At Quentro (Fullary SA), we deeply value the protection of our users' personal data and commit to adhering to the highest standards in this area. We align our procedures with top-tier international regulations such as the European Union's General Data Protection Regulation (GDPR) and Brazil's General Data Protection Law (LGPD).

Additionally, we rigorously respect and comply with local data protection laws in every country where we operate. This includes the Personal Data Protection Law (Law 25.326) and its complementary regulations in Argentina, the Law 19.628 on Privacy Protection in Chile, Law 1581 in Colombia, the Federal Law on Protection of Personal Data Held by Private Parties in Mexico, Law 29733 in Peru, and Law 18.331 in Uruguay.

Our commitment is to ensure that our users' personal data is handled with the utmost care and in accordance with the regulations in each jurisdiction.

In this Privacy Policy, we describe our data processing activities conducted through the Quentro application to help you understand what data we collect, how we use it, with whom we share it, and how you can exercise your rights according to the legislation in your country.

What Personal Data Do We Collect?

We collect personal data from users at different instances and for various purposes:

a) When you download the application, we will ask you to link it with your email to assign a unique account to your Quentro wallet where the issuer of your ticket or another person can send it to you. b) We will also ask you to share your first name, last name, and document number to appear on your ticket, as in some cases, the organizer may require you to present your physical document to validate your identity. c) On some occasions, when requested by the event organizer, we may ask you for a selfie to link it to your ticket. When entering the event, you may be asked to scan your face to validate that it matches the registered image. Any claims related to this data should be directed to the event organizer, as Quentro only processes it upon their request. d) At events with nominated tickets, the ticket issuer may send us other data that will appear on your ticket, such as:

• First name
• Last name
• Document type
• Document number
• Date of birth
• Condition for preferential pricing access

How Long Do We Store Your Personal Data?

In principle, your personal data will remain in our database until you decide to delete it, as it may be useful to you in the future. If you wish to delete it, you can exercise your right to deletion, provided it does not affect the rights of third parties, as explained below. When an organizer requests us to obtain a photograph of your face to validate your entry at the event, we will delete your biometric data within six months after the event ends. This period allows us to resolve any claims that require access to this data.

Where Do We Store Personal Data?

For security and reliability reasons, our servers are located in Amazon Web Services in the United States. All Quentro users understand and consent that we will transfer their data to the United States to provide the best service and consent to Quentro delegating the storage of personal data to third parties. If you do not agree to have your data transferred to servers in the United States, you should refrain from using our services.

With Whom Do We Share It?

Quentro does not share or sell users' personal data under any circumstances. We only share it with third parties when we hire them to process it through a digital service necessary for our service. We always ensure that these providers guarantee the same level of protection and security to which we are committed. We share data with the following companies, without prejudice to the future removal or addition of others at Quentro's sole discretion:

Amazon Web Services: We use AWS services (on-demand infrastructure).

Confidentiality

The personal data we process is considered confidential and cannot be disclosed to third parties outside our company or our providers without your authorization. However, we may share a user's personal data with the competent judicial authority that requests it, provided there is a founded resolution.

Rights of Data Subjects

Data subjects (you) have the following rights regarding their personal data:

a) Access: The data subject has the right to access the personal data we process about them free of charge. To exercise this right, send us an email at info@quentro.com with the subject "personal data," and we will contact you shortly to verify your identity and provide access to your data. b) Modification or updating: When the data subject identifies that their data is incorrect or outdated, they can modify or update it without delay, provided it does not affect the rights of third parties. They can do so by sending an email to info@quentro.com with the subject "Update of Personal Data." Some data, such as first name, last name, and email, can be modified directly from the Quentro application. c) Deletion: When the personal data we process is no longer necessary for the purpose for which we collected it, or when you decide to withdraw the consent you gave us to process it, you can request that we delete it from our databases, provided it does not imply or could imply harm to the rights of third parties and there is no legal obligation to retain it longer.

Complaints for Violations of Your Data Protection Rights

You can always contact us via email at info@quentro.com using the subject "Personal Data – Quentro" to report a violation of your rights regarding the processing of your personal data, and we will address the situation as soon as possible. However, you can always turn to the competent authority in each country.

Argentina: Agency for Access to Public Information, located at Av. Pte. Gral. Julio A. Roca 710, 3rd floor, Buenos Aires.

Brazil: National Data Protection Authority, Setor Comercial Norte - SCN, Quadra 6, Conjunto "A", Venâncio 3000 Building, Block "A", 9th floor, CEP 70.716-900, Brasília, DF.

Colombia: Superintendence of Industry and Commerce, Carrera 13 No. 27 - 00, Floors 1 and 3, Bogotá.

Mexico: National Institute of Transparency, Access to Information, and Protection of Personal Data, Insurgentes Sur No. 3211 Col. Insurgentes Cuicuilco, Coyoacán, C.P. 04530.

Peru: National Authority for the Protection of Personal Data, Scipión Llona 350, Miraflores, Lima.

Uruguay: Regulatory and Control Unit of Personal Data, Liniers 1324, 4th floor, Montevideo.

About Us:

Quentro is an application of Fullary S.A., a company incorporated in the Oriental Republic of Uruguay, with an address at Ejido 1275, Office 508, Montevideo, Uruguay.