Privacy and Cookie Notice

1. Introduction

This privacy and cookie notice (Privacy and Cookie Notice’) aims to provide users of this website www.sqmnutrition.com (‘Website’) with information concerning the processing of their personal data (‘you’).

The Website is managed by SQM Industrial S.A., a company incorporated under the laws of the Republic of Chile with its registered office at El Trovador 4285, Las Condes, Santiago, Chile (‘we’ or ‘Company’). Weare the controller of your personal data and are therefore responsible for processing it in accordance with applicable data protection legislation.

The Company is part of SQM Group, a globally operating group of companies (the ‘SQM Group’) headquartered by Sociedad Quimica y Minera de Chile S.A., a company also incorporated under the laws of the Republic of Chile and with registered office at the same address above mentioned (the ‘SQM Headquarters’).

As this Website serves as a global portal for our contacts throughout the world, for specific website operations your personal data is processed together with other entities of the SQM Group. Where relevant, we have indicated this below together with additional explanations on our respective roles.

2. What personal data do we process, for which purposes and based upon which legal grounds?

Generally, when you use the Website, we collect personal data via the contact form and via cookies. We collect your personal data primarily directly from you through the contact form. Further, our Website uses cookies, therefore personal data may be obtained indirectly.

Please note that we do not necessarily process all your data listed below, as this depends on the specific situation (e.g. your choice to use the contact form and the content of the message you submit, your preferences regarding cookies). However, we wish to provide you with as comprehensive an overview as possible.

When visiting and using our Website for information purposes only, i.e. if you do not provide us with information, we only collect personal data that your browser transmits to our server, which are technically necessary for us to display our Website to you and to guarantee stability and security.

2.1. Contact form

The data you submit via the contact form on our Website is processed for the purpose of communicating with you, in order to follow-up on and provide an answer to your query or request.

The contact form contains fields which are mandatory to complete as we consider this the minimum information necessary for us to effectively process your request. Consequently, incomplete mandatory fields will prevent submission of the contact form. Through the contact form we process the below listed categories of personal data:

• Personal identification data and contact details: first name, last name, email address, region, country
• Professional data: company, occupation
• Any additional data: the message you leave in the comment section of the contact form may contain additional personal data (e.g. telephone number, qualifications, competences, …..) Please note that we kindly ask you to avoid including any sensitive personal data (e.g. health data, political opinions, religious beliefs…). In any case, we will only process the data that is strictly necessary to communicate with you in order to respond to your inquiry or handle your request.

We process this personal data from you for the stated purpose based on the necessity for the establishment or performance of a contract, if your request can be framed in the establishment or performance of a contract (e.g. request for a price quotation for our products, a request to consider a partnership, a job application). Otherwise, we process your data based on our legitimate interest to do so which is our commercial interest as a company to efficiently and timely answer your queries in relation to us and/or our products.

2.2. Cookies

2.2.1. What are cookies?

Cookies are used when using our Website. Cookies are small text files that are stored by your browser on your device to save certain information or image files, such as pixels. The next time you visit our Website on the same device, the information saved in the cookies will subsequently be accessed on your device and transmitted either to our website servers (“First Party Cookie”) or to those of a third-party provider to which the cookie belongs (“Third Party Cookie”). We have indicated the domain via which each cookie is placed in the table in section 2.2.4.

2.2.2 Why do we use cookies?

We use cookies to guarantee the proper functioning of our Website, to render our Website easier for you to use and to provide you with a more personalized functionality based on your interests and needs. They may also be used to offer you services or to invite you for certain events. We also use cookies to collect statistics that enable us to understand how frequently you use our Website and to help us improve the user experience in relation to this Website.

The table in section 2.2.4. further explains why we use cookies.

2.2.3 Categories of cookies used by SQM

The cookies used can be further classified by their function and lifespan.

By function, a cookie is either:

• Strictly necessary: this cookie is strictly required for the proper functioning of our Website. It enables you to navigate our Website and to use its features such as storing your preferences.
• Analytical: this cookie collects information about how visitors use our Website, e.g. visitor numbers, which pages visitors go to most often, the time spent on these pages, any problems they would face. This cookie therefore provides us with insights on how users interact with our Website and enables improvements.
• Targeting: such cookie is used to deliver content that best suits you and your interests and enables us to deliver more personalised content to you or to limit the number of times you see a banner or survey.

By lifespan, a cookie is either a:

• Session cookie which is erased when the user closes the browser; or
• Persistent cookie which remains on the user’s computer/device for a pre-defined period.

2.2.4 Overview of cookies that may be used

2.2.5. What is the legal ground for our use of cookies and how can you provide consent?

We process your personal data via cookies based upon the following legal grounds:

• For strictly necessary cookies, our legitimate interest in providing you with a secure, functional, and user-friendly Website.
• For all other cookies, your consent.

Upon visiting our Website, you will immediately be introduced to our cookie banner. This gives you the option to accept or refuse optional cookies. Strictly necessary cookies are necessary for the proper functioning of our website and are always activated (unless you opt to manually deactivate or delete them via your browser settings which will impact the functionality of our Website).

2.2.6 Managing cookies in your browser

You always have the possibility to adjust your browser settings to accept or block cookies, or to notify you before you receive a cookie. Each browser has a different procedure for disabling the use of cookies. We suggest using the browser’s ‘Help’ function to consult instructions on how to modify cookie settings. Alternatively, you may wish to visit http://www.aboutcookies.org, which contains comprehensive information on how to do this on a variety of browsers. Furthermore, you will also find additional general information about cookies and specific information, such as on how to erase cookies from your computer or mobile device.

