Privacy Policy

PRIVACY POLICY (EN)

1. Data Controller Identification

This Privacy Policy is issued by Grupo Hijuelas and its related companies ("we", "us", or "the Group"), operating in Chile under Law No. 21,719 on Personal Data Protection.

The following legal entities are covered by this policy, each acting as an independent data controller (Responsable del Tratamiento) for the personal data they process:

• Viveros Hijuelas S.A. · RUT 96.835.510-4
• In Vitro Lab SPA · RUT 76.526.723-4
• Sociedad de Transportes San Vicente Ltda · RUT 77.130.310-2
• Comercializadora VH S.A. · RUT 99.524.070-K
• Viveros Stonefly Ltda · RUT 76.034.789-2
• Estudios e Inversiones Viveros Hijuelas Ltda · RUT 76.030.161-2
• Rahue Rentacar S.A. · RUT 76.507.542-4
• Agrícola Puerto Mori S.A. · RUT 76.572.367-1
• Hazelnut Marketing Company Ltda · RUT 76.059.903-4
• Sociedad de Inversiones San Marco Ltda · RUT 76.207.250-5
• Sociedad Agrícola Catapilco · RUT 78.241.100-4
• Viveros VH S.A. · RUT 99.524.470-5
• Sone Mericrom & Research Laboratory S.A. · RUT 96.931.520-3
• Lumina Green SPA · RUT 78.056.091-6
• Hijuelas Genetics SPA · RUT (ver SharePoint)
• Hijuelas Home & Garden SPA
• Tridente SPA
• Sociedad Agrícola Sakura Ltda
• Inversiones Santa Blanca SPA
• Concordia SPA
• Hazelnut Management SPA
• Nefuen Trading Chile SPA
• Agrícola e Inversiones G3 SPA · RUT 77.355.103-0
• Comercial Biosafe S.A. · RUT 76.029.989-8
• Clean And Dry · RUT 78.376.373-7
• Agrícola Forrahue SPA · RUT 76.813.095-7
• Estudios e Inversiones Hazelnut Ltda · RUT 76.743.578-9
• Inmobiliaria Hazelnut SPA · RUT 76.749.219-7
• Nefuen Cracking Company SPA · RUT 78.366.588-3

For all privacy matters, any of these entities can be contacted at: dataprivacy@grupohijuelas.com

‍

2. Scope and Application

This policy applies to personal data collected by Grupo Hijuelas and its related companies through our website www.grupohijuelas.com, digital platforms, and through any direct interaction with our clients, suppliers, employees, and business contacts.

This policy complies with Law No. 21,719 (Chilean Personal Data Protection Law), as well as any other applicable Chilean legislation.

3. Personal Data We Collect

a) Data You Provide Directly — Full name and RUT, email and phone, company name and role, billing information, contractual information.

b) Data Collected Automatically — IP address, browser type, pages visited, cookies.

c) Data from Third Parties — From business partners or public databases with appropriate legal basis.

4. Purposes of Processing

Managing commercial and contractual relationships; responding to inquiries; sending service information (with consent); legal and tax compliance; improving our website; security and fraud prevention; HR management.

5. Legal Basis for Processing (Ley 21,719)

Consent (marketing, non-essential cookies); performance of a contract; legal obligation; legitimate interest (security, fraud prevention).

6. Data Recipients and Processors

Service providers/processors (Encargados) bound by DPAs; public authorities when required by law; related companies within Grupo Hijuelas under intercompany agreements. We do not sell your personal data.

7. International Data Transfers

Some providers may process data outside Chile. Transfers are governed by appropriate mechanisms per Art. 28 of Law No. 21,719. Main platform: Microsoft 365 (United States).

8. Data Retention

Commercial/contractual data: up to 6 years; tax records: per tax law; employee data: per labor law; marketing data: until consent is withdrawn; browsing data: up to 24 months.

9. Your Rights (ARCOP)

• Access (A): obtain a copy of your data
• Rectification (R): correct inaccurate data
• Cancellation (C): request deletion
• Opposition (O): object to processing
• Portability (P): receive data in machine-readable format

Submit requests to: dataprivacy@grupohijuelas.com — Response within 15 business days. Complaints: www.apdp.cl

10. Security Measures

Encryption in transit and at rest; access controls and MFA; security monitoring; staff training; regular DPIAs. In case of breach: APDP notified within 72 hours.

11. Cookies

For details see our Cookie Policy.

12. Changes to This Policy

We may update this policy periodically. Last updated: May 2025

13. Contact and Data Protection Officer

Email: dataprivacy@grupohijuelas.com | Website: www.grupohijuelas.com

‍