In compliance with the provisions of Law 1266 of 2008, Law 1581 of 2012, as well as Compilation Decree 1074 of 2015 (Section 2.2.2.25.3), in addition, taking as a reference the guidelines established by the General Data Protection Regulation (GDPR) and the General Law on the Protection of Personal Data (LGPD), and especially on the need and importance of developing and applying a PRIVACY NOTICE in cases in which it is not it is possible or easy to make available to the Owner the privacy and information processing policies, SIMETRIK INC, a U.S. company of the State of Delaware, domiciled in the city of San Francisco, California, identified with EIN No. 61-1863197, in its capacity as parent company, SIMETRIK S.A.S, A COLOMBIAN COMPANY INCORPORATED UNDER THE LAWS OF THE Republic of Colombia, domiciled in the city of Bogotá D.C., identified with NIT 901.030.030-8, as well as the other affiliated entities of the SIMETRIK business group (hereinafter “SIMETRIK”), who act as PERSONAL DATA CONTROLLERS., informs interested parties that personally identifiable information (personal data) will be processed in accordance with the PERSONAL DATA POLICY developed and maintained and available in physical form at any of its headquarters as well as on its https://simetrik.com/legal?q=privacy_policy website , in accordance with the framework of requirements on the management and processing of personal data.
1. DATA CONTROLLER
Data controller in Colombia
- SIMETRIK S.A.S
- NIT: 901.030.030-8
- Address: Cl. 91 # 11-29, Bogotá
- Phone: 3043877835
- Institutional e-mail: dataprivacy@simetrik.com,
The entities of the SIMETRIK group of companies may act as controllers or processors of personal data, as appropriate to the nature of the contractual relationship and the processing activities carried out.
2. PROCESSING OF PERSONAL DATA
The administration and treatment that SIMETRIK gives to personal data is limited to the collection, storage, use, circulation, transmission and/or transfer, as appropriate, including transfers between the entities of the SIMETRIK business group, as well as to suppliers, as appropriate, for the authorized purposes. Once the purposes of the processing for which the authorization was granted by the owner is fulfilled, the personal data will be deleted from the entity’s databases. The personal data collected by SIMETRIK is essentially used for the development of the company’s corporate purpose and the achievement of its strategic objectives, established in the Colombian regulatory framework.
SIMETRIK implements reasonable technical, administrative and organizational measures to protect the confidentiality, integrity and availability of the personal data processed.
2.1 Processing of Children’s Data
SIMETRIK does not intentionally process the personal data of children or adolescents. In the event that the processing of data of minors is exceptionally required, the prior authorization of the legal representative will be requested and respect for their fundamental rights will be guaranteed.
3. PURPOSES OF PROCESSING
3.1 Purposes necessary for the performance of the contract
No additional consent required — basis: performance of the contract and legal obligation)
- Provision of the contracted SaaS services and compliance with the object of the contract signed with the owner.
- Business relationship management: quotes, billing, technical support, and customer service.
- Management of the employment relationship or with suppliers, according to the quality of the holder.
- Compliance with applicable legal, regulatory, or contractual obligations in each jurisdiction.
- Information security guarantee, fraud prevention and protection of SIMETRIK’s technological systems.
- Transfers of personal data between entities of the SIMETRIK business group and to technology providers, when necessary for the provision of the service.
- Comply with applicable legal, regulatory, or contractual obligations.
- To ensure information security, prevent fraud and protect SIMETRIK’s technological systems.
3.2 Purposes that require prior and express consent
- Sending commercial communications, product news and marketing materials from SIMETRIK.
- Creation of usage profiles for product improvement purposes and aggregate behavioral analysis.
- To share data with SIMETRIK’s commercial partners for purposes other than the provision of the contracted service.
For the above purposes, SIMETRIK will request your prior, free, specific and informed consent by means of a verifiable written or electronic mechanism. You may refuse or revoke such consent at any time by writing to dataprivacy@simetrik.com.
4. PERSONAL DATA OBTAINED
Whoever accesses SIMETRIK’s services and/or products may voluntarily provide certain personal data necessary for the development of the contractual, commercial, employment or service provision relationship with the company.
The categories of personal data that may be collected include:
- Name and surname
- Identification document
- Age and gender (where necessary)
- Phone number
- Physical address and email address
- City and country of residence
- Corporate or professional contact information when the owner is acting on behalf of a company or supplier
In addition, when the owner represents an organization, the following business contact information may be collected:
- Name of the entity or organization
- Domicile or address of the entity
- Corporate Phone
- Institutional email
______________________________________________
In the event that sensitive personal data is collected, it will be processed in accordance with SIMETRIK’s Personal Data Privacy Policy and Information Security Policy, available at: https://simetrik.com
5. LEGAL BASIS
The basis for the processing of personal data is: Law 1581/2012 Art. 2. Scope of application. Law 1266/2008 Art. 2. Scope of application. Decree 1074/2015 Art. 2.2.2.25.3.2 (Decree 1377 of 2013, Art. 14). Privacy Notice. Decree 1074/2015 Art. 2.2.2.25.3.3 (Decree 1377 of 2013, Art. 15). Minimum content of the Privacy Notice. In addition, taking as a reference the guidelines established by the General Data Protection Regulation (GDPR) and the General Law on the Protection of Personal Data (LGPD).
