DATA PROTECTION POLICY

Your privacy is important to TRIPLEX ACEMAR SAS, so we invite you to take a moment to learn about our privacy and personal data processing practices and/or policies.

  1. PartiesA. Responsible Legal EntityThe legal entity responsible for your personal data is: TRIPLEX ACEMAR SAS, a company with its principal place of business in Madrid, Cundinamarca, Tax ID (NIT) 860.044.928-9, address: Calle 15 No 1-56 Este, e-mail: ventas@acemar.com.co, phone: (57) 317-3711429.Data SubjectData subjects are the clients, suppliers, employees, contractors, etc. of TRIPLEX ACEMAR SAS to whom the personal data stored in its databases belong. The following persons may exercise the rights and obligations of the Data Subject, upon proof of such status: – The Data Subject.
    – Their successors in title.
    – The Data Subject’s representative and/or attorney-in-fact.
    – By stipulation in favor of or on behalf of another
  1. Personal data.The information processed by TRIPLEX ACEMAR SAS, hereinafter in this document “Personal Data”, is the information provided by Data Subjects when they access its goods and/or services, or in connection with them, such as: first name, last name, identification, age, sex, telephone, physical and email address, country, city and other data required during the registration process, which in no case will be sensitive in the legal sense. The information required and used by TRIPLEX ACEMAR SAS does not concern and is not directed at children or adolescents.
  1. Information security.Where the Data Subject authorizes TRIPLEX ACEMAR SAS to process their personal data, the company undertakes to use and process them correctly, preventing unauthorized third-party access that would allow the information in its databases to be viewed, compromised, modified, disclosed and/or destroyed. For this reason, TRIPLEX ACEMAR SAS has security and access protocols for its information, storage and processing systems, including physical security risk control measures. Access to the various databases is restricted even for its employees and collaborators, who in any case are committed to the confidentiality and proper handling of the databases in accordance with the information processing policies established by Law.
  1. Information storage.The Data Subject’s personal data will be stored in a database protected by a firewall for greater security; likewise, the server hosting the database is physically protected in a secure location and only authorized personnel can access it.
  1. Receipt and use of information TRIPLEX ACEMAR SAS will use the Data Subject’s personal data mainly to fulfill the obligations arising from the commercial relationship. Additionally, it may use them to:
  • Include it in a database
    Process it
    Send invitations to public and/or private events
    Offer products and/or services
    Evaluate the consumption habits of Data Subjects and carry out market and/or statistical analysis and/or segmentation.
    Request the Data Subject’s opinion on products and/or services, including information (Content)
    Send general information. 
    Provide a personalized experience on its websites or applications, through informational or advertising content.
    Provide features and services related to tastes, location and preferences
    Learn about or understand the effectiveness of the channels through which the Data Subject learns of our commercial or general information.
    Promote, send, prepare and, in general, carry out commercial or advertising campaigns, promotions or contests by sending emails, text messages (SMS and/or MMS) or through any other analog and/or digital means of communication now existing or created in the future.
    TRIPLEX ACEMAR SAS may, in whole or in part, respecting the Data Subject’s rights in accordance with the law, capture, store, process, collect, reproduce, translate, adapt, extract, summarize, transmit and assign, with or without the aid of computers, the data stored in its digital or physical (manual) databases, whether hosted on servers located inside or outside the country (Colombia).
  1. Access, updating and rectification of the Data Subject’s information At any time, clients and/or users may ask TRIPLEX ACEMAR SAS, as the party responsible for the personal data, to provide information about such data, update it or rectify it; they may also add new data or have it deleted or excluded from the database, unless the data is absolutely necessary for providing the service for which the client is registered and/or enrolled and wishes to remain so; otherwise, they will be fully unlinked and/or deactivated from it. Only the historical and accounting records required by control entities such as the DIAN and DANE, among others, will be retained.
  1. Rights of clients and/or users (Law 1581 of 2012, article 8).• To access, update and rectify their personal data with the Data Controllers or Data Processors. This right may be exercised, among others, with respect to partial, inaccurate, incomplete or fragmented data, data that is misleading, or data whose Processing is expressly prohibited or has not been authorized.
    • To request proof of the authorization granted to the Data Controller, except where it is expressly exempted as a requirement for Processing.
    • To be informed by the Data Controller or the Data Processor, upon request, of the use made of their personal data.
    • To file complaints with the Superintendence of Industry and Commerce for violations of the provisions of this law and other regulations that amend, add to or complement it.
    • To revoke the authorization and/or request the deletion of the data when Processing does not respect constitutional and legal principles, rights and guarantees
    • To access, free of charge, their personal data that has been subject to Processing.
  1. Disclosure of information. TRIPLEX ACEMAR SAS may disclose the Data Subject’s personal data to its affiliates and subsidiaries and to third parties that perform functions on its behalf, such as: order fulfillment, customer service, sending emails and correspondence, credit card payment processing, contracting servers located inside or outside the country (Colombia), or other functions inherent to its commercial activity; who in any case will be bound by the same confidentiality standards established in the Law and in this policy. The obligations regarding the care or handling of information by TRIPLEX ACEMAR SAS referred to in this policy will not apply when the information is required by a public or administrative entity in the exercise of its legal functions or by court order, when the data is public in nature, or in other legally exempted cases.
  1. Validity of the Authorization for personal data processing. The Authorization granted by the Data Subject for the processing of their personal data in accordance with the Law and this policy will be valid from the moment it is signed and for as long as TRIPLEX ACEMAR SAS carries out the activities of its corporate purpose.
  1. Customer Service. For inquiries, claims, complaints or to exercise their rights, the Data Subject may contact TRIPLEX ACEMAR SAS by email at ventas@acemar.com.co or call the customer service line at (57) 317-3711429.
  1. Procedures
  2. Inquiries. Data Subjects or their successors in title may consult the Data Subject’s personal information held in the TRIPLEX ACEMAR SAS database, which will provide all the information contained in the individual record or linked to the Data Subject’s identification. The inquiry will be answered within a maximum of ten (10) business days from the date it is received. When it is not possible to answer the inquiry within that period, the interested party will be informed of the reasons for the delay and the date on which the inquiry will be answered, which in no case may exceed five (5) business days following the expiration of the first period. The Data Subject may consult their personal data free of charge: (i) at least once every calendar month, and (ii) whenever there are substantial changes to the Information Processing Policies that give rise to new inquiries.
  3. Claims. For the purposes of a claim, the Data Subject will provide their identification, a description of the facts giving rise to the claim and their address, and will attach the documents they wish to submit. If the claim is incomplete, the interested party will be asked within five (5) days of receipt of the claim to correct the deficiencies. If two (2) months pass from the date of the request without the applicant submitting the required information, the claim will be deemed withdrawn. The maximum period to address the claim will be fifteen (15) business days from the day following the date of receipt. When it is not possible to address the claim within that period, the interested party will be informed of the reasons for the delay and the date on which the claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the first period.
  4. Procedural requirement. The Data Subject or successor in title may only file a complaint with the Superintendence of Industry and Commerce once the inquiry or claim procedure with TRIPLEX ACEMAR SAS has been exhausted.
  1. Changes to the Privacy Policy. TRIPLEX ACEMAR SAS reserves the right to unilaterally modify its privacy and personal data processing policy at any time. Any change will be published and announced. In addition, previous versions of this Privacy and Personal Data Use Policy will be retained. Continued use of the services, or the data subject’s failure to unsubscribe from them after notification of the new privacy policy, constitutes acceptance of it; however, if the new policy changes the purpose of the processing of personal data, the Data Subject must grant express authorization.