Hereby, TierraLabs Ciencia de Datos y Ecología S.A.S. (hereinafter "TierraLabs") establishes its Personal Data Processing Policy, which shall apply in compliance with Law 1581 of 2012 and its Regulatory Decree 1377 of 2013. This policy defines the mechanisms to adequately and appropriately guarantee the processing of personal data collected to date and in the future in its databases and in the course of its contractual, labor and commercial activities, in order to allow data subjects to exercise their right of Habeas Data.
This data processing policy is governed by the principles of lawfulness, purpose, freedom, accuracy or quality, transparency, restricted access and circulation, security and confidentiality.
Identification
Contact details for the Data Processing Officer:
- E-mail: administrativo@tierra-labs.com
Legal framework
This policy is governed by the following regulatory framework:
- Political Constitution of Colombia
- Law 1266 of 2008
- Law 1581 of 2012
- Regulatory Decree 1727 of 2009
- Regulatory Decree 2952 of 2010
- Regulatory Decree 1377 of 2013
- Constitutional Court Ruling C–1011 of 2008
- Constitutional Court Ruling C–748 of 2011
General provisions
TierraLabs is committed to protecting personal, private and/or confidential information obtained in the lawful course of its commercial activities.
In compliance with applicable regulations, this document establishes TierraLabs's procedure for protecting entrusted information, seeking to limit the processing of personal data collected, which has been voluntarily provided by our clients, contractors, suppliers, employees, former employees, visitors and any person who has any type of relationship with the Company.
Personal, private or confidential information may be obtained by TierraLabs through the following channels:
- Commercial or professional relationship with clients, suppliers or third parties related to the Company.
- Employment relationship with current and former employees.
- Application to selection processes.
- Attendance at training sessions, seminars, talks or courses.
- Submission of emails requesting or providing information.
It is hereby clarified that by providing any type of personal information to TierraLabs, the data subject accepts that such information will be used in accordance with this policy, noting that the Company will not use the data provided for purposes other than those established in this document.
Definitions
- Authorization: Prior, express and informed consent of the data subject to carry out the Processing of personal data.
- Database: Organized set of personal data subject to Processing.
- Personal data: Any information linked to one or more natural persons, determined or determinable.
- Sensitive data: Data that affects the privacy of the data subject or whose improper use may generate discrimination, such as data revealing racial or ethnic origin, political orientation, religious or philosophical beliefs, data relating to health, sexual life, and biometric data.
- Data processor: The person who, alone or jointly with others, processes personal data on behalf of the data controller.
- Habeas Data: A fundamental right that allows individuals to know, update and rectify information collected about them in databases of public and private entities.
- Data controller: The person who, alone or jointly with others, makes decisions about personal data and its processing.
- Data subject: The natural person whose personal data is subject to Processing.
- Processing: Any operation performed on personal data, such as collection, storage, use, circulation or deletion.
Database contents
TierraLabs stores general information such as full name, identification number and type, gender and contact details (email address, physical address, landline and mobile phone). It also collects, stores, uses, circulates and deletes personal data of natural and legal persons with whom it has or has had a relationship, especially clients, distributors, suppliers, creditors, debtors and workers.
Information provided by users through access to the website https://tierra-labs.com will be processed in accordance with this data policy.
Purposes of processing
TierraLabs collects and processes this information for the purpose of carrying out the service activities the company offers in the ordinary course of its business. Data obtained by TierraLabs may eventually be shared with third parties, judicial or administrative authorities, for quality reviews, audits, supervisory activities or as reference for future business, in compliance with legal or contractual obligations.
TierraLabs may also process information of persons with whom it has ended its commercial relationship and of related third parties, to send commercial information that may be of interest, such as event invitations, newsletters, sector reports, publications or any other purpose in the ordinary course of the Company's business.
Photos and videos. Persons who enter TierraLabs's premises or attend events may be photographed or filmed. Such material may be used to maintain security on the premises, as well as for the preparation of institutional material for information and promotional purposes.
Rights of the data subject
Data subjects have the following rights:
- Right of access. Obtain all information about their personal data, the processing applied, its purpose, the location of the databases and communications made.
- Right of update. Update their personal data when it has changed.
- Right of rectification. Rectify information that is inaccurate, incomplete or non-existent.
- Right of cancellation. Cancel their personal data when it is excessive, irrelevant or processing is contrary to regulations.
- Right to revoke consent. Revoke authorization or request deletion of data where applicable.
- Right to file complaints. File complaints before the Superintendence of Industry and Commerce for violations of applicable law.
Any of these rights may be exercised by the data subject, their heirs, representative and/or attorney, or another person designated by the data subject. Requests may be sent to administrativo@tierra-labs.com. The response period is fifteen (15) business days from the day following receipt of the request.
Sensitive data
TierraLabs advises against providing sensitive data to the company unless the data subject considers it necessary to carry out activities with the company. TierraLabs will only obtain information classified as sensitive data with the prior express authorization of the data subject, or when strictly necessary in accordance with applicable regulations.
Processing of minors' personal data
In accordance with the Code of Childhood and Adolescence, TierraLabs will process data of minors only with the express authorization of their legal representatives and in compliance with the requirements established by law.
International data transfers
TierraLabs undertakes not to transfer data to third countries that do not meet the personal data protection standards required by the Superintendence of Industry and Commerce, except for the exceptions provided by law, including express authorization by the data subject, public health reasons, compliance with international treaties or transfers necessary for the performance of a contract.
Security
TierraLabs undertakes to adopt the guidelines issued by the Superintendence of Industry and Commerce regarding the security of personal data, and will make its best efforts to improve the security standards that protect the personal information collected.
Cookies
Cookies are fragments of information sent by websites and stored in your browser, with the purpose of providing a better browsing experience and improving our services. Even if the user does not accept cookies, part of the information, anonymously, may be collected by the automatic databases of the website.
Policy validity
This policy is effective from the date of its publication. Any modifications will be made at TierraLabs's discretion under applicable regulatory parameters. Information collected by TierraLabs will be retained indefinitely as long as it serves its purpose and while necessary to ensure compliance with legal, labor and accounting obligations. The data subject has the right to request its removal, as long as this does not conflict with TierraLabs's own obligations.
Version 1 · 2026
