Until the entry into force, on December 1, 2026, of the Law as amended by Law No. 21719.

DEPÓSITO CENTRAL DE VALORES AND SUBSIDIARIES

1. ‍Introduction

Depósito Central de Valores S.A. and its subsidiaries, DCV Registros S.A. and DCV Asesorías y Servicios S.A. (hereinafter collectively referred to as “DCV”), through this Privacy and Personal Data Processing Policy, establish the general guidelines for the protection of personal information collected, processed, and transmitted through www.dcv.cl, and inform data subjects of their rights.

A “data subject” and/or “user” refers to the person who freely accesses the information
available on www.dcv.cl, registers, comments, or sends a message through the designated
online forms.

DCV will request only the minimum and strictly necessary data in relation to the purposes for which it is required.

The confidentiality and privacy of all personal data collected, processed, and transmitted through www.dcv.cl shall adhere to the legal framework established in Article 19 No. 4 of the Political Constitution of the Republic of Chile and Law No. 19628 on the Protection of Private Life and Personal Data, including its amendments.

DCV respects the privacy of all users who visit this website.

DCV does not control or verify the accuracy of the information provided by data subjects and is therefore not responsible for any violation resulting from the unlawfulness, inaccuracy, illegitimacy, alteration, misuse, fraud, or penalty derived from such information.

Personal data previously collected will be subject to the provisions set forth in this Privacy Policy.

2. Scope of this Data Policy

This Privacy and Personal Data Processing Policy applies to all visitors of DCV’s website, www.dcv.cl, who agree to provide their personal data, whether they are clients, suppliers, employees, regulators, or members of the general public.

Identification of the Data Controller

• Company Name: Depósito Central de Valores S.A.
• City: Santiago
• Country: Chile
• Correspondence: Av. Apoquindo 4001 piso 12, Las Condes.
• Website: www.dcv.cl
• E-mail: [email protected]
• Telephone: +56 22 3939001

3. Processing and Purpose of Data Processing

DCV processes personal data in the course of fulfilling its corporate purpose and regular business operations, for the following purposes and any related or consequential purposes:

a) To develop commercial relationships and promote DCV’s services and/or products.

b) To establish contact through any physical or electronic means (e-mail, landline, mobile phone, chat, SMS, or to registered addresses) in order to maintain effective communication with data subjects, optimize and improve the marketing of DCV products, and facilitate the proper delivery of services.

4. ‍Authorization for the Processing of Personal Data

DCV will only process personal data after obtaining prior authorization from the data subject.

5. Rights of the Data Subject

Access: Any individual, either personally or through a legal representative or proxy, as applicable, has the right to request from DCV information regarding the data held about them, its recipients, the purpose of storage, and the identification of the individuals or entities to whom such data is regularly transmitted.

Modification: If the personal data is proven to be erroneous, inaccurate, ambiguous, or incomplete, the data subject has the right to request its correction. Once the rectification has been made, the data previously held may no longer be processed.

Erasure: Without prejudice to legal exceptions, the data subject may also request the deletion of their data if its storage lacks legal basis, if the data has expired, or if they no longer wish to appear in the corresponding register, either permanently or temporarily.

Blocking: The data subject may request the blocking of their data when it was provided voluntarily or is used for commercial communications and has expired, or if they no longer wish to appear in the corresponding register, either permanently or temporarily.

The exercise of the aforementioned rights is subject to exceptions when explicitly established by law or when such actions would compromise confidentiality or secrecy mandated by legal or regulatory provisions. Additionally, the modification, deletion, or blocking of personal data stored by legal mandate may not be requested, except in cases provided for by the relevant law.

To exercise any of these rights, please send an e-mail to the Marketing Department at [email protected], following the instructions outlined in the procedure below:

PROCEDURE FOR EXERCISING RIGHTS UNDER LAW No. 19628

(Applicable until the entry into force of the law amended by Law No. 21719 on December 1, 2026)

1. Request

1. E-mail Subject: Request for personal data adjustment
2. E-mail Content:

1. Identification of the data subject and/or their legal representative
2. A valid e-mail address or another equivalent electronic means to receive the response.
3. Identification of the specific personal data or processing in relation to which the right is being exercised
4. In the request for adjustment, the data subject must clearly indicate the specific modifications or updates to be made and, where applicable, provide supporting documentation.
5. When requesting data deletion, the data subject must state the grounds for the request and provide supporting documentation, if applicable.
6. For the right of access, it is sufficient to identify the data subject.
7. The e-mail containing the personal data adjustment request must be sent to: [email protected]

2. Acknowledgment of Receipt and Response Time

DCV will acknowledge receipt of the request and will respond within 2 business days, provided there are no objections that would prevent prompt resolution. The response will be sent to the e-mail address specified in item (1)(b)(ii).

3. Cost

The procedure is free of charge, unless new requests are submitted within six months of a previous one. In such cases, the cost will be 0.25 UF + VAT per request.

4. Confirmation of Update

Upon request, DCV will provide a copy of the modified electronic record (relevant section only). If further modifications or deletions are made, the data subject may also request an updated copy free of charge, provided six months have passed since the last request. Otherwise, the cost will again be 0.25 UF + VAT per request.

6. Amendments to the Personal Data Processing Policy‍

DCV reserves the right to amend this Personal Data Processing Policy in order to adapt it to new legal, jurisprudential, or technical requirements. Any material changes to this policy will be duly communicated to users/data subjects through publication on our website. If data subjects do not agree with the revised policy, they may exercise their rights in accordance with the procedure set forth therein.