This Personal Data Processing Policy (the "Policy") is issued by PROTEC, identified with NIT 900.123.456-7 ("PROTEC"), in compliance with Article 17 of Law 1581 of 2012, Decree 1377 of 2013 and related regulations.
To establish the guidelines and procedures applied by PROTEC for the collection, storage, use, circulation and deletion of personal data, as well as the rights of Data Subjects and the mechanisms to enforce them.
This Policy applies to all databases administered by PROTEC in its capacity as Controller or Processor, as well as to internal personnel, contractors, suppliers and partners who have access to personal data by virtue of their relationship with PROTEC.
PROTEC collects and processes personal data of the following categories of Data Subjects for the following purposes:
PROTEC does not collect sensitive data or data of minors through its website. When exceptionally necessary to process sensitive data (e.g., biometric data for access control at headquarters), express and explicit authorization will be obtained from the Data Subject, in accordance with Article 6 of Law 1581 of 2012.
Data Subjects whose personal data is processed by PROTEC have the following rights:
The Data Subject or their successors may consult the personal information about the Data Subject that exists in any database. PROTEC will provide all information contained in the individual record or linked to the Data Subject's identification.
Inquiries will be answered within a maximum of ten (10) business days from the date of receipt. When it is not possible to respond within that term, the interested party will be informed, stating the reasons for the delay and the date on which the inquiry will be answered, which in no case may exceed five (5) business days following the expiration of the first term.
The complaint must contain: (i) identification of the Data Subject, (ii) description of the facts, (iii) address and contact details, (iv) documents the party wishes to support.
If the complaint is incomplete, the interested party will be required within five (5) days of receipt to correct the deficiencies. If two (2) months pass without the petitioner providing the required information, the complaint will be deemed withdrawn.
The maximum term to address the complaint will be fifteen (15) business days counted from the day following receipt, extendable by eight (8) additional business days.
This Policy is in force from May 24, 2026 and is of indefinite duration. The databases administered by PROTEC will be valid for the time during which the information is maintained and used for the described purposes, unless otherwise provided by law.