Privacy and Security

Beware of phishing

One of the main threats to online security is phishing, where cybercriminals send emails that appear legitimate, inviting users to access fraudulent websites.

Some tips to help you identify this type of email include:

• The email does not correspond to the company that is supposedly requesting the information.
• It contains a suspicious attachment (e.g., *.js).
• The greeting is generic (e.g., "Dear Customer").
• There may be spelling and/or grammatical errors in the body of the email, often because it has been translated from another language.
• It usually includes a warning or threat that failure to act will result in negative consequences (e.g., account suspension).
• Some emails have a poorly designed or misaligned format.

Links in emails

Activa Alternative Assets does not and will not send emails to its clients containing links to pages requesting passwords, account numbers, or card details.

Some cybercriminals replicate the websites of major financial institutions. Tips to identify such sites include:

• Secure websites display a padlock icon in the browser's address bar.
• Errors in the web address (e.g., http://www.activaalternativeasset.co).
• Links embedded in emails that do not correspond to the organization or have unrelated names.

Passwords

• Whenever possible, create passwords longer than 8 characters.

As a precaution, always access your account by entering the official Activa Alternative Assets website address (https://www.activaalternativeassets.com/) directly into your browser.

Suspicious emails

If you receive a suspicious email, consider the following:

• Do not click on attachments, as they may install harmful malware.
• Do not click on any links, especially if prompted to provide personal data.
• Do not reply or use contact details provided in the email.
• Delete such emails to prevent potential infections or data theft.

Antivirus software

Obtain a licensed antivirus solution to protect your systems and workstation. Ensure you install the latest version and keep it updated.

Password changes

Change your password frequently, avoiding easily guessed options (such as birthdays or family names).

Use elements to increase password complexity such as:

• Symbols (!$%&)
• Uppercase letters

Protection of your personal data

At Activa Alternative Assets, we make every effort to prevent the loss, misuse, and alteration of personal data under our control. Our security policies are periodically reviewed and improved as necessary through technological and organizational measures.

Only authorized employees and service providers have access to your personal data. When personal data is shared with third parties for processing, we ensure through contractual agreements that it remains secure. We retain your personal data for the duration of the service relationship and for a reasonable period thereafter in case you wish to use our services again.

To protect your data, we use secure data networks protected by firewall systems and password protection in accordance with industry standards. However, we cannot guarantee that personal data voluntarily disclosed at public events organized by Activa Alternative Assets will not be collected and used by third parties, in which case you may receive unsolicited communications.

We collect your personal data for the following purposes:

1. To provide the product, service, or information you requested:

   If you are a client of Activa Alternative Assets, we use your name and address (postal and email) to deliver the requested service and manage follow-up (e.g., invoices, subscription reminders).

2. To process payments:

   Your credit card number or banking details used for automatic payments are used solely for payment processing and to offer payment options, not for marketing purposes.

3. To send information:

   We may occasionally send you more detailed information about our products and services.

4. Other purposes:

   We may also use your personal data to:

   • Detect errors, fraud, theft, and other illegal activities, and protect Activa Alternative Assets and third parties.
   • Understand your needs and preferences, conduct surveys, and improve communication.
   • Obtain verified reports regarding the number of clients by products and services.
   • Carry out business operations such as acquisitions, sales, or financing activities.
   • Any other purpose disclosed to you in a timely manner.

Activa Alternative Assets collects information through various means:

1. Direct input:

   Forms, calls, and similar contact mechanisms.

2. Physical documentation:

   Legal documents requiring personal data and signatures.

3. Demographic and interest data:

   Collected via browsing analysis (e.g., Google), subject to user consent.

4. Cookies:

   Small text files used to gather information such as browser type, operating system, visit duration, pages viewed, etc. Users may configure their browser to accept or reject cookies.

Use of personal data:

Personal data collected is used to ensure proper system operation and improve services. It may also be disclosed to authorities when required by law or for national security.

Data storage:

Data is retained as long as necessary to provide services. Financial and legal records are stored for 10 years, while other records are retained for 5 years.

Data processing:

Personal data is processed solely for purposes related to the company’s business and services. It may also be used for statistical purposes if anonymized.

Personal data may be transferred to third parties when:

• The data subject has given consent.
• Confidentiality safeguards are ensured.
• There is a justified reason.
• It is required by law or legal proceedings.
• It contributes to service improvement.

Key considerations:

• Service providers: Must ensure protection of shared data.
• Statistical studies: Data may be shared in anonymized form.
• Legal compliance: Data may be shared with authorities when required.

In accordance with Personal Data Protection Law (Law 19.628), individuals have the right to:

• Access their personal data and information about its processing.
• Request correction of inaccurate data.
• Request deletion or cancellation when data is no longer legally justified.

These rights may be limited if they interfere with regulatory functions, legal confidentiality, or national security.

Activa Alternative Assets reserves the right to modify this policy at any time. Changes will be announced on our website. Where required, consent will be obtained for new uses of personal data.

All rights, including intellectual property rights, over content within Activa Alternative Assets systems belong to the company. This includes publications, forms, and other materials created by employees or contracted third parties.

Content from public sources may be used for non-commercial purposes only and requires prior written authorization from Activa Alternative Assets.