it within a maximum of ten (10) business days from the date of receipt. Where it is not possible to handle the consultation within that period, the interested party will be informed, stating the reasons for the delay and the date on which the consultation will be handled, which may in no case exceed five (5) business days following the expiry of the first period. These deadlines are set out in article 14 of the LEPD.

Once the consultation procedure has been exhausted, the Data Subject or their successor may lodge a complaint with the Superintendence of Industry and Commerce.

10.2. Complaints and claims

The Data Subject may exercise their claim rights over their data by means of a written communication addressed to WOBI COLOMBIA SAS, by email to mmaldonado@wobi.com, with the subject line “exercise of complaints and/or claims”. The request must contain:

• Full name of the Data Subject.
• Photocopy of the Data Subject's national ID and, where applicable, of the person representing them, together with the document proving such representation.
• A description of the facts and the specific request for correction, deletion, revocation or infringement.
• Address for notifications, date and signature of the applicant.
• Supporting documents for the request, where applicable.

If the claim is incomplete, the interested party will be contacted within five (5) days of receipt to remedy the deficiencies. If two (2) months pass from the date of the request without the applicant providing the required information, the claim will be deemed withdrawn.

Once the complete claim has been received, a note reading “claim in progress” and the reason for it will be included in the database within no more than two (2) business days. This note must be kept until the claim is resolved.

WOBI COLOMBIA SAS will resolve the claim within a maximum of fifteen (15) business days from the date of receipt. Where it is not possible to handle the claim within that period, the interested party will be informed of the reasons for the delay and the date on which the claim will be handled, which may in no case exceed five (5) business days following the expiry of the first period.

Once the claim procedure has been exhausted, the Data Subject or their successor may lodge a complaint with the Superintendence of Industry and Commerce.

11. Security measures

In order to comply with the security principle set out in article 4(g) of the LEPD, WOBI COLOMBIA SAS has implemented the technical, human and administrative measures necessary to guarantee the security of records, preventing their alteration, loss, unauthorised or fraudulent consultation, use or access.

In addition, through the signing of the corresponding transmission contracts, WOBI COLOMBIA SAS has required the processors it works with to implement the security measures necessary to guarantee the security and confidentiality of information in the processing of personal data.

12. Validity

The databases for which WOBI COLOMBIA SAS is responsible will be processed for as long as is reasonable and necessary for the purpose for which the data was collected. Once the purpose or purposes of processing have been fulfilled, and without prejudice to legal provisions to the contrary, WOBI COLOMBIA SAS will proceed to delete the personal data in its possession unless a legal or contractual obligation requires its retention. Accordingly, this database has been created without a defined validity period.

13. Términos y Condiciones de la Campaña Bancolombia S.A. y WOBI Colombia S.A.S.

Documento elaborado por Bancolombia S.A. en alianza con WOBI COLOMBIA S.A.S. en representación de la marca WOBI. La campaña estará vigente desde el 1 de junio de 2026 hasta el 27 de octubre de 2026. La campaña es organizada por Bancolombia S.A. con el fin de incentivar el uso de los instrumentos de pago denominados Tarjetas Elegibles, cuya definición se encuentra en el desarrollo del presente documento. Todas las definiciones y disposiciones establecidas en este documento tendrán carácter vinculante y serán de obligatorio cumplimiento para los Clientes, así como para Bancolombia S.A. y WOBI COLOMBIA S.A.S.

Definiciones

Para efectos de estos Términos y Condiciones, los siguientes términos tendrán el significado que se indica a continuación, sin perjuicio de otras definiciones que se puedan establecer en el desarrollo del documento:

• Emisor: Bancolombia S.A., entidad financiera vigilada por la Superintendencia Financiera de Colombia, responsable de la emisión de las Tarjetas Elegibles.
• WOBI: WOBI COLOMBIA S.A.S, en representación de la marca WOBI, responsable de ofrecer y operar la oferta y los productos y servicios relacionados.
• Tarjetas Elegibles: Tarjetas débito y crédito emitidas por Bancolombia S.A. para personas naturales, activas.
• Beneficio: Descuento en la boletería del evento World Business Forum Bogotá 2026 el 28 & 29 octubre 2026, pagando con tarjetas débito o crédito Bancolombia.
• Usuario: Persona natural titular de una Tarjeta Elegible, que participe voluntariamente en la campaña y redima el Beneficio siguiendo el procedimiento establecido.
• Producto Elegible: Accesos Gold, Accesos Platinum, Corporate Strategic Access.

