SOPHIE DIGITAL SOLUTIONS S.A.S., a commercial company identified with NIT 901545914, with HEADQUARTERS IN BOGOTÁ, COLOMBIA, in the development of its commercial activities, has designed its policy for the treatment of personal data, which reflects the principles and rules established in the General Data Protection Regime, contained in Law 1266 of 2008 and Law 1581 of 2012, regulated by Decree 1377 of 2013. The objective is to protect, manage, and give appropriate treatment to the personal data of our clients, suppliers, employees, affiliates, executives, and other interested parties, seeking to guarantee the fundamental right to habeas data and the decision-making and control power they have over the information, use, and destination of their personal data. This information is contained in databases, files, and information with data subject to processing. Additionally, it seeks to inform how the company collects, stores, manages, uses, circulates, and treats the information provided through various means.
SOPHIE DIGITAL SOLUTIONS S.A.S. will obtain and manage the personal data provided to it by its clients, suppliers, employees, affiliates, executives, and other interested parties for the purposes and, consequently, in the development of its corporate purpose, in all operations, acts, or contracts that are directly related to commercial activities and are not prohibited by law, such as:
1. Compliance with obligations incurred under contracts and commercial relationships established.
2. Conducting events, campaigns, studies, promotions, or contests of a commercial, social, marketing, advertising nature, or in execution of our corporate purpose.
3. Providing information about our products and services.
4. Informing about changes made to our products, as well as their prices or changes in services.
5. Conducting surveys to evaluate the quality of our services and other necessary evaluations.
6. Transferring to third parties for promotional purposes.
The following are the definitions established by current regulations:
Our organization is committed to complying with the following principles in the processing of personal data:
For the purposes of this policy, data subjects shall be understood to include distributors, employees, service providers, clients, suppliers, and generally, any natural person who is the owner of the personal data recorded in the databases of SOPHIE DIGITAL SOLUTIONS S.A.S. In the case of minors (children and adolescents), their legal representatives shall have the authority to authorize or not the processing of their personal data. In the processing of this data, respect for the prevailing rights of minors, such as privacy and protection of personal information, will be ensured.
Data subjects whose personal data is recorded in the databases of SOPHIE DIGITAL SOLUTIONS S.A.S. have the following rights:
This policy will apply in cases where SOPHIE DIGITAL SOLUTIONS S.A.S. requests the completion of affiliation requests, surveys, or forms via phone, digital platforms, or in-person, as well as event attendance sheets, without prejudice to the specific conditions that apply in each case. From the moment the data subject authorizes SOPHIE DIGITAL SOLUTIONS S.A.S. to collect and process their personal data, such data may be used in the course of its commercial and business activities. SOPHIE DIGITAL SOLUTIONS S.A.S. may use the data subject’s personal information, such as email address, physical address, and/or landline or mobile phone number, to send advertisements related to its product and service offerings, and to contact the subject for events and other activities. In any case, depending on the activity, SOPHIE DIGITAL SOLUTIONS S.A.S. will clearly communicate to the data subject the mechanisms available to them to access, update, modify, and delete their data, as well as to revoke the authorization granted. Data collection also occurs in the following way:
When visitors leave comments on the website, the data displayed in the comment form, as well as the visitor’s IP address and browser user agent string, are collected. This information is gathered to facilitate spam detection and prevention.
Additionally, an anonymous string created from the visitor’s email address (also known as a hash) may be provided to the Gravatar service to check if it is in use. The Gravatar service’s privacy policy is available at the following link: https://automattic.com/privacy/.
Once the comment has been approved, the visitor’s profile picture associated with Gravatar will be visible to the public in the context of the comment made.
This policy is designed to ensure transparency and proper handling of personal data in compliance with current data protection regulations.
Guidelines for Uploading Images to the Website
When uploading images to this website, users are strongly encouraged to avoid uploading images that contain embedded location data (such as GPS EXIF). It is important to note that visitors to the website may download the images and extract any location data contained in them.
The responsibility for ensuring that images do not contain such location data lies with the user who uploads them. This measure is necessary to protect users’ privacy and security and to comply with current data protection regulations.
By using the website of SOPHIE DIGITAL SOLUTIONS S.A.S. or providing personal information, the data subject authorizes the collection, use, disclosure, transfer, and transmission of their personal information as described in this Policy and in accordance with the Privacy Statements of the applicable website or country.
For purposes of protection under the Habeas Data Law, the data subject authorizes SOPHIE DIGITAL SOLUTIONS S.A.S. to report them to CIFIN, DATACREDITO, and PROCREDITO entities, as outlined in this section. SOPHIE DIGITAL SOLUTIONS S.A.S. may continue processing the data contained in its databases for the purposes indicated in this policy, without prejudice to the data subject’s right to request the deletion of their data at any time.
Article 15 of the Political Constitution establishes the right of all individuals to know, update, and rectify information that has been collected about them in databases or archives, both from public and private entities. “All persons have the right to their personal and family privacy and to their good name, and the State must respect and protect these rights.”
