Your privacy and trust are very important to Pagos y Servicios S.A., so we want to make sure that you know how we safeguard the integrity, privacy and protection of your Personal Data, in accordance with the laws of the Republic of Chile.



For Pagos y Servicios S.A. it is necessary to collect certain Personal Data to carry out activities intrinsic to its commercial and commercial activities. Pagos y Servicios S.A. has a legal and social obligation to comply with legal and security measures sufficient to protect the Personal Data it has collected for the purposes described in this Privacy Notice.



All of the above is done with the objective that you have full control and decision over your Personal Data. Therefore, we recommend that you read the following information carefully.

We inform you that the person responsible for collecting and processing the Personal Data you provide us is: Pagos y Servicios S.A. (hereinafter, “Payments and Services S.A.” or “Responsible”).

For the purposes of this Privacy Notice, Pagos y Servicios S.A. indicates that its address is located at El Golf 150, Las Condes commune, city of Santiago.

Pagos y Servicios S.A. will collect the Personal Data from you that are necessary to fulfill your request for products or services, to formalize your contract, as well as to carry out non-commercial and non-profit activities with you in which Pagos y Servicios S.A. Also, Pagos y Servicios S.A. may collect the Personal Data necessary to allow you access to any of the properties in which its offices are located.



The categories of Personal Data to be collected and subject to Treatment are: (i) identification data (including those derived from their own physical characteristics, such as fingerprints, autograph signatures, hand geometry or iris or retinal patterns, among others); (ii) contact data; (iii) property data; (iv) financial data; (v) academic data; and (vi) employment data.



Pagos y Servicios S.A., may carry out whatever investigations and actions it deems necessary, in order to verify, through any third party, agency or authority, the veracity of the data provided to it, in order to prevent fraud and mitigate operational risks.



Principles of Privacy and Personal Data Protection
The Privacy and Personal Data Protection Principles of Payments and Services S.A. aim to:



1. Establish qualitative processes and practices in the field of Personal Data protection that complement the provisions of current law;

2. Promote policies, processes and good practices for compliance with the Data Protection Act and CMF regulations on cybersecurity issues, as well as complementary laws, guaranteeing the privacy and confidentiality of personal information held by Pagos y Servicios S.A.;

3. Facilitate coordination between the different internationally recognized self-regulatory schemes; and

4. Facilitate transfers with Personal Data managers who have self-regulatory schemes as a safe haven.



To achieve the above-mentioned objectives, Pagos y Servicios S.A. makes available to its customers and potential customers its Principles of Privacy and Protection of Personal Data, as well as its Privacy Notice and its Terms and Conditions of Use of Digital Channels and Website, which you can consult below.



The following Principles of Privacy and Protection of Personal Data (the “Principles”) establish the way in which Pagos y Servicios S.A. will collect, use, store, share, transmit, delete or otherwise process (together the “Treatment”) the Personal Data of its customers, potential customers or other natural persons. “Personal Data” means any information relating to an identified or identifiable natural person. The Personal Data protection standard established in these Principles will be worldwide, providing adequate and consistent protection for the Processing of Personal Data. In these Principles, the term “Owner” refers to any natural person whose Personal Data is processed by Pagos y Servicios S.A.



1. Legality: Pagos y Servicios S.A. is obliged to ensure that Personal Data is processed in accordance with and in compliance with the provisions of Chilean legislation.


2. Consent:
Pagos y Servicios S.A. will obtain the consent of the Owner in a valid manner, that is, in writing, prior to the Treatment, specific in its purpose and informed, in compliance with the provisions of applicable Chilean legislation.


3. Information:

Pagos y Servicios S.A. will provide the Owner with information regarding the existence and main characteristics of the Treatment to which your Personal Data will be submitted through its Privacy Notice, which you can consult here.


4. Quality:
The Personal Data processed will be accurate, complete, relevant, correct, and updated in the terms required for the purposes of its Treatment.

5. Purpose:
Pagos y Servicios S.A. will process the Owner's Personal Data only for the fulfillment of the purposes established in the Privacy Notice.

6. Loyalty:
Pagos y Servicios S.A. will treat the Owner's Personal Data, prioritizing the protection of the Owner's interests and the reasonable expectation of privacy.


7. Proportionality:
Only Personal Data that is necessary, adequate and relevant in relation to the purposes for which they were obtained may be subject to Processing.


8. Responsibility:
Pagos y Servicios S.A. will adopt measures to guarantee due treatment, prioritizing the protection of the interests of the Owner and the reasonable expectation of privacy.


9. Security and Confidentiality:
Pagos y Servicios S.A. will keep the Owner's Personal Data confidential and will limit access to them to those people who specifically need them to carry out their business activities, except as permitted by applicable law. Pagos y Servicios S.A. will comply with industry standards, and will use reasonable administrative, technical and physical security measures to protect the Owner's Personal Data from unauthorized access, destruction, use, modification or disclosure. Pagos y Servicios S.A. will apply industry standard data security measures to third parties that are authorized by Pagos y Servicios S.A. to process your Personal Data on your behalf.


