Law 1581 of 2012 · Habeas Data
In compliance with Law 1581 of 2012 and its regulatory decrees, Endustar Corp. establishes this Personal Data Processing Policy to ensure the protection of the constitutional right of habeas data for all individuals whose personal information is collected, stored, used, or processed.
This policy is governed by: Political Constitution of Colombia (Article 15), Law 1581 of 2012 (General Data Protection Regime), Decree 1377 of 2013 (Regulatory Decree), and Decree 1074 of 2015 (Single Regulatory Decree for the Commerce, Industry and Tourism Sector).
Endustar processes the following categories of personal data: identification data (name, ID number, NIT), contact data (address, phone, email), professional data (position, entity, sector), financial data (when required for contracting), and technical data (related to bidding and procurement processes).
Endustar will obtain prior, express, and informed authorization from the data subject before collecting or processing personal data, except in cases authorized by law. Authorization may be given in writing, orally, or through unequivocal conduct.
Personal data will be retained only for the period necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Upon expiration of the retention period, data will be securely deleted or anonymized.
Data subjects may exercise their rights by submitting a written request to datospersonales@endustar.com including: full identification, description of the facts giving rise to the request, address for notifications, and supporting documents. Endustar will respond within fifteen (15) business days.
