Privacy policy

Ofimatikos, based at calle 12 # 37-45, Acacías, Meta, CO 507001, portal https://www.ofimatikos.com/, and NIT 1030561202-8, acts as the controller of personal data in accordance with Law 1581 of 2012, Decree 1377 of 2013, and other current regulations on personal data protection in Colombia.

1. Scope and definition of controller

This policy applies to data processed through the digital properties and channels of Ofimatikos, which operates with its own technology, except for payment processing, which is carried out exclusively through PayPal as an independent third party.

2. Data processed

• Identification and contact: name, address, telephone, identification, and email for account creation, operational communications, and support.
• Transactional: payment references, transaction status, and metadata necessary for billing. Ofimatikos does not capture or store card data because the collection is performed directly on PayPal.
• Account security: an essential and encrypted session cookie for authentication and session continuity, without advertising or profiling purposes.

3. Purposes

• Manage registration, authentication, access, and provision of services related to office automation digital products.
• Invoice and manage payments through PayPal and comply with accounting and legal obligations.
• Operational communications about the service, support, and security notifications.
• Security: protect the account and allow the holder to close active sessions on all devices from their panel.

4. Legal basis and authorization

The processing is carried out with prior, express, and informed authorization of the data subject, and under the principles of legality, purpose, freedom, truthfulness, transparency, restricted access and circulation, security, and confidentiality provided for in Law 1581 of 2012.

5. Rights of the data subject

• Know, update, rectify, and delete personal data; request proof of authorization and be informed of use.
• Revoke authorization when appropriate and file complaints with the Superintendence of Industry and Commerce.
• Session control: from your account, you can end all active sessions and revoke access tokens.

6. Procedure for consultations and claims

• Consultations: response in up to 10 business days, extendable with prior communication according to law.
• Claims: response in up to 15 business days, with the possibility of a justified extension.

7. Security measures

Technical, administrative, and organizational measures consistent with the risk are applied, including role-based access control, encryption in transit, activity logs, incident management, and platform hardening.

8. Cookies and similar technologies

Ofimatikos only uses essential technical cookies for authentication and session maintenance; third-party cookies for advertising purposes or behavior tracking tools are not used.

9. Processors and third parties

Payment gateway: PayPal processes payments as an independent third party with its own policies; Ofimatikos only receives confirmations and statuses necessary for service provision.

10. Retention

Data is kept for the time necessary to fulfill the purposes, legal, accounting, and tax obligations; then they are deleted or anonymized according to applicable regulations.