In the processing of protected data, the following principles are followed

Lawfulness, fairness, and transparency: The Data Controller will always require consent for the processing of your personal data, which may be for one or more specific purposes that will be communicated to you with absolute transparency.

Data minimization principle: The Data Controller will request only the data strictly necessary for the intended purpose(s).
Storage limitation principle: Data will be retained only for the necessary time to fulfill the intended purpose(s). The Data Controller will inform you of the corresponding retention period according to the purpose. In the case of subscriptions, inactive records will be periodically reviewed and deleted.

Integrity and confidentiality principle: Your data will be processed in a manner that ensures its security, confidentiality, and integrity. The Data Controller will take necessary precautions to prevent unauthorized access or misuse of user data by third parties.

Duties of Merino & Asociados SAS in data processing

Pursuant to Article 17 of Law 1581/2012, Merino & Asociados SAS undertakes to:

• Guarantee the Data Subject the full and effective exercise of their right to habeas data at all times.
• Request and retain, under the conditions established in the law, a copy of the respective authorization granted by the Data Subject.
• Properly inform the Data Subject about the purpose of data collection and the rights they hold due to the authorization granted.
• Maintain the information under necessary security conditions to prevent its alteration, loss, unauthorized or fraudulent access.
• Ensure that the information provided to the Data Processor is truthful, complete, accurate, updated, verifiable, and understandable.
• Update the information, timely communicating any updates regarding the data previously provided to the Data Processor and adopting the necessary measures to keep the information updated.
• Rectify the information when it is incorrect and communicate the relevant changes to the Data Processor.
• Provide the Data Processor with only the data whose processing has been previously authorized, in accordance with the law.
• Require the Data Processor to respect the security and privacy conditions of the Data Subject's information at all times.
• Process queries and claims submitted under the terms established by law.
• Adopt an internal policy and procedures manual to ensure compliance with the law, especially for handling queries and claims.
• Inform the Data Processor when certain information is under dispute by the Data Subject once a claim has been filed and is under review.
• Inform the Data Subject upon request about the use given to their data.
• Notify the data protection authority when security breaches occur and risks arise in managing Data Subjects' information.
• Comply with the instructions and requirements issued by the Superintendency of Industry and Commerce.

Information collected

Our website may collect personal information, such as: name, contact information including your email address, and demographic information. Additionally, when necessary, specific information may be required to process an order, delivery, or billing.

Personal Data submitted for processing must be truthful, complete, accurate, updated, verifiable, and understandable. The SIC will maintain this information under these characteristics as long as the data subject informs of any updates in a timely manner.

Use of collected information

Our website employs the information to provide the best possible service, particularly to keep a record of users, orders (if applicable), and improve our products and services. Periodic emails may be sent via our website with special offers, new products/services, and other promotional information we deem relevant to you or that may benefit you.

These emails will be sent to the address you provide and can be canceled at any time.

Personal Data will only be processed by Merino & Asociados SAS personnel with permission or those responsible for these activities, as well as authorized Processors.

Non-public Personal Data will be treated as confidential by Merino & Asociados SAS, even if the contractual relationship between the Data Subject and Merino & Asociados SAS has ended or has not been formalized.

Merino & Asociados SAS will not make Personal Data available via the internet or other mass communication means unless it is public information or technical measures are in place to control and restrict access to authorized persons.

Upon request and if no legal or contractual obligation requires the data to remain in the database, Personal Data will be deleted.

User rights

Merino & Asociados SAS informs you that you have the following rights regarding your personal data:

To know, update, and rectify your personal data with the Data Controller or Processor.

To request proof of the authorization granted for processing, unless explicitly exempted by law.

To be informed by the Data Controller or Processor about the use of your personal data.

To file complaints with the Superintendency of Industry and Commerce for violations of data protection regulations.

To revoke authorization and/or request deletion of data if processing violates constitutional or legal principles.

To access your personal data free of charge.

To exercise these rights, send an email to info@merinoip.com along with a legally valid identification document (e.g., ID copy or equivalent).

Cookies

Our website uses cookies to track website traffic and enhance user experience. Cookies do not provide access to your computer or personal information unless you provide it directly. You can accept or decline cookies; however, most browsers automatically accept them. You can modify your settings to decline cookies, though this may prevent you from using some services.

Third-party links

Our website may contain links to third-party sites. Once you leave our site, we are no longer responsible for the terms, privacy, or data protection policies of those sites. We recommend reviewing their policies to ensure you agree with them.

Control of personal information

At any time, you may restrict the collection or use of your personal information. You can opt out of marketing communications by modifying your preferences in our forms or emails.

Merino & Asociados SAS will not sell, assign, or distribute personal information without your consent unless required by law.

Changes to the Privacy Policy

Merino & Asociados SAS reserves the right to change this Privacy Policy at any time to reflect legislative, jurisprudential, or industry practice updates. These policies will remain in effect until modified by another duly published version.