DATA PROCESSING POLICY BIS CONTACT CENTER - BIS SAS

​

Complying with the provisions of the Political Constitution of Colombia Art. 15 and 20, which enshrine the fundamental right to habeas data; Statutory Law 1581 of 2012, Regulatory Decree 1377 of 2013, Decree 886 of 2014, Sole Regulatory Decree 1074 of 2015 and other regulations that modify, repeal or replace them. BIS CONTACT CENTER - BIS SAS, adopts this Data Processing Policy, which will be informed to all holders of the data collected or obtained in the future in the exercise of personal, commercial and work activities.

In this way, BIS CONTACT CENTER - BIS SAS, states that it guarantees the rights to privacy, intimacy, and good name, in the treatment of data in general and consequently all its actions will be governed by the principles of legality, purpose, freedom, veracity or quality, transparency, access and restricted circulation, security and confidentiality.

All people who, in the development of different contractual, commercial, labor activities, among others, whether permanent or occasional, come to supply BIS CONTACT CENTER - BIS SAS, any type of information or data, will be able to know, update and rectify it.

 

This Policy describes the information we process to support BIS CONTACT CENTER - BIS SAS, as well as other products we offer and functions we perform.

​

1. IDENTIFICATION OF THE CONTROLLER

• COMPANY NAME:  BIS CONTACT CENTER - BIS SAS, company identified with NIT. No. 901379017-0, tiene como  objeto  principal  diseñar, desarrollar   e_cc781905-5cde- 3194-bb3b-136bad5cf58d_ implementar  estrategias  de  servicios  integrados  de Tercerización   (OUTSOURCING)  para  el  mejoramiento  de  los  procesos educativos    del  _cc781905-5cde- 3194-bb3b-136bad5cf58d_ capital   humano  de  los  sectores  empresariales, organizacionales e institutions of both public and  private sector entities  nationally and internationally, in areas such as education, health,  industry, infraestructura, tecnología, medio ambiente, agroindustria, minero-energético,  y  a entidades  del  orden  multilateral  and regional. On the other hand, it offers outsourcing services such as Contact Center, Call Center, Data Center and internet connectivity to companies in the public or private sector as a strategy for their competitive development. In addition, the company may carry out any other legal economic activity both in Colombia and abroad. The company may carry out, in general, all operations, of whatever nature they may be, related to the mentioned object, as well as any similar, related or complementary activities or that facilitate or develop the trade or industry of the company. .

The value proposition of BIS CONTACT CENTER - BIS SAS, is the provision of services oriented towards excellence and the recognition of our clients, becoming a transversal support for their mission processes.

In addition, our value proposition revolves around the provision of services oriented towards excellence and the recognition of our clients.

We support our operation with state-of-the-art technological tools, highly qualified human resources, and innovation.

• ADDRESS: Cra. 1 # 11 28 2nd floor, Bocagrande.

• WEB PAGE: https://www.biscc.com.co/

• EMAIL: mcarmona@biscc.com.co

• TELEPHONE: 605 6411320.

 

2. REACH

This Personal Data Treatment and Protection Policy will be applied to all databases and/or files that include data that are processed by BIS CONTACT CENTER – BIS SAS, as data controller.

 

3. DEFINITIONS

For the purposes of this policy and in accordance with current regulations on the protection of personal data, the following definitions will be taken into account[1]:

 

Authorization: Prior, express and informed consent of the Owner to carry out the Processing of personal data.

Privacy Notice: Verbal or written communication generated by the person in charge, addressed to the owner for the processing of their personal data, through which they are informed about the existence of the information processing policies that will be applicable to them, the way to access to them and the purposes of the treatment that is intended to be given to personal data.

Database: Organized set of personal data that is subject to Treatment.

Personal data: Any information linked or that can be associated with one or several determined or determinable natural persons.

Semi-private data: Semi-private data is not of an intimate, reserved, or public nature and whose knowledge and disclosure may be of interest not only to its owner but to a certain sector or group of people, or to society in general, such as financial and credit data. .

