Privacy Policy

In accordance with the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, and other applicable regulations (hereinafter, 'Data Protection Legislation'), this Privacy Notice is issued.

1. Identity and address of the Responsible Parties:

Nilho, S.A.S (hereinafter, 'Nilho', 'Responsible Parties' or 'We', indistinctly) processes the personal data of the data subject (hereinafter, 'You', the 'Data Subject' or 'User'). The Responsible Parties are domiciled at Cra 25 #4-25, Medellín, Colombia.

2. Processing of personal data:

Nilho will be responsible for the personal data obtained through https://www.couponhub.ae (hereinafter, "CouponHub Site"). Data may also be collected from third parties and other sources permitted by law, with each party being responsible for the corresponding processing. You guarantee that you have authorization to provide third-party data and ratify your consent to this Notice.

3. Personal data processed by the Responsible Parties:

• Identification and contact data.
• Online identifiers.
• User interests.
• Location data.
• Calls and conversations in service centers.
• Data regarding persons sanctioned by government agencies.

For sensitive purposes, identification and contact data are processed.

4. Purposes of data processing:

Primary and necessary:

• Maintain, develop, and manage the contractual relationship.
• Display and/or market personalized products and/or services.
• Create, order, catalog, classify, divide, separate, and store User data and files.
• Provide information and notifications.
• Manage payments and transactions.
• Develop and improve the CouponHub Site.
• Implement market strategies and satisfaction surveys.
• Offer promotions, offers, and benefits from loyalty programs and benefits from the Responsible Parties and/or third parties.
• Provide advice, clarifications, complaint handling, customer service, as well as monitor their quality by storing the corresponding conversations.
• Comply with any legal provisions and obligations, national or international, applicable to the Responsible Parties, their subsidiaries and/or affiliates, as well as to manage any judicial process or process and respond to any requirements or requests from the authorities.
• Carry out processes related to corporate restructuring of the Responsible Parties, such as merger, consolidation, sale, liquidation, or transfer of assets.
• Complementary activities necessary for the realization of the above purposes.

Secondary or accessory:

• Marketing, advertising, and commercial prospecting.
• Contact and sending information about news and offers.

By virtue of the above, Nilho collects and uses the location of devices to identify coupons in your location. Notwithstanding this, in all these cases, location information is used and stored to offer a better experience to all our users.

If you do not wish your personal data to be processed for these secondary or accessory purposes, you can: send an email from this moment to team@nilho.co, following the procedure referred to in section 7 of this Privacy Notice.

5. Options to limit use or disclosure:

In all legally appropriate cases, you can limit the use or disclosure of your personal data by sending an email to team@nilho.co, following the procedure referred to in section 7 of this Privacy Notice.

6. Transfer of personal data:

Your personal data may be transferred, either within the national territory or abroad, in accordance with applicable regulations. These transfers will be carried out in the following manner:

• To authorities, such as the National Electoral Institute (INE), government agencies or entities, in compliance with or in relation to the obligations contemplated in the legislation applicable to one of the Responsible Parties, their subsidiaries and/or affiliates. This includes compliance with official requirements and/or the need for the recognition, exercise, or defense of a right in a judicial process.
• To controlling companies, affiliates, subsidiaries, related companies, or companies belonging to the same business group as the Responsible Parties. These transfers are carried out for marketing, advertising, promotion, commercial prospecting, reference processes, elaboration, valuation, and analysis of User profiles, centralized information storage, analytical and statistical purposes, as well as historical user registration and conducting surveys regarding the Responsible Parties, their subsidiaries and/or affiliates.
• To third-party acquirers, derived from corporate restructuring of one of the Responsible Parties, such as merger, consolidation, sale, liquidation, or transfer of assets. These transfers are necessary for the maintenance or fulfillment of a relationship between said Responsible Party and the Data Subject.
• To third parties that display and market products and/or services or agree to manage an assignment through the Site, as well as to service providers and commercial allies, including financial institutions. These transfers are necessary for the maintenance or fulfillment of a relationship between one of the Responsible Parties and the Data Subject, or to administer, develop, maintain, personalize, and improve the Site, products and/or services, operating systems, and carry out activities necessary for its optimal and correct functioning, as well as prevent or detect fraud or abuse and/or compliance with any of the purposes described in the Privacy Notice.
• To third parties and/or service providers for the attention of the Data Subject regarding the contracted services and the activities related to the follow-up and fulfillment of the obligations derived from the contracted services.
• To third parties that display and market services and/or products or agree to manage an assignment through the Sites and Apps. This is done with the purpose of following up or carrying out activities related to any acquisition and delivery of products and/or services through the Sites and Apps, as well as complying with the obligations derived from the legal relationship between the Data Subject and said third parties.

