Privacy Policy

This Privacy Policy describes how Optima Gestión COI (hereinafter "the Organization") collects, uses, stores, and protects personal data provided by users of the website optimagestioncoi.com and participants in its training programs.

1. Data Controller

The data controller responsible for the processing of personal data collected through this website is Optima Gestión COI, located at Cl. 68a #70C-87 Piso 1, Engativá, Bogotá, Cundinamarca, Colombia. For all data protection enquiries, contact us at info@optimagestioncoi.com or by phone at +57 310 329 9037.

2. Scope and Applicable Law

This policy applies to all personal data processed in connection with the website optimagestioncoi.com and the training services offered by the Organization. The processing of personal data is governed by Colombian Law 1581 of 2012 (Ley Estatutaria de Protección de Datos Personales) and its regulatory Decree 1377 of 2013, as well as any subsequent regulations issued by the Superintendencia de Industria y Comercio (SIC).

Where users access this website from outside Colombia, they acknowledge that their data will be processed in accordance with Colombian law, which the Organization considers provides an adequate level of protection for the purposes described herein.

3. Data We Collect

The Organization collects the following categories of personal data:

• Contact data: full name, email address, telephone number, provided voluntarily through the contact form or program registration.
• Communication data: the content of messages sent through the contact form.
• Technical data: IP address, browser type, operating system, pages visited, and time spent on the website, collected automatically through cookies and server logs.
• Participation data: where applicable, records of attendance at workshops, webinars, or accompaniment sessions.

The Organization does not intentionally collect sensitive personal data as defined under Article 5 of Law 1581 of 2012 (data related to health, political opinions, racial or ethnic origin, religious beliefs, biometric data, or sexual life). If such data is inadvertently provided, it will be deleted promptly.

4. Purposes of Processing

Personal data is collected and processed for the following specific, explicit, and legitimate purposes:

• Responding to enquiries submitted through the contact form.
• Providing information about training programs, workshops, and webinars offered by the Organization.
• Managing registrations and participation in programs.
• Issuing certificates of participation where applicable.
• Improving the functionality and content of the website through anonymized analytics.
• Complying with legal obligations applicable to the Organization.

The Organization does not use personal data for automated decision-making, profiling, or any purpose incompatible with those listed above without obtaining fresh consent.

5. Legal Basis for Processing

Processing of personal data is carried out on the following legal bases under Law 1581 of 2012:

• Consent: where the data subject has freely, specifically, and unambiguously indicated agreement to the processing of their data, including by checking the consent box on the contact form.
• Contractual necessity: where processing is necessary to manage the provision of a training service requested by the data subject.
• Legal obligation: where processing is required to comply with Colombian law.
• Legitimate interest: for website security and fraud prevention, where such interests do not override the fundamental rights of the data subject.

6. Data Retention

Retention periods are determined by the purpose for which data was collected. Contact enquiry data is retained for up to 24 months from the date of the last interaction. Participation records are retained for up to 5 years for administrative and certification purposes. Technical log data is retained for up to 12 months. After the applicable retention period, data is securely deleted or anonymized.

7. Data Sharing and International Transfers

The Organization does not sell, rent, or trade personal data. Data may be shared with the following categories of recipients only to the extent necessary for the stated purposes:

• Technology service providers (hosting, email delivery, website analytics) acting as data processors under written agreements that require compliance with Law 1581 of 2012.
• Public authorities or regulatory bodies where required by Colombian law.

Any international transfer of personal data is carried out in accordance with the conditions established in Chapter VIII of Law 1581 of 2012 and the authorization requirements of the Superintendencia de Industria y Comercio.

8. Rights of Data Subjects

Under Colombian Law 1581 of 2012, data subjects have the following rights, which may be exercised free of charge by contacting the Organization at info@optimagestioncoi.com:

• Right of access: to know what personal data the Organization holds about you and how it is processed.
• Right to update and rectification: to request correction of inaccurate or incomplete data.
• Right to deletion: to request erasure of data where it is no longer necessary for the stated purposes or where consent is withdrawn, subject to legal retention obligations.
• Right to revoke consent: to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to complain: to file a complaint with the Superintendencia de Industria y Comercio (SIC) if you believe your rights have been violated.

The Organization will respond to requests within the timeframes established by Law 1581 of 2012 — generally within 10 business days for access requests and 15 business days for deletion or correction requests, with a possible extension of 8 additional business days where justified.

9. Security Measures

The Organization implements technical and organizational measures appropriate to the risk associated with the processing of personal data. These include HTTPS encryption for data transmitted through the website, access controls limiting data access to authorized personnel, and regular review of data processing practices. No method of electronic transmission or storage is entirely secure; the Organization will notify affected individuals and the SIC of any data breach as required by applicable law.

10. Cookies

This website uses cookies. For detailed information about the types of cookies used, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

11. Changes to This Policy

The Organization reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, organizational practices, or website functionality. The date of the most recent revision is shown at the top of this document. Continued use of the website following publication of a revised policy constitutes acceptance of the changes.

12. Contact and Complaints

For any questions, requests, or complaints relating to this Privacy Policy or the processing of your personal data, contact the Organization at:

• Email: info@optimagestioncoi.com
• Phone: +57 310 329 9037
• Address: Cl. 68a #70C-87 Piso 1, Engativá, Bogotá, Cundinamarca, Colombia

If you are not satisfied with the Organization's response, you have the right to lodge a complaint with the Superintendencia de Industria y Comercio (SIC), the Colombian data protection supervisory authority, at www.sic.gov.co.