PRIVACY POLICY

PREAMBLE

VERACRUZS wishes to inform you that this Privacy Policy applies to the processing of your personal data collected when you access, use and browse the website www.veracruzs.com ( hereinafter, "the site "). By interacting, using or browsing the site, as well as by voluntarily providing your personal data when enabled on the site ("User"), we understand that you give your consent and acceptance of the terms of this Policy. We invite you to carefully review its content.

This document was prepared taking into account the provisions of Law 1581 of 2012 “By which general provisions are issued for the protection of personal data” and Decree 1377 of 2013 “By which Law 1581 of 2012 is partially regulated” which aim to “Develop the constitutional right that all people have to know, update and rectify the information that has been collected about them in databases or files, and the other rights, freedoms and constitutional guarantees referred to in the article 15 of the Political Constitution; as well as the right to information enshrined in article 20 of the same.

In compliance with current Colombian regulations, below we present relevant information related to the legitimate processing of personal data collected:

COLLECTION OF USER'S PERSONAL DATA.

The User's personal data may be collected through the Site through registration and opening of an account therein, in order to participate in promotions, contests or proceed with the purchase of products using the electronic commerce tools made available. provision. For this purpose, at the time of registration, the User grants express authorization to the processing of their personal data in accordance with the authorization text made available and whose acceptance is a necessary step for the creation of the account on the Site.

Personal data may consist of name, identification number, email, telephone, city, date of birth, among others such as consumer habits. The personal data processed will be of a private or semi-private nature as appropriate, expressly excluding from collection personal data of a sensitive nature, as well as personal data of minors. Those personal data collected will be included in the databases owned by VERACRUZS and will be used for the purposes provided for in this Policy.

PURPOSE OF THE PROCESSING OF PERSONAL DATA.

The processing of personal data will be carried out for the purpose of carrying out, through any means, marketing, promotion, own or third-party advertising, technical support, marketing, service improvement, consultations, control, enabling payment methods, assistance. commercial and consumer, service and technical support of products and services, as well as any other related to the current and future products and services of VERACRUZS. Notwithstanding the above, the User may always request the cessation of sending the emails. Likewise, the personal data provided or obtained by VERACRUZS may be processed, collected, stored, used, updated, mainly to make possible the provision of its services, for the accounting records that are required and for reports to control and surveillance authorities. Likewise, personal data will be used for administrative, commercial and advertising and contact purposes with their owners.

Likewise, the User grants authorization for the transfer, communication, transfer and/or national or international transmission or assignment of personal data and databases to third parties who are Responsible and/or Managers in accordance with the business need of VERACRUZS For this purpose The User grants express authorization for the international transfer of their personal data.

VERACRUZS undertakes that the information obtained from users will not be shared with companies or third parties that do not have any direct link with VERACRUZS.

SECURITY MEASURES

VERACRUZS has adopted technical, human and administrative measures that provide security to personal data, preventing its adulteration, loss, unauthorized or fraudulent consultation, use or access. VERACRUZS maintains mandatory security protocols for personnel with access to personal data and information systems, in order to guarantee the security and confidentiality of the treatment.

RIGHTS OF THE OWNERS.

In accordance with Law 1581 of 2012 , Users as owners of personal data have the following rights:

  1. a) Know, update and rectify your personal data with those responsible for the treatment or those in charge of the treatment. This right may be exercised, among others, against partial, inaccurate, incomplete, fragmented, misleading data, or data whose processing is expressly prohibited or has not been authorized.
  2. b) Request proof of the authorization granted to the person responsible for the treatment except when it is expressly excepted as a requirement for the treatment, in accordance with the provisions of article 10 of Law 1581 of 2012.
  3. c) Be informed by the data controller or the Data Processor, upon request, regarding the use that has been given to your personal data.
  4. d) Present complaints to the Superintendency of Industry and Commerce for violations of the provisions of Law 1581 of 2012 and other regulations that modify, add or complement it.
  5. e) Revoke the authorization and/or request the deletion of the data at any time at your will
  6. f) Access free of charge to your personal data that has been processed, all in compliance with the current legal procedure.

EXERCISE OF RIGHTS AND CLAIMS

The exercise of rights, requests, queries and claims can be made to VERACRUZS by means of a written letter filed at the VERACRUZS headquarters or through email support@veracruzs.com.

This Policy has been in force since November 2021, substantial changes will be duly informed by VERACRUZS.