Personal Data Processing Policy
Learn how Cálamo processes the information you share when contacting us and how you can exercise your rights.
Effective date: .
Identity of the data controller
Cálamo, which operates at calamogroup.com, is the controller responsible for processing the personal data described in this policy. It is domiciled in Medellín, Colombia.
This policy falls within the framework of Colombia’s Ley 1581 de 2012 and Decreto 1074 de 2015, particularly their provisions on personal data protection.
Data we collect and how we obtain it
We receive the data you provide directly in the contact form. We request only information that is relevant and necessary to handle your request; optional fields may be left blank.
Do not include sensitive data or unnecessary third-party information in the description or other free-text fields. We do not request sensitive data to assess your process.
Purposes of processing
Cálamo uses the information to assess your contact request, respond to you, and conduct commercial follow-up on the process or problem you describe. Processing under this policy is limited to those purposes.
Data subject authorization
Before submitting the form, you must authorize processing through a clear, affirmative action: selecting a checkbox that is unchecked by default and links to this policy. This lets you understand the purposes and your rights before deciding.
Silence or a preselected checkbox does not constitute authorization. Cálamo must retain proof of authorization for later consultation. Exceptions to authorization are limited to those provided by law.
Your rights as a data subject
You may exercise the rights provided in Article 8 of Ley 1581 de 2012 free of charge.
- Access, update, and correct your personal data.
- Request proof of the authorization granted, subject to legal exceptions.
- Be informed about how your data has been used.
- Request deletion of your data or revoke authorization where permitted by law.
- File complaints with Colombia’s Superintendency of Industry and Commerce (SIC), after completing the consultation or complaint procedure with the data controller or processor.
How to exercise your rights
Write to [email protected] or use the contact form. Identify your request as a personal data consultation or complaint, provide your name, a means of receiving a response, and the facts or data you wish to access, correct, or delete. Attach relevant supporting documents if available.
Cálamo will verify your identity or the authority of anyone acting on your behalf and request only the information needed for that purpose. Response periods are those established in Articles 14 through 16 of Ley 1581 de 2012.
Consultations: response period
We will respond to your consultation within a maximum of ten (10) business days of receipt. If we cannot respond within that period, we will inform you of the reasons for the delay and the new response date, which will be no later than five (5) business days after the initial period expires.
Complaints: response period
We will respond to your complaint within a maximum of fifteen (15) business days, counted from the day after receipt. If an extension is required, we will inform you of the reasons and the response date before the deadline; the extension will not exceed eight (8) additional business days.
Incomplete complaints
If the complaint is incomplete, we will request the missing information within five (5) days of receipt. If two (2) months pass after that request without receipt of the requested information, the complaint will be considered withdrawn and will be closed.
Data processors and international transmission
The form uses Web3Forms, through api.web3forms.com, as an intermediary responsible for processing the submission and forwarding it to Cálamo. Web3Forms receives the configured fields submitted with the form.
This processing on Cálamo’s behalf is treated as an international transmission of personal data under Articles 2.2.2.25.1.3 and 2.2.2.25.5.1 through 2.2.2.25.5.2 of Decreto 1074 de 2015. This description does not attest to any Web3Forms certifications or specific contractual terms.
Information security
Cálamo implements reasonable security measures to protect information against loss, alteration, and unauthorized access or use. These measures aim to reduce risks and do not guarantee absolute security.
Database duration and retention
The database and personal data will be retained only for as long as needed to fulfill the stated purposes and applicable legal obligations. No single retention period is established for all requests.
Once the data is no longer needed for those purposes and no obligation requires its retention, it must be deleted.
National Database Registry
The applicability of Colombia’s National Database Registry (RNBD) is assessed under Article 2.2.2.26.1.2 of Decreto 1074 de 2015, based on the controller’s legal form and total assets. This policy does not claim that Cálamo is registered or exempt from registration.
Changes to this policy
Cálamo will communicate substantial changes to this policy before they take effect, through the website or available contact channels. If a change of purpose requires new authorization, it will be requested before that processing begins.
Effective date and legal framework
This policy takes effect on .
Consult Ley 1581 de 2012 and Decreto 1074 de 2015.
The explanatory content on this page is informational and does not replace individual legal advice.
Need to exercise your rights?
Submit your consultation or complaint about the processing of your personal data.