PERSONAL DATA PROCESSING POLICY
Download data authorization document
1. GENERAL
​
Dear customer, potential customer, suppliers, and visitors, our Privacy Policy and Personal Data Processing establishes the conditions under which we will process the personal data we collect from you through the completion of contact forms and calls, as well as the online chat on our website, or any other additional data that you provide to us through emails, telephone calls, contracts, or documents of any kind that you supply to us by any physical, voice, or data message means. By providing the data, you accept this policy on the way in which GREAT TEAM CLOUD S.A.S. (hereinafter, the company) will process your personal information; said processing will be carried out in compliance with the guidelines set forth in the General Law on Personal Data Protection (Statutory Law 1581 of October 17, 2012) and any other regulation that regulates, modifies, or repeals what is contemplated in this provision. If after reading this Privacy Policy you do not agree with the way we process your data, we kindly ask you not to use our services and to request the update, modification, or deletion from our database in accordance with what is established in numeral 7 of this document.
​
This policy is aligned with Decree 1377 of 2013, which regulates Law 1581 of 2012 regarding compliance with the privacy notice that must be provided to the holders of personal information by the company, which acts as the controller of the personal data processing, and its purpose is and is oriented towards:
​
A. Informing the holders of the information about the company's personal data processing policy, in addition to allowing the holders of personal data to exercise their right of habeas data, establishing the necessary procedure they must follow if they wish to know, update, delete, and rectify the data in our databases and/or files. This document is oriented in all cases to protect and guarantee everything concerning the processing of personal data, the freedoms, and fundamental rights that all natural or legal persons have.
B. Communicating to the holder of personal information the data processing policies that will apply to their personal data, the way they will be processed, the use that will be given to them, and the way they can access their personal data.
This policy will be applied mandatorily to all personal data recorded in physical or digital media that are susceptible to being processed by the company as the controller of their processing.
​
2. PURPOSE OF THE COLLECTED DATA
​
At the moment you provide personal data of your own, you authorize us to process them, and we understand that your consent is prior, express, and informed, as you have read this document before providing your data.
​
The collection of personal data made through contact forms, as well as in the online chat on our website, telephone calls, personal or virtual interviews, contracts, forms, or any other document you provide to the company, will have the following purposes:
​
Customers:
​
* Advise you on topics related to the services offered by the company that have been consulted and/or requested by you.
* Maintain constant communication about the services provided by the company.
* Send communications regarding the contractual relationship.
* Carry out administrative and/or accounting management related to the contracting of services such as billing, collections, and payments.
* Communicate to you for the purpose of notifying the end of service renewal.
* Send service proposals and invitations to company events or its allies, partners, or associates.
* Carry out activities aimed at customer loyalty.
* Provide technical support service.
* Receive and process requests, complaints, and claims.
* Conduct satisfaction surveys.
* Transfer personal data for service registration with an international entity.
Suppliers:
* Preparation and execution of the contract.
* Maintain constant communication about the contracted services and/or products.
* Send communications related to the execution of the contract.
* Carry out administrative and/or accounting management related to the contractual relationship such as billing, collections, and payments.
The processing of personal data may be carried out directly by the company and/or by whom the latter determines, as long as it is carried out for the purposes set forth herein, for which no additional authorization from you will be required, which you expressly accept by providing your personal data.
You will have the right, free of charge, to know, update, rectify, and/or request the deletion of your personal data, through communication that will be received through the available channels for this purpose, which you will find in point 7 of these policies.
​
3. LEGAL FRAMEWORK
​
Political Constitution, article 15.
Law 1581 of 2012
Decree 1377 of 2013
Decree 886 of 2014
Decree 1074 of 2015, Ch. 25
In accordance with Law 1273 of 2009, the crime of violation of personal data is committed by whoever "without being authorized to do so, for their own benefit or that of a third party, obtains, compiles, subtracts, offers, sells, exchanges, sends, buys, intercepts, discloses, modifies, or uses personal codes, personal data contained in files, records, databases, or similar media."
Both the company and the processors (EMPLOYEES, SUPPLIERS, AND CONTRACTORS) must observe and respect these policies in compliance with their functions and/or activities, the corporate guidelines for the processing and protection of personal data, and the other provisions and clauses established by the company, even after the termination of legal, commercial, labor, or any other ties. Likewise, they must maintain strict confidentiality regarding the processed data.
​
4. DEFINITIONS
​
For the purposes of interpreting and applying this document, the definitions established by Law 1581 of 2012 and its regulatory decrees will be taken into account. For what is not established in said regulation, the definitions established by the dictionary of the Royal Spanish Academy will apply, and finally, those established by different sources of information from formal entities such as universities, scientific or technological institutes, and similar.
​
5. TYPE OF INFORMATION REQUESTED
​
GREAT TEAM CLOUD S.A.S. as well as its affiliated or subsidiary companies will process your public, private, semi-private, or sensitive data, derived or on the occasion of the employment relationship it has, had, or may have with the Company, in accordance with what is provided in Law 1581 of 2012, and in the Personal Data Processing Policy, Purposes for the General Processing of Employee Information, retired workers, pensioners, and candidates to fill vacancies:
​
* For purposes pertinent to the employment relationship (EPS, ARL, pension funds and severance pay, family compensation funds, etc.)
* In the case of employees, with the signing of the employment contract, express authorization is understood to process the information.
* In the case of judicial and legal requirements.
* Payroll accounting and payment.
