QUIMERCO S.A.S., hereinafter QUIMERCO or The Company, identified with NIT. 830.033. 279-0 with legal address at Zona Franca Intexzona KM 1 via Siberia- Funza, ET 2, Lot 95, and contact telephone (1) 8237510, hereinafter referred to as QUIMERCO or The Company, as responsible for the treatment collects, treats, stores and disposes of personal data in the natural exercise of its activities performed by its customers, employees, suppliers and third parties, under this policy of treatment of personal data, the purpose of which is to make known the mechanisms and procedures to enforce the rights, to inform who is in charge within the Company of processing the requests, complaints, claims and inquiries, communicating the purposes and treatment to which the personal data will be submitted in the development of the commercial activities of the Company. QUIMERCO may also process the data of its former employees, visitors, guests and persons who request information about the services it provides, in accordance with the terms set forth in this policy. Our Policy applies to all collection, storage, use, transfer, transmission, and suppression of information that may be associated or related to specific or determinable natural persons that occur in the territory of the Republic of Colombia, as well as the treatment carried out by those third parties with whom QUIMERCO agrees to carry out any activity related to or related to the processing of personal data for which QUIMERCO is responsible. The Policy will be applied to third parties with whom The Company eventually signs transmission contracts, so that such third parties are aware of the obligations that will apply to them, the purposes to which they must submit and the security and confidentiality standards they must adopt when they carry out the processing on behalf of The Company. The personal data collected will be used to initiate, advance and maintain the contractual, commercial, labor relationship, and/or to receive advertising on which the owners have authorized their treatment, as well as to meet the requests and applications that are submitted by the owners of the personal data. Likewise, personal data will be processed and/or transferred when a legal duty so requires and to comply with a competent authority when formally required.
Principles
In all processing carried out by QUIMERCO, the principles established in the law and in this Policy shall be complied with, in order to guarantee the right to habeas data of the owners. These principles are:
| Principle | Description |
| Restricted Access | The Company may not make personal data available for access through the Internet or other means of communication, unless technical and security measures are established to control access and restrict it to authorized persons only. Personal data may not be made available on the Internet or other means of mass dissemination or communication, unless access is technically controllable to provide restricted knowledge only to data subjects or authorized third parties or the information is public. |
| Restricted Circulation | Personal data may only be processed by Company personnel who are authorized to do so in accordance with the provisions established by the Company, or those who, as part of their duties, are in charge of carrying out such activities. Personal data may not be disclosed to third parties, within or outside the territory of the Republic of Colombia, without authorization or without the execution of a contract, in case there is a transmission. |
| Confidentiality | Confidentiality With regard to the processing, the persons involved in the processing must maintain the confidentiality of the information, even after the link that gave rise to the processing has been terminated. |
| Consent | The authorization for the processing, as established by Decree 1377 of 2013, may be (i) in writing, (ii) orally or (iii) through unequivocal conduct of the holder that allows to reasonably conclude that he/she granted the authorization. |
| Sensitive Data and diligence | Sensitive data collected in the development of the Company’s activities will be treated to preserve its integrity, restricted access and security. |
| Purpose | All processing activities must obey the legitimate purposes mentioned in this policy, and be informed to the owner at the time of obtaining his/her authorization. |
| Integrity | The personal data subject to processing must be truthful, complete, accurate, updated, verifiable and understandable. When in possession of partial, incomplete, fractioned or misleading personal data, the Company shall refrain from processing them and request the holder the completeness or correction of the information. The Company shall ensure the integrity of the personal data contained in its databases and their veracity. |
| Security | The Company must always carry out the processing by providing the technical, human and administrative security measures necessary and in accordance with its capabilities to maintain the confidentiality and security of personal data. The above in order to prevent them from being adulterated, modified, consulted, used, accessed, eliminated or known by unauthorized third parties. The Company will adjust the treatment to the security standards regulated in the future by the competent authorities, as long as its capabilities allow it. |
| Separability of the Databases | The Company will maintain separately the databases in which it is in charge, from those in which it is responsible. |
| Temporality | The Company will not use the personal data beyond the reasonable period of time required by the purpose for which the respective holder was informed and will carry out measures to ensure the deletion of the personal data when it no longer fulfills the purpose for which it was collected. |
| Transparency | When the holder so requests, The Company shall provide him/her with information about the existence of personal data concerning him/her or about those he/she is entitled to request. The response to the request shall be provided by the same means or, at least, by a means similar to the one used by the owner to request information and within the terms established by law and this policy. |
| Post-treatment | All personal data that is not public data must be treated by those responsible and in charge as confidential and under the security parameters set by the Superintendence of Industry and Commerce. Upon termination of such relationship, such personal data must continue to be treated in accordance with the policy, the manual and the law. |
1. AUTHORIZATION, PROCESSING AND PURPOSES
