In accordance with what is defined by Law 1581 of 2012, Regulatory Decree 1377 of 2013, External Circular 002 of 2015 issued by the Superintendence of Industry and Commerce, the internal information management policy implemented by NAAK S.A.S., and other related regulations, through which general provisions on habeas data are established and the processing of information containing personal data is regulated, I hereby declare expressly that:

Identification data of the data controller:

Name: NAAK S.A.S.
Address: Calle 30 # 4 A-45 Edificio Forever
W&L Oficina: 506; Medellín, Colombia
Phone: +573202322680
Email: customers@devierparfums.com
Website: www.devierparfums.com

I authorize NAAK S.A.S., freely, voluntarily, in advance, explicitly, informed, and unequivocally, to collect, store, use, circulate, delete, and, in general, process personal data regarding financial, personal, and credit information that I have provided or will provide, in accordance with legal terms, for the purposes described in this document and in the personal data processing policy of NAAK S.A.S.

• This authorization to process my personal data extends throughout the entire period in which a commercial relationship with NAAK S.A.S. may be established and following its termination, provided that such processing is related to the purposes for which the personal data were initially provided.
• In this sense, I acknowledge that the personal data subject to processing will be used specifically for the purposes outlined in NAAK S.A.S.'s personal data processing policy. • Likewise, I declare that I have been informed and am aware of the rights granted to the data subject by the legal framework and jurisprudence, including, among other prerogatives, the following.
• To know, update, and rectify personal data in front of the data controller or data processors. This right can be exercised, among other things, in relation to partial, inaccurate, incomplete, fragmented data that may mislead or data whose processing is expressly prohibited or has not been authorized.
• To request proof of the authorization granted to the data controller, unless expressly exempted as a requirement for processing.
• To be informed by the data controller or data processor, upon request, about how my personal data has been used.
• To file complaints with the Superintendence of Industry and Commerce regarding violations of the personal data protection regime.
• To revoke the authorization and/or request the deletion of personal data when the processing does not comply with constitutional and legal principles, rights, and guarantees.
• To access my personal data that has been subject to processing in this authorization and for the established purposes, free of charge.

Finally, I acknowledge that in cases where I need to exercise the rights, the respective request can be made through the mechanisms established for this purpose by NAAK S.A.S., a company that has also made its data processing and usage policy clear in this authorization.

Therefore, this authorization is granted on the 26 day of the month of October in the year 2023.