Additionally, the possibility of transferring personal data to third parties that display and market products and/or services through the Site, commercial allies, and other strategic allies of the Responsible Parties, for marketing, advertising, or commercial prospecting purposes, in case of express authorization by the User, is contemplated.

In all the mentioned cases, this Privacy Notice will be communicated to the receiving third parties, ensuring that the information is used under the terms of the same. If you do not express your refusal for such transfer, we understand that you have granted us your consent.

7. Means for the exercise of rights:

In legally appropriate cases, you have the right to exercise before each of the Responsible Parties the following rights regarding your personal data, applicable to all collected data:

• (i) Rights of Access, Rectification, Cancellation, and Opposition (ARCO Rights).
• (ii) Revoke the consent granted to each of the Responsible Parties for the processing of your personal data.
• (iii) Limit the use or disclosure of your personal data.
• (iv) Express your refusal for the processing of your personal data with respect to the secondary and accessory purposes mentioned above.

To exercise these rights, you must submit the corresponding request by sending an email to team@nilho.co that expresses the request and attach the following documents:

• Copy of the documents that prove your identity (valid official identification with photograph) or, if applicable, legal representation, according to the terms established in the Data Protection Legislation.
• Any other element or document that facilitates the location of your personal data.

At any time, you can request the deletion of all personal data collected by the Responsible Parties, in accordance with the provisions of Condition 7.

The requests of the Data Subjects for the exercise of their rights regarding personal data will be attended to within a period not exceeding 20 business days from their reception, with the possibility of making requirements or rectifying according to the times of the Data Protection Legislation. The Responsible Parties may extend this period for up to an additional 20 business days when necessary, with prior notification. In case the request is appropriate, it will be effective within 15 business days following the sending of the response by the Responsible Parties.

You can obtain the requested information or personal data through electronic documents in conventional formats or any other legitimate means that guarantees and accredits the effective exercise of the requested right.

The Personal Data Departments of each of the Responsible Parties are in charge of processing any request from the Data Subjects for the exercise of their rights regarding personal data. You can contact them through the email team@nilho.co.

The Responsible Parties seek to keep your personal data updated and request your cooperation to promptly communicate any change that should be taken into account and incorporated into their databases. You guarantee and respond, in any case, for the veracity, accuracy, validity, and authenticity of your personal data or those of any third party under your custody or legal representation, with each Responsible Party complying with the provisions of the applicable legislation in relation to the data of said third parties received by one of the Responsible Parties.

8. Automatic data collection:

We want to inform you that the Site uses cookies and other technologies to automatically monitor your behavior, provide you with our products and/or services, and provide you with an optimal and personalized experience during its use. In addition, they allow us to offer you new products and services based on your preferences. The personal data collected through these technologies include IP address, websites and sections visited on the Sites or related pages, browser characteristics, device characteristics, operating system, language preferences, referenced URLs, information about actions and behaviors on the Sites and Apps, as well as location and localization data while the Apps are open.

If you wish, you can deactivate these technologies by accessing the Privacy and/or Security option(s) located in the Options, Tools, Internet Preferences sections or similar functions of your Internet browser. You can also do this through the configuration icon, tools, or similar options on the device where the App(s) are installed. However, when deactivating them, it is important to keep in mind that this action could affect the total functionality that the Sites and Apps offer.

In relation to the collection of personal data through APIs by transfer or remission, the Responsible Parties may obtain information corresponding to telephone and/or email, and said data may be shared with third parties.

9. Changes to the Privacy Notice:

This Notice may be modified due to legal requirements, privacy practices, or changes in the business model. Changes will be communicated in the corresponding section of the Site.

We are committed to keeping you informed about any modification to this Privacy Notice.