All treatment must be preceded by obtaining authorization, for which the holder voluntarily, prior, express and informed authorization to QUIMERCO, to treat personal information and / or biometric data in accordance with the provisions of Law 1581 of 2012, the Single Decree 1074 of 2015 and this policy of treatment of personal data. Information that will be used in the development of the activities and functions of The Company. QUIMERCO, in the development of its business activities, will collect, use, manage, store, transmit, transfer and perform various operations with personal data. In accordance with the above, the personal data processed by The Company shall be subject only to the purposes indicated below or those accepted by the owners at the time of collection of personal data. Likewise, the persons in charge or third parties who have access to the personal data by virtue of the law, contract or other binding document, shall carry out the processing for the achievement of the following purposes:
| PURPOSES |
| Corporate and Administrative |
| To manage all the necessary information for the compliance of tax obligations and commercial, corporate and accounting records of The Company and its clients. |
| To comply with the internal processes of The Company regarding the administration of suppliers and contractors. |
| Provide information to third parties for evaluation and classification of suppliers. |
| The process of filing, updating systems, protection and custody of information and databases. |
| Perform analysis for the control and prevention of fraud and money laundering, supply chain security, including, but not limited to consultation, reporting to restrictive lists and financial risk information centers. |
| Conduct events, training, seminars, workshops and / or any scenario that is related to products and services offered by the Company. |
| The administration of The Company’s human resources, including but not limited to the evaluation of candidates interested in becoming employees of The Company, the employment of The Company, training processes, performance evaluation, social welfare and occupational health programs for employees and their families, issuance of labor certifications, provision of labor references if requested, creating the human map of the personnel working in The Company, sending information to employees and their families and the payment of payroll. |
| To carry out campaigns to update personal data to guarantee its integrity. |
| For the provision of health services to family members of QUIMERCO S.A.S. employees who are beneficiaries of the health service. |
| To advance internal investigations in accordance with the different policies of the company in case of suspicious activities that may affect the good name of the company. |
| The management of resume banks and recruiting days for personnel hiring. |
| Complete transactions, obtain billing data and issue invoices. |
| To make negative or positive reports before the Data Banks, related to the status of compliance, default or delinquency in the financial, commercial, credit and service obligations of The Company, prior written notice to the customer with the terms of anticipation established by The Company to comply with its obligations and / or demonstrate compliance. |
| Cumplir las obligaciones tributarias, contractuales y legales. |
| Comply with tax, contractual and legal obligations. |
| Other purposes determined by those responsible in processes of obtaining personal data for processing, in order to comply with legal, regulatory and security obligations, and the development of the commercial activity of The Company. |
Marketing
| To carry out marketing, awareness, socialization and community outreach activities, and to send information about news, news, contests, events, campaigns, activities, promotions and offers. |
| Conduct customer satisfaction and service quality surveys and strengthen our customer and community service channels. |
| Send information and implement CMR programs. |
| Perform customer loyalty activities. |
| Carry out outreach and contact activities with communities, ethnic groups, collectives and/or social groups. |
| Send invitations and information about commercial and/or academic or training events and activities. |
Third Parties
| Complement the information and, in general, carry out the necessary activities to manage the requests, complaints and claims submitted by the Company’s customers and third parties, and direct them to the areas responsible for issuing the corresponding responses. |
| Transmit personal data to third parties with whom contracts have been entered into for this purpose or documents have been signed, such as otheríes or declarations, which allow the transmission of personal data, for commercial, administrative and/or operational purposes. |
| Verify legal, financial, security and technical information in contractual processes carried out by the Company or third parties. |
| To comply with the purposes mentioned above, such as transferring, transmitting, moving, sharing, delivering, and/or disclosing personal data to third parties, within and outside the national territory, including to countries that do not provide adequate levels of personal data protection. |
| For the relationship and rapprochement with the community and the population in general within the framework of the different projects that are intended or will be carried out. |
| For the verification, reporting and consultation with credit bureaus with the Holders with whom the company has had, has or intends to have a commercial, labor and/or contractual relationship (customers, suppliers, employees). |
QUIMERCO may collect sensitive personal data such as biometric data such as fingerprints, photographs and/or videos, among others, to ensure the entry and stay in the facilities, identification, security, dissemination companies, awareness, reports to the Parent Company, national authorities, compliance with legal obligations and/or events of the Company. The collection will be informed to the owners through the privacy notices installed in the same. The Company may collect biometric data of minors who enter the facilities of the company and / or who are part of the nuclear family of employees of The Company, in which case, It shall be the responsibility of the legal representative of the minor to exercise the rights to know, update, rectify and/or delete the information, as well as to deliver or revoke the authorization granted to QUIMERCO on their behalf. In the event that the processing of sensitive personal data concerning health, racial or ethnic origin, religious beliefs or political orientation, trade union membership, social organizations, as well as those relating to sexual data is required, QUIMERCO will request your authorization indicating that the answer is optional. The databases in which information of the owners is included will have a validity determined by the permanent operation of the Company, according to the foundational nature of the company, as well as the activities of the general administrative operation.
