PERSONAL DATA PROCESSING POLICY — ASTRION SAS
1. Data controller.
ASTRION SAS, a company incorporated in Colombia, Tax ID (NIT) 902.083.078-1, with principal domicile at Kra 5 Kilómetro 1 Vía Planeta Rica – Buenavista, Planeta Rica, Córdoba, Colombia. Email for data protection matters: info@astrion.com.co. Phone: +57 301 497 2153.
2. Legal framework.
This policy is issued in compliance with Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and any other rules that modify or complement them.
3. Data we collect and purposes.
a) Contact and quote form: name, company, email address, phone number, city, service of interest and message. Purposes: (i) handle the request for information or a quote; (ii) contact the data subject by email, phone or WhatsApp regarding their request; (iii) prepare commercial proposals; (iv) keep a record of the pre-contractual and contractual relationship; (v) send communications about ASTRION SAS services related to the request, when authorized by the data subject.
b) Recruitment process (Careers): name, contact details, résumé and any information the applicant decides to include in it. Purposes: (i) assess the applicant's profile in current selection processes; (ii) contact the applicant during the process; (iii) keep the résumé for a maximum of twelve (12) months for future processes, unless the data subject requests earlier deletion.
4. Sensitive data.
Providing sensitive data (such as photograph, health status, union membership, among others defined in article 5 of Law 1581 of 2012) is OPTIONAL. Applicants are not required to include it in their résumé and omitting it does not affect their participation in selection processes. ASTRION SAS does not require sensitive data in its forms.
5. Rights of the data subject.
Under article 8 of Law 1581 of 2012, the data subject has the right to: (i) know, update and rectify their personal data; (ii) request proof of the authorization granted; (iii) be informed about the use given to their data; (iv) file complaints with the Superintendence of Industry and Commerce (SIC) for violations of the law; (v) revoke the authorization and/or request the deletion of their data when no legal or contractual duty prevents it; (vi) access their personal data free of charge.
6. Channel and procedure to exercise these rights.
The data subject may exercise their rights by sending a request to info@astrion.com.co, indicating: full name, identification number, description of the request, notification address and signature. INQUIRIES will be answered within a maximum of ten (10) business days from receipt; if this is not possible, the interested party will be informed and the inquiry will be answered within the five (5) business days following the expiry of the first term. CLAIMS will be handled within a maximum of fifteen (15) business days from the day after receipt; if a claim is incomplete, the interested party will be required within the following five (5) days to correct the deficiencies.
7. International transmission and transfer.
For the operation of the website and the reception of forms, ASTRION SAS uses technology providers that may process data outside Colombia (web hosting and form relay services). These providers act as data processors and only process the data to deliver the messages to the controller. By authorizing the processing, the data subject accepts this transmission for the sole purpose described.
8. Security measures.
ASTRION SAS adopts reasonable technical, human and administrative measures to protect personal data and prevent its adulteration, loss, or unauthorized consultation or access, including encrypted transmission (HTTPS) and restricted access to corporate mailboxes.
9. Validity.
This policy is effective as of its publication on the website. Data will be processed for as long as necessary to fulfil the purposes described and the applicable legal, accounting and tax obligations. Last updated: July 2026.