Viña El Principal SA (“EL PRINCIPAL”) respects the privacy of those who access and use this website (the “Website”). Below, we will inform you about the type of personal data collected, processed, and stored by EL PRINCIPAL through the Website and the purposes for which it is used. We will also inform you how you can exercise your rights as the owner of this personal data.

The purpose of this Personal Data Protection Policy (the “Personal Data Policy”) is to make you aware of the personal data that EL PRINCIPAL collects, accesses and uses when you use the Website, whatever the digital medium, support or device through which you access it.

Please read this entire document. EL PRINCIPAL wants you to always be aware of the personal data you provide, giving you control over the information you share both while browsing and when completing our contact forms, subscribing to newsletters, or contacting our customer service. EL PRINCIPAL declares that it respects the privacy and the right to informational self-determination of every individual and that it is responsible for the data processed on the Website in accordance with the Personal Data Policy and the laws of the Republic of Chile.

By accessing or using the Website, you accept this Personal Data Policy without restriction or reservation. Regardless of the country in which you reside or provide information, you authorize EL PRINCIPAL to use your information in any other country where EL PRINCIPAL operates, in accordance with this Personal Data Policy.

Any changes to this Personal Data Policy will be posted on the Website and you will be asked to accept the changes. This will allow you to be informed at any time about what personal data is being collected, processed and/or stored, and for what purpose. .

This Personal Data Policy does not apply to websites or applications accessible through hyperlinks that you may find on the Website, except those that direct you to websites or applications of THE PRINCIPAL.

Name of the responsible entity: Viña El Principal SA, a public limited company incorporated in the Republic of Chile, RUT No. 76.320.260-7. The legal representative of EL PRINCIPAL is Mr. Marco Andrés Puyo Acevedo, both with address for these purposes at Calle La Escuela sn, Fundo El Principal, Pirque, Chile.

Phone number: 228547023.

Contact email: ventas@elprincipal.cl .

EL PRINCIPAL collects, processes, and stores only the personal data that is strictly necessary for the proper functioning of the Website and to improve the user experience. Any further processing of personal data is only carried out based on other legal obligations or permissions, or if you have given your express consent to EL PRINCIPAL.

THE PRINCIPAL collects, processes and stores personal data in the manner indicated below:

Automatic collection and storage of personal data:

• This website automatically collects information through cookies and other web tracking mechanisms (see details in the Web Tracking Policy, Section 9). Below are some of the main data collected in this way:

• The IP address and/or the device ID (IMEI) assigned to the respective end device that is necessary to transmit the content of the Website. Through IP information and other similar data, the user's physical location could be determined with considerable accuracy.

• User activity in the context of their activity on the Website, including the number of clicks and the pages the user accesses from the Website.

• The respective end-device type.

• The type of browser used, operating system, Internet provider.

• The date and time of use of the Website.

• Non-automatic collection and storage of personal data:
  
  When you access and/or use the Website, and consent to provide your personal data for certain purposes, THE PRINCIPAL collects, processes, and stores this personal data. This may include one or more of the following personal data:

• User's first and last name.

• User's Identity Card.

• User's email address.

• User's phone number.

• Company related to user.

• User preferences.

• Other personal data necessary to carry out the activity that the user wants to perform on the Website, such as what the user writes in the contact forms, communicates to customer service or the messages that he/she sends through the Website.
  
  This personal data will be collected through the Website when you enter information in any of the designated fields. These fields are clearly marked and will not collect any personal data unless you expressly consent to its delivery, processing, and storage, in accordance with this Personal Data Policy.

The personal data collected and stored by the Website may be used for the following purposes, depending on the particular case in which they are provided or collected, and in accordance with the consent that has been given, according to this Personal Data Policy:

a) To help establish and verify the user's identity.

b) Maintain the security and integrity of EL PRINCIPAL's systems, facilities and personnel.

c) Provide services and assistance: communicate and respond to user questions, requests for product or customer service information, comments or suggestions.

d) To send the user updates on product or service offers that may be of interest to them, notices of promotions, sales and other information about products of EL PRINCIPAL and its affiliates, including communications for advertising and informational purposes.

e) Maintain records, such as mailing lists or lists of user types, by preferences or characteristics, in order to keep the user informed about products and services and/or for commercial statistics and market research purposes. THE PRINCIPAL may create profiles based on marketing studies and statistical and segmentation techniques and procedures that allow for the personalization of product offerings suited to the user's characteristics and needs. In this context, profiles may eventually be created using technological means to make predictions about the Website user.

f) Improve the EL PRINCIPAL website taking into account user preferences. .