RIGHTS OF PERSONAL DATA SUBJECTS AND THEIR PROCEDURE
Subjects of personal data may, at any time, exercise their rights to access, update, rectify, and delete their personal data, as well as revoke the authorization granted to QUIMERCO and exercise any other right arising from or related to personal data protection (habeas data), by email or to the Company’s physical address. To do so, they must take into account the following rules:
Subjects must contact the Company electronically at informacion@quimerco.com, by physical address at Zona Franca Intexzona KM 1 via Siberia-Funza, ET 2, Lote 95, or by phone at (1) 8237510.
Subjects must submit their request by fully identifying themselves and providing a clear description of the query or request.
If any documentation is required to support your request, the information subject must provide it with their request. If they do not attach one, the Company will request clarification of the request or attachment of supporting documentation within five (5) days of their request. If no response is received within two (2) months of submitting your request, QUIMERCO will consider your request to have been withdrawn.
Once the request is received, QUIMERCO will proceed with internal processing and respond within the legal timeframe. In the case of an information request, the request will be processed within the following ten (10) days, extendable by up to five (5) days if required, after informing the requester. If the request is a claim, the Company will process the request internally and respond within fifteen (15) days of submitting the request, which may be extended by up to eight (8) days, after notifying the requester. If the data subject is a QUIMERCO employee or former employee, they may also exercise their right to the protection of their personal data through General Management. Suppliers may also exercise their rights to access, update, rectify, and/or delete their personal data through the Human Resources Department. The response terms will be as previously stated.
Data subjects may at any time request QUIMERCO to delete their personal data and/or revoke the authorization granted for its processing by filing a complaint, in accordance with the provisions of Article 15 of Law 1581 of 2012. Requests to delete information and revoke authorization will not be applicable when the data subject has a legal or contractual obligation to remain in the database. It should be noted that there are two ways in which consent can be revoked. The first may be for all the purposes for which consent was granted; The second may apply to specific types of processing, that is, the partial revocation of consent. Pursuant to Law 1581 of 2012, QUIMERCO informs that the Data Subject will have the following rights:
- To know, update, and correct their personal data;
- To request proof of the authorization granted for the processing of their personal data;
- To have free access to their personal data that is being processed;
- To be informed of the processing of their personal data;
- To request the revocation of this authorization, provided that there is no legal duty or contractual obligation on the part of the Data Subject to the Company requiring such personal data to remain in the Company’s databases and/or be processed by the Company.
- To request the deletion of their personal data from the Company’s databases, provided that there is no legal duty or contractual obligation on the part of the Data Subject to the Company requiring such personal data to remain in the Company’s databases.
- Submit complaints to the Superintendency of Industry and Commerce for violations of the law when the procedural requirement has been met, first contacting The Company.
TRANSFERS AND TRANSMISSIONS
QUIMERCO will only use personal data as authorized by you and will transmit it to third parties for the purposes described herein and to the competent judicial and administrative authorities when required by them. To transfer personal data to third parties located abroad, QUIMERCO will obtain the express and unequivocal authorization of the data subject to send the personal data abroad or will do so based on any other hypothesis contemplated in the applicable legislation, including those established in Law 1581 of 2013 and Decree 1377 of 2013. QUIMERCO will apply other regulations regarding the transfer and transmission of personal data.
Links to Other Websites
The portal https://quimerco.com/co/, among others, may contain links to other websites owned by third parties. If you decide to visit any of these websites, please be aware that each of these portals has a separate privacy policy, and we do not accept any responsibility for any information or personal data you provide outside of our website.
VALIDITY OF THE PERSONAL DATA PROCESSING POLICY
This policy is effective as of November 10, 2021, and will remain in effect for as long as necessary to fulfill the purposes stated in this policy.
MODIFICATIONS TO THE PRIVACY POLICY
QUIMERCO reserves the right to modify this policy at any time. However, any changes will be promptly notified and published on the website https://quimerco.com/co/, and the date of the change will be indicated there. This policy was last updated on March 3, 2023.