10. International Transfer:
When it is not evident because of the international products or services that the Data Controller requests or the nature of its relationship with Pagos y Serviços, S.A. will inform the Owner if their Personal Data may be transferred outside their country. Pagos y Servicios S.A. will ensure that the international transfer is only carried out in accordance with applicable law. Regardless of where your Personal Data is transferred to, it will be protected by these Principles.
These Principles do not affect any rights that the Owner may have under applicable law, the requirements of any competent data protection regulatory authority or any other type of agreement that the Owner may have with Pagos y Servicios S.A.
These Principles reinforce Pagos y Servicios S.A.'s commitment to protect the Owner's Personal Data, demonstrating our commitment to privacy.
Compliance and oversight
Pagos y Servicios S.A. will implement, monitor and periodically update this privacy policy, including the Principles, the Privacy Notice and the Terms and Conditions for the Use of Digital Channels and Website, and will enforce and/or use the necessary legal resources to comply with these policies. Pagos y Servicios S.A. will pursue legal liabilities against any person or employee who does not comply with these internal policies.

The Personal Data that [Pagos y Servicios S.A.] collects will be used for the following purposes:



• Indispensable for the fulfillment of the legal relationship. To respond to your request for products or services, to formalize and register your contract, or to maintain the legal relationship that is generated, as well as to comply with obligations contracted with you; and


• Not essential for the fulfillment of the legal relationship. Inform you about new services that are related to the service contracted by you, about changes to our services, to evaluate the quality of the service, to carry out internal studies on consumer habits; for marketing, advertising and commercial prospecting purposes, as well as to offer you other products that are not

related to the service contracted by you, whether it is your own products or those of any of our affiliates, subsidiaries, controlling companies, associates, commission agents, business partners, to let you know or invite you to participate in our non-profit social commitment activities that aim to promote the development of people, through educational, social, ecological and cultural projects or to allow you access to any of the properties in which our offices are located.

We collect your Personal Data directly when you provide it to us by various means, such as when you participate in our promotions or give us information in order to provide you with a service.

In addition, other information may be collected from other sources accessible to the public or permitted by law, such as telephone directories or the global Internet information network, including open social networks and other sources accessible to the public with unrestricted access.

You may object to the Processing of your Personal Data for purposes that are not indispensable for the legal relationship that gave rise to the service you have contracted or requested, indicating this in the section incorporated for this purpose in the request for the service or contract that you sign with Pagos y Servicios S.A.



On the other hand, to revoke your consent at a time after the formalization of the service you have contracted, you can request it by sending an email to aviso.privacidad@bcipagos.cl or by writing to the address of [Pagos y Serviços S.A., through which we will exclude you from any non-essential processing of your Personal Data, subject to proof of your identity or, where appropriate, that of your legal representative, who will proceed without the need to comply with any additional requirement and, therefore, you will not have to come back later for any answer.

You or your duly accredited legal representative may exercise, when appropriate, your rights of Access, Rectification, Cancellation or Opposition by sending an email to aviso.privacidad@bcipagos.cl or by writing to the address of the Data Controller, which must be accompanied by documents proving the identity of the Owner (official identification with photograph) or, where appropriate, the legal representation of the Owner in terms of common legislation. It is important to mention that the exercise of any of the above-mentioned rights is not a prerequisite nor does it prevent the exercise of another right.



The response to the request that meets the above-mentioned requirements may be notified to the Owner via email (when the email address is provided) from the address aviso.privacidad@bcipagos.cl, by messaging or by fax, in addition to being available at the Responsible's address after proof of identity by any of the means indicated above. For security reasons, requests for the exercise of ARCO rights that are sent to the above-mentioned e-mail address will only be answered when they undoubtedly meet all the requirements to prove the personality of the Owner. If this requirement is not met, the requirement that must be corrected will be indicated or you will be invited to submit it directly at the address of Pagos y Servicios S.A.

Any modification to this notice will be notified to you through any of the following means: (i) a message sent to the last email you provided or to your mobile phone or through any electronic means you use to carry out transactions with Pagos y Servicios S.A. (ii) written communication sent to your home address; or (iii) through messages published in widely circulated newspapers, or on our website.

If you are a natural person provider of Pagos y Servicios S.A or are a proxy or shareholder of a supplier and are a natural person, the Privacy Notice contained here will also apply to you, and the processing of your information will be limited according to the purposes established in the medium by which the existing legal relationship has been formalized.

Pagos y Servicios S.A may transfer your Personal Data to third parties when the transfer: (i) is provided for and authorized by current laws; (ii) has been authorized by you.



In particular, with the authorization of the owner, and in order to complement the services offered and/or provided by Pagos y Serviços S.A., we may share your data with Banco de Crédito e Inversiones, our related company, for the development of commercial and informational actions, the contracting of products and services and the fulfillment of legal obligations. This authorization includes the processing of your personal data and its incorporation into your database, as well as the communication, transmission, and transfer, of any personal data, when necessary or convenient for (i) the proper execution of the Contracts or instructions you send to Pagos y Serviços S.A; (ii) add new attributes or benefits that improve the quality of the services or products made available to you; or (iii) to process personal information for statistical purposes.

If you decide to access Pagos y Servicios S.A. digital media, such as websites, applications or publications on social networks, we warn you that they use “Cookies” and “Web Beacons” to recognize you when you reuse or return to those digital media or channels. Cookies or Web Beacons are small files that a website or application can download and store on your mobile device or computer, including your internet browser, and that can monitor your behavior on the network. You can choose to browse the digital channels of Pagos y Serviços S.A. without accepting Cookies or Web Beacons. Without them enabled, you will be able to access and navigate digital channels, but you may not be able to use some of their features. This information is collected to allow digital channels to operate properly, evaluate their performance and support promotional campaigns. To disable Cookies and Web Beacons, you must do so through your browser's privacy option (located in Internet Settings, Options or Preferences) and remove them by checking the corresponding box. More information about Cookies, Web Beacons or web tracking tools can be found in our Terms and Conditions of Use for Digital Channels and Website.