PERSONAL DATA PROCESSING POLICY
1. PURPOSE
The purpose of this policy is to establish the guidelines for the processing of personal
BLUE NEVO S.A.S., in compliance with the provisions of Law 1581 of
2012, Decree 1377 of 2013, and any other regulations that complement, amend, or repeal them.
2. SCOPE
This policy applies to the processing of personal data collected, stored, used, circulated, and/or deleted by BLUE NEVO S.A.S. in the development of its corporate purpose, with respect to clients, employees, suppliers, contractors, and other personal data subjects.
suprimidos por BLUE NEVO S.A.S en el desarrollo de su objeto social, respecto de clientes, empleados,
proveedores, contratistas y demás titulares de datos personales.
3. DEFINITIONS
- Personal Data: Any information linked to or that can be associated with one or more identified or identifiable natural persons.
- Data Subject: A natural person whose personal data is subject to processing.
- Titular: Persona natural cuyos datos personales son objeto de tratamiento.
- Processing: Any operation or set of operations performed on personal data, such as collection, storage, use, circulation, or deletion.
- Data Controller: A natural or legal person who decides on the processing of personal data.
- Data Processor: A person who processes personal data on behalf of the Data Controller.
4. PRINCIPLES APPLICABLE TO DATA PROCESSING
The processing of personal data by BLUE NEVO S.A.S. shall be governed by the following principles:
- Legality
- Purpose
- Freedom
- Accuracy or Quality
- Transparency
- Restricted Access and Circulation
- Security
- Confidentiality
5. PURPOSES OF DATA PROCESSING
BLUE NEVO S.A.S tratará los datos personales para las siguientes finalidades, entre otras:
- Gestionar la relación contractual con clientes, proveedores, empleados y contratistas.
- Cumplir obligaciones legales y contractuales.
- Realizar actividades de mercadeo, promoción y fidelización.
- Gestionar solicitudes, quejas y reclamos.
- Realizar análisis estadísticos y estudios de mercado.
6. RIGHTS OF DATA SUBJECTS
Data subjects have the right to:
- Know, update, and rectify their personal data.
- Request proof of the authorization granted.
- Be informed about the use given to their data.
- Managing requests, complaints, and claims.
- Conducting statistical analysis and market research.
7. DUTIES OF THE DATA CONTROLLER
BLUE NEVO S.A.S. undertakes to: se compromete a:
- Guarantee the exercise of the data subject’s rights.
- Request and retain a copy of the data subject’s authorization.
- Properly inform the data subject about the purpose of data collection.
- Safeguard information under appropriate security conditions.
- Update information in a timely manner.
8. AUTHORIZATION OF THE DATA SUBJECT
The processing of personal data requires the free, prior, express, and informed consent of the data subject, which may be obtained through physical, electronic, oral, or any other means that allows for its preservation and consultation.
9. MECHANISMS TO EXERCISE RIGHTS
Data subjects may exercise their rights by submitting a written request to the email address: talentohumano@bluenevo.com (the department responsible for reviewing this policy) or at the main office located at Aeropuerto Guaymaral, Lote 14, 50 meters from Brío gas station. Requests will be handled in accordance with the timeframes established by law.
10. EFFECTIVE DATE OF THE POLICY
This policy is effective as of 09-12-2025 and shall remain in force as long as the relationship with the data subjects continues or as long as it is necessary to retain the information in accordance with the law.
11. MODIFICATIONS TO THE POLICY
BLUE NEVO S.A.S. may modify this policy at any time. Any modifications will be duly published through the usual internal communication channels established.
APPROVED
Legal Representative
Carlos Alberto Criollo Martínez
BLUE NEVO S.A.S.