PERSONAL DATA PROCESSING POLICY OF QUID DESIGN S.A.S.
1. IDENTIFICATION OF THE DATA CONTROLLER
The Data Controller of the personal data collected through the website https://www.qd.com.co is:
Legal Name: Quid Design S.A.S.
NIT (Tax ID): 900.150.430-1
Official Contact Email (for Privacy matters): [email protected]
Address: (While the full physical address is not disclosed in this public document, Quid Design S.A.S. is headquartered in [Insert City, e.g., Bogotá D.C., Colombia], and full address information is properly registered and available for legal purposes and inquiries through the indicated contact channels.)
2. PURPOSE AND SCOPE
This Personal Data Processing Policy (hereinafter, the “Policy”) aims to inform Data Subjects (any natural person whose personal data is subject to Processing) about how Quid Design S.A.S. collects, uses, stores, manages, and protects personal data gathered through its website https://www.qd.com.co and other communication channels, in compliance with Law 1581 of 2012, Decree 1377 of 2013, and related regulations.
This Policy applies to all personal information registered in Quid Design S.A.S. databases that is processed within Colombian territory.
3. PRINCIPLES FOR PERSONAL DATA PROCESSING
Quid Design S.A.S. applies the principles established by Law 1581 of 2012 for the Processing of personal data:
•Legality Principle: Processing is carried out in accordance with the law.
•Purpose Principle: Processing serves legitimate, specific purposes that are communicated to the Data Subject.
•Freedom Principle: Data is processed only with the Data Subject’s prior, express, and informed consent.
•Accuracy or Quality Principle: The processed information is accurate, complete, up-to-date, verifiable, and understandable.
•Transparency Principle: Data Subjects are guaranteed access to information about their personal data held by the Controller.
•Restricted Access and Circulation Principle: Processing respects the limitations derived from the nature of the data and legal or constitutional provisions.
•Security Principle: Information is handled with appropriate technical, human, and administrative measures to safeguard records.
•Confidentiality Principle: All persons involved in data processing are required to maintain information confidentiality.
4. PERSONAL DATA COLLECTED
Quid Design S.A.S. collects and processes the following types of personal data through its website and communications:
Data provided directly by the Data Subject:
•Full name
•Email address
•Phone number
•Any other personal information the user voluntarily includes in messages or requests via website forms
Data automatically collected (via Google Analytics):
•Technical information: IP address (Google Analytics is recommended to anonymize IPs), browser type, OS, device type
•Website usage data: pages visited, time spent on site, traffic source, clicks, browsing behavior
5. PURPOSES OF PERSONAL DATA PROCESSING
Personal data collected by Quid Design S.A.S. is used for the following purposes:
•Contacting users who requested information or interacted through the website or email
•Responding to user inquiries, requests, or questions
•Managing commercial and marketing communications, including service updates, promotions, and relevant content (with prior user authorization)
•Preparing and sending formal service proposals
•Conducting statistical and user behavior analysis on the website to improve its performance, design, and content (via Google Analytics)
•Fulfilling legal obligations and responding to authorities
6. AUTHORIZATION
Processing of personal data by Quid Design S.A.S. requires the Data Subject’s free, prior, express, and informed consent. By submitting personal data through website forms or contacting us via email, the Data Subject unequivocally authorizes Quid Design S.A.S. to process their data for the purposes outlined in this Policy.
For marketing communications, Quid Design S.A.S. commits to obtaining express consent from the Data Subject, unless a pre-existing contractual relationship allows for communication about similar services. It is recommended to include a clear opt-in mechanism (e.g., checkbox) in forms for any unrelated commercial communications.
7. THIRD PARTIES WITH WHOM INFORMATION IS SHARED
Quid Design S.A.S. does not sell, rent, or transfer personal data to third parties for purposes other than those stated herein.
However, we use Google Analytics to analyze traffic and user behavior on our website. This means that certain usage data (such as anonymized IP address, browser information, pages visited) is collected by Google on our behalf to generate statistical reports that help us improve the site. In this case, Google acts as a Data Processor. Google’s processing is governed by its own privacy policies.
8. USE OF COOKIES AND OTHER TECHNOLOGIES
Our website uses cookies and similar technologies. Cookies are small text files stored on a user’s device when visiting a website.
We use cookies for the following purposes:
•Strictly Necessary Cookies: Essential for the website’s basic operation
•Analytics/Statistics Cookies: We use Google Analytics to collect information on how visitors use our site (pages visited, duration, etc.) to improve site functionality
By using our website, you consent to the use of these cookies. We recommend implementing a visible cookie banner that informs users about the use of cookies (especially analytics cookies) and allows them to manage or reject them, in line with privacy best practices.
Most browsers allow cookie preference management. Users may configure their browser to reject or delete certain cookies, but this may affect website functionality.
9. DATA SUBJECT RIGHTS
In accordance with Law 1581 of 2012, Data Subjects have the following rights:
•Right of Access: To know, update, and correct their personal data
•Right of Rectification: To request correction of incomplete, inaccurate, misleading, or unauthorized data
•Right of Deletion: To request deletion of personal data and/or revoke consent, unless legal or contractual retention is required
•Right to Proof of Authorization: Except where the law provides exemptions
•Right to Be Informed: About how their data has been used
• Right to File Complaints with the Superintendence of Industry and Commerce (SIC): For violations of data protection regulations
10. PROCEDURE TO EXERCISE RIGHTS
Data Subjects may exercise their rights by submitting a request via the following channel:
Email: [email protected]
Requests must include at least the following:
•Full name of the Data Subject
•Type and number of identification document
•Clear and precise description of the data subject to the request
•Description of the request (access, correction, deletion, revocation, inquiry)
•Physical or electronic address for response
•Supporting documents proving legal representation (if not the Data Subject)
Response Times:
•Inquiries: Answered within ten (10) business days of receipt. If a longer time is needed, the Data Subject will be informed of the delay and a new response date, which shall not exceed five (5) additional business days.
•Claims: Handled within fifteen (15) business days of receipt. If more time is required, the claimant will be informed, and a new response date will be set, not exceeding eight (8) additional business days.
11. DUTIES OF THE DATA CONTROLLER
As Data Controller, Quid Design S.A.S. undertakes to:
•Ensure full and effective exercise of the right of Habeas Data
•Keep data secure to prevent alteration, loss, or unauthorized/fraudulent access
•Timely update, correct, or delete data as needed
•Process inquiries and complaints from Data Subjects
•Comply with instructions and requirements from the Superintendence of Industry and Commerce (SIC)
12. INFORMATION SECURITY
Quid Design S.A.S. implements technical, human, and administrative measures necessary to guarantee personal data security and prevent unauthorized or fraudulent access, alteration, or loss. The website is secured with SSL (HTTPS) to protect data transmission.
13. DATA RETENTION PERIOD
Personal data will be retained only as long as reasonably necessary to fulfill the purposes for which it was collected or until the Data Subject requests deletion or revokes consent—unless there is a legal or contractual obligation requiring longer retention.
14. CHANGES TO THE PRIVACY POLICY
Quid Design S.A.S. reserves the right to amend this Policy at any time. Any substantial changes will be communicated through the website https://www.qd.com.co or other suitable means, with reasonable notice prior to taking effect.
15. EFFECTIVE DATE
This Personal Data Processing Policy enters into force on January 1, 2025.