ESEN
LET'S TALK

Privacy Policy

Our company, as the data controller, places the utmost importance on safeguarding the personal data you provide to us. Protection of your personal data and its processing in compliance with applicable regulations is our priority.

In compliance with Colombian Statutory Law 1581 of 2012 and Decree 1377 of 2013, which set out general provisions for the protection of personal data, we provide you with detailed information on the personal data we process. This applies to the processing of personal data relating to our clients, website users, and other business partners. This Privacy Policy outlines the legal basis for processing personal data, the purposes of such processing, potential recipients of the data, and your rights in connection with its processing.

1. Controller of the Personal Data

The controller responsible for the processing of your personal data is Owlcy, with its registered seat in Colombia, unless stated otherwise in this Privacy Policy.

If you have any questions, comments, or concerns regarding your personal data and its processing, or you wish to exercise any of your rights regarding your personal data as described further in this Privacy Policy, you can contact us at:

2. What Personal Data We Process

The type of personal data we process about you depends on the specific processing activities involved. Typically, the personal data we process includes:

  • Identification data: name, surname, and where applicable, company name you represent.
  • Contact details: email address, phone number.
  • Location data: IP address (when using the website).
  • Data related to your inquiry or project: message, information about products or services requested, estimated budget (optional), how you heard about us.
  • Cookies and similar technologies: for a detailed description of the cookies we use and their purpose, please refer to our cookie policy if available, or your browser settings.

If you provide personal data beyond the categories listed above, such data will be processed in accordance with the same principles and rules applicable to the above-listed categories.

3. Purposes and Legal Basis for Processing Personal Data

We process personal data based on one or more of the following legal bases:

  • Performance of a contract: to conclude a contract with you or take steps at your request prior to conclusion of the contract, or to perform the contract.
  • Legitimate interest: to pursue our legitimate interests, as long as these are not overridden by your interests or fundamental rights and freedoms.
  • Legal obligations: to comply with our obligations under applicable laws and regulations.
  • Consent: where you explicitly agree to the processing of your personal data for specific purposes.

The main purposes for which we process personal data are:

  • Handling inquiries and contact form: to process requests you send us through the “Let’s Talk” form (name, email, phone, company, message, how you heard about us). Legal basis: your consent by submitting the form and, where applicable, pre-contractual measures.
  • Commercial communication and follow-up: to respond to your request, conduct commercial follow-up and, where applicable, send communications about our services. Legal basis: legitimate interest and/or consent.
  • Website operation and security: hosting, usage analytics and improvement of our services. Legal basis: legitimate interest. We may use third-party services in this context (see section 5).

4. Retention Period of Your Personal Data

We process and retain personal data only for as long as it is necessary to fulfil the purpose for which it was collected. In general:

  • Inquiries that do not result in a contract: for approximately 6 months from the last communication related to the inquiry.
  • Contractual relationship: for the duration of the contract and for the period required by law to retain information (e.g. tax or accounting obligations).
  • Commercial communications: for as long as you maintain your consent or until you opt out.
  • Exercise or defence of claims: for the period permitted by law.

5. Transfer of Personal Data to Third Parties

We only disclose personal data to our authorised personnel and to processors engaged by us under relevant contracts, to the extent necessary to achieve the purpose of the processing. At present, the external providers which may process data on our behalf include:

  • Vercel: web hosting.
  • Resend: sending and handling emails derived from the contact form.
  • Meta (Facebook Pixel): measurement and analytics of visits and campaigns (where applicable), in accordance with cookie settings and your consent where required.
  • Google: analytics (Google Analytics) and, where applicable, reCAPTCHA or other services, depending on the site configuration.

Processing takes place primarily in Colombia and/or in countries that provide an adequate level of protection or equivalent safeguards. Where data is transferred outside Colombia, the measures required by applicable law will apply.

6. Data Security

We have implemented technical and organisational measures to protect your personal data against unauthorised access, loss or alteration. However, transmission over the internet is not fully secure; we recommend that you do not send sensitive information through unsecured channels.

7. Rights of the Data Subject

In accordance with Colombian Law 1581 of 2012, you are entitled to:

  • Know, update and rectify your personal data with us as the controller.
  • Request proof of the authorization you gave us for processing, except where the law provides otherwise.
  • Be informed by Owlcy or by the processor about the use that has been made of your personal data.
  • File complaints with the Superintendency of Industry and Commerce (SIC) for violations of data protection regulations.
  • Revoke your consent when processing is based on it, without affecting the lawfulness of processing carried out previously.
  • Request deletion of your data when you consider that it is not being processed in accordance with the law.

To exercise these rights, please contact us at info@owlcy.com (or owlcy.digital@gmail.com), clearly indicating the right you wish to exercise. The Superintendency of Industry and Commerce (SIC) is the supervisory authority in Colombia. You can find more information at www.sic.gov.co.

8. Changes to This Policy

Owlcy reserves the right to update this Privacy Policy at any time. The current version will be the one published on this page, with the date of last update.

Effective date: February 26, 2025.