Private data: It is the data that, due to its intimate or reserved nature, is only relevant to the owner.

Sensitive data: Those data that affect the privacy of the Holder or whose improper use can generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership of unions, social organizations, of human rights or that promotes the interests of any political party or that guarantees the rights and guarantees of opposition political parties, as well as data related to health, sexual life and biometric data.

Treatment: Refers to any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion.

Data Processor: Natural or legal person, public or private, that by itself or in association with others, performs the Processing of personal data on behalf of the Data Controller.

Responsible for the Treatment: Natural or legal person, public or private, that by itself or in association with others, decides on the basis of data and / or the Treatment of these.

Owner: Natural person whose personal data is subject to Treatment.

Information: Refers to an organized set of data contained in any document that those responsible for and/or in charge of processing generate, obtain, acquire, transform or control.

Personal Information: Any data linked or that can be associated with one or several determined or determinable natural persons.

Public information: It is all information that the person in charge and/or in charge of the treatment, generates, obtains, acquires, or controls in his capacity as such.

Classified public information: It is that information that, being in the possession of a responsible subject in its capacity as such, belongs to the personal, private and semi-private sphere of a natural or legal person, for which its access may be denied or excepted, provided regarding the legitimate and necessary circumstances and the particular or private rights enshrined in the law.

Reserved public information: It is that information that, being in the possession of a responsible subject in his capacity as such, is excepted from access to the citizenry due to damage to public interests.

File Document: It is the record of information produced or received by a public or private entity due to its activities or functions.

Open Data: All primary or unprocessed data, found in standard and interoperable formats that facilitate access and reuse, which are in the custody of public or private entities that perform public functions and are made available. of any citizen, freely and without restrictions, so that third parties can reuse them and create services derived from them.

Informative Legend or Privacy Notice: Verbal or written communication generated by the person in charge, addressed to the Holder, for the Treatment of his Personal Data, through which he informs him of the purposes of the Treatment that is intended to be given to personal data, mainly sensitive and who will be in charge of doing it.

​

4. PRINCIPLES

For the purposes of guaranteeing the protection of personal data, BIS CONTACT CENTER - BIS SAS, will apply the following principles in a harmonious and comprehensive manner, in light of Colombian legislation[two]of which the treatment, transfer and transmission of personal data must be carried out.

Principle of legality: The processing of personal data is a regulated activity that must be subject to the provisions of the law and other provisions that develop it.

Principle of freedom: The collection, use and treatment of personal data can only be exercised with the prior, express and informed consent of the owner. Personal data may not be obtained or disclosed without prior authorization, or in the absence of a legal or judicial mandate that relieves consent.

Principle of veracity or quality: The information subject to treatment must be true, complete, exact, updated, verifiable and understandable. The processing of partial, incomplete, fractional or misleading data is prohibited.

Principle of transparency: In the collection, use and processing of personal data, the right of the owner to obtain from the data controller or manager, at any time and without restrictions, information about the existence of data that concerns him must be guaranteed.

Personal data, except for public information, may not be available on the Internet or other means of dissemination or mass communication, unless access is technically controllable to provide restricted knowledge only to owners or third parties authorized by law.

Security principle: Personal data and information subject to public processing will be protected and must be managed with the necessary measures and technical, human, and administrative resources to provide security to the records, as well as with the adoption of technological tools for protection, avoiding its adulteration, loss, consultation, use or unauthorized or fraudulent access.

Principle of confidentiality: All persons involved in the collection, use and processing of personal data that are not of a public nature are obliged to guarantee the confidentiality of the information, even after the end of their relationship with any of the tasks included in the treatment.

Principle of facilitation: Those responsible for the treatment must facilitate the exercise of the right of access to information, excluding demands or requirements that may obstruct or prevent it.

Principle of non-discrimination. According to which the person responsible for data processing must deliver information to all persons who request it, on equal terms, without making arbitrary distinctions.

