Personal Data Processing Policy

1. Data controller

Grupo Cascada S.A.S., NIT (tax ID) 902.066.696-1, domiciled at Calle 81 Sur No. 63-105, casa 99, La Estrella (Antioquia), Colombia. Contact email: contacto@grupocascada.net. Phone: (+57) 317 635 4371.

2. Legal framework

This policy is adopted in accordance with Law 1581 of 2012 and Decree 1074 of 2015 (which compiles Decree 1377 of 2013).

3. Purposes

To handle requests received through the website or by email; to carry out contracted engagements; to send information about our services when the data subject has authorized it; and to run social license (SLO) and quality-of-life (IPM) surveys, whose data are anonymized for analysis and reporting.

Data are kept for as long as necessary to fulfill these purposes and for the period required by legal, accounting and contractual obligations (generally up to ten years after the relationship ends, under Article 28 of Law 962 of 2005). Once that period has elapsed, the data are deleted or anonymized.

4. Rights of the data subject

To know, update, rectify and delete their data; to request proof of the authorization; to be informed about the use of their data; to file complaints with the Superintendencia de Industria y Comercio (Colombia’s Superintendency of Industry and Commerce); and to revoke the authorization.

5. Inquiries and claims

Requests are received at contacto@grupocascada.net or by phone at (+57) 317 635 4371, stating the data subject’s name and ID, a description of the request and an address for the reply. Inquiries are answered within a maximum of ten (10) business days, extendable by five (5) additional business days, and claims within a maximum of fifteen (15) business days, extendable by eight (8) additional business days, in accordance with Articles 14 and 15 of Law 1581 of 2012. If a claim is incomplete, the claimant will be asked to complete it within the following five (5) days; if two (2) months pass without a response, the claim will be deemed withdrawn. The data subject may turn to the Superintendencia de Industria y Comercio only after exhausting this procedure with Grupo Cascada S.A.S.

6. Effective period

This policy has been in force since October 24, 2026 and will remain in force for as long as Grupo Cascada S.A.S. processes personal data. Material changes will be published on this page.