PERSONAL DATA PROCESSING POLICY

Regarding the processing of personal data, this document establishes the collection, use, sharing, deletion, and all other activities related to the processing of personal data as follows:

FIRST – Definitions: For a clear understanding of the provisions contained herein, the following terms are defined:

• Authorization: The prior, express, and informed consent of the data subject to process their personal data. (It is considered granted upon acceptance of this policy.)

• Database: An organized set of personal data subject to processing.

• Personal Data: Any information linked or that can be associated with one or more specific or identifiable natural persons.

• Data Processor: A natural or legal person, public or private, that processes personal data on behalf of the data controller.

• Data Controller: A natural or legal person, public or private, that determines the purposes and means of the processing of personal data.

• Data Subject: The natural person whose personal data is being processed.

• Processing: Any operation or set of operations performed on personal data, such as collection, storage, use, sharing, or deletion.

• Privacy Notice: A verbal or written communication from the data processor to the data subject, informing them of the existence of these privacy policies, how to access them, and the purpose of the data processing.

• Public Data: Data that is not semi-private, private, or sensitive. It includes information regarding a person's marital status, occupation, or status as a merchant or public servant, which is generally found in public records, official documents, official gazettes, and judicial decisions not subject to confidentiality.

• Sensitive Data: Data related to a person's private life or that, if misused, could lead to discrimination. This includes data regarding racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, social or human rights associations, health information, sex life, and biometric data.

• Transfer: The assignment of personal data when the data processor or controller located in the U.S. sends the data to a third party, who may also be a data controller, inside or outside the U.S.

• Transmission: The communication of personal data inside or outside the U.S. when the processing is performed by the data processor on behalf of the data controller.

SECOND – Purpose of Data Collection: In order to provide the best possible service and ensure the highest quality for users, suppliers, employees, contractors, and clients, BE ME CASE LLC collects personal data as part of its service delivery.

THIRD – Data Collected: BE ME CASE LLC collects personal data (such as contact information, location, identification, preferences, and statistics) necessary for optimal service delivery and to fulfill its obligations. If the requested data is not provided, BE ME CASE LLC cannot guarantee proper service or the fulfillment of its obligations.

FOURTH – Processing of Personal Data: By accepting and/or signing the "Authorization for Processing of Personal Data" as part of this policy, the data subject grants their express consent for:

1. The collection and processing of personal data, which will be added to the database of BE ME CASE LLC for the purpose of promoting and offering products and services, as well as fulfilling obligations related to the services or goods provided.

2. The sending of statistical, evaluated, interpreted, analyzed, and personalized information regarding BE ME CASE LLC's products and services through digital and/or electronic channels.

3. The management of any claims.

4. The use of information for legal purposes and other needs arising from the direct relationship between BE ME CASE LLC and the data subject.

FIFTH – Rights of the Data Subject: The data subject has the right to access, correct, delete, and object to the processing of their personal data at any time. They may also revoke their consent by sending a letter to the offices of BE ME CASE LLC or an email to info@conecty.com. Specifically, the data subject has the right to:

• i) Know, update, and correct their personal data held by the processor or controller, especially if it is incomplete, inaccurate, misleading, or unlawfully processed.

• ii) Request proof of the authorization granted to the data processor, unless expressly exempted by law.

• iii) Be informed by the processor or controller regarding the use of their personal data (acceptance of this policy is understood as prior notice and authorization).

• iv) Access their personal data free of charge, subject to applicable laws.

SIXTH – Data Transfer to Third Parties: BE ME CASE LLC will not share personal data with third parties, except as established in this policy, unless the data subject provides prior, express, and informed consent (granted upon acceptance of this policy) or if required by a legal authority. Personal data may be shared with:

• The data subject, their successors, or legal representatives.

• Public or administrative entities in the exercise of their legal functions or pursuant to court orders.

• Third parties expressly authorized by the data subject or as required by law.

SEVENTH – Guarantee of Data Access: BE ME CASE LLC guarantees access to personal data held to the data subject, subject to prior verification of their identity or the legitimacy of their representative, at no cost. This access will allow the data subject to review and update their data.

EIGHTH – Inquiries and Claims Procedure: To submit inquiries, requests for changes, complaints, or claims regarding personal data, the data subject may contact BE ME CASE LLC via:

• Physical mail (to the offices of BE ME CASE LLC).

• Email: info@conecty.co

NINTH – Obligations of BE ME CASE LLC: As the data controller, BE ME CASE LLC has the following duties:

• a) Guarantee the full and effective exercise of the right to access, update, and delete personal data.

• b) Maintain adequate security measures to prevent unauthorized access, loss, or misuse of personal data.

• c) Update, correct, and delete data in a timely manner as required by law and this policy.

• d) Update the information provided to the data processor within five (5) business days following receipt thereof.

• e) Address any inquiries or claims from data subjects in accordance with applicable laws and regulations.

• f) Implement internal policies to ensure the proper handling of inquiries and claims, as well as compliance with provisions regarding personal data processing.

• g) Label data in the database with the legend "claim in progress" if applicable and in accordance with the law.

• h) Label data with the legend "information under judicial dispute" upon notification of a judicial proceeding related to the data.

• i) Refrain from sharing disputed information.

• j) Permit access to personal data only to authorized persons or those permitted by the data subject.

• k) Inform the data subject of any security breaches or risks in the management of their personal data.

TENTH – Responsibility in Data Processing: BE ME CASE LLC is the sole entity responsible for the processing of personal data, acting through a designated employee or officer.

ELEVENTH – Duration: This policy comes into force as of 2023 and supersedes any prior policy agreed upon between BE ME CASE LLC and its users, suppliers, employees, contractors, or clients.

Any complaints, requests, or petitions related to personal data collected by BE ME CASE LLC shall be directed to our offices at 2600 S Douglas Rd Ste 913, Coral Gables, FL 33134, USA, or via email at info@conecty.com.

TWELFTH – Consent and Liability: By accepting these policies, the data subject consents to the proper processing of their personal data by BE ME CASE LLC. If no objection or request to cease the use of personal data is submitted, BE ME CASE LLC shall not be held liable for the use of the data as described in this policy.