Privacy and Personal Data Protection Policy

1. Introduction

Asercont S.A.S., in compliance with Colombian Statutory Law 1581 of 2012, Decree 1377 of 2013 and related regulation, informs all users, clients, suppliers and employees that it guarantees the protection, confidentiality and proper administration of the personal data it collects through its digital and physical channels. By using this website or providing personal information, the user expressly accepts the processing of their data under this Policy.

2. Data controller

3. Personal data collected

Depending on the relationship with the data subject, Asercont S.A.S. may request, store and process: names and surnames; type and number of identity document; contact phone and email; mailing address; financial and tax information (for accounting or tax services); and employment and academic information (for hiring or partnerships). Sensitive data is requested only when strictly necessary and with the data subject's express authorization.

4. Purposes of processing

Personal data is used exclusively to: handle requests, consultations or quotes made through the website; provide the accounting, tax, financial and administrative services engaged; comply with legal, tax and contractual obligations; send information on updates, regulation, newsletters and events of interest; carry out billing, payment and customer support processes; and evaluate service quality and improve the user experience.

5. Rights of the data subject

The data subject has the right to know, update and rectify their data; request proof of the authorization granted; be informed about the use given to their data; file complaints with the Superintendencia de Industria y Comercio (SIC) for breaches of the law; revoke the authorization or request deletion of the data when the principles of processing are not respected; and access their personal data processed by Asercont S.A.S. free of charge.

6. How to exercise these rights

Send a request to asercont@asercontsas.com.co indicating your full name and identity document, a clear description of the matter and an address or email for the reply. Asercont S.A.S. will respond within the legal terms: inquiries within 10 business days and claims within 15 business days.

7. Retention

Personal data is kept for as long as necessary to fulfil the purposes described, or as required by applicable accounting, tax or labor regulation.

8. Information security

Asercont S.A.S. adopts technical, administrative and physical measures to guarantee the security of the information and prevent its loss, unauthorized access, alteration or improper disclosure.

9. Changes to this policy

Asercont S.A.S. may amend this Policy at any time to adapt it to new legal or internal provisions. Changes are published at https://asercontsas.com.co/politica-de-privacidad/.

10. Acceptance

Use of the website, subscription to newsletters or submission of information through forms implies acceptance of this Privacy Policy and consent to the processing of personal data for the purposes described.