Personal Data Processing Policy

1. Definitions

For the purposes of this policy:

• Data subject (Titular): natural person whose personal data is subject to processing.
• Personal data: information linked to one or more identified or identifiable natural persons.
• Sensitive data: data that affects the data subject's privacy or whose improper use may lead to discrimination (for example, health, racial origin, biometric data).
• Processing: collection, storage, use, circulation, or deletion of data.
• Data controller (Responsable): the party that decides on the processing (Kramber Designs SAS).
• Data processor (Encargado): the party that carries out the processing on behalf of the controller.
• Authorization: the data subject's prior, express, and informed consent.

2. Data controller

The party responsible for processing your data is Kramber Designs SAS, identified with NIT 901354965-1, with registered address at Cll 159 #54-78, Bogotá, Bogotá D.C., Colombia (email: info@kramberdesigns.com.co; phone: +57 300 208 7250).

3. Data we collect

We may collect the following data:

• Identification and contact data that you voluntarily provide (name, email address, company, and the content of your message) through the contact form.
• Site navigation and usage data (pages visited, device, browser, IP address), in the event that we use cookies or analytics tools.

4. Sensitive data and data of minors

We do not request sensitive data through the site. Should we require it, we will ask for your explicit and informed authorization; remember that you are not obligated to authorize the processing of sensitive data.

We do not direct our services to minors, nor do we knowingly collect their data. Where applicable, their data will be processed respecting the best interests of the child and their fundamental rights.

5. Purposes of processing

We process your data to:

• Handle your requests and prepare service proposals.
• Provide, manage, and follow up on the contracted services.
• Improve the site, our content, and your experience.
• Send you related communications and information, when you have authorized us to do so.

6. Authorization

By sending us your data through the site, you authorize its processing in accordance with this policy. You may revoke your authorization or request the deletion of your data at any time, unless there is a legal or contractual duty to retain it.

7. Rights of the data subject

As the data subject, you have the right to:

• Access, update, and rectify your personal data.
• Request proof of the authorization granted.
• Be informed about the use we make of your data.
• Revoke the authorization and/or request the deletion of your data where applicable.
• Access your personal data free of charge.
• File complaints with the Superintendency of Industry and Commerce (SIC) for breaches of data protection regulations, once the query or claim procedure before Kramber Designs SAS has been exhausted.

8. Procedure for queries and claims

The area responsible for handling queries and claims regarding personal data is the Management of Kramber Designs SAS, through the email info@kramberdesigns.com.co.

You may exercise your rights by writing to info@kramberdesigns.com.co, stating your name, contact details, and the specific request.

Queries: will be handled within a maximum of ten (10) business days from the date of receipt. If this is not possible, we will inform you of the reasons and the response date, which will not exceed the following five (5) business days.

Claims: will be handled within a maximum of fifteen (15) business days counted from the day following receipt. If this is not possible, we will inform you of the reasons and the response date, which will not exceed the following eight (8) business days. If the claim is incomplete, we will request corrections within the following five (5) days.

9. Transfer and transmission of data

We may rely on data processors (for example, web hosting and analytics providers), including those located outside Colombia, that process the data on our behalf under adequate standards of protection and confidentiality. We do not sell your personal data.

10. Cookies

This site currently does not use analytics or advertising cookies. If we incorporate these technologies in the future, we will state it in this policy and, where regulations require it, we will request your prior consent.

You can configure your browser to reject cookies; some features may be affected.

11. Security and retention

We adopt reasonable technical, human, and administrative measures to protect your data against unauthorized access, loss, or alteration. We retain the information only for as long as necessary for the purposes described or as required by law.

12. National Database Registry

Where applicable under current regulations, we will register our databases with the National Database Registry (RNBD) administered by the SIC.

13. Effective date

This policy is effective as of September 5, 2026 and will remain in force for as long as Kramber Designs SAS processes data. Databases will be retained for the time necessary to fulfill the purposes of the processing. Any changes will be published on this page.

14. Contact

For any questions about this policy or the processing of your data, contact us at info@kramberdesigns.com.co.