Authorization for the Processing of Personal Data

_This is an English translation provided for convenience. If there is any difference between this translation and the Spanish version, the Spanish version prevails._

Text of the Authorization

In compliance with Ley 1581 de 2012 (Colombian Law 1581 of 2012 on personal data protection) and Decreto 1377 de 2013 (Colombian Decree 1377 of 2013, compiled in Decreto 1074 de 2015, Decree 1074 of 2015), I declare that I am over 18 years of age and, in a prior, express and informed manner, I authorize ASCENDEV S.A.S., identified with NIT (Colombian tax identification number) 902.063.194-2, domiciled at Carrera 12 # 24-40, Apto 204, Torre 2B, Yumbo, Valle del Cauca, Colombia, email soporte@school4lulz.online (the "Controller"), to collect, store, use, circulate, update and delete my personal data as a user of School 4 Lulz (school4lulz.online), for the following purposes:

1. To create, verify and manage my account and allow me to sign in (with email and password or with Google).
2. To provide me with the educational service and save my progress, my answers and my quiz attempts.
3. To calculate my points, level, achievements, streak and league, and show my handle, avatar, level and points to other users on the leaderboard and on my profile.
4. To issue my certificates and allow anyone with their link or code to see the name I choose for them, what I completed and the date, in order to verify that they are authentic.
5. To give me access to the practice lab and apply its usage limit, without storing what I type in the terminal.
6. To prevent and detect cheating, fraud and attacks, for which my IP address, my browser (user-agent) and the timing of my answers will be processed, with human review before any action is taken on my account.
7. To send me service emails (verification, password recovery, account notices and notices of changes to the legal documents), notifications within the Platform and notices about the Platform itself. No third-party advertising will be sent.
8. To handle my support requests, inquiries and complaints.
9. To maintain the security of the Platform, diagnose errors and produce internal usage statistics, including knowing which link from its campaigns I arrived from (without third-party trackers).
10. To keep proof of this authorization and comply with legal obligations.

International transfer. I authorize my data to be processed by the providers (processors) that the Controller uses to operate the Platform: Contabo GmbH (Germany and the European Union: servers, database and lab), Cloudflare, Inc. (United States: content files, profile photos, DNS and connection to the lab) and Resend (United States and Brazil: sending and receiving emails), under the terms of the Personal Data Processing Policy.

Sensitive data. I understand that I am not asked for sensitive data and that, if at any time I were asked for sensitive data, my answers would be optional: I will not be required to provide it.

My rights. I know that, as the data subject, I have the right to know, update and correct my data; request proof of this authorization; be informed of how my data is used; file complaints with the Superintendencia de Industria y Comercio (SIC, Colombia's data protection authority) after first completing the procedure with the Controller; revoke this authorization and request the deletion of my data when appropriate; and access my data free of charge. I can exercise these rights by writing to soporte@school4lulz.online.

Policy. I declare that I have been able to read the Personal Data Processing Policy of School 4 Lulz, available at school4lulz.online, which explains in detail the data that is processed, the retention periods and the procedure for inquiries and complaints.

Proof of acceptance. I understand that, in accordance with Ley 527 de 1999 (Colombian Law 527 of 1999 on electronic commerce and data messages), when I check the box, the following will be stored as proof of this authorization: the date and time (UTC), my IP address, my browser (user-agent), the exact version and the digital fingerprint (SHA-256 hash) of this text, and the method of acceptance.