Personal Data Processing Policy

  1. Data Controller and Processor

    Consorcio Equipo Puntoco, formed by Central Comercializadora de Internet S.A.S. and Team Internet Group PLC, in its capacity as data controller and processor, collects, stores, uses, transmits, and transfers personal data within the scope of the technical and administrative operation of the .CO domain, in accordance with Law 1581 of 2012 of Colombia, its regulatory decrees, and any other applicable regulations that amend or complement it.

  2. Purpose of Processing

    The personal data collected will be used exclusively for:

    • Complying with the functions and obligations arising from the operation of the .CO domain.
    • Managing and operating the public information databases of the .CO domain, known by their English acronym RDDS.
    • Allowing the transmission and transfer of data to public or private entities, whether domestic or foreign, including subcontracted parties, that participate in the provision of .CO domain operation services.
    • Complying with legal and contractual obligations, including authorization for processing and transfer to the Ministry of Information and Communications Technologies of Colombia (MinTIC) as part of its oversight and supervisory duties.
  3. Data Transfer and Transmission

    The processing of personal data may involve its transfer and transmission to third parties, inside or outside the national territory, for the purpose of ensuring the provision of services associated with the operation of the .CO domain, including but not limited to the management of RDDS and the execution of technical and administrative processes.

  4. Data Subject Rights

    Data subjects have the right to:

    • Access their personal data.
    • Request the update, rectification, or deletion of their personal data.
    • Revoke the authorization granted for the processing of their personal data.
    • File complaints before the Superintendence of Industry and Commerce for violations of Law 1581 of 2012 and other applicable regulations.
  5. Procedure for Exercising Rights

    Requests related to the access, update, rectification, deletion, or revocation of personal data must be sent to [email protected]:

    • The request will be addressed within a maximum period of 10 business days from its receipt.
    • If the data subject does not agree with the response, they may submit a subsequent communication within the following 10 business days, which will also be answered within a maximum period of 10 business days.
  6. Authorization Validity

    The authorization for personal data processing will remain in force as long as it is necessary to fulfill the purposes set forth in this policy or for the period required by law.

  7. Applicable Law

    This policy is governed by the provisions