Principle of gratuity: According to which, access to information is free and additional values may not be charged to the cost of reproduction of the information.

Principle of speed: This principle seeks agility in the process and administrative management.

Principle of restricted access and circulation: The collection, use and processing of data can only be done by persons authorized by the owner and/or by the persons provided for in the Law and other regulations that develop it.

These may be exercised by:

1. The holder, who must prove his identity sufficiently by the different means made available by BIS CONTACT CENTER - BIS SAS

2. The successors in title of the owner, who must prove such quality.

3. Representative and/or attorney of the holder, prior accreditation of the representation or empowerment.

4. Other in favor or for which the holder has stipulated.

 

5. DUTIES OF BIS CONTACT CENTER - BIS SAS AS RESPONSIBLE AND IN CHARGE OF DATA PROCESSING

BIS CONTACT CENTER - BIS SAS, recognizes the ownership of the data held by people and consequently they can exclusively decide on them. Therefore, BIS CONTACT CENTER - BIS SAS, will use the data for the fulfillment of the purposes expressly authorized by the owner or by current regulations.

 

In the treatment and protection of personal data, BIS CONTACT CENTER - BIS SAS, will have the following duties, without prejudice to others provided for in the provisions that regulate or come to regulate this matter:

1. Guarantee the owner, at all times, the full and effective exercise of the right of habeas data.

2. Request and keep, under the conditions provided by law, a copy of the respective authorization granted by the Holder.

3. Duly inform the Holder about the purpose of the collection and the rights that assist him by virtue of the authorization granted.

4. Keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, use or unauthorized or fraudulent access.

5. Guarantee that the information provided is true, complete, accurate, updated, verifiable and understandable.

6. Update the information of all the news regarding the data that has previously been provided and adopt the other necessary measures so that the information provided to it is kept updated.

7. Rectify the information when it is incorrect and communicate what is pertinent.

8. Provide, as the case may be, only data whose treatment is previously authorized in accordance with the provisions of the law.

9. Demand respect for the security and privacy conditions of the Owner's information.

10. Process the queries and claims formulated in the terms indicated in Statutory Law 1581 of 2012.

11. Adopt an internal manual of policies and procedures to guarantee adequate compliance with the law and, in particular, for the attention of queries and claims.

12. Inform at the request of the owner about the use given to their data.

13. Comply with the requirements and instructions issued by the Superintendency of Industry and Commerce on the particular subject.

14. Ensure the proper use of the personal data of children and adolescents, in those cases in which the processing of their data is authorized.

15. Refrain from circulating information that is being controversial by the owner and whose blocking has been ordered by the Superintendence of Industry and Commerce.

16. Use the personal data of the owner only for those purposes for which it is duly empowered and in all cases respecting current regulations.

on personal data protection.

 

6. RIGHTS OF DATA HOLDERS

The Holders of personal data will enjoy the following rights, and those granted by law:

1. Know, update and rectify your personal data in front of the person in charge of the treatment or in charge of the treatment. This right may be exercised, among others, against data that is partial, inaccurate, incomplete, divided, misleading, or whose processing is expressly prohibited or has not been authorized.

2. Request proof of the authorization granted to the person responsible for the treatment except when expressly excepted as a requirement for the treatment.

3. Be informed by the person in charge of the treatment or the person in charge of the treatment, upon request, regarding the use that has been given to your personal data;

4. Submit complaints to the Superintendence of Industry and Commerce for violations of the provisions of the law and other regulations that modify, add or complement it;

5. Revoke the authorization and/or request the deletion of the data when the principles, rights and constitutional and legal guarantees are not respected in the treatment. The revocation and/or deletion will proceed when the Superintendence of Industry and Commerce has determined that in the treatment the person in charge or in charge has incurred in conduct contrary to the law and the Constitution.

