CONTENT

1. General Information of the Company 

2. Scope and implementation of the policy 

3. Processing and Purpose 

4. Obligations of RIPUZ SAS 

5. Rights of the individual 

6. Claims 

1. General Information of the Company

RIPUZ SAS with NIT 900 431 946-1, with 3CX Web Client"> 900 431 946-1, is a company incorporated and existing according to the laws of the Republic of Colombia and domiciled in the city of Bogota, is an entity conscious and committed to the protection of the privacy of information related to personal data of employees, suppliers and their customers stored in our databases, is data.

2. Scope and implementation of the policy

In accordance with the provisions of Law 1581 of October 17, 2012, RIPUZ SAS adopts a Manual of Data Privacy Policies and aims to guarantee the rights of the holders of Personal Data, publicise the mechanisms and procedures for giving effect to these rights to consult, enquire about, complain about and complain about the purpose and processing of personal data. 

The Company communicates to all Personal Data holders and users of the website, what are their rights to authorize, access, consult, modify, update, rectify, delete their Personal Data, or request the revocation of the authorization given to the Company to carry out any type of treatment.
This policy regulates how RIPUZ SAS obtains, collects, uses, stores, holds, circulates, processes, transfers, deletes, and otherwise processes confidential information and personal data of individuals. The data includes the name, identification and contact details of natural persons, email, telephone and other data related to the consumption of our services. 

This Policy shall apply to all Processing of Personal Data within Colombian territory by the Company, its employees and those third parties with whom the Company agrees partially or totally the execution of any activity related to the Processing of Personal Data for which the Company is responsible. 

3. Processing and Purpose

RIPUZ SAS, in the course of its commercial activities, will collect, store, use and perform various operations with the Personal Data. The Personal Data processed by the Company must be submitted only for the following purposes: 

3.1) Comply with the internal processes of the Company in the areas of operation, administration of supplier customers, contractors and the administration of their personal data in the information systems. 

3.2) To send information and commercial offers and to prepare market studies, statistics, surveys, analysis of market trends, satisfaction surveys on the services provided by the Company. 

3.3) Transmit personal data to third parties where contracts have been concluded for this purpose and for commercial or/or operational purposes. 

3.4) To administer the Company’s human resources, including, but not limited to, the employment relationship with the Company, training processes, performance evaluation, social welfare and occupational health programs, issue of work certificates and supply of references. 

3.5) Carry out the activities necessary for the management of requests, complaints and claims filed by the Company’s clients and third parties. 

3.6) Conduct events, seminars, and training in general on topics related to products and services offered by the Company. 

3.7) Comply with the Company’s tax and accounting records obligations, in accordance with legal provisions. 

3.8) Verify financial and legal information in contractual processes carried out by the Company. 

4. Obligations of RIPUZ SAS

4.1) To protect the personal data included in the databases and/or systems of RIPUZ SAS or in those databases and/or systems for which it is responsible, the company will treat personal data in a fair, lawful, truthful, transparent, secure and confidential manner. In particular, it shall not process personal data at all, unless the person concerned has given his authorisation for such processing. 

4.2) RIPUZ SAS shall take reasonable steps to ensure that such person is informed about the purpose of the processing of his data. 

4.3) RIPUZ SAS does not generally seek to obtain sensitive data related to the following aspects: racial or ethnic origin, political opinions, religion or other similar beliefs, trade union membership, social human rights organisations, or that promote the interests of any political party, physical or mental health, sexual life or biometric data. 

4.4) Guarantee to the data subject the full and effective exercise of the right to habeas data. 

4.5) Request and keep the authorisation records granted by the data subject. 

4.6) It shall inform the holder of the purpose of the collection and of the rights conferred on him by virtue of the authorization granted. 

4.7) It will keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, use or unauthorized access. 

4.8) Update the information, communicating in a timely manner to the processor (in case RIPUZ SAS entrusts the treatment to a third party), all new developments in respect of the data previously provided to it and shall take the other measures necessary to keep the information provided up to date. 

4.9) Rectify the information where it is incorrect and communicate it to the processor (if RIPUZ SAS entrusts the treatment to a third party) 

4.10) It will process the queries and complaints made by the data owners. 

4.11) Inform the data subject at his request of the use made of his data; 

4.12) It shall inform the data protection authority when security codes are breached and there are risks in the administration of data subjects' information. 

4.13) Comply with the instructions and requirements issued by the Superintendency of Industry and Commerce. 

4.14) RIPUZ SAS shall comply with the policies and procedures designed to remove personal data in accordance with the purpose for which the personal data is kept. 

4.15) RIPUZ SAS shall not permit personal data in its custody, other than public information, to be made available on the Internet or other mass media, unless there is authorisation or access is technically controllable to provide restricted knowledge only to data holders or authorised third parties. 

5. Rights of the individual

According to the Act, Personal Data Holders have the following rights: 

5.1) Know, update and rectify your Personal Data before the Company

5.2) Request proof of the Authorization granted to the Company, unless the Law indicates that such Authorization is not necessary.

5.3) Submit applications to the Company regarding the use that you have given to your Personal Data

5.4) To file complaints with the Superintendence of Industry and Commerce regarding violations of the Act

5.5) Revoke your Authorization and/or request the deletion of your Personal Data from the Company’s Databases, provided that there is no legal duty or contractual obligation on the part of the Owner with the Company

5.6) Request access and access free of charge to your Personal Data that have been subject to Processing. 

6. Claims

6.1) The holder of the data that considers that the information contained in a database of RIPUZ SAS, must be corrected, updated or deleted, may file a claim with Company, for which RIPUZ SAS has enabled its employees, customers, suppliers and all persons whose data are processed in the databases of RIPUZ SAS the form "Habeas Data Claim" included on the website. 

6.2) Steps to follow for a claim: 

Step 1: The claim will be made by registering the request in the form contained on the website that includes, first name, last name, email, type of claim (Correction, Update, Deletion or Consultation) the description or explanation of the facts giving rise to the claim and the documents to be invoked. 

Step 2: If the claim is incomplete, RIPUZSAS will request the data subject within five (5) days after the receipt of the claim to complete the information necessary to respond to the request. The data subject shall be deemed to have withdrawn the claim when two (2) months have elapsed from the date of the request, without the data subject submitting the required information. 

Step 3: Once the claim is received with the complete information and supports, the requests will be registered in our management system describing the reason for the claim and a date of compliance. 

Step 4: The maximum term to give response and attention to the claim will be fifteen (10) working days counted from the day following the date of its registration and receipt. RIPUZ SAS will inform the interested party when it is not possible to respond to the claim within this term, explaining the reasons for the delay and the date on which their claim will be dealt with and in all cases may not be more than fifteen (10) working days after the first expiration. 

RIPUZ SAS