Personal Data Processing and Protection Policy
In compliance with the provisions of Colombian Statutory Law 1581 of 2012 and Regulatory Decree 1377 of 2013, CPA Contadores Públicos Asociados S.A.S. adopts this policy for the due protection and management of personal data collected through this website.
1. Data Controller
The legal entity responsible for the processing of your personal data is CPA Contadores Públicos Asociados S.A.S. (hereinafter "CPA Colombia"), a commercial corporation legally incorporated under the laws of the Republic of Colombia.
2. Purposes of Data Processing
Data voluntarily provided through contact forms will be processed exclusively for the following legitimate purposes:
- Processing and responding to inquiries, proposal requests, or professional advisory requirements received.
- Structuring commercial proposals for accounting outsourcing, tax advisory, statutory auditing, or legal consulting services.
- Maintaining direct communication regarding the status of requests submitted by the user.
- Fulfilling statutory and regulatory obligations applicable to the public accounting profession in Colombia.
3. Rights of Data Subjects (Habeas Data)
In accordance with Article 8 of Law 1581 of 2012, data subjects possess the following statutory rights:
- To know, update, and rectify personal data before CPA Colombia in its capacity as data controller.
- To request proof of the authorization granted for data processing.
- To be informed regarding the use and treatment given to their personal data.
- To revoke authorization and/or request deletion of data when processing fails to respect constitutional and legal guarantees.
- To access their processed personal data free of charge.
4. Security and Confidentiality
CPA Colombia implements technical, human, and administrative safeguards to ensure the security of data records, preventing unauthorized modification, loss, unauthorized access, or fraudulent use. We do not sell, assign, or transfer personal data to third parties for advertising purposes.
5. Procedure for Exercising Rights
Data subjects or their lawful representatives may submit habeas data requests through our web contact form or via institutional channels listed in the Contact section. Requests must include full name, identification document, clear description of facts, and contact details for notification.