PERSONAL DATA PROCESSING POLICY

IRIDIAN CONSULTING S.A.S.

1. Preliminary Considerations
In compliance with Law 1581 of 2012, Regulatory Decree 1377 of 2013, the General Data Protection Regulation (GDPR) of the European Union, and other applicable international regulations, IRIDIAN CONSULTING S.A.S. guarantees the rights of data subjects to access, update, and rectify their personal data.

Through this document, IRIDIAN CONSULTING S.A.S., as the data controller, establishes the policies applicable to its clients, users, and other stakeholders.

 

2. Contact Information of the Data Controller

• Corporate Name: IRIDIAN CONSULTING S.A.S.
• Email: mayrab@iridian.co
• Phone: (+1) 9295938989

 

3. Processing and Purpose of Personal Data
IRIDIAN CONSULTING S.A.S. will process personal data securely and confidentially for the following purposes:

• Maintenance, development, and monitoring of the commercial relationship between the data subject and the company.
• Presentation of commercial proposals, indicating prior relationships with clients or companies, when applicable.
• Publication of commercial references with prior authorization from the data subject.
• Execution of the services offered by the company.
• Compliance with legal, contractual, and accounting obligations.
• Distribution of commercial information, newsletters, updates, and advertising materials.
• Responding to requests from national or international authorities as required by law.
• Administrative, commercial, and contact activities related to the corporate purpose of IRIDIAN CONSULTING S.A.S.

 

4. Rights of Data Subjects
Data subjects have the following rights under applicable regulations:

• Access, update, and rectify their personal data.
• Request information regarding the use of their personal data.
• Revoke their consent if the stated purposes are not met.
• Request the deletion of their data, provided there is no legal obligation to retain it.
• File complaints with the Colombian Superintendency of Industry and Commerce or the competent authority in their jurisdiction.
• Access their personal data free of charge.

 

5. International Data Transfers
When it is necessary to transfer personal data outside Colombian territory, IRIDIAN CONSULTING S.A.S. will ensure that the destination country provides an adequate level of data protection, in compliance with Law 1581 of 2012 and international standards such as the GDPR.

 

6. Responsible Area for Inquiries, Requests, and Complaints
The Data Protection Department is responsible for managing inquiries, requests, and complaints. You can contact the department at:

• Email: mayrab@iridian.co

 

7. Information Security
IRIDIAN CONSULTING S.A.S. will implement the necessary technical, legal, and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration, in accordance with international standards and best practices.

 

8. Effective Date and Retention Period
This Personal Data Processing Policy is effective as of November 13, 2024. Databases managed by IRIDIAN CONSULTING S.A.S. will remain active for as long as necessary to fulfill the stated purposes unless a different period is mandated by law.