The processing of the user's personal data will be lawful:

a) In cases where it is necessary for the execution or fulfillment of a legal obligation of THE PRINCIPAL or when provided or authorized by law.

b) In cases where it is necessary for the conclusion or execution of a contract between the user of the Website and THE PRINCIPAL, or for the execution of pre-contractual measures between them.

c) In cases where THE PRINCIPAL or a third party has a legitimate interest in processing personal data, such as, for example, to guarantee and improve the functionality and proper functioning of the Website; to protect the interests and security of users or third parties; to protect the public interest that may be affected; or other similar cases as provided by law.

d) In cases where it is necessary for the formulation, exercise or defense of a right before the courts of justice.

e) In cases where the user's consent has been obtained (see next point).

THE PRINCIPAL may share and transfer the collected information to any member of its group of companies, in the countries in which it operates, to the extent reasonably necessary for the purposes and on the legal bases established in this Personal Data Policy and with the limitations imposed by current law.

Subject to the limitations imposed by current law, THE PRINCIPAL will not sell or deliver this information to other unrelated parties, without prejudice to the provisions of this Personal Data Policy and the authorization you grant to the implementation and downloading of third-party cookies as set out in the Web Tracking Policy (see Point 9).

Personal data will be retained until the purpose for which it was collected has been fulfilled or until the user exercises their right to rectification, erasure, and objection. This will be done to the extent that it does not conflict with the legal requirement to maintain its storage.

The Principal will delete or anonymize personal data as soon as it no longer needs it for the purposes mentioned above. This is without prejudice to external sources that store cookies or other similar web tracking mechanisms on the user's device, in accordance with the Web Tracking Policy (see Section 9).

The Principal has established and maintains security measures—administrative, technical, and physical—that allow it to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing, in accordance with applicable law. However, the user should be aware that no communication via the Internet is 100% secure.

In particular, EL PRINCIPAL has the following tools and practices to securely process and store users' personal data, which are carried out and verified by its hosting service:

The main legal basis for the processing of personal data is your explicit consent for the Website to collect, process, handle and store your data, in accordance with this Personal Data Policy.

By using the Website you expressly accept and consent to the processing of your personal data in accordance with this Personal Data Policy.

If you do not agree with this Personal Data Policy, please do not use the Website or provide any data to it.

You declare that you are over 18 years of age.

You may, at any time, provided the respective requirements are met, exercise the following rights:

• Right of access: You can access your personal data to find out what personal data of yours is being processed.

• Right to request rectification of personal data: You have the right to rectify your personal data that you consider inaccurate.

• Right to request the cancellation, erasure or deletion of personal data: you have the right to request the deletion of your personal data.

• Right to request the limitation or restriction of the processing of personal data: you will have the right to request the limitation of the processing of your personal data, for example, to only certain purposes.

• Right to object to the processing of personal data: You have the right to object to such processing at any time, on your own grounds. The Principal will cease processing unless it can demonstrate compelling legitimate grounds for continuing the processing, or where such processing is necessary for the establishment, exercise, or defense of legal claims.

• Right to withdraw any of the consents you have given, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal (without retroactive effect), by sending a written request addressed to: ventas@elprincipal.cl .

• Right to object to receiving advertising by electronic means: by sending a written request to: ventas@elprincipal.cl .
  
  It is likely that the user who requests these actions will not be able to use the Website with all its functionalities again.
  To prevent the collection of personal data, you can always change your device settings.

The Principal may also collect and process personal data through other communication channels, such as telephones, emails, applications, or social media. In these cases, the user will be informed about the purposes of processing their personal data and will be asked for their consent. This Personal Data Policy will also apply to these channels.

THE PRINCIPAL may modify and update this document from time to time, which will be notified on the Website, requesting the corresponding acceptance of the user.