* Recruit and select personnel who will fill the vacancies.
* Process, confirm, and comply with legal and extra-legal labor obligations arising from the employment contract.
* Carry out transactions.
* Payment of extra-legal benefits.
* Audits.
* Statistical analysis.
* Maintain candidate database.
* Training and development.
* Share personal data with banking entities, companies that offer benefits to our active workers, among others.
* Occupational Health and Safety Programs.
I authorize that said information be shared with third parties for the purposes proper to the work I developed, develop, or may develop. Sensitive and/or personal data may be hosted outside Colombian territory in technological tools, software, and databases acquired or licensed by the Company, parent companies, controlling entities, affiliates, or subsidiaries of these. I know that, as the holder of the information, the rights provided in laws 1266 of 2008 and 1581 of 2012 assist me. In particular, the right to know, update, and rectify the information collected about me, as well as to file inquiries and complaints; revoke the authorization or request the deletion of data, in the cases where it is appropriate.
Private-type information will be requested from you, understood as that information that allows identifying a person, such as identity document number, names, physical and electronic addresses, telephone numbers, among others.
The authorization may not be revoked nor may the deletion of the information be requested when the holder has a legal or contractual duty to remain in the database, as provided by article 9 of Decree 1377 of 2013.
​
6. SECURITY
​
Our commitment is to safeguard the security of your personal data.
While we have the physical and technological means that allow us to secure your information adequately, we will do everything possible to protect your data, but we cannot guarantee the total security of the data you provide and to which you authorize us to access. We have our own servers and those of third parties, recognized data storage and email providers in which the information is stored. Our equipment has access restrictions and other measures that reduce the probability of unauthorized access or information leakage. Likewise, we have legal tools so that our workers, suppliers, and contractors are obligated to give legal treatment to the personal data that the company must disclose in the exercise of the entrusted management or legal duties such as billing, payment, reports, and others.
Our website may introduce links or "links" to other websites of our own or third parties. If you decide to go to any of the websites linked on our portal, you should keep in mind that each of these portals or websites has a different privacy policy, so we accept no responsibility for the information or personal data you provide or facilitate outside our site.
​
7. INQUIRY AND/OR CLAIM
​
For inquiries, claims, and/or requests for information, update, rectification, and/or deletion of your personal data, it must be submitted in writing in a document signed by the holder of the personal data using the Requests, Complaints, or Claims format that can be sent by email to edith@gtcloud.co or by authorized postal mail to Carrera 55 No. 152B - 68 Edificio MAZ - Office 1110 in the city of Bogotá – Colombia.
Every request, inquiry, and/or claim must contain at least:
a) Name and surnames of the holder.
b) Identification number of the holder.
c) Holder's location data (email, telephone, address, city).
d) Description of the request, inquiry, or the facts giving rise to the claim.
e) Means by which you wish to receive the response.
f) Signature of the Petitioner.
g) Attach the documents you consider pertinent to support the request, inquiry, and/or claim.
​
8. PROCEDURE TO MAKE INQUIRIES AND/OR CLAIMS
​
Requests, complaints, and/or claims related to knowing, updating, rectifying, and/or deleting the data and/or revoking the authorization will be addressed within a maximum period of fifteen (15) business days counted from the day following the date of receipt thereof. When it is not possible to respond within the aforementioned period, the data holder will be informed of the reasons for the delay and the response deadline will be indicated, which may not exceed five (5) business days following the expiration of the first period.
If it is found that the request, claim, or inquiry presents any error or is incomplete, the holder will be required within five (5) business days following the date of receipt thereof to remedy the identified deficiencies. After thirty (30) business days from the date of the requirement without a response from the holder, it will be understood that they have withdrawn the claim.
If the company is not the competent entity to resolve the claim, it will refer it, within the maximum response period mentioned herein, to the competent entity, who will have the same period to respond, which will begin from the date it receives the communication of the transfer of the inquiry, claim, or request, and the interested party or holder will be informed of this situation so they can follow up accordingly.
In accordance with article 16 of Law 1581 of 2012, the holder or interested party may only file a complaint with the Superintendence of Industry and Commerce after having exhausted the corresponding procedure indicated in this policy before the company.
​
TRANSFER AND PRESERVATION OF INFORMATION
GREAT TEAM CLOUD S.A.S. as well as its affiliated or subsidiary companies may:
A. Preserve the personal data of the information holders in databases located in Colombia and on the servers of reliable and highly recognized third parties, complying with the purpose authorized by the data holder, making their best efforts to keep the information secure, safeguarding its integrity, veracity, and confidentiality.
B. Transfer or transmit, all or part of the personal data of the information holders, to the Workers, Suppliers, or Contractors of the company in Colombia or abroad, solely and exclusively for the purposes and effects indicated in the authorization for the processing of personal data, in numeral 2 of this policy, and in compliance with legal provisions.
​
10. MODIFICATIONS TO THE POLICY
​
Subsequent modifications to the initial publication date of this Privacy and Personal Data Processing Policy will be published on our website www.gtcloud.co/politica-datos-personales
The company reserves the right to make changes to this Policy at any time and without notice, when they are the result of the application of a legal norm. Any change in this policy will take effect at the time it is published.
In the event that we intend to give a use or destination different from the initial reason for which your personal data were requested, your authorization will be requested by any means in which a record of said communication remains, among which we can name as an example email, SMS, WhatsApp message, or telephone call.
This manual and policy will be effective from December 2, 2018.