How we use your personal data and your rights:

• When you visit, shop or register with Disney online or use any Disney online product, service or mobile application, your personal data is controlled by The Walt Disney Company (Argentina) S.A. Tucumán 1, Piso 4º (C1049AAA) Ciudad Autónoma de Buenos Aires, Argentina.
• Your consent is the lawful basis for us processing your personal data. Your personal data is used for the purposes described in our Privacy Policy and as authorized by you, and further used to provide you with the Disney products and services you request. It may also be used to comply with legal obligations we are subject to or to fulfill our legitimate interests, such as to personalize your experience, develop and improve our services or to detect illegal activities. Disney may also process personal data for purposes of complying with applicable local laws and regulations in the territory where our products and services are offered. With your prior consent, it may also be used to send you offers and promotions.
• You have a number of rights set forth in Colombia’s data protection legislation including the right to access, update, and rectify your personal data. These rights may be exercised against partial, inaccurate, incomplete, fractionated, prone to error data, or data whose treatment is expressly prohibited or has not been authorized, but note that Disney will always seek you consent to process your personal data. You can also request the deletion of your personal data when constitutional and legal principles, rights and guarantees are not being respected by Disney and you can revoke the consent you have freely provided. You can also request evidence of the consent given to Disney, except when applicable law does not is expressly require consent for the processing. You can freely (without charge) access your personal data, at least once (1) every month or at any time when substantial modifications to the Privacy Policy are made. You can file complaints before the Superintendence of Industry and Commerce regarding infractions to the Colombian General Data Protection legal framework. You can also request Disney or its processors, to inform you on the use that has been given to your personal data. Last, you can change your marketing preferences (including withdrawing your consent at any time) – please see our Privacy Policy to learn more about managing your marketing preferences or deleting your account.
• For more information about Disney’s data collection and use practices please read Disney’s Privacy Policy.

Procedure for exercising your rights

Procedure to access your personal data:

You, your successors, representatives and/or proxies, or the representatives of minors, may file requests regarding what personal data is stored in our databases, what is the processing to which it is subject to and what are the purposes sought therewith. This procedure will be guided by the following rules:

1. Requests must be submitted in writing and via email. Disney will leave record of the receipt and procedure of the request.
2. Request will be reviewed to verify your identity. If the request is submitted by somebody other than you (the data subject), and the person is not able to provide evidence that is legitimately acting on your behalf, the request will be rejected.
3. Disney is the entity responsible for processing the request; thus, it will provide answers to you within ten (10) business days following the date on which the request was received by Disney.
4. In the event that a response to the request cannot be provided within ten (10) business days, Disney will inform you of the reasons why the request is still in process and provide the date on which the request will be addressed, which in any case will not exceed five (5) business days following the expiration of the first term.
5. Disney will provide a response via email.
6. The final response to all requests will not take longer than fifteen (15) business days following the date on which the initial request was received by Disney.

Procedure for submitting claims to update, modify and eliminate your personal data and withdraw consent:

You, your successors, representatives and/or proxies,  or the representatives of minors, who consider that the information included on Disney databases must be rectified, updated or eliminated, or when they forewarn the alleged breach of the duties of Disney, may submit a claim. This procedure will be guided by the following rules:

1. The claim must be submitted in writing and via email. Disney will leave record of the receipt and procedure of the claim.
2. The claim will be reviewed to verify your identification. If the request is submitted by somebody other than you (the data subject), and the person is not able to provide evidence that It is legitimately acting on your behalf, the request will be rejected.
3. The claim needs to include the following information: (i) Your name an identification; (ii) Your contact information (physical address and/or electronic address and phone number); (iii) The documents that prove your identity or the corresponding representation documents in case you are successor, representative and/or proxie; (iv) A clear and accurate description of personal data of which you seek to update, modify, eliminate or withdraw consent; (v) A description of the events giving rise to the claim; (vi) All the documentation that you want to make use of; and (vii) Your signature and identification.
4. If the claim or the documentation is incomplete, Disney will require you, within the five (5) business days following the receipt of the claim, to remedy the faults. If you do not submit the documentation and information required within two (2) months following the date of the initial claim, we will understand that you have waived the claim.
5. Once the claim is received with the complete documentation, a legend saying “claim in process” and the reason thereof will be included in the Disney’s database where the personal data is contained, within a term not exceeding two (2) business days. This legend will be kept until the claim has been resolved.
6. Disney will provide an answer for the claim in no more than fifteen (15) business days from the day following the date of its receipt. When the claim cannot be addressed within said term, you will be informed on the reasons for the delay and the date on which your claim will be addressed, which in any case call not exceed eight (8) business days following the data in which the initial claim was received.

Elimination of personal data:

You have the right, at all times, to submit a request to eliminate your personal data of Disney’s database whenever:

1. You consider that your personal data is not being processed according to the principles, duties and obligations set forth in Law 1581 of 2012.
2. There is no legal duty or contractual obligation requiring Disney to maintain your personal data in its database.
3. Whenever the necessary time to fulfill the purpose for which personal data was collected, has expired.

Withdrawal of consent:

1. You can always withdraw your consent for processing personal data, provided that any legal disposition prohibits it or there is a legal or contractual obligation in place that enables Disney to keep processing your personal data.

Disney will keep evidence of the consultation, the claim or the request and its response.

Contact Information for Data Protection Office

• The Walt Disney Company (Argentina) S.A., Tucumán 1, Piso 4º (C1049AAA) Ciudad Autónoma de Buenos Aires, Argentina.
• Our Data Protection Officer can be contacted to exercise your rights by emailing: Latam.privacidad@disney.com
• Phone Number: +1 (877) 466-6669