Personal Data Protection Policy

GBS Colombia SAS is part of GBS International Group and acts as the data controller for the personal data collected on this website.

• Legal name: GBS Colombia SAS
• Tax ID (NIT): 901.064.502-1
• Address: Pereira, Risaralda, Colombia
• Email: info@gbscolombia.com
• Phone / WhatsApp: +57-301-114-4826
• Website: https://www.gbscolombia.com

This policy is governed by the following Colombian regulations:

• Articles 15 and 20 of the Political Constitution (privacy, good name, habeas data and access to information).
• Statutory Law 1581 of 2012, general provisions for the protection of personal data.
• Decree 1377 of 2013, compiled in Single Decree 1074 of 2015, partially regulating Law 1581.
• Law 1266 of 2008, where applicable to financial, credit and commercial information.
• Single Circular of the Superintendence of Industry and Commerce (SIC), Title V, and any rules that amend or supplement the above.

• Personal data: any information linked or linkable to an identified or identifiable natural person.
• Data subject: the natural person whose personal data is processed.
• Processing: any operation on personal data, such as collection, storage, use, circulation or deletion.
• Controller: who decides on the database and the processing of the data.
• Processor: who processes data on behalf of the controller.
• Authorization: the prior, express and informed consent of the data subject to the processing of their data.

We only collect the data you voluntarily provide through our channels:

• Contact form: full name, company, email address and the content of your message.
• Technical diagnostic: company and project data (application, material, dimensions, city), contact details and the technical information you choose to enter.
• AI assistant: the content of the queries you type. Please do not include sensitive personal data in them.
• WhatsApp, phone and email: your contact number, name and the content of the conversation.
• Browsing data: IP address, device and browser type, pages visited and usage events, collected through cookies and similar technologies (see section 11).

We do not request sensitive data (data affecting the data subject’s privacy or whose misuse may lead to discrimination, such as health, racial origin, political orientation or biometric data). If you choose to provide it, processing is optional and no service is conditioned on it.

This site is aimed at companies and professionals. We do not knowingly collect data from children or adolescents; if we find that it has been provided, we will delete it.

We use your personal data for the following purposes:

• Answering your inquiries, quote requests and technical diagnostics.
• Preparing proposals, technical briefs and quotes, and following up on your request.
• Providing supply, engineering, installation, maintenance and technical support services.
• Sending technical and commercial information about our products and services when you have authorized it, with the option to opt out at any time.
• Analyzing website usage to improve its content, performance and experience, and measuring the results of our advertising campaigns.
• Complying with legal, accounting and tax obligations and responding to requests from competent authorities.
• Ensuring site security and preventing fraud or misuse.

Processing is governed by the principles of legality, purpose, freedom, accuracy, transparency, restricted access and circulation, security and confidentiality set out in Article 4 of Law 1581 of 2012.

Processing your data requires your prior, express and informed authorization (Article 9 of Law 1581 of 2012). You grant it by voluntarily sending us your data through the contact form, the technical diagnostic, WhatsApp, email or any other channel, after having had the opportunity to read this policy.

You may revoke your authorization or request deletion of your data at any time, unless there is a legal or contractual duty to keep it. We keep proof of authorization as required by law.

As a data subject you have the right to (Article 8 of Law 1581 of 2012):

• Know, update and rectify your personal data with us or with our processors.
• Request proof of the authorization granted, except where the law exempts it.
• Be informed, upon request, about the use made of your data.
• File complaints with the Superintendence of Industry and Commerce for violations of data protection rules.
• Revoke the authorization and/or request deletion of data when constitutional and legal principles, rights and guarantees are not respected.
• Access your processed personal data free of charge.

To exercise your rights, write to info@gbscolombia.com stating your full name, ID number, the means by which you wish to receive a reply and a clear description of your request. If you act through a representative or successor, you must prove that capacity.

Inquiries: answered within ten (10) business days of receipt. If that is not possible, we will tell you why and give a new date, which cannot exceed five (5) additional business days (Article 14 of Law 1581 of 2012).

Claims for correction, update or deletion: answered within fifteen (15) business days. If the request is incomplete, we will ask you to complete it within five (5) days. If it cannot be resolved in that period, we will tell you why and give a new date, which cannot exceed eight (8) additional business days (Article 15).

You may only turn to the Superintendence of Industry and Commerce (www.sic.gov.co) after exhausting this inquiry or claim procedure with us (Article 16).

This site uses cookies and third-party tools to measure traffic and campaign performance, including Google Tag Manager, Google Analytics and, when active, advertising pixels such as Meta. These tools collect browsing data in aggregated or pseudonymized form.

You can disable or delete cookies in your browser settings, or use the opt-out tools offered by the providers. Doing so may affect some site features.

We do not sell your personal data. To operate the site and provide our services we rely on providers acting as processors under our instructions, with confidentiality and security duties:

Website hosting and delivery (Vercel), transactional email (Resend), corporate email and analytics (Google), advertising measurement (Meta) and AI assistant query processing (Anthropic).

Some of these providers may process data on servers located outside Colombia. In those cases, international transmission or transfer is carried out in accordance with Articles 25 and 26 of Law 1581 of 2012 and we require adequate levels of data protection.

We may share information with GBS International Group and its companies when necessary to handle your request, and with authorities when required by law or a court order.

We adopt reasonable technical, human and administrative measures to protect your data against loss, unauthorized access, use or alteration, including encrypted connections (HTTPS), access control and confidentiality commitments from our providers. No system is completely infallible; if an incident affecting your data occurs, we will act as required by law and report it to the SIC when applicable.

We keep your data for as long as necessary to fulfil the purposes described, the business relationship and applicable legal, accounting and tax obligations. After that, we securely delete or anonymize it.

This policy is effective from its publication and may be updated to reflect regulatory or service changes. The current version will be published on this page with its update date and, if changes are substantial, we will notify you through the available means.

For any question about this policy or the processing of your data, contact us at info@gbscolombia.com or by WhatsApp at +57-301-114-4826. Hours: Monday to Friday, 8:00 a.m. to 6:00 p.m. (Colombia time).