1. GENERAL PROVISIONS

This policy establishes the guidelines under which BUENDÍA MOSQUERA S.A.S., in its capacity as the entity responsible for the processing of personal data, manages the information collected through the official website of the CAFÉ FEDERICO brand .

2. PURPOSE OF DATA PROCESSING

The personal data collected will be used exclusively for the following purposes:

• Manage purchasing, billing, and product delivery processes.
• Respond to requests, suggestions, complaints, or claims.
• Send informational or promotional communications, provided that the owner has given their consent.
• Comply with legal, contractual, and tax obligations.
• Analyze consumption patterns to improve the user experience and optimize our services.

3. INFORMATION COLLECTED

We may request and store the following types of data:

• Identifying information: full name, identification number, address, email address, telephone number.
• Payment and billing information.
• Browsing data: IP address, browser type, operating system, pages visited, cookies, and similar technologies.

4. LEGAL BASIS

The processing of personal data is carried out based on:

• The free, prior, informed, and express consent of the data subject.
• The execution of contractual relationships.
• Compliance with applicable legal provisions.
• The legitimate interest of the company for administrative and commercial purposes.

5. INFORMATION RETENTION

The data will only be stored for as long as necessary to fulfill the purposes described, or for the period required by current regulations. Once this period has expired, the data will be securely deleted or anonymized.

6. TRANSFER AND ACCESS TO THIRD PARTIES

BUENDÍA MOSQUERA S.A.S. will not share or transfer personal data to third parties, except in the following cases:

• When required by competent authorities in the context of legal proceedings.
• When it is essential for the performance of contracted services (e.g., logistics operators or payment gateways).
• When the holder has expressly authorized such transfer.

7. INFORMATION SECURITY

The company implements physical, technical, and administrative security measures designed to protect personal data against unauthorized access, loss, alteration, or misuse. These measures are reviewed and updated periodically.

8. RIGHTS OF DATA SUBJECTS

Users may exercise their rights under the law, including:

Know, update, and correct your data.

• Request the deletion of your information when appropriate.
• Withdraw consent given for processing.
• File complaints with the competent authority for violations of data protection regulations.

9. EXCHANGE AND RETURN POLICY

BUENDÍA MOSQUERA S.A.S. reserves the right to modify this policy at any time. Updates will be published in this same section and will take effect upon publication. We recommend reviewing this document periodically.

10. APPLICABLE LAW

This policy is governed by current Colombian legislation on personal data protection, in particular Law 1581 of 2012 and its regulatory provisions.