Data Treatment Policy

GRICOL SA, in compliance with the provisions of the Political Constitution, Law 1581 of 2012, Regulatory Decree 1377 of 2013 and other complementary provisions, establishes guidelines and controls to treat the data obtained in the development of its mission, through its different service channels. Such guidelines include, without limitation, the collection, storage, use, circulation, and deletion of data.

Treatment to which the personal data will be submitted and the purpose of their collection

  • Send information about products and services of your possible interest and/or about changes in the
  • Execute the activities of the signed contractual relationship, including the payment of obligations
  • Measure and evaluate the level of satisfaction with respect to the products and services provided.
  • Carry out technical, statistical, market, product, service or process studies for the organization.
  • Provide the services and/or products required by their
  • Send to physical mail, email, cell phone or mobile device, via text messages (SMS and/or MMS) or through any other analogue and/or digital means of communication created or to be created, commercial, advertising or promotional information about the products and/or services, events and/or promotions of a commercial or non-commercial nature, in order to promote, invite, direct, execute, inform and in general, carry out campaigns, promotions or contests of a commercial or advertising nature, advanced for GRICOL A.
  • Develop the selection, evaluation, and linking process
  • Support internal audit processes or
  • Register the information of employees and/or pensioners (active and inactive) in the GRICOL A databases.
  • Those indicated in the authorization granted by the data owner or described in the respective privacy notice, as the case may be.
  • Provide, share, send or deliver your personal data to represented companies located in Colombia or any other country in the event that said companies require the information for the purposes indicated herein.

The Holder of Personal Data has the following rights:

  • Know, update and rectify your personal data, being able to exercise this right, among others, against personal data that is partial, inaccurate, incomplete, divided, misleading or those whose processing is expressly prohibited and/or that has not been
  • Request proof of the authorization granted, except when expressly excepted as a requirement for treatment, in accordance with the provisions of Law 1581 of 2012.
  • Submit complaints to the Superintendence of Industry and Commerce for violations of the provisions of this law and other regulations that modify, add or complement it;
  • Be informed, upon request, regarding the use that has been given to your personal data.
  • Revoke the authorization and/or request the deletion of the data when the principles, rights and constitutional and legal guarantees are not respected in the treatment. The revocation and/or deletion will proceed when the Superintendency of Industry and Commerce has determined that in the treatment, conduct contrary to those established in the applicable regulations and the Constitution has been incurred.
  • Free access, as established in article 21 of Decree 1377 of 2013, to your Personal Data that has been processed.

Responsible for the attention of queries and claims:

GRICOL S.A.

Carrera 34 # 8A-15 Bogotá DC (Colombia) (+57 1) 360 04 66

When the owner of the data needs to know, update, rectify and delete his data or revoke the authorization for its use, he can send a communication to the following emails:

Procedure so that the holders of the information can exercise their rights:

The request, complaint or claim must contain the identification of the Holder, the description of the facts that give rise to the claim, the address, and accompanying the documents that you want to assert. If the claim is incomplete, the interested party will be required within five (5) days following receipt of the claim to correct the failures. After two (2) months from the date of the request, without the applicant submitting the required information, it will be understood that the claim has been withdrawn. In the event that the person receiving the claim is not competent to resolve it, they will transfer it to the appropriate person within a maximum term of two (2) business days and inform the interested party of the situation. Once the complete claim is received, a legend that says "claim in process" and the reason for it will be included in the database, within a term of no more than two (2) business days. Said legend must be maintained until the claim is decided. The maximum term to address the claim will be fifteen (15) business days from the day following the date of receipt. When it is not possible to address the claim within said term, the interested party will be informed of the reasons for the delay and the date on which their claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the first term.

Validity

The Policy is effective as of March 21, 2015.

GRICOL SA , reserves the right to unilaterally modify, at any time, the Personal Data Processing Policy. Any substantial change in the Information Treatment Policy that may affect the content of the authorization granted by the owner will be communicated to the latter in the terms established by current regulations. In addition, the previous versions of the Personal Data Treatment Policy will be kept.

The "personal data processing policy" in force at all times will be available on the organization's website.