Privacy policy

Privacy Policy

PERSONAL DATA PROCESSING POLICY

www.realbasics.com.co

1. LEGAL FRAMEWORK AND SCOPE OF APPLICATION

This Personal Data Processing Policy is drafted in accordance with the Colombian Constitution, Law 1581 of 2012, Regulatory Decree 1377 of 2013, and other applicable regulations. It shall be applied by REAL BASICS. with respect to the collection, storage, use, circulation, deletion, and any other activities that constitute the processing of personal data.

2. DEFINITIONS

For the purposes of this Policy and in accordance with applicable law, the following definitions apply:

a) Authorization: Prior, express, and informed consent granted by the data subject for the processing of personal data.

b) Privacy Notice: A physical or electronic document, or any other format, generated by the data controller and made available to the data subject, informing them of the existence of this policy, how to access it, and the purpose of the data processing.

c) Database: An organized set of personal data subject to processing.

d) Personal Data: Any information linked to or that may be associated with one or more identified or identifiable natural persons.

e) Public Data: Data classified as public by law or the Constitution, including but not limited to marital status, profession, or public service roles, and data available without restriction.

f) Private Data: Data that, due to its intimate or reserved nature, is relevant only to the data subject.

g) Sensitive Data: Data that affects the privacy of the data subject or may lead to discrimination, such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, sexual life, or biometric data.

h) Data Processor: A natural or legal person who processes personal data on behalf of the data controller.

i) Data Controller: A natural or legal person who decides on the database and/or the processing of personal data.

j) Data Subject: A natural person whose personal data is processed.

k) Processing: Any operation performed on personal data, including collection, storage, use, circulation, or deletion.

3. PURPOSE OF DATA COLLECTION AND PROCESSING

REAL BASICS may use personal data to:

a) Execute contractual relationships with customers, suppliers, and employees, including payment obligations.

b) Provide requested products and/or services.

c) Inform about new products or changes to existing ones.

d) Evaluate service quality.

e) Conduct internal studies on consumer habits.

f) Send commercial, advertising, or promotional information through physical mail, email, SMS/MMS, mobile devices, or any other communication channel.

g) Carry out recruitment, evaluation, and hiring processes.

h) Support internal or external audits.

i) Register employee and/or pensioner information in company databases.

j) Fulfill purposes authorized by the data subject or described in the privacy notice.

k) Share data with affiliated, subsidiary, or related companies in Colombia or abroad for the purposes described herein.

Security-related data collected through surveillance systems or security checkpoints will be used solely for safety purposes and may be used as evidence in legal proceedings.

REAL BASICS will not sell, license, or disclose personal data without authorization, except where required by law or necessary to provide services, marketing activities, corporate restructuring, or legal compliance.

4. PRINCIPLES GOVERNING PERSONAL DATA PROCESSING

Data processing at REAL BASICS is governed by the principles of purpose, freedom, accuracy, transparency, restricted access, security, and confidentiality.

Paragraph: Data subjects may refuse authorization for the processing of sensitive data.

5. RIGHTS OF DATA SUBJECTS

Data subjects have the right to:

a) Access their personal data free of charge at least once per month.

b) Request updates, corrections, or deletion of their data.

c) Request proof of authorization.

d) Be informed of data usage.

e) File complaints with the Superintendence of Industry and Commerce.

f) Request compliance with regulatory orders.

Minors’ rights shall be exercised through their legal representatives.

6. OBLIGATIONS OF REAL BASICS

REAL BASICS shall comply with all legal obligations as a data controller and/or processor, including safeguarding data, ensuring accuracy, processing requests, and complying with regulatory authorities.

7. AUTHORIZATION REQUEST

Authorization will be requested prior to or at the time of data collection, using methods that allow proof of consent, for the duration necessary to fulfill the stated purposes.

8. PRIVACY NOTICE

If this policy cannot be made available, REAL BASICS will publish a privacy notice on its website.

9. DATA RETENTION PERIOD

Personal data will be retained only for as long as necessary to fulfill processing purposes or legal obligations.

10. RESPONSIBLE AREA AND PROCEDURE

The Organizational Development Administrative Area of REAL BASICS is responsible for handling requests, complaints, and claims.

Requests may be sent Monday–Friday, 8:00 a.m.–5:00 p.m., to: real.basics24@gmail.com

11. DATA COLLECTED PRIOR TO DECREE 1377 OF 2013

REAL BASICS will notify data subjects through its website regarding this policy and their rights.

12. SECURITY MEASURES

REAL BASICS implements technical, human, and administrative measures to protect personal data from unauthorized access or misuse.

13. EFFECTIVE DATE

This policy was created on May 22, 2025, and is effective as of that date. Updates will be communicated electronically.

14. CONTACT INFORMATION

Questions regarding these Terms of Service should be sent to: real.basics24@gmail.com

Last updated: 05/22/2025