Kondory TecnologíaData Controller
The controller responsible for processing personal data is:
Definitions
In accordance with Colombian Law 1581 of 2012 and Decree 1377 of 2013, the following terms are defined as:
- Personal data
- Any information linked to or that can be associated with one or more specific or identifiable natural persons.
- Sensitive data
- Data that affects the privacy of the data subject or whose improper use may generate discrimination (racial origin, political orientation, religious beliefs, health data, sexual life, biometric data).
- Data subject
- The natural person whose personal data is being processed.
- Data controller
- The natural or legal person who decides on the database and/or the processing of data.
- Data processor
- The natural or legal person who processes personal data on behalf of the data controller.
- Processing
- Any operation on personal data: collection, storage, use, circulation or deletion.
- Authorization
- The prior, express and informed consent of the data subject to carry out the processing of personal data.
- Database
- An organized set of personal data that is subject to processing.
- Privacy notice
- A verbal or written communication addressed to the data subject to inform them of the existence of the data processing policies that will apply to them.
Governing Principles
The processing of personal data by Kondory Technology is governed by the following principles established in Article 4 of Colombian Law 1581 of 2012:
Processing is subject to the provisions of Law 1581 of 2012 and other applicable regulations.
Processing serves a legitimate purpose, which is communicated to the data subject.
Processing may only be carried out with the prior, express and informed consent of the data subject.
Information subject to processing must be truthful, complete, accurate, up-to-date and verifiable.
The data subject is guaranteed the right to obtain information about the existence of data concerning them.
Processing is subject to the limits arising from the nature of the data and the authorization of the data subject.
Information is handled with technical, human and administrative measures to prevent unauthorized access.
Persons involved in processing are obliged to guarantee the confidentiality of the information.
Personal Data Collected
Kondory Technology may collect the following types of personal data:
Identification data
- Full name
- Email address
- Phone number
- Company name and job title (for legal entities)
Navigation and technical data
- IP address
- Browser type and operating system
- Pages visited and time spent
- Cookies and tracking technologies
- Approximate geolocation data
Commercial data
- History of contracted services
- Billing and payment information
- Communications and requests submitted
Sensitive data: Kondory Technology does not collect sensitive data (racial origin, political orientation, religious beliefs, health data, sexual life or biometric data) unless the data subject's express authorization exists and it is strictly necessary for the provision of the service.
Purposes of Processing
The personal data collected will be used for the following purposes:
Execute signed contracts, provide technical support and manage the commercial relationship.
Send information about products, services, promotions and news from Kondory Technology.
Analyze the use of our platforms to improve the user experience and develop new features.
Comply with legal obligations, requirements of competent authorities and fraud prevention.
Carry out invoicing, collection, accounting and tax compliance processes.
Conduct internal studies on consumption habits and preferences to improve the service offering.
Data Subject Rights
In accordance with Article 8 of Colombian Law 1581 of 2012, the data subject has the following rights:
- To know, update and correct their personal data held by Kondory Technology. This right may be exercised, among others, with respect to partial, inaccurate, incomplete, fragmented or misleading data.
- To request proof of the authorization granted to Kondory Technology for the processing of their data, except in cases exempted by law.
- To be informed by Kondory Technology, upon request, of the use that has been made of their personal data.
- To file complaints with the Superintendency of Industry and Commerce (SIC) for violations of the provisions of Law 1581 of 2012, after first filing a query or complaint with Kondory Technology.
- To revoke authorization and/or request the deletion of data when processing does not respect constitutional and legal principles, rights and guarantees.
- To access free of charge their personal data that has been subject to processing.
Inquiries and Complaints Procedure
Inquiries (Art. 14, Law 1581 of 2012)
Data subjects or their successors may consult the personal information held in Kondory Technology's databases. The inquiry will be addressed within a maximum of ten (10) business days from the date of receipt. If it is not possible to address the inquiry within that period, the interested party will be notified and it will be addressed within a maximum of five (5) additional business days.
Complaints (Art. 15, Law 1581 of 2012)
Data subjects or their successors who believe that information in a database should be corrected, updated or deleted may file a complaint with Kondory Technology, which will be processed under the following rules:
- The complaint shall be submitted by request addressed to contacto@kondory.com with the data subject's identification, a description of the facts and any supporting documents.
- If the complaint is incomplete, the interested party will be notified within five (5) days to remedy the deficiencies. If two (2) months pass without the applicant providing the required information, it will be understood that they have withdrawn the complaint.
- Once the complete complaint is received, a notation stating "complaint in process" will be added to the database within no more than two (2) business days.
- The maximum period to address the complaint is fifteen (15) business days from the day following the date of receipt. If it is not possible to address it within that period, the interested party will be informed of the reasons for the delay and the date it will be addressed, which may not exceed eight (8) business days following the expiration of the first period.
Data Transfer and Transmission
Kondory Technology may transfer and transmit personal data to third parties with whom it has a contractual relationship, solely for the purposes described in this policy and in compliance with the legal requirements established in Law 1581 of 2012.
In the case of international data transfers, Kondory Technology will verify that the recipient country has adequate levels of data protection, in accordance with Article 26 of Law 1581 of 2012 and External Circular 005 of 2017 of the SIC.
Kondory Technology uses third-party services such as Google Analytics, Google Ads and hosting platforms that may store data on servers outside Colombia. These providers comply with international data protection standards.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies for:
- Essential cookies: Necessary for the basic operation of the website (session, language preferences).
- Analytics cookies: Allow analysis of user behavior on the website through Google Analytics.
- Marketing cookies: Used to display relevant ads through Google Ads and social media.
- Functional cookies: Remember user preferences to improve the browsing experience.
Users may configure their browser to reject cookies. However, this may affect the functionality of some sections of the website.
Security Measures
Kondory Technology implements technical, human and administrative measures to protect personal data against unauthorized access, loss, alteration or destruction, including:
- Data encryption in transit via SSL/TLS protocol.
- Role-based access control and secure authentication.
- Regular backups and storage on secure servers.
- Staff training on personal data protection.
- Internal information security policies.
- Monitoring and auditing of database access.
In the event of a security incident affecting personal data, Kondory Technology will notify affected data subjects and the Superintendency of Industry and Commerce within the timeframes established by law.
Validity and Amendments
This Personal Data Processing Policy takes effect from its publication on the website www.kondory.com and will remain in force while Kondory Tecnología S.A.S continues to operate.
Kondory Technology reserves the right to modify this policy at any time. Any changes will be published on this page and, when significant, data subjects will be notified through the available contact channels.
Databases will be kept for the time necessary to fulfill the purposes of the processing or as long as a legal or contractual obligation justifies it.
Contact
To exercise your rights as a data subject or for any inquiry related to this policy, you may contact us through: