Personal Data Processing Policy
At Arcetec, we are committed to protecting your personal data. Learn about our privacy policy and how we safeguard your rights.
What you need to know about how we process data so you can use our services with confidence
1. Introduction
Arcetec Soluciones Tecnológicas S.A.S., in its ongoing commitment to protecting the privacy and security of the personal data of customers, employees, suppliers, and other stakeholders, adopts this Personal Data Processing Policy in compliance with Law 1581 of 2012, Decree 1377 of 2013, and other applicable regulations in force in Colombia.
This policy sets out the guidelines and procedures for the collection, use, storage, transfer, transmission, and deletion of personal data, guaranteeing the rights of data subjects and promoting a culture of respect for and safeguarding of information.
2. Data Controller
**Name:** Arcetec Soluciones Tecnológicas SAS **NIT:** 900557979-0 **Address:** CE SAN ROQUE OFICINA 505 T3, Cajicá, Colombia **Email:** info@arcetec.com.co **Phone:** +57 3003073994
Arcetec Soluciones Tecnológicas S.A.S. is responsible for the processing, custody, and protection of personal data, and for ensuring compliance with the principles and obligations set out in this policy and Colombian law.
3. Purpose of Data Processing
The personal data collected will be used by Arcetec Soluciones Tecnológicas S.A.S. for the following purposes:
• Administrative, accounting, tax, and commercial management, including the registration, updating, and retention of information about customers, employees, suppliers, and third parties.
• Sending information about products, services, promotions, marketing campaigns, commercial activities, and events organized by Arcetec Soluciones Tecnológicas S.A.S.
• Compliance with obligations arising from contracts and applicable legal regulations, in labor, commercial, and civil matters.
• Evaluation and improvement of the quality of the services provided, as well as the development of satisfaction surveys and market studies.
• Ensuring information security, controlled access to physical and digital facilities, and the protection of IT assets.
In no case will personal data be used for purposes other than those described here, except with the prior, express, and informed authorization of the data subject.
4. Data Subject Rights
Individuals whose personal data is processed by Arcetec Soluciones Tecnológicas S.A.S. have the right to:
• Know, update, and correct their personal data held by Arcetec Soluciones Tecnológicas S.A.S. when it is partial, inaccurate, incomplete, fragmented, or misleading.
• Request proof of the authorization granted for the processing of their data, except in cases exempted by law.
• Be informed about how Arcetec Soluciones Tecnológicas S.A.S. has used their personal data.
• Revoke the authorization and/or request the deletion of their data when it is determined that the data is not being used in accordance with constitutional and legal principles, rights, and guarantees, provided there is no legal or contractual duty that prevents it.
• Access free of charge the personal data that has been processed by Arcetec Soluciones Tecnológicas S.A.S.
5. Data Subject Authorization
Arcetec Soluciones Tecnológicas S.A.S. will request prior, express, and informed authorization from data subjects, in all cases required by law, before carrying out any type of processing of their personal data.
This authorization may be obtained in physical or electronic form, or by any other mechanism that allows it to be retained and consulted later. The authorization will include the identity of the data controller, the purpose of the processing, and the data subject's rights.
In cases exempted by law, such as information requested by a public or administrative entity in the exercise of its legal functions or by court order, the data subject's authorization is not required.
6. Security Measures
Arcetec Soluciones Tecnológicas S.A.S. implements reasonable technical, human, and administrative measures to protect the personal data in its custody against the risk of loss, unauthorized access, alteration, disclosure, or destruction. These measures include, among others:
• Restricted information access policies and the use of secure credentials.
• Periodic data protection and security training for staff.
• Implementation of encryption, backup, and antivirus technologies in information systems.
• Auditing and continuous monitoring of the systems that store personal data.
Arcetec Soluciones Tecnológicas S.A.S. periodically reviews and updates its procedures and technologies to ensure information security.
7. Transfer and Transmission of Data
Personal data may be transferred or transmitted to third parties located inside or outside Colombian territory, to the extent that such transfer or transmission is necessary to fulfill the purposes set out in this policy or to meet contractual or legal requirements.
In any case, Arcetec Soluciones Tecnológicas S.A.S. will ensure that the recipient of the data provides an adequate level of protection and has contractual mechanisms in place that guarantee the confidentiality and security of the information.
When the transfer or transmission requires authorization from the data subject, Arcetec Soluciones Tecnológicas S.A.S. will request it in advance and on an informed basis.
8. Procedure for Exercising Rights
Data subjects may exercise their rights of access, update, rectification, deletion, and revocation by submitting a written request to Arcetec Soluciones Tecnológicas S.A.S. by email at sac@arcetec.com.co or in person or by mail at the address provided.
**The request must include:**
• Full name of the data subject.
• A clear and precise description of the request or the right to be exercised.
• Information and documents that verify the identity of the data subject or of their legal representative, if applicable.
• Contact information to receive a response (email, address, phone number).
Arcetec Soluciones Tecnológicas S.A.S. will handle requests within the time limits established by law, taking the necessary measures to ensure that data subjects can effectively exercise their rights.
9. Effective Date
This Personal Data Processing Policy takes effect on September 27, 2021, and will be available for review on the official website of Arcetec Soluciones Tecnológicas S.A.S.
Any changes will be communicated in a timely manner through the company's official channels. Updated versions will automatically replace previous ones.
This policy will be reviewed periodically to ensure compliance with current regulations and alignment with best practices in personal data protection.