1. Information We Collect

1.1 Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, mailing address, and business contact details
• Professional Information: Job title, company name, industry, and professional qualifications
• Project Information: Details related to civil engineering projects, mining operations, and explosives management
• Communication Data: Messages, inquiries, and feedback you send to us
• Identification Data: Government-issued identification for regulatory compliance (e.g., explosives licensing)

1.2 Automatically Collected Information

• Technical Data: IP address, browser type, operating system, device information
• Usage Data: Pages visited, time spent on site, click patterns, and navigation paths
• Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies
• Location Data: General location information based on IP address

1.3 Sensitive Information

Due to the nature of our business in explosives and civil engineering, we may handle sensitive information including:

• Explosives licensing and certification data
• Safety and security-related information
• Regulatory compliance documentation
• Environmental impact assessment data

2. Legal Basis for Processing

2.1 Under Colombian Law (Law 1581 of 2012)

• Consent: When you explicitly agree to data processing
• Contractual Necessity: To perform services or fulfill contractual obligations
• Legal Obligation: To comply with Colombian regulations on explosives, mining, and civil engineering
• Legitimate Interest: For business operations, security, and service improvement
• Vital Interest: To protect safety and security in high-risk operations

2.2 Under GDPR (European Union)

• Consent: Freely given, specific, informed, and unambiguous consent
• Contract: Necessary for the performance of a contract
• Legal Obligation: Required by EU or Member State law
• Vital Interests: To protect the vital interests of individuals
• Public Task: For the performance of a task in the public interest
• Legitimate Interest: Pursuing our legitimate business interests

2.3 Under CCPA (California)

• Business Purpose: To provide services and operate our business
• Consent: With your affirmative consent for specific purposes
• Legal Compliance: To comply with legal obligations

3. How We Use Your Information

3.1 Service Delivery

• Provide civil engineering and mining services
• Manage explosives licensing and compliance
• Coordinate project logistics and safety protocols
• Communicate about project status and requirements

3.2 Regulatory Compliance

• Comply with Colombian explosives regulations (DCCAE/INDUMIL)
• Meet international safety and environmental standards
• Maintain proper documentation for mining operations
• Report to relevant authorities as required by law

3.3 Business Operations

• Process payments and manage contracts
• Conduct risk assessments and safety evaluations
• Improve our services and website functionality
• Send important updates about projects and regulations

3.4 Marketing and Communication

• Send newsletters and industry updates (with consent)
• Share relevant project opportunities
• Provide information about new services and technologies
• Invite to industry events and training sessions

4. Information Sharing and Disclosure

4.1 Service Providers and Partners

We may share your information with:

• Strategic alliance partners for joint projects
• Equipment suppliers and logistics providers
• Professional consultants and subcontractors
• IT service providers and cloud hosting companies

4.2 Regulatory Authorities

As required by law, we may disclose information to:

• Colombian Ministry of Defense (INDUMIL)
• Department of Commerce of Arms, Munitions and Explosives (DCCAE)
• Colombian Ministry of Mines and Energy
• Environmental protection agencies
• Law enforcement agencies when legally required

4.3 Business Transfers

In the event of mergers, acquisitions, or asset sales, your information may be transferred to the new entity, subject to the same privacy protections.

4.4 International Data Transfers

Your data may be transferred to and processed in countries other than Colombia. We ensure appropriate safeguards are in place, including:

• Adequacy decisions by relevant authorities
• Standard contractual clauses approved by the European Commission
• Binding corporate rules for intra-group transfers
• Your explicit consent where required

5. Data Security

5.1 Security Measures

We implement comprehensive security measures appropriate to the sensitive nature of our operations:

• Physical Security: Secure facilities for explosives storage and data centers
• Technical Security: Encryption, firewalls, and secure communication protocols
• Access Controls: Role-based access and multi-factor authentication
• Employee Training: Regular security awareness and data protection training
• Incident Response: 24/7 monitoring and rapid response procedures
• Regular Audits: Independent security assessments and compliance reviews

5.2 Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law:

• Contract Data: Retained for the duration of the business relationship plus 5 years
• Regulatory Records: Retained according to Colombian law requirements (typically 10-20 years)
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Website Analytics: Retained for 26 months for analytical purposes

6. Your Rights and Choices

6.1 Under Colombian Law

You have the right to:

• Access: Know what personal information we have about you
• Update: Request correction of inaccurate or incomplete data
• Delete: Request deletion of your personal information
• Object: Object to processing in certain circumstances
• Portability: Request transfer of your data in a structured format
• Withdraw Consent: Withdraw consent for processing based on consent

6.2 Under GDPR (EU Residents)

EU residents have additional rights:

• Right to Erasure: "Right to be forgotten" in certain circumstances
• Right to Restriction: Limit processing of your personal data
• Right to Object: Object to processing for direct marketing or profiling
• Right to Data Portability: Receive and transfer your data
• Right to Rectification: Have inaccurate data corrected
• Right to Access: Access your personal data and processing information

6.3 Under CCPA (California Residents)

California residents have the right to:

• Know: What personal information we collect, use, and disclose
• Delete: Request deletion of personal information
• Opt-Out: Opt-out of sale of personal information
• Non-Discrimination: Not be discriminated against for exercising rights

6.4 Cookie Preferences

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors use our website
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used for targeted advertising (with consent)

7.2 Cookie Management

You can manage cookie preferences through:

• Browser settings to block or delete cookies
• Our cookie consent banner (where applicable)
• Privacy settings in your browser or device

8. Third-Party Links and Services

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email notification (where appropriate)
• Providing a prominent notice on our website

Your continued use of our services after such changes constitutes acceptance of the updated policy.

11. Contact Information

Data Protection Officer

For privacy-related inquiries, please contact our Data Protection Officer:

Legal Representative

Response Time

We will respond to your privacy inquiries within:

• Colombia: 15 business days (Law 1581 of 2012)
• EU (GDPR): 30 days
• California (CCPA): 45 days

12. Governing Law and Dispute Resolution

12.1 Applicable Law

This Privacy Policy is governed by:

• Colombian Law: Law 1581 of 2012 and related regulations
• EU Residents: General Data Protection Regulation (GDPR)
• California Residents: California Consumer Privacy Act (CCPA)
• International Users: Applicable local privacy laws

12.2 Dispute Resolution

For disputes related to this Privacy Policy:

• Colombia: Resolution through Colombian data protection authorities
• EU: You may lodge a complaint with your local data protection authority
• International: Disputes resolved through binding arbitration in Colombia