6. Free access to your personal data that has been processed.

 

7. RIGHTS OF CHILDREN AND ADOLESCENTS

In the processing of personal data by BIS CONTACT CENTER - BIS SAS, respect for the prevailing rights of children and adolescents will be ensured, therefore, the processing of personal data of children and adolescents is prohibited, except for those data that are of a public nature, authorized by current legal regulations and when said treatment complies with the following parameters and requirements:

1. That responds to and respects the best interest of children and adolescents.

2. That the respect of their fundamental rights be ensured.

Once the above requirements have been met, the legal representative of the child or adolescent will grant authorization to BIS CONTACT CENTER - BIS SAS, after the minor has exercised his or her right to be heard, an opinion that will be assessed taking into account maturity, autonomy and capacity. to understand the matter.

​

8. WHAT KIND OF INFORMATION DO WE COLLECT?

We treat the information of users and/or clients, in order to provide the Products and Services of BIS CONTACT CENTER - BIS SAS. The type of information we collect depends on the way in which the user and/or client uses our Products or have a relationship with us. 

 

9. PURPOSE OF THE PROCESSING OF PERSONAL DATA

The personal data of our clients, suppliers, staff and family members of these, which are stored on the servers, will be used to:

• Compliance with the purposes expressly authorized by the owner or by current regulations.

• Have the updated and real information of our staff and third parties that come to have relations with the company, in order to identify them and comply with the contractual and legal obligations of both parties, such as sending notifications, and contact information in general, especially in emergencies.

• Ensure the health of employees as an active part of their improvement process; In this sense, a strictly confidential record may be kept of the information that becomes known about the health status of people to carry out the follow-up recommended by the Occupational Health and Safety area and other professionals involved, and of which, access will be restricted or limited to certain personnel that the company has designated as Data Processor.

• Contact Center and Telemarketing services.

• Provide information to customers and providers of new services offered or any change that is of mutual interest.

• Perform statistical analysis.

• Sending invoices and collection management.

• Inform about changes in our portfolio of services and updates.

• Comply with laws such as, among others, labor law, social security, pensions, professional risks, family compensation funds (Comprehensive Social Security System) and taxes.

• Comply with the instructions of the competent judicial and administrative authorities.

• Carry out the pertinent procedures for the development of the pre-contractual, contractual and post-contractual stage with BIS CONTACT CENTER - BIS SAS

• Manage procedures (requests, complaints, claims), carry out satisfaction surveys regarding the goods and services of BIS CONTACT CENTER - BIS SAS, or related companies, as well as business partners of BIS CONTACT CENTER - BIS SAS

• Transfer or transmit personal data to companies affiliated with BIS CONTACT CENTER - BIS SAS, as managers or to authorized third parties by virtue of a contract.

​

10. WHAT YOU AND OTHER PEOPLE DO AND PROVIDE

Information and content you provide to us: We collect the content, communications and other data you provide when you use our products, share your information system or databases; general information of the natural or legal person, current or potential client, including that contained in the Certificates of Existence and Legal Representation issued by the Chambers of Commerce or the entity acting on their behalf; information on the main and substitute legal representatives, in case the current or potential client is a legal person; commercial references; Bank references. For example, when users and/or clients contact BIS CONTACT CENTER – BIS SAS, they share content and information, which is managed by BIS CONTACT CENTER – BIS SAS, in order to satisfy the needs of users and/or clients.

Data with special protections: you can provide information to our database related to your political ideologies, ethnic or racial origin, philosophical or religious beliefs, union membership, sexual life, biometric data, your interests or aspects related to your health. The treatment of personal data of a sensitive nature is subject to special protections by virtue of the law, unless there is the express, prior and informed authorization of the owner, among other exceptions enshrined in Law 1581 of 2012.

In the above case, BIS CONTACT CENTER – BIS SAS, will inform the owner that since they are sensitive data, they are not obliged to authorize their treatment, and, in addition, the owner will be informed which of the data will be subject to sensitive treatment and the purpose of this .

