Personal Data Protection Policy

Last updated: May 20, 2026 · Version 2.0

mitecni.co — Compañía Nacional de Sistemas S.A.S., identified with NIT 901.246.782-6, headquartered in Bucaramanga (Santander, Colombia), in compliance with Colombia's Law 1581 of 2012, Decree 1377 of 2013, and other applicable Colombian regulations on personal data protection, establishes the following Personal Data Protection Policy.

1. Definitions

• Personal data: any information linked or that can be linked to a determined or determinable natural person.
• Data subject: the natural person whose personal data is subject to processing.
• Data controller: the natural or legal person that decides on the database and/or the processing of data.
• Data processor: the natural or legal person that processes personal data on behalf of the controller.
• Processing: any operation or set of operations on personal data (collection, storage, use, circulation, deletion).
• Authorization: prior, express, and informed consent of the data subject to carry out processing.
• Privacy notice: physical, electronic, or any-format communication addressed to the data subject to inform about the processing of their data.

2. Data controller

Corporate name: Compañía Nacional de Sistemas S.A.S.
Tax ID: 901.246.782-6
Address: Bucaramanga, Santander, Colombia
Phone: +57 316 424 0523
Email: [email protected]
Website: https://mitecni.co

3. Processing purposes

mitecni.co processes personal data for the following purposes:

• Commercial and customer-supplier relationship management
• Handling requests and providing contracted services
• Administrative and operational communications
• Compliance with legal and contractual obligations
• Sending commercial information (only with express authorization)
• Service improvement and internal statistical analysis

4. Personal data we collect

• Identification data: full name, ID number, date of birth.
• Contact data: email, phone, address, city.
• Professional data: company, role, sector.
• Technical data (clients): IT environment information necessary to provide services.
• Browsing data: IP address, cookies, website behavior (only essential functional cookies; analytics cookies require consent).

5. Data subject rights

Per Colombia's Law 1581 of 2012, you have the right to:

• Know, update, and correct your data
• Request proof of the authorization granted
• Be informed of the use given to your data
• File complaints with the Superintendencia de Industria y Comercio (SIC)
• Revoke authorization and/or request deletion
• Access your data free of charge

Note: although mitecni.co is based in Colombia, we voluntarily apply best practices aligned with global standards (GDPR-equivalent).

6. How to exercise your rights

To exercise any of the above rights, send a request to [email protected] stating:

• Your full name and ID document
• Clear description of the request
• Contact details for our response

We respond within a maximum of 15 business days as required by law.

7. Data security

We implement technical, administrative, and physical measures to protect personal data against unauthorized access, loss, alteration, or destruction. These measures include: encryption in transit and at rest, role-based access control, 24/7 security monitoring, backups, and internal information management policies.

8. Data transfer and transmission

mitecni.co does NOT sell or share personal data with third parties for commercial purposes. We only share data with:

• Data processors (tech providers like Microsoft, AWS, Google Cloud) under contracts that guarantee equivalent protection.
• Competent authorities when required by law.

9. Cookies and similar technologies

Our website uses cookies for basic functionality (essential — no consent required) and for traffic analytics (which require your explicit consent via the cookie banner). You can manage your preferences at any time from the footer.

10. Data retention

We retain data for the time necessary to fulfill the purposes for which it was collected, subject to applicable legal obligations. Active client data: during the commercial relationship + 5 years. Prospect data without conversion: 12 months.

11. Modifications to this policy

mitecni.co may modify this policy to reflect regulatory or operational changes. Modifications will be published on this page with the update date. Substantial modifications will be notified by email to active clients.

12. Acceptance

By using our services or website, you declare that you have read, understood, and accepted this Personal Data Protection Policy.