Legal

Version 1 · Effective October 5, 2026 · Previous versions

NOTICE 1 · Privacy Notice for Employees of Wiseplan Consultora SpA

Destination: Direct Delivery

Terms and Conditions: This document is provided to each employee upon hire and is attached to the onboarding process. It is not published on the website.

Version: Version 1 · Effective as of October 5, 2026

This notice informs you, in accordance with Article 14 ter of Law No. 19,628, how Wiseplan Consultora SpA processes your personal data during your employment relationship.

What data do we process, and where does it come from?

We process the data you provide to us directly in connection with your employment relationship: identification, contact information, employment and social security history, compensation, bank information for payment, dependents, and, when applicable, health information related to medical leave and occupational safety and health. Data regarding your dependents includes information on minors, which we process in accordance with their best interests and strictly limit to what is required by social security regulations for the recognition of allowances and benefits (Art. 16-quater).

We also receive information related to your sick leave and benefits from social security and health care agencies. We do not collect your data from publicly available sources. Data regarding your dependents—including minors—is provided by you; it is processed solely for the purpose of determining the allowances and benefits provided for by law or your contract, is protected by the same safeguards outlined in this notice, and this notice is available to the data subjects.

Why we process your data and on what legal basis

We process your data to manage the employment relationship: hiring, payment of wages, compliance with social security and tax obligations, and management of leave and benefits. The legal bases for this processing are the performance of your employment contract (Art. 13(c)) and compliance with the employer’s legal obligations (Art. 13(b)). Your health data—which is considered sensitive data under Article 2(g)—is governed by the regulations on sensitive data and by the special regime established by law for health-related data (Articles 16 and 16 bis). We process this data only to the extent necessary for the processing of your medical leave requests, work disability benefits, and occupational health and safety obligations, in accordance with Article 16 bis, subsections (e) and (f), and the special regulations governing these matters, with access restricted to those whose job duties require it and without using the data for any other purpose.

Who they are shared with

We disclose your data to the recipients required by law for compliance with labor and social security obligations: pension administrators, health care institutions, social security agencies, and the tax authority, as well as the bank that processes your payroll. Our payroll technology provider processes your data on behalf of Wiseplan, under contract, and is not permitted to use it for its own purposes.

International Transfers

The technology platform used to process payroll operates on cloud infrastructure, the location of which we are formally verifying with the provider. If that verification reveals that an international data transfer is taking place, it will be subject to the provisions of Title V of Law No. 19,628 (Articles 27 through 29) and to appropriate safeguards, and this notice will be updated to reflect that information.

How long do they last?

An employee’s employment and social security records are retained for the duration of the employment relationship and, after its termination, for the statute-of-limitations and audit periods established by law: two years for labor matters (Art. 510 of the Labor Code), five years for civil matters (Art. 2515 of the Civil Code), and three years for tax matters, extendable to six years in the specific cases designated by law (Art. 200 of the Tax Code). Once these periods have expired, the data is deleted; health data is deleted once the purpose that justified its processing has been fulfilled.

Automated Decisions

Wiseplan does not make decisions regarding you based on the automated processing of your data, nor does it create profiles that have legal effects on you (Art. 8 bis); the final decision on matters affecting you is made by individuals.

Your Rights

You may exercise, free of charge, your rights of access, rectification, erasure, objection, portability, and blocking of your personal data (Articles 4 through 9 of Law No. 19,628) by submitting your request via the email address datospersonales@wiseplan.cl. Upon receipt of the request, Wiseplan will acknowledge receipt and respond no later than thirty calendar days thereafter, a period that may be extended once for up to thirty calendar days (Article 11). If, along with a request for rectification, deletion, or objection, you request the temporary blocking of your data, that request will be addressed within two business days of receipt (Art. 11).

If Wiseplan rejects your request or fails to respond in a timely manner, you have the right to file a complaint with the Personal Data Protection Agency, in accordance with the law.

Responsible Party, Policy, and Contact Information

Data Controller: Wiseplan Consultora SpA, RUT 76.425.812-6, with registered office at Los Militares 5953, Office 1208, Las Condes, Santiago, legally represented by Mr. Luis Rosas Asenjo. Wiseplan’s Data Protection Officer is Ms. María de los Ángeles Maturana, whom you may contact through the channel indicated in the previous paragraph. Wiseplan’s General Personal Data Protection Policy, including its date and version, is available on the company’s website. A public summary of the security measures adopted to protect your data—access controls, encryption, and incident management commensurate with the nature of the data processed—is available on the same site. This notice: Employees of Wiseplan Consultora SpA · Version 1 · effective as of October 5, 2026.

NOTICE 2 · Privacy Notice for Candidates in Recruitment Processes

Intended Use: Publication on the website

Terms and Conditions: Suggested URL: /privacy/candidates/ · Linked from the acceptance checkbox on the application form. Publication of this information constitutes acceptance of the international data transfer agreement (A-03).

Version: Version 1 · Effective as of October 5, 2026

This notice informs you, in accordance with Article 14 ter of Law No. 19,628, how Wiseplan Consultora SpA processes your personal data when you participate in a recruitment process.

What data do we process, and where does it come from?

We process the information you provide when you apply—identification, resume, academic and employment history, contact information, and salary expectations—as well as the results of any assessments administered during the process. If you have not applied and we contact you directly (candidate outreach), your data comes from professional platforms where you have posted your profile for employment purposes; we will inform you of this upon first contact, specifying the source platform, and you may choose not to proceed.