6. TRANSFER OF PERSONAL DATA.
We inform you that your personal data is shared with people, companies, organizations and authorities other than the controller, and for the purposes described below
| Recipient of personal data | Country | Purpose |
|---|---|---|
| SIMETRIK’s parent company | United States | To transfer personal data outside the country, in order to carry out the pertinent procedures for the development of the company’s corporate purpose |
| SIMETRIK Subsidiaries | Colombia Brazil Argentina Mexico India | Companies in the SIMETRIK group of companies with which a data processing contract has been concluded |
| Third parties with whom SIMETRIK has entered into a contract | United States | Transmit personal data outside the country to third parties with whom SIMETRIK has entered into a data processing contract and it is necessary to provide it to them for the fulfilment of the contractual purpose. (*) |
| Government Entities | United States | When required |
The Purpose Description which is marked with an asterisk (*) requires your consent.
International transfers of personal data are made through contractual arrangements that incorporate appropriate data protection measures, in accordance with applicable law.
7. RIGHTS OF THE OWNER
You have the right to know what personal data is held about you, what it is used for and the terms of use we give it (Access). Likewise, it is your right to request the correction of your personal information in the event that it is outdated, inaccurate or incomplete (Rectification); that we delete it from our records or databases when you consider that it is not being used in accordance with the principles, duties and obligations provided for in the law (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition).
In addition, you have the right to request proof of the authorization granted for the processing of your personal data, to be informed about the use that has been given to your personal data, to access free of charge your personal data that have been subject to processing and to file complaints with the competent authorities in matters of personal data protection when you consider that the applicable regulations have been violated.
8. EXERCISE OF RIGHTS
To exercise any of the above rights, the owner must submit a request to the email dataprivacy@simetrik.com, including:
- Full name of the holder and identity document.
- Clear and precise description of the right you wish to exercise.
- Means of notification to receive the response.
- Supporting documentation, when applicable (for rectification: documents that support the correction; for cancellation: causes that motivate the deletion; for opposition: reasons that justify the cessation of the processing and damage or prejudice that it would cause).
Response times vary depending on the jurisdiction of the holder:
| Jurisdiction | Base Term | Extension | Standard |
| Colombia | Consultations: 10 business days / Complaints: 15 business days | +5 / +8 business days with notification | Law 1581, Arts. 14-15 |
| Mexico | 20 business days | +20 business days with notice | LFPDPPP, Art. 32 |
| Brazil | 15 calendar days | Not expressly provided for | LGPD, Art. 19 |
| Argentina | Access: 30 calendar days / Rectification-Deletion: 5 business days | — | Law 25.326, Arts. 14-16 |
| USA (California) | 45 calendar days | +45 days with notification | CCPA/CPRA |
| India | 30 calendar days (provisional standard) | To be defined in DPDP Rules | DPDP Act 2023 |
9. SUPERVISORY AUTHORITIES
The owner has the right to lodge complaints with the data protection authority in his or her jurisdiction:
- Colombia: Superintendence of Industry and Commerce (SIC) — www.sic.gov.co
- Mexico: National Institute of Transparency, Access to Information and Protection of Personal Data (INAI) — www.inai.org.mx
- Brazil: Autoridade Nacional de Proteção de Dados (ANPD) — www.gov.br/anpd
- Argentina: Agency for Access to Public Information (AAIP) — www.argentina.gob.ar/aaip
- USA (California): California Privacy Protection Agency (CPPA) — cppa.ca.gov
- India: Data Protection Board of India (formally incorporated)
To exercise any of the Rights Holder’s rights, you may submit a written request to the email dataprivacy@simetrik.com, or at our customer service points.
In the event of requesting rectification, you must also indicate the modifications to be made and provide the necessary documentation to support your request.
In the case of the right of cancellation, it must state the reasons for the deletion.
In the right to object, it must indicate the reasons that justify the termination of the processing of personal data and the damage or prejudice that it would cause, or, if the opposition is partial, it must indicate the specific purposes with which you do not agree, provided that it is not a mandatory requirement.
10. CHANGES TO THE PRIVACY NOTICE
In case of making any modification to the Privacy Notice, you will be notified via email or you can verify it through our website https://simetrik.com/.
Last update: March 24, 2026