Likewise, individuals have the right to know, update, and rectify the information collected about them in databases or archives of public and private entities. This right includes the authority to authorize data processing, add new data, exclude or delete information from a database or archive. In accordance with this, Law 1581 “General Law on Personal Data Protection” was issued, which expands on the right to Habeas Data beyond just financial and credit aspects, allowing any data subject to control the information collected about them in any database or archive managed by private or public entities. Under this general law, the data subject is a natural person.
Article 15 of the Political Constitution establishes the right of all individuals to know, update, and rectify the information collected about them in databases or archives, both from public and private entities. “All persons have the right to their personal and family privacy and to their good name, and the State must respect and protect these rights.”
Likewise, individuals have the right to know, update, and rectify the information collected about them in databases or archives of public and private entities. This right includes the authority to authorize data processing, add new data, exclude or delete information from a database or archive. In accordance with this, Law 1581 “General Law on Personal Data Protection” was issued, which expands on the right to Habeas Data beyond just financial and credit aspects, allowing any data subject to control the information collected about them in any database or archive managed by private or public entities. Under this general law, the data subject is a natural person.
To manage and address requests, claims, and complaints, or to exercise their rights, the data subject must send an email to info@sophie.com.co. If additional information is required, the interested party can also contact the WhatsApp number: +57 321 925 30 72. SOPHIE DIGITAL SOLUTIONS S.A.S. will respond to the petitioner within the timeframes established by Law 1581 of 2012. For petitions and claims, the request must include all necessary and applicable information to ensure a timely and effective response. It should also contain a clear and precise description of the personal data for which the data subject seeks to exercise their rights. Every request must be submitted by the data subject or their legal representative, and SOPHIE DIGITAL SOLUTIONS S.A.S. reserves the right to verify the petitioner’s identity by any means. The claim must be filed as a request addressed to the administrative department, including the identification of the data subject, the description of the facts leading to the claim, the address, and any required supporting documents. Regardless of the mechanism used to submit petitions, complaints, or claims, they will be addressed within a maximum period of ten (10) business days from the date of receipt.
If it is not possible to address the query within that period, the interested party will be informed before the deadline, stating the reasons for the delay and specifying the date on which the query will be addressed, which in no case may exceed five (5) business days following the initial deadline. Requests for updates, corrections, rectifications, or deletion of data will be answered within fifteen (15) business days from the day following the date of receipt. If it is not possible to respond within that period, the interested party will be informed before the deadline, explaining the reasons for the delay and indicating the date the claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the initial period. Before contacting the entity responsible for overseeing compliance with data protection regulations, the data subject must first file their claim with SOPHIE DIGITAL SOLUTIONS S.A.S. through the designated channels.
SOPHIE DIGITAL SOLUTIONS S.A.S. provides the following communication channels for data subjects:
Website: sophie.com.co
Email: info@sophie.com.co
Phone line: +57 321 925 3072
This policy is effective from June 1, 2024, and will remain in force as long as SOPHIE DIGITAL SOLUTIONS S.A.S. operates within its corporate purpose in Colombia or until the law dictates otherwise. SOPHIE DIGITAL SOLUTIONS S.A.S. reserves the right to unilaterally modify this policy at any time, and it will promptly notify data subjects of any changes. According to instructions from the Superintendency of Industry and Commerce, these policies will be published in accordance with the entity’s guidelines.
When substantial changes occur in the privacy policy, a new authorization will generally be obtained through the usual means of contact between the company and the data subjects. Any significant changes in the data processing policies will be communicated promptly to the data subjects through regular communication channels and/or via: the website info@sophie.com.co. If contacting individuals is not feasible, notifications will be made through public notices at the company’s headquarters.
SOPHIE DIGITAL SOLUTIONS S.A.S. reserves the right to update or modify this Policy at any time without prior notice by posting the revised version on our websites. We also reserve the right to update or modify our website or country-specific Privacy Statements at any time by posting the updated declaration on the respective SOPHIE DIGITAL SOLUTIONS S.A.S. website. In the case of modifications to this Policy or any Privacy Statement, the changes will only apply to personal information collected after the updated Policy or statement is posted on the relevant website.
Cookies are small data files that allow us to compare and understand how users navigate through our website, thereby improving and personalizing the shopping experience.
SOPHIE DIGITAL SOLUTIONS S.A.S. is committed to complying with all applicable data protection laws and regulations. We will maintain appropriate records and documentation to demonstrate compliance and will cooperate with data protection authorities in the event of investigations or audits.
In compliance with the security principle established by current regulations, SOPHIE DIGITAL SOLUTIONS S.A.S. has adopted the necessary technical, human, and administrative measures to secure records, preventing their alteration, loss, unauthorized or fraudulent use or access. These measures, protocols, and procedures are outlined in the organization’s internal information security documents, which are reserved for internal use only.