Your use: we collect information about how you use our Products, such as conversations through different means of communication that you have with our work team, in the development of personal, work and commercial activities; the types of content you view or interact with; the features you use; the actions you carry out; The time; the frequency and duration of your activities.

Information about transactions carried out with us and in our Products: when we establish commercial or labor relations with our clients, suppliers and/or workers, we collect financial information, such as, for example, account numbers, names of account holders, financial entity to which that the accounts belong to, bank certifications, and among other related matters.

Also, if you use our products to carry out financial transactions (for example, when you make a payment), we collect information about that purchase or transaction. This includes payment information, such as your credit or debit card number and other card information; other account and authentication information; and billing, shipping and contact details.

 

11. AUTHORIZATION AND CONSENT OF THE HOLDER

BIS CONTACT CENTER – BIS SAS, requires the free, prior, express and informed consent of the owner of the personal data for the treatment, storage, circulation, deletion and use of these, therefore, we implement the means required to obtain the authorization of the holders which may be subject to subsequent consultation.

Except in cases expressly authorized by law, namely:

1. Information required by a public or administrative entity in the exercise of its legal functions or by court order.

2. Data of a public nature.

3. Cases of medical or health urgency.

4. Treatment of information authorized by law for historical, statistical or scientific purposes.

5. Data related to the Civil Registry of People.

 

12. PROCEDURE FOR REQUESTING PERSONAL DATA FROM USERS

BIS CONTACT CENTER – BIS SAS, will previously inform users of the personal data that is required and the reason for requesting the information. The data to request users may include all or some of the following: full name, date of birth, age, sex, address, telephone number, email, treating physician, medical history when applicable, health data. The data to request from business customers and suppliers may include some of the following: name or business name, address, telephone, email, name of the business contact, name of the legal representative, relevant information for contractual terms, billing information. In a written or digital way through the formats and texts that are established.

​

13. INTERNATIONAL TRANSFER AND TRANSMISSION

The International transfer of data consists of the delivery of data carried out by the Treatment Manager or the Treatment Manager to a recipient located abroad; who is in turn also Responsible for Treatment; BIS CONTACT CENTER – BIS SAS in its capacity as Responsible for Treatment and/or Treatment Manager must verify, in the event of proceeding with a transfer, that the data is transferred to a recipient whose jurisdiction it possesses, after seeking the standard in a manner reasonable or by general knowledge, data protection regulations and that the data actually has a guarantee of security.

The International transmission of data, on the other hand, occurs when the purpose of the communication of the data is to allow the treatment entrusted to the Manager thereof on behalf of the Responsible; for these purposes, it will not be necessary to have the authorization of the owner of the data to the extent that there is a Transmission Contract between the Responsible and the Manager; the latter being obliged to comply with the data protection policy that the Responsible implements.

 

14. INFORMATION OBTAINED PASSIVELY

When accessing or using the services contained within the websites of BIS CONTACT CENTER - BIS SAS, it may collect information passively through information management technologies, such as "Cookies", through which Information is collected about the computer's hardware and software, IP address, browser type, operating system, domain name, access time and the addresses of the websites it came from; Through the use of these tools, Personal Data of the users is not directly collected. However, the user of the BIS CONTACT CENTER – BIS SAS websites has the possibility of configuring the operation of “Cookies”, according to the options of their Internet browser.

 

15. SPECIFIC POLICIES FOR THE PROCESSING OF PERSONAL DATA

The Data Processing includes the collection, storage, administration, use, transfer, transmission and destruction, in the manner permitted by law and is carried out with the following specific purpose for each case: Treatment of personal labor data: BIS CONTACT CENTER – BIS SAS, collects the personal data of its Workers, which are classified by the company as confidential and will only be disclosed by it, with the express authorization of the owner or when a competent authority so request. The purposes for which the personal data of company employees are used will be:

 

1. Comply with the obligations imposed by Colombian labor law on employers, or the orders issued by the competent Colombian authorities, such as; payroll payments, payment and reports to the general social security system, attention to queries, petitions, requests, actions and claims.