Vigencia de la Campaña

La presente campaña estará vigente de la siguiente manera:

• Etapa 1: 30% de descuento del 1 de junio de 2026 al 31 de agosto de 2026.
• Etapa 2: 20% de descuento del 1 de septiembre de 2026 al 27 de octubre de 2026.

Público Objetivo

Podrán acceder a la presente campaña únicamente las personas naturales, mayores de edad, titulares de una Tarjeta Elegible, es decir, una tarjeta de débito o crédito emitida por Bancolombia S.A. en Colombia, que se encuentre activa, habilitada para realizar transacciones.

Descripción del Beneficio

• Etapa 1: Del 1 de junio de 2026 al 31 de agosto de 2026, 30% de descuento en Accesos Gold, Accesos Platinum, Corporate Strategic Access.
• Etapa 2: Del 1 de septiembre de 2026 al 27 de octubre de 2026, 20% de descuento en Accesos Gold, Accesos Platinum, Corporate Strategic Access.

Los descuentos aplicarán en wobi.co/wbf-bogota.

Las condiciones de tiempo, modo y lugar que regulan los descuentos —los cuales constituyen los beneficios ofrecidos a los clientes del Banco, en virtud de esta oferta— se regirán por los términos y condiciones legales que se relacionan más adelante, los cuales deberán ser comunicados oportunamente al consumidor.

Condiciones Generales y Específicas

5.1. Condiciones Generales:

• El beneficio es válido únicamente para los Clientes titulares de una Tarjeta Débito o crédito Bancolombia que cumplan las siguientes condiciones: (i) encontrarse al día en sus pagos y/u obligaciones con el oferente; (ii) no presentar bloqueos en las Tarjetas; y (iii) cumplir con todas las condiciones establecidas en la presente Oferta.
• El beneficio aplica únicamente pagando la totalidad de la compra con los medios de pago indicados en esta oferta.
• Las Tarjetas Débito y crédito Bancolombia son emitidas por el Bancolombia y constituyen un producto sujeto a reglamento.
• El beneficio establecido en la presente Oferta no es acumulable con otras promociones o descuentos vigentes ni con bonos regalo.
• Los productos y servicios descritos sujetos de esta oferta son ofrecidos por WOBI, por tanto, son los responsables de la venta, la entrega, el funcionamiento y/o la garantía de los mismos. Bancolombia solo es el emisor de los instrumentos de pago mediante los cuales se puede acceder al beneficio.
• El beneficio es personal e intransferible, y no es canjeable por dinero en efectivo ni por otros bienes o servicios.
• Cualquier controversia, reclamo, devolución o garantía sobre los productos y servicios de WOBI será gestionada directamente con WOBI, de acuerdo con sus políticas de servicio y términos aplicables que pueden ser consultados en wobi.co/wbf-bogota.

Limitación de Responsabilidad

6.1. Responsabilidad de Bancolombia: Bancolombia S.A. actúa exclusivamente como Emisor de las Tarjetas Elegibles. Bancolombia no es responsable por la prestación, funcionamiento, contenido, calidad y garantía de los productos ofrecidos por WOBI.

6.2. Responsabilidad de WOBI: WOBI COLOMBIA S.A.S en representación de la marca WOBI es el responsable exclusivo de la oferta, venta, prestación, funcionamiento, entrega y garantía de los productos ofrecidos.

6.3. Responsabilidad del titular: Es responsabilidad única y exclusiva del titular de la Tarjeta elegible:

• Completar correctamente el flujo de redención dentro de los términos y plazos establecidos.
• Gestionar directamente cualquier reclamación, garantía, devolución o controversia en los canales de atención de WOBI en relación con los productos adquiridos durante la oferta.

6.4. Uso legal del Beneficio: El Usuario se obliga a usar el Beneficio para fines lícitos y personales, de acuerdo con la ley colombiana. Cualquier uso no autorizado podrá ser objeto de reclamación y/o denuncia conforme a la normativa vigente.

