HOUSEOFPUBS – PRIVACY POLICY & DATA COMPLIANCE STATEMENT

Drusimar S.A., operating under the trade name Houseofpubs, with legal address in Uruguay, is the entity responsible for
the processing of personal data collected via www.houseofpubs.com.
For any data protection inquiries, please contact our Data Protection Officer at: info@houseofpubs.com.

2. Personal Data Collected

We collect personal data voluntarily provided by users, such as name, email, company, and preferences through contact
forms.
Additionally, we collect automatic data including IP address, cookies, device/browser information, and session duration
through analytics tools and tracking technologies.

3. Legal Basis & Purposes

The processing of personal data is based on:

User consent
Performance of contractual obligations
Legitimate interests of Houseofpubs
Compliance with legal obligations, including Uruguay’s Law 18.331

Purposes include:

Providing content, newsletters, promotions, and services
Enhancing user experience and website functionality
Fraud prevention and security
Fulfilling legal and regulatory requirements

4. Data Disclosure & Third Parties

We may share data with:

Service providers (hosting, analytics, email marketing)
Advertising partners (with prior user consent)
Legal authorities when required by applicable law
All third parties are bound by confidentiality and data protection agreements.

5. User Rights

Users have the right to:

Access, rectify, update, and delete their data
Restrict or object to processing
Request data portability
Withdraw consent at any time without affecting the lawfulness of prior processing
File complaints with Uruguay’s data protection authority (URCDP) at
www.gub.uy/unidad-reguladora-control-datos-personales

6. Data Retention

We retain personal data only as long as necessary for its intended purposes and to comply with legal requirements,
following defined retention schedules.

7. Security Measures

We implement technical and organizational security measures including:

Encryption and secure storage
Access controls and authentication mechanisms
Regular security audits and risk assessments
Data minimization and privacy by design principles
Breach notification procedures in line with Uruguayan regulations, informing URCDP and affected users within 72
hours if required

8. International Data Transfers

We transfer data internationally with adequate safeguards, including:

Uruguay’s recognized EU adequacy status
Standard contractual clauses and additional technical safeguards for other regions
Compliance with international data protection standards (GDPR, etc.)

9. Cookies & Tracking

We use cookies for:

Website functionality
Analytics and performance measurement
Personalization and targeted advertising (with user consent)
Users can manage cookie preferences through our cookie banner.

10. Automated Decision-Making and Profiling

We do not engage in fully automated decision-making that produces legal or similarly significant effects on individuals.
We may use profiling for service personalization, always based on user consent.

11. Policy Updates

This policy may be updated to reflect changes in legal requirements or our practices. Updates will be published with a
new effective date. Material changes will be communicated directly where feasible.

Annex: Uruguay – Legal Framework

Law 18.331 on Personal Data Protection and its regulatory decrees
Decree 414/009 and Decree 64/020 introducing privacy by design, DPO requirements, and breach reporting
obligations
URCDP oversees compliance, database registrations, and enforces data protection rights
International data transfers permitted with adequate protection; Uruguay benefits from EU adequacy recognition

Final Statement

Houseofpubs (Drusimar S.A.) is committed to safeguarding privacy, respecting user rights, and complying with data
protection regulations both in Uruguay and internationally.

For more information or to exercise your rights, please contact: dpo@houseofpubs.com

Last Updated: July 2025