PERSONAL DATA PROTECTION AT IMEK

About Personal Data Protection

7. HOW WILL YOUR PERSONAL DATA BE PROTECTED?

o IMEK is committed to taking all types of preventive administrative, technical, and physical security and privacy measures during the execution of its activities involving personal data, from training and awareness of employees, to the use of advanced encryption technologies and firewalls.
o It adopts existing security policies, mechanisms, and procedures for the protection of personal data and accidental or unlawful events involving destruction, loss, alteration, communication, or dissemination.

o We adjust and implement a management of unauthorized access to internal systems, with access restricted to the location where information and personal data are stored. In addition, those who have access to personal data of data subjects are committed to maintaining confidentiality, with the implementation of institutional information security measures.

o All available precautions are taken unrestrictedly by IMEK to ensure that the collected information is stored securely, with security systems compatible with market standards. However, it is possible that there may be a security incident involving personal data, and if this eventually occurs, all possible measures will be taken within our capacity to remedy any consequences, ensuring you the necessary transparency and communication, depending on the level of criticality of the incident.
o In addition to these points, we also focus on educating and raising awareness among our employees, with continuous training on the importance of privacy and personal data protection, always ensuring internal controls and confidentiality obligations.

8. WITH WHOM CAN THE DATA BE SHARED?
o The data collected in the various areas of IMEK will not be commercialized or transferred.

o They may be shared with other companies of the same group, if necessary, always aiming to better serve you, in order to fulfill the purposes expressed in this document.

o They may also be shared with data processors, companies that may process them according to the purposes defined here.

o The data may be shared with authorities, government, or third parties, always aiming to protect IMEK's interests in case of any judicial or administrative conflict, as provided by law.

o Some service providers, data processors, or data processors may receive personal data, and they will always act in accordance with IMEK's guidelines, committed to this Policy, adopting organizational and technical measures with the required security levels for the protection of privacy and personal data obtained.

o In cases of merger, acquisition of the company, or joint venture, the data may be shared with potential acquirers for the respective legal structuring of the operation.

o Personal data such as name, phone, and email may be shared with third-party platforms (personal data processors) to enable the sending (via email, SMS, WhatsApp, among others) of our content to you, the data subject.

o Credit assessment companies, for authentication, fraud prevention, and credit protection purposes

9. FOR HOW LONG WILL PERSONAL DATA BE STORED?

o IMEK adopts the following personal data retention policy:
? Personal data will be processed by IMEK in accordance with applicable law, being retained only in legal cases and only for the period necessary to achieve lawful, specific, and informed purposes, such as accountability and compliance with legal or regulatory obligations, as per applicable provisions.
? Data will be deleted whenever you request deletion, and IMEK accepts and processes your request.
? It is also important to clarify that, even with the purpose of deleting unnecessary data or the data subject's intention, IMEK may preserve the information required to comply with legal and regulatory obligations or for the regular exercise of our rights. Therefore, we reserve the right to keep the data in situations where there is a legal obligation to do so, as well as for the preservation of health and life or when there is still a contractual relationship that requires data processing.
? In summary, your data will be stored: (i) for the time required by law; (ii) until the end of personal data processing; or (iii) for the time necessary to preserve IMEK's legitimate interests.