Otras Condiciones de la Campaña

Con su participación en la presente campaña, los clientes aceptan de manera expresa las siguientes condiciones previamente informadas por Bancolombia:

• a) En primer lugar, exoneran a Bancolombia y a sus empresas vinculadas, empleados y representantes de cualquier responsabilidad relacionada con los productos que se adquieran durante la vigencia de la Campaña. Así mismo, Bancolombia no será responsable por daños, pérdidas o perjuicios que puedan sufrir los Clientes o sus allegados con ocasión de su participación en la campaña o del disfrute del Beneficio.
• b) Hasta donde sea permitido por la ley, Bancolombia se reserva el derecho de modificar, suspender o finalizar de forma total o parcial la campaña en cualquier momento, sin previo aviso, por motivos operativos, legales, estratégicos, incidentes tecnológicos, caso fortuito, fuerza mayor, o en caso de que se comprueben fraudes, o irregularidades detectadas por el organizador. Cualquier cambio será comunicado por los canales oficiales y tendrá efecto desde su publicación. Tampoco será responsable por incumplimientos derivados de causas ajenas a su voluntad o su ámbito de control, conforme a la normativa colombiana.
• c) Bancolombia no actúa como proveedor del Beneficio, por lo que no responde por su estado, funcionamiento o uso por parte del cliente. En caso de fuerza mayor que impida la entrega de los incentivos, se suspenderá la campaña sin que esto genere obligaciones frente a los Clientes.
• d) La campaña podrá ser suspendida si existe requerimiento por parte de una autoridad competente, lo cual será comunicado a los Clientes.
• e) La participación será válida únicamente si se verifica el cumplimiento de los requisitos establecidos.
• f) Finalmente, si se presenta una reclamación de un tercero por causa de acciones fraudulentas o información falsa proporcionada por el Cliente, Bancolombia se reserva el derecho de iniciar las acciones legales correspondientes para obtener la reparación total de los daños ocasionados.

En ningún evento Bancolombia será responsable por daños directos o indirectos sufridos por algún Cliente antes, durante y después del uso o disfrute del Beneficio o a causa del uso o disfrute de este.

Causales de Exclusión de la Campaña

Será descalificado o será causal suficiente para la exclusión inmediata del Cliente, sin previo aviso, cuando:

• a) Haya realizado, a juicio de Bancolombia cualquier tipo de maniobra engañosa o fraudulenta para incrementar sus posibilidades reales de obtener el Beneficio.
• b) Haya suministrado a Bancolombia cualquier tipo de datos o información que no sea verídica o que sea incorrecta o falsa.
• c) Haya violado, a juicio de Bancolombia, alguna de las reglas fijadas en los presentes Términos y Condiciones.
• d) Presente mora en alguna obligación correspondiente a los productos emitidos por Bancolombia.
• e) No cumpla con las condiciones definidas en el presente documento.
• f) Intente obstaculizar el acceso a otros Clientes al Beneficio.
• g) Vulnere los derechos de propiedad intelectual, o la confidencialidad de la información.
• h) Suplante o intente suplantar la identidad de cualquier otro Cliente.
• i) Recopile o intente recopilar contenido o información de otros Clientes, o intente acceder a los servicios de cualquier método irregular, utilizando medios automáticos (como harvesting bots, robots, arañas o scrapers).
• j) Publique contenido que lesione los derechos de cualquier ser humano (niño, adulto o anciano).
• k) Utilice los servicios para actos ilícitos, engañosos, malintencionados o discriminatorios.
• l) Realice cualquier acción que pudiera inhabilitar, sobrecargar, saturar o de cualquier forma afectar al funcionamiento correcto de los servicios.
• m) Permita o fomente la violación de estos términos y condiciones.

En general, a juicio de Bancolombia realice cualquier acción que vaya en contra de la Ley, los presentes Términos y Condiciones, y/o los reglamentos de los medios de pago, canales y/o servicios que rigen los Servicios.

Autorización Tratamiento de Datos Personales

Los Clientes autorizan expresamente a Bancolombia para recolectar, almacenar, tratar y utilizar sus datos personales, así como para compartir dicha información y contactarlos con el fin de informar sobre la Campaña y remitir comunicaciones relativas a productos, servicios y beneficios ofrecidos por Bancolombia. También aceptan que se publique material promocional o fotográfico relacionado con la Campaña. Esta autorización se otorga sin perjuicio del derecho que les asiste a los titulares de los datos a conocer, actualizar, rectificar, suprimir o revocar su información personal conforme a la ley.