3. How long do we keep your personal data?

We may retain your personal data no longer than necessary for the purposes for which they were collected or as required by applicable law. Generally, we will delete your personal data within a reasonable period in function of the following criteria:

• Purpose of processing: the duration for which your personal data is necessary to fulfill the specific purpose for which it was collected, including any legal, accounting or reporting requirements.
• Legal obligations: any applicable laws or regulations that may impose specific retention periods for certain types of personal data.
• Business needs: the necessity to retain personal data for ongoing business operations, including the management of customer relationships and service improvements.
• Dispute resolution: the need to retain personal data for the establishment, exercise, or defense of legal claims.

4. Sharing of personal data and security measures

4.1. Sharing within our company group

When you use the contact form, we may share your relevant personal data with the SQM Headquarters and other entities belonging to SQM Group. We do so insofar needed in order to make sure the request or inquiry you set out in our contact form reaches the appropriate global and/or local SQM representatives. Your request or inquiry will only be communicated to the relevant SQM entities and their representatives depending on its nature (e.g. for inquiries about our products the Commercial and Customer Service team, for inquiries about job applications the HR team, for inquiries about supplier relationships the procurement team).

When you consent to the use of analytical cookies, we compile your data into aggregated reports on visitor statistics per country and share these with the relevant local entities belonging to the SQM Group. We do so in order to provide them with insights into the popularity of the Website in their respective sales regions. These reports are focused on providing overall website metrics (e.g. total website visitor numbers from a certain country within a certain time period) and are not intended to single out any individual users.

As the Company and the SQM Headquarters are established outside of the European Economic Area (EEA), in a country (Chile) not recognized by the European Commission as providing protection to personal data up to the standards of the General Data Protection Regulation (‘GDPR’), we are required to take appropriate safeguards to ensure that your personal data remains adequately protected in accordance with Chapter V of the GDPR (‘Transfers of personal data to third countries’). For specific information on the safeguards in place to secure international data transfers within our company group, please contact our Cybersecurity and Compliance team at [email protected]

4.2. Sharing with third parties outside our company group

In addition, we may transfer your personal data outside of our company group, to third parties. This is particularly the case if this is strictly necessary in view of the purposes listed above under title 2, or if we are legally obliged to do so.

Please find herewith an overview of the categories of recipients outside our company group whom we may share your relevant personal data with:

• Service providers who assist us in the technical or IT field with the operation of our business, for the purpose of a secure and efficient digital data management and communication
  • To process your request or inquiry you set out in our contact form, we use a tool provided to us by Salesforce Inc., a software company headquartered in San Francisco, USA.
  • The hosting provider for our Website is Amazon Web Services Inc., a company headquartered in Seattle, USA.
• Other third-party technology partners (e.g. cookie and analytics providers as listed under title 2.2.4)

4.3. Security measures

Some of these third-party recipients are established outside of the European Economic Area (EEA) or otherwise operate there. Where the European Commission has recognized the recipient country as providing protection to personal data up to GDPR standards (‘Adequacy Decision’), such transfer is based on this Adequacy Decision (such as the Data Privacy Framework for transfers to companies based in the USA which are certified under the Data Privacy Framework). For transfers to third countries, which the European Commission has not recognized as providing protection to personal data up to GDPR standards by means of an Adequacy Decision or where such Adequacy Decision does not apply to the specific recipient/transfer, we are required to take appropriate safeguards to ensure that your personal data remains adequately protected in accordance with Chapter V of the GDPR (‘Transfers of personal data to third countries’).

Our services and database are protected with industrial standard safety technology, such as industrial standard firewalls and password protection. Employees with access to personal data have been trained to manage such data correctly, and in agreement with our security protocols.

5. What are your rights regarding personal data?

As a data subject, you are entitled to exercise any of the below rights with us. If you wish to do so, please send your request to our Cybersecurity and Compliance team at [email protected] . Upon receipt of your request, we will take reasonable steps to verify your identity, in case of uncertainty, before further processing it.

You have the right to:

• request access to your personal data. This allows you to check what personal data we process about you and to get a copy of it;
• request rectification of your personal data. This allows you to correct or complete incorrect or incomplete personal data that we process about you;
• request erasure of your personal data. This allows you to permanently delete personal data that we process about you. We are not always obliged to delete your personal data at your request – this right only applies in the cases and to the extent provided for by law;
• request restriction of processing of your personal data. This allows you to freeze the use of your personal data by us, without deleting it. We are not always obliged to restrict your personal data at your request – this right only applies in the cases and to the extent provided for by law.
• request data portability. This allows you to transfer, copy or forward personal data easily from one data controller to another. This right can only be exercised if the processing is based on your consent or on a (potential) contract with you;
• object to the processing of your personal data that is based on our or third parties’ legitimate interests. This allows you to oppose the further processing of your personal data. We are not always obliged to honor your objection, in particular when we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

You always have the right to object to the processing of your personal data for direct marketing purposes.

• withdraw your consent at any time, if the processing of your personal data is based on consent, with future effect.

In addition to your data protection rights mentioned above, you also have the right to lodge a complaint directly with your data protection supervisory authority.

If you are located within the European Economic Area (EEA) you can do so with the supervisory authority of the EEA member state where you usually reside, where you have your place of work or where the alleged infringement has taken place. For further information and the contact details of the supervisory authority of each EEA member state, please refer to this website page of the European Data Protection Board with all relevant contact details. In addition, you may always file a claim with the competent civil court for compensation.

6. Updates and Questions?

We may modify this Privacy and Cookie Notice in the future. In case of changes or additions which are material or substantive, we will make sure to appropriately inform you. The date on which this Privacy and Cookie Notice was last updated, can always be found at the top.

If you have any questions about this Privacy and Cookie Notice or your rights hereunder, you can email our Cybersecurity and Compliance team at [email protected]

Date of last review: 12/06/2025