Data Protection Policy

For  PROCESIX,  the protection of personal data is one of the most important concerns in our relationship with our clients.

We strive to protect the privacy of the personal data provided to us by establishing this policy to inform customers, users and suppliers, in a transparent manner, about the processing of the personal data they provide to us.

We establish the guidelines that govern the activities in which we receive personal data, the way in which they are managed according to their specific use and the safeguards considered for data protection.

We constantly update the principles and safeguards so that this policy remains valid and complies with the principles for which it was implemented, the text of which is described in the Data Protection Policy document.

This policy is known and applied by all  PROCESIX collaborators  for the benefit and satisfaction of its clients.

PROCESIX COLOMBIA SAS , identified with NIT number 900.050.767 – 9, in accordance with the provisions contained in Law 1581 of 2012 and Decree 1377 of 2013, Legal Entity considered responsible and/or in charge of the processing of personal data, adopts this privacy and personal data protection policy, regarding its collection, storage and administration received from clients, suppliers, contractors, independent advisors, consultants, collaborators and in general from any natural person who is the owner of the personal data being processed (hereinafter "Owner" or "Owners").

The company  PROCESIX COLOMBIA SAS respects the privacy of each of the Data Subjects, and in general, of any natural person who owns personal data and who provides or provides their information.

In this regard,  PROCESIX COLOMBIA SAS receives the information and stores it safely and appropriately. However, the Holders may check the accuracy of this information and take steps to update it and/or request its deletion. The information is collected, processed and used in accordance with current legal regulations.

Thus, the company  PROCESIX COLOMBIA SAS collects and stores personal information related to the Holders for consultation, processing and use purposes, solely and exclusively if the Holders voluntarily decide to provide the information and give their authorization in this regard. All information provided by the Holders voluntarily forms part of a "Database" that is governed by Law 1581 of 2012 and Decree 1377 of 2013 and other regulations that modify, add to or complement them.

The data is collected for the development and execution of the corporate purpose and the ordinary course of business of the company and compliance with legal provisions, contractual or business commitments.

Before storing or handling personal data,  PROCESIX COLOMBIA SAS complies with the following requirements: a) The Owner must give his/her explicit authorization for such processing, except in cases where the granting of such authorization is not required by law. b) In the event that the owner is physically or legally incapacitated, the legal representatives must grant their authorization. c) Inform the owner of the reason for using his/her data and delimit the limits of such processing.

The databases will be valid for the same period as the purpose or purposes of the processing in each database, or the period of validity indicated by a legal, contractual or specific activity cause.

RIGHTS OF THE OWNERS

1. To know, update and rectify your personal data with regard to the Data Controllers or Data Processors. This right may be exercised, among others, in relation to partial, inaccurate, incomplete, fragmented data that may lead to error, or data whose processing is expressly prohibited or has not been authorized under the terms of Law 1581 of 2012 (or, failing that, with the regulations that regulate, add to, execute, complement, modify, suppress or repeal it).
2. Request proof of the authorization granted to the Data Controller, except when it is expressly excepted as a requirement for the Treatment, in accordance with the provisions of Article 10 of Law 1581 of 2012 (or failing that with the regulations that regulate, add to, execute, complement, modify, suppress or repeal it) or when the continuity of the treatment has been presented in accordance with Article 10, paragraph 4 of Decree 1377 of 2013.
3. Be informed by the Data Controller or the Data Processor, upon request, regarding the use that has been given to your personal data.
4. Submit complaints to the Colombian Personal Data Protection Authority for violations of the provisions of Law 1581 of 2012 (or, failing that, the regulations that regulate, add to, execute, complement, modify, suppress or repeal it).
5. Revoke the authorization and/or request the deletion of the data when the Processing does not respect the constitutional and legal principles, rights and guarantees. The revocation and/or deletion will proceed when the Personal Data Protection Authority of Colombia has determined that in the Processing the Controller or the Person in Charge has incurred in conduct contrary to Law 1581 of 2012 (or failing that, with the norms that regulate, add to, execute, complement, modify, suppress or repeal it) and/or the Constitution. The request for deletion of the information and the revocation of the authorization will not proceed when the Owner has a legal or contractual duty to remain in the database or the controller has a legal or contractual duty to continue with the processing.
6. Access free of charge to your personal data that have been subject to Processing. The holder may consult free of charge his/her personal data: a) at least once every calendar month, and (b) each time there are substantial modifications to the information processing guidelines that motivate him/her to make new consultations.