De igual forma, los Clientes autorizan a Bancolombia a: (a) establecer contacto mediante llamadas telefónicas, mensajería instantánea, correos electrónicos o redes sociales, ya sea de forma directa o a través de terceros autorizados; (b) validar y verificar su identidad para fines de ofrecimiento y administración de productos y servicios; (c) ofrecer y prestar dichos productos o servicios por cualquier canal disponible; (d) suministrar información de carácter comercial, legal, seguridad, servicio u otra índole; y (e) realizar análisis comerciales y estudios estadísticos.

Asimismo, los Clientes aceptan que Bancolombia pueda utilizar las imágenes generadas durante la Campaña para su difusión en redes sociales, medios audiovisuales y otras plataformas, con fines informativos o promocionales relacionados con la actividad. Estas imágenes podrán incluir al Participante y a sus acompañantes, siempre en el marco de la Campaña.

En caso de que Bancolombia o alguna de las entidades del Grupo Cibest enfrenten reclamaciones judiciales o extrajudiciales relacionadas con el material aportado por el Participante que infrinja derechos de autor o de propiedad intelectual de terceros, este se compromete a asumir la defensa legal y cubrir los gastos derivados de tales reclamaciones, incluyendo cualquier suma pagada o por pagar como consecuencia de ellas. Además, los Clientes declaran que no han recibido ni recibirán compensación económica por el uso de dicho material y que su participación es completamente voluntaria.

Se deja constancia de que los Clientes han sido informados de que no están obligados a autorizar el tratamiento de sus datos personales y que cuentan con los derechos previstos en la ley, entre ellos: conocer, actualizar y rectificar su información; solicitar prueba de la autorización otorgada; obtener información sobre el uso dado a sus datos; presentar reclamaciones ante la Superintendencia de Industria y Comercio por uso indebido de sus datos; revocar la autorización y/o solicitar la supresión de los datos, cuando así proceda.

El tratamiento de los datos personales se efectuará conforme a lo dispuesto en este documento y en la Política de Tratamiento de Datos Personales de Bancolombia, la cual puede consultarse en su sitio web oficial, donde también se encuentran habilitados los canales para el ejercicio de los derechos de los titulares.

Podrán consultar la política para el Tratamiento y Administración de Datos Personales a través del siguiente enlace: Documentos Legales - Personas.

Perù

USA & Canada

This privacy policy has been compiled to better serve those who are concerned with how their “Personally Identifiable Information” (PII) is being used online on our website. PII, as described in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your PII in accordance with our website.

What personal information do we collect from the people that visit our blog, website or app?

When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number, or other details to help you with your experience, as well as credit card information only when users purchase entrances for our events.

How do we collect information?

We collect information from you when you: (i) register on our site, (ii) subscribe to a newsletter, (iii) enter information on our site, (iv) buy tickets for our events, or (v) fill in online registration forms and electronic entrances for our events.

How do we use your information?

• To personalize your experience and allow us to deliver the type of content and product offerings in which you are most interested.
• To allow us to better service you in responding to your customer service requests.
• To quickly process your transactions.
• To send periodic emails regarding your order or other products and services.
• To share it with the sponsor companies of our events, which use it to send periodic emails regarding their products and services.

How do we protect your information?

Our website is scanned on a regular basis for security holes and known vulnerabilities in order to make your visit to our site as safe as possible. We use regular malware scanning.

Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.

We implement a variety of security measures when a user places an order, enters, submits, or accesses their information to maintain the safety of your personal information.

All transactions are processed through a gateway provider and are not stored or processed on our servers.

Do we use “cookies”?

We use cookies for tracking purposes in order to recall our website users' preferences and to obtain metrics, measurement and analysis of our website traffic and operations (e.g. Google Analytics).

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since each browser is a little different, look at your browser's Help Menu to learn the correct way to modify your cookies.

If you turn cookies off, some of the features that make your site experience more efficient may not function properly.