2. Comply with the obligations imposed on the company as an employer, in relation to Occupational Health and Safety regulations, and the so-called Occupational Health and Safety Management System (SG-SST).

3. Manage the functions developed by the workers.

4. Consult memos, employer notifications and calls for attention.

5. Develop and apply the disciplinary process.

6. Contact family members in emergencies.

7. Others specifically established in the authorizations that are granted by the workers.

8. Invitation to participate in training sessions, integration activities, training activities, information of interest.

 

BIS CONTACT CENTER – BIS SAS, stores the personal data of its employees, including those that have been obtained in the development of the selection process, and keeps them in a folder identified with the name of each one of them.

 

Such folder will only have access to and will be processed by the Administrative and Legal Area, in order to manage the contractual relationship between BIS CONTACT CENTER – BIS SAS, and the employee.

 

1. Treatment of personal data of Suppliers and Contractors: BIS CONTACT CENTER – BIS SAS, collects the personal data of its Suppliers and Contractors, stores it in a database which, although it is made up mostly of public data, is qualified by the company. as confidential, and that, in the case of private data, it will only be revealed by the company with the express authorization of the owner or when a Competent Authority requests it. 

The purposes for which the personal data of the Suppliers BIS CONTACT CENTER – BIS SAS are used, will be:

 

1. Sending of invitations to contract and carrying out procedures for the pre-contractual, contractual and post-contractual stages.

2. Sending invitations to events scheduled by the company or its affiliates.

3. Establish constant communication with the contractor and/or supplier, through the use of multiple communication channels.

4. The others specifically established in the authorizations that are granted by the suppliers themselves and those that are established internally by the company.

 

BIS CONTACT CENTER – BIS SAS, will only collect from its suppliers and contractors the data that is necessary, pertinent and not excessive for the purpose of selection, evaluation and execution of the contract that may apply.

The collection of personal data of employees of suppliers and contractors by BIS CONTACT CENTER – BIS SAS, will in any case have the purpose of verifying the suitability and competence of the employees.

 

BIS CONTACT CENTER – BIS SAS, will store the information of suppliers and contractors while the contract entered into between them is in force and after it, as long as the supplier and/or contractor does not request the deletion of the data provided or that a competent authority I ordered it.

1. Treatment of personal data of Clients: BIS CONTACT CENTER – BIS SAS, collects the personal data of its Clients and stores them in a database which is classified by the company as confidential, and will only be revealed with the express authorization of the owner. or when a Competent Authority requests it. 

The purposes for which the personal data of the clients of BIS CONTACT CENTER – BIS SAS are used, will be:

1. Carrying out procedures for the pre-contractual, contractual and post-contractual stages.

2. Sending invitations to events scheduled by the company.

3. Corroborate any requirement that may arise in the development of the contract entered into.

4. Comply with the purpose of the contract entered into, including merchandise shipment activities, compliance and warranty processing, among others.

5. Verify cases of non-compliance by one of the parties.

6. Linking in general of each client.

7. Carry out customer loyalty activities and marketing operations.

8. The others specifically established in the authorizations that are granted by the clients.

 

BIS CONTACT CENTER – BIS SAS, treats sensitive data of its clients such as voice, with the sole purpose that the recordings of the conversations held with the commercial agents of the company can be used as proof of the sales contract and the respective authorization. of the processing of personal data. For the purposes of this treatment, the respective authorization is collected, which in any case will be express and optional, clearly indicating the sensitive data subject to treatment and its purpose.

Likewise, it will have adequate security systems for the management of sensitive data and its reservation, with the understanding that such sensitive data will only be used by BIS CONTACT CENTER – BIS SAS, for the aforementioned purposes.

In any case, the contract or authorization entered into between BIS CONTACT CENTER – BIS SAS, and the client, contains a confidentiality clause.

