Privacy Policy – Personal Data Handling

Privacy Policy – Personal Data Handling

PURPOSE

This policy aims to establish the criteria for the collection, storage, use, circulation, and deletion of personal data handled by IQOVE. This applies to natural or legal persons with whom IQOVE has or has had relationships, such as (but not limited to): employees and their families, shareholders, consumers, customers, distributors, suppliers, commercial partners, contractors, advisors, creditors, and debtors.

SCOPE

This policy applies to all personal information recorded in IQOVE’s databases, where IQOVE acts as the data controller.

OBLIGATIONS

IQOVE acknowledges that personal data belongs to the individuals to whom it pertains, and only they can decide over it. Therefore, IQOVE will only use the collected personal data for the purposes for which it is duly authorized, always in accordance with applicable data protection laws.

IQOVE complies with the responsibilities of data controllers as defined in Article 17 of Colombian Law 1581 of 2012 and related regulations.

DATA CONTROLLER

IQOVE, headquartered at Carrera 57 #38-290, Interior 1724, Bello, Antioquia, Colombia. Website: www.iqove.com, Phone: (+57) 305 330 8137.

PROCESSING AND PURPOSES

For Customers:

  • To transfer collected information to IQOVE departments for business operations (billing, treasury, accounting, events, workshops, etc.).

  • To comply with legal and administrative obligations.

  • To register data in IQOVE's databases.

  • To fulfill commitments made with customers upon purchasing our products.

  • To improve relationships with customers through relevant updates, order processing, and service evaluations.

Note: By entering personal data through the website, the customer declares that the provided information is truthful and current.

For Suppliers:

  • To manage the procurement of goods and services.

  • To invite suppliers to participate in selection processes or events.

  • To evaluate the fulfillment of their obligations.

  • To register them in IQOVE’s databases.

  • To process payments and review outstanding balances.

For Employees:

  • To verify employment and personal references and conduct background checks.

  • For HR-related activities, including payroll, social security affiliations, wellbeing and workplace safety, and employer disciplinary processes.

  • To notify authorized contacts in case of emergencies.

  • To plan internal business activities.

HOW DATA IS COLLECTED

Data collection and storage can occur via physical or electronic mail, mobile devices, the website, apps, or any known digital or physical communication method. Data may also be voluntarily provided directly by the data subject. When a purchase is made online, the consumer must provide information such as address, neighborhood, city, region, ID number, and phone number.

DATA SUBJECT RIGHTS

  • Access personal data that has been processed.

  • Know, update, and correct inaccurate, incomplete, or misleading data.

  • Request proof of consent.

  • Revoke consent and/or request deletion of data unless a legal or contractual obligation requires otherwise.

  • Refuse to answer questions regarding sensitive personal data or data of children and adolescents.

DATA CONTROLLER RESPONSIBILITIES

  • Effectively ensure data subject rights according to Law 1581 of 2012 and related regulations.

  • Request and store valid proof of consent for data processing.

  • Inform data subjects of the purposes of processing and the adopted protection measures.

  • Update or correct personal data as requested by the data subject.

  • Comply with instructions from the relevant regulatory authority.

INQUIRIES AND CLAIMS

Data subjects may contact IQOVE to exercise their rights via the following email: iqove.admon@gmail.com

Requests must include:

  • Full name and identification.

  • Contact details (physical and/or email address, phone number).

  • Reason for the request and a brief description of the right they wish to exercise.

The maximum legal period to respond to claims is fifteen (15) business days from the day after receipt. If it is not possible to resolve the issue within this period, IQOVE will inform the requester of the reason for the delay and the new date for resolution, which cannot exceed eight (8) additional business days.

If a data subject is denied access, rectification, deletion, or revocation of data after the legally established period, they may contact the corresponding data protection authority.

INTERNATIONAL DATA TRANSFER & TRANSMISSION

Personal data may be transmitted or transferred to third countries for activities related to IQOVE’s operations or the purposes outlined in this policy.

Such international transfers or transmissions will be conducted in compliance with Article 26 of Law 1581 of 2012 and Article 24 of Decree 1377 of 2013.

VALIDITY

This policy is effective as of January 1, 2025.

The databases containing personal data will remain valid unless the data subject requests their deletion, and provided there is no legal obligation to retain them.