Third-party disclosure

We only transfer to outside parties (companies acting in our events as “Sponsors”) your name and any form of online contact identifier, such as email accounts.

We engage in this practice because we share information about our event attendees with the companies that sponsor such events, so those companies are able to send periodic emails regarding their products and services.

Third-party links

Google

Google's advertising requirements can be summed up by Google's Advertising Principles. They are put in place to provide a positive experience for users. See Google's Advertising Principles.

We use Google AdSense Advertising on our website.

Google, as a third-party vendor, uses cookies to serve ads on our site. Google's use of the DART cookie enables it to serve ads to our users based on previous visits to our site and other sites on the Internet. Users may opt out of the use of the DART cookie by visiting the Google Ad and Content Network privacy policy.

We have implemented Demographics and Interests Reporting.

We, along with third-party vendors such as Google, use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our website.

Opting out

Users can set preferences for how Google advertises to them using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising Initiative Opt Out page or by using the Google Analytics Opt Out Browser Add-on.

California Online Privacy Protection Act

CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require any person or company in the United States (and conceivably the world) that operates websites collecting PII from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared.

According to CalOPPA, we agree to the following:

• Once this privacy policy is created, we will add a link to it on our home page or, as a minimum, on the first significant page after entering our website.
• Our Privacy Policy link includes the word “Privacy” and can easily be found on the page specified above.
• You will be notified of any Privacy Policy changes on our Privacy Policy page.
• You can change your personal information by emailing us.

How does our site handle Do Not Track signals?

We honor Do Not Track signals and do not track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.

Does our site allow third-party behavioral tracking?

It's also important to note that we do not allow third-party behavioral tracking.

COPPA (Children Online Privacy Protection Act)

When it comes to the collection of personal information from children under the age of 13, the Children's Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, the United States' consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children's privacy and safety online.

We do not specifically market to children under the age of 13.

Fair Information Practices

The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.

In order to be in line with Fair Information Practices, we will take the following responsive action should a data breach occur: we will notify users via in-site notification within 7 business days.

We also agree to the Individual Redress Principle, which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.

CAN-SPAM Act

We collect your email address in order to:

• Send information, respond to inquiries, and/or other requests or questions.
• Process orders and send information and updates pertaining to orders.
• Send you additional information related to your product and/or service.
• Market to our mailing list or continue to send emails to our clients after the original transaction has occurred.
• Share it with the sponsor companies of our events, which use it to send periodic emails regarding their products and services.

To be in accordance with CAN-SPAM, we agree to the following:

• Not use false or misleading subjects or email addresses.
• Identify the message as an advertisement in some reasonable way.
• Include the physical address of our business or site headquarters.
• Monitor third-party email marketing services for compliance, if one is used.
• Honor opt-out/unsubscribe requests quickly.
• Allow users to unsubscribe by using the link at the bottom of each email.

If at any time you would like to unsubscribe from receiving future emails, you can email us at info.us@wobi.com and we will promptly remove you from ALL correspondence.

Sponsors

By accepting these terms and conditions, you authorize us to share your name and email account information for commercial purposes with any of our sponsors all around the world.

Contacting us

If there are any questions regarding this privacy policy, you may contact us using the information below.

www.wobi.com
33 East 33rd St., Suite 1002
New York, NY 10016, US
info.us@wobi.com
+1 212-317-9110

Australia & New Zealand — World Business Forum Sydney

Business Executive Education Pty Ltd (“us”, “we”, or “our”) operates www.wobi.com/wbf-sydney (the “Site”). This page informs you of our policies regarding the collection, use and disclosure of Personal Information we receive from users of the Site.

We use your Personal Information only for providing and improving the Site. By using the Site, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

Information collection and use

While using our Site, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to, your name, email address, postal address and phone number (“Personal Information”).

Log data

Like many site operators, we collect information that your browser sends whenever you visit our Site (“Log Data”). This Log Data may include information such as your computer's Internet Protocol (“IP”) address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages and other statistics.

Cookies

Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your computer's hard drive.

Like many sites, we use cookies to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.

Links to other sites

Our Site may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. Business Executive Education Pty Ltd has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

Security

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

Changes to this privacy policy

Business Executive Education Pty Ltd may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on the Site. You are advised to review this Privacy Policy periodically for any changes.