Why we process your data and on what legal basis

We process your data to evaluate your application for a specific position and submit it to the company seeking to fill the vacancy. The legal basis for the application is the implementation of pre-contractual measures taken at your request (Art. 13(c)). In the direct search for candidates who have not applied, the legal basis is Wiseplan’s legitimate interest in identifying talent for its hiring processes (Art. 13(d)); you always have the right to be informed of this interest and to object (Art. 8(a)).

Psychological and Occupational Assessments

The psychological assessment, when required by the hiring process, is necessary for the specific purpose of that process: to evaluate the fit between your profile and the position defined by the client company. Since the results constitute sensitive data (Art. 2(g)), we will inform you of this and request your express consent before administering the assessment, in accordance with the general provisions on sensitive data set forth in Art. 16. You are free to withhold your consent; in that case, you may continue in the process only if the position does not require such an assessment. You may also withdraw your consent at any time (Art. 14 ter, subparagraph k): if you withdraw it before the assessment is administered, it will not be administered; if you withdraw it afterward, all further processing of your results—including their inclusion in the report if it has not yet been submitted—will cease, without retroactive effect and without affecting the lawfulness of the prior processing. If the report has already been delivered to the client company, the withdrawal does not affect that transfer, which has already taken place, without prejudice to the rights you may exercise directly with that company, which is responsible for the data it has received (Art. 15).

Who they are shared with

Your application report—including, if applicable, the results of the psychological-occupational assessment—is provided to the client company seeking to fill the vacancy. This transfer constitutes a disclosure of data between data controllers (Art. 15): the company receiving the data becomes the data controller for the data received and must process it in accordance with the purposes of the process. We will inform you of the recipient company no later than the time your report is delivered; as long as the process remains confidential, we will at least indicate the company’s industry and nature of business. In any case, once the transfer has taken place, you may learn the recipient’s identity by exercising your right of access (Art. 5(c)).

Background and Reference Checks

We will only verify your employment references and background with your prior and express authorization, provided on the form in Annex A of this document. We will not request any commercial or financial information from you: the law prohibits this in personnel selection processes (Article 1, third paragraph, of Law No. 20,575).

International Transfers

If the job opening for which you are applying is for a position outside of Chile, your information will be transferred to the affiliated entity in the destination country to carry out the hiring process. We will inform you of this during the respective process, and the transfer will be subject to appropriate safeguards in accordance with Title V of Law No. 19,628 (Articles 27 and 28). Additionally, some of the website’s technology providers may be located abroad; we are verifying these access points, and if international transfers are configured, they will be subject to the same regulations.

How long do they last?

Your data is processed during the selection process. If you are not selected, your data will be deleted or anonymized upon completion of the process (Art. 14(d) of Law No. 19,628). We will retain only a minimal record of the process—process code, date, and result, without a resume or evaluations—for a maximum of one year, for two purposes: to verify the proper conduct of the process and to confirm, solely for the purpose of the fees agreed upon with the client company, whether you were hired by that company within twelve months of your first interview; any additional retention will require a specific basis for a claim, in accordance with the suspension provisions of the retention policy. The detailed results of the psychological and occupational assessments are deleted upon completion of the process; the copy of the report provided to the client company is likewise deleted or anonymized upon completion of the process—its retention is not covered by the minimal record, and any additional retention will require a specific basis for a claim. If you wish to remain available for future processes, we will offer you this opportunity through our talent pool, which is governed by Notice 3 and requires your specific consent.

Automated Decisions

The job portal we use incorporates features from its provider—powered by artificial intelligence—that sort and filter the applications we receive. We are informing you of this because this sorting process constitutes automated processing of your data and may affect the order in which your application is reviewed. The logic applied consists of comparing the information in your application—experience, education, and stated skills—with the requirements of the posted position, and presenting the applications ranked according to that degree of match; it does not incorporate criteria unrelated to suitability for the position. The intended outcome is the order of review, not rejection: the decision to move forward with your application or not is always made by a person. We are verifying the technical details of this process with the provider and will update this information once we receive it. In all cases, you retain the rights to receive an explanation, to request human intervention, to express your point of view, and to request a review of the decision, as well as the right to object to being subject to this processing (Art. 8 bis).

Your Rights

You may exercise, free of charge, your rights of access, rectification, erasure, objection, portability, and blocking of your personal data (Articles 4 through 9 of Law No. 19,628) by submitting your request via the email address datospersonales@wiseplan.cl. Upon receipt of the request, Wiseplan will acknowledge receipt and respond no later than thirty calendar days thereafter, a period that may be extended once for up to thirty calendar days (Article 11). If, along with a request for rectification, deletion, or objection, you request the temporary blocking of your data, that request will be addressed within two business days of receipt (Art. 11).

If the processing is based on the legitimate interest indicated (direct search), you may object at any time (Art. 8(a)).

If Wiseplan rejects your request or fails to respond in a timely manner, you have the right to file a complaint with the Personal Data Protection Agency, in accordance with the law.

Responsible Party, Policy, and Contact Information

Data Controller: Wiseplan Consultora SpA, RUT 76.425.812-6, with registered office at Los Militares 5953, Office 1208, Las Condes, Santiago, legally represented by Mr. Luis Rosas Asenjo. Wiseplan’s Data Protection Officer is Ms. María de los Ángeles Maturana, whom you may contact through the channel indicated in the previous paragraph. Wiseplan’s General Personal Data Protection Policy, including its date and version, is available on the company’s website. A public summary of the security measures adopted to protect your data—access controls, encryption, and incident management commensurate with the nature of the data processed—is available on the same site.