BIS CONTACT CENTER – BIS SAS, will store customer information while the contract between them is in force and after it, as long as the customer does not request the deletion of the data provided or that a competent authority orders it.

​

16. PRIVACY NOTICE

The Privacy Notice is the physical document, electronic or in any other format, made available to the owner to inform him about the processing of his personal data. Through this document, the owner is informed of the information related to the existence of the company's information treatment policies and that they will be applicable, the way to access them and the characteristics of the treatment that is intended to be given to the data. personal. The privacy notice must contain, at least, the following information:

1. The identity, address and contact details of the data controller.

2. The type of treatment to which the data will be submitted and the purpose of this.

3. The rights of the owner.

4. The general mechanisms arranged by the person in charge so that the owner is aware of the information treatment policy and the substantial changes that occur in it. In all cases, you must inform the owner how to access or consult the information treatment policy.

5. The optional nature of the response regarding questions about sensitive data.

 

17. PROCEDURE FOR THE ATTENTION OF QUERIES, CLAIMS, REQUESTS, RECTIFICATION, UPDATING AND DELETION OF DATA

  1. Petitions, Complaints or Claims:

The Holder, his successors in title, his representative and/or proxy, or whoever is determined by stipulation in favor of another; who consider that the information contained in a database should be corrected, rectified, updated or deleted, or when they notice the alleged breach of any of the duties contained in the law, may file a claim with BIS CONTACT CENTER – BIS SAS , which will be processed under the following rules[3]:

1. The Holder's claim will be made by means of a request addressed to BIS CONTACT CENTER – BIS SAS, to the email mcarmona@biscc.com.co, with the identification of the holder, the description of the facts that give rise to the claim, the object of the request , the address, and accompanying the documents that you want to assert.

2. If the claim is incomplete, the interested party will be required within five (5) days following receipt of the claim to correct the failures. After two (2) months from the date of the request, without the applicant submitting the required information, it will be understood that the claim has been withdrawn.

3. In the event that the person receiving the claim is not competent to resolve it, they will transfer it to the appropriate person within a maximum term of two (2) business days and inform the interested party of the situation.

4. Once the complete claim is received, a legend that says "claim in process" and the reason for it will be included in the database, within a term of no more than two (2) business days. Said legend must be maintained until the claim is decided.

5. The maximum term to address the claim will be fifteen (15) business days from the day following the date of receipt. When it is not possible to address the claim within said term, the interested party will be informed of the reasons for the delay and the date on which their claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the first finished.

6. BIS CONTACT CENTER – BIS SAS, will store the information of suppliers and contractors while the contract entered into between them is in force and after it, as long as the supplier and/or contractor does not request the deletion of the data provided or that a competent authority I ordered it.

7. BIS CONTACT CENTER – BIS SAS, will store customer information while the contract between them is in force and after it, as long as the customer does not request the deletion of the data provided or that a competent authority orders it.

2. Query:

The Holders or their successors in title may consult the personal information of the Holder that rests in any database of BIS CONTACT CENTER – BIS SAS They must provide all the information contained in the individual record or that is linked to the identification of the Holder.

1. The consultation will be formulated by the means enabled, through a request addressed to BIS CONTACT CENTER – BIS SAS, to the emailmcarmona@biscc.com.co, as long as proof of this can be maintained.

2. The query will be answered within a maximum term of ten (10) business days from the date of receipt of it. When it is not possible to respond to the query within said term, the interested party will be informed, stating the reasons for the delay and indicating the date on which the query will be addressed, which in no case may exceed five (5) business days following the expiration of the first term.

 

18. PUBLICATION AND VALIDITY

This Policy for the Treatment and Protection of Personal Data will enter into force once said document has been approved and published. Likewise, this document is in force as of March twenty-six (26), 2022 and until the moment it is expressly revoked or modified.

 

MARIA DEL PILAR CARMONA

LEGAL REPRESENTATIVE

BIS CONTACT CENTER – BIS SAS