PERSONAL DATA PROTECTION

AutoPlan EAFC S.A.

At AutoPlan EAFC S.A., we are committed to protecting and ensuring the privacy of your personal data. We have created this section to inform you how we use your data and to guarantee the absolute confidentiality of your information through the use of high security standards, in accordance with Law No. 29733 (Personal Data Protection Law) and its current regulations approved by Supreme Decree No. 016-2024-JUS.

AutoPlan EAFC S.A. owns personal data databases duly registered with the National Registry of Personal Data Protection (RNPDP) of the National Authority for Personal Data Protection (ANPD), under the Ministry of Justice and Human Rights.

1. Privacy Policy and Personal Data Processing

AutoPlan EAFC S.A. processes the personal data of its associates, clients and users in strict accordance with the principles established in Title I of Law No. 29733:

Legality: the data is processed only in accordance with the law.

Consent: the processing requires the prior, informed, free, express and unequivocal consent of the holder, except for the exceptions provided for in article 14 of Law No. 29733.

Purpose: Data is collected for specific, explicit, and legitimate purposes, and is not used for incompatible purposes.

Proporcionalidad: solo se tratan datos pertinentes y no excesivos respecto a la finalidad declarada.

Proportionality: only relevant and non-excessive data is processed in relation to the stated purpose.

Security: technical, organizational and legal measures are implemented to protect personal data.

The data is processed for the management and administration of the collective fund to which the holder belongs, compliance with contractual and legal obligations, communication of relevant information about the program, and compliance with obligations before the Superintendency of the Securities Market (SMV) and INDECOPI.

2. Consent for Additional Uses and Transfer of Information

By signing the collective fund management contract, and/or through additional express consent where applicable, AutoPlan EAFC S.A. may use the holder's personal data for the following additional purposes:

Sending commercial and marketing communications about new programs and products.

Statistical studies and analysis of associate behavior.

Transfer of data to companies within the economic group for purposes compatible with the contract.

Transfer to third-party service providers acting as data processors under contract.

All data transfers to third parties outside the country are carried out only to destinations that guarantee an adequate level of protection or through the subscription of equivalent contractual guarantees, in accordance with article 15 of Law No. 29733 and the relevant article of D.S. No. 016-2024-JUS, and after prior notification to the ANPD.

3.  Video Surveillance Policy

AutoPlan EAFC S.A. has video surveillance systems at its facilities located at Av. Manuel Olguín No. 335, Office 805, Surco, Lima. The images and voices captured by these systems constitute personal data and their processing is governed by Directive No. 01-2020-JUS/DGTAIPD on Video Surveillance and Personal Data.

Purpose: security of facilities, property and people who enter or remain in the offices of AutoPlan EAFC S.A.

Retention period: Images are kept for a maximum period of 30 calendar days, unless they are necessary for the clarification of incidents or required by a competent authority.

Information sign: mandatory signage has been placed in the video-monitored areas, in accordance with the model established by the Directive.

Prohibition: Cameras are not to be installed in rest areas, restrooms, changing rooms or other areas where the dignity of people is affected.

Database: The video surveillance database is registered in the RNPDP.

4.  Learn how to exercise your ARCO rights

In accordance with Article 19 of Law No. 29733 and the relevant articles of Supreme Decree No. 016-2024-JUS, you have the following rights regarding your personal data:

A — Right of Access

You can request information about whether your personal data is being processed, the characteristics of the processing, the purpose, the recipients, the origin of the data, and the retention period. Response time: 20 business days.

R — Right of Rectification

You can request the correction of your personal data when it is inaccurate, incomplete, or no longer relevant for the purpose of processing. Response time: 10 business days.

C — Right of Cancellation

You can request the deletion of your personal data when the purposes for which it was processed have ceased, when the established retention period has expired, or when the processing is unlawful. Response time: 10 business days.

O — Right of Opposition

You can object to the processing of your personal data in the cases provided for by law, particularly when the processing is based on consent and is not necessary for compliance with a legal or contractual obligation. Response time: 10 business days.

Procedure for exercising ARCO rights

To exercise any of the ARCO rights, the holder must send their written request to AutoPlan EAFC S.A. through the following channels:

Email: lpdp@autoplan.pe

In person: Av. Manuel Olguín No. 335, Office 805, Surco, Lima, during business hours.

Phone: (01) 613-6633

The request must identify the data subject, specify the right they wish to exercise, and include a copy of a valid identity document. If AutoPlan EAFC S.A. denies or fails to respond to the request within the legal timeframe, the data subject may appeal to the National Authority for the Protection of Personal Data (ANPD) through the trilateral protection procedure.

AutoPlan EAFC S.A. is regulated and supervised by the Superintendency of the Securities Market (SMV).

Business hours: Monday to Friday from 9:00 a.m. to 7:00 p.m. | Saturdays (calls only): 8:00 a.m. to 12:00 p.m.

This document has been prepared in accordance with Law No. 29733 (Personal Data Protection Law), D.S. No. 016-2024-JUS (Current Regulations), D. Leg. No. 1353 and Directive No. 01-2020-JUS/DGTAIPD on Video Surveillance.