PRIVACY POLICY

This Personal Data Protection Policy (hereinafter the “Policy”) regulates the collection, storage, use, transmission, transfer, circulation, and/or deletion of Personal Data carried out by BONGAS STORE, in accordance with the provisions contained in Statutory Law 1581 of 2012 and Decree 1377 of 2013, through which general provisions for the protection of Personal Data are enacted.

  1. Definitions

    2. The following are the defined terms that will be used in this Personal Data Protection Policy, in accordance with what is established in Law 1581 of 2012, as well as those related to the classification of data in accordance with Law 1266 of 2008:

    a. Authorization: Prior, express, and informed consent of the Data Subject to carry out the Processing of Personal Data.
    b. Database: Organized set of Personal Data that is subject to processing.
    c. Personal data: Any information linked to or that can be associated with one or several determined or determinable natural persons.
    d. Public Data: Data related to the marital status of persons, their profession or trade, and their status as a merchant or public servant. By its nature, Public Data may be contained, among others, in public records, public documents, official gazettes and bulletins, and duly executed judicial sentences that are not subject to confidentiality.
    e. Sensitive Data: All information that may affect the privacy of the Data Subject or whose use may generate discrimination, such as data that reveals racial or ethnic origin, political orientation, religious or philosophical convictions, membership in unions, social or human rights organizations, or that promotes the interests of any political party or that guarantees the rights and guarantees of opposition political parties, as well as data related to health, sexual life, and biometric data.
    f. Data Controller: Natural or legal person, public or private, who, by themselves or in association with others, decides on the database and/or the Processing of the data.
    g. Data Subject: Natural person whose personal data is subject to Processing.
    h. Processing: Any operation or set of operations on Personal Data, such as collection, storage, use, circulation, or deletion.
    i. Transfer: Data Transfer takes place when the Data Controller and/or Processor, located in Colombia, sends the information or Personal Data to a recipient, who in turn is a Data Controller and is located inside or outside the country.
    j. Transmission: Processing of Personal Data that implies the communication thereof inside or outside the territory of the Republic of Colombia when it has as its purpose the carrying out of Processing by the Processor on behalf of the Controller.

  2. Data of the personal data controller

    3. The Personal Data Controller is:

    Company Name: BONGAS-STORE S.A
    Tax ID (NIT):
    Domicile:
    Address:
    Email:
    Phone:

  3. Data subject to processing

    4. When you buy something from our store, as part of the buying process, we collect non-personal information and personal data.
    Non-personal information: Regarding website visitors, i.e., those persons who enter the website www.bongasstore.com, BONGAS-STORE collects the following NON-PERSONAL information: Date and time of access to the website, the global number of visitors who have accessed the website, the number of visitors broken down by sections and articles, the behavior of each visitor within the website, the type of operating system of the equipment used to access the site, as well as their browser and device type.
    Personal data: The personal data subject to processing is limited to the following: First and last names, landline and mobile phone, identification document, email, social media username (Facebook, Instagram), address, city, age, date of birth.

  4. Consent

    5. How do you obtain my consent?

    When you provide us with your personal information to complete a transaction, verify your credit card, create an order, arrange for a shipment, or make a return, we imply that you consent to the collection and use for that specific reason only.

    If we ask for your personal information for a secondary reason, such as marketing, we will ask you directly for your express consent, or provide you with an opportunity to decline.

    How can I withdraw my consent?

    If after having accepted you change your mind, you may withdraw your consent for us to contact you, for the collection, use, or disclosure of your information, at any time, by contacting us at correo@hotmail.com or writing to us at: Arqui Dibujos T3 Apto 423, Cartagena, BOL, Colombia

  5. Processing to which the data will be subjected

    6. a) To provide required services and products.
    b) To inform about new products or services that may or may not be related to those contracted or acquired by the Data Subject.
    c) To fulfill obligations entered into with the Data Subject.
    d) To inform about changes in products or services.
    e) To evaluate the quality of products or services.
    f) To carry out marketing or promotional activities.
    g) To send commercial, advertising, or promotional information via physical mail, email, cellular or mobile device - via text messages (SMS and/or MMS) - regarding products and/or services, events and/or commercial or non-commercial promotions, in order to promote, invite, direct, execute, inform, and in general, carry out commercial or advertising campaigns, promotions, or contests.
    h) To send information via text messages (SMS and/or MMS) or via "WhatsApp" regarding the delivery and status of orders placed on the Site by the customer.
    i) To share, including the transfer and transmission of personal data to third parties for purposes related to the operation of Linio.
    j) To conduct internal studies on the fulfillment of commercial relationships and market studies at all levels.
    k) To respond to legal requirements from administrative and judicial entities. l) To share collected personal data with third parties that have the status of commercial and/or business allies so they can offer products and/or services that allow improving the value proposition intended for BONGAS STORE customers, all the foregoing in accordance with the provisions of Law 1581 of 2012 and its Regulatory Decree 1377 of 2013. The processing of my personal data may imply the collection, storage, use, circulation, deletion, transmission, transfer, and/or reception of data for the purpose for which they were provided.

  6. Third-party services

    7. In general, the third-party providers used by us will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us.
    However, some third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies with respect to the information we are required to provide to them for purchase-related transactions.
    For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled.

  7. Rights of data subjects

    8. The Data Subject of the Personal Data shall have the following rights:
    a) To know, update, and rectify Personal Data.
    b) To request proof of the authorization granted to BONGAS STORE.
    c) To be informed by BONGAS STORE, upon request, regarding the use that has been given to their Personal Data.
    d) To file inquiries before the Data Controller or Processor, and to file complaints before the Superintendency of Industry and Commerce.
    e) To access the Personal Data that is subject to Processing free of charge under the terms of Article 21 of Decree 1377.
    The Data Subject of the Personal Data shall have the duty to keep their information updated and to guarantee, at all times, the truthfulness thereof. BONGAS STORE shall not be liable, in any case, for any type of responsibility derived from the inaccuracy of the information.

  8. Security

    9. To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed.
    If you provide us with your credit card information, such information is encrypted using Secure Socket Layer (SSL) technology and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

  9. Use of cookies

    10. Acceptance of cookies is not a requirement to visit the Site. However, we would like to point out that the use of the "my cart" functionality on the Site and accepting an order is only possible with the activation of cookies. Cookies are small text files that identify your computer on our server as a unique user. Cookies can be used to recognize your Internet Protocol address, which will save you time while you are on the Site or if you want to enter it in the future. We only use cookies for your convenience in using the site (for example, to remember who you are when you want to modify your shopping cart without having to re-enter your email address) and not to obtain or use any other information about you (for example, from targeted or hidden advertising). Your browser can be set to not accept cookies, but this could restrict your use of the Site and limit your experience on it. The use of cookies does not contain or affect personal or private data and does not represent a virus danger.

  10. Changes and modifications to the policy

    11. BONGAS STORE reserves the right to modify this Policy at any time. However, BONGAS STORE will timely communicate to the Personal Data Subject, before they are implemented, any substantial change to this Policy through the means of communication usually used by BONGAS STORE in the normal course of the relationship with the Data Subject. In the event that it is a non-substantial change, BONGAS STORE will publish such change through the website www.bongasstore.com.

    A substantial change shall be understood as any modification involving the identification of the Controller or the purpose of the Processing of Personal Data.

  11. Applicable law

    12. This Policy shall be governed by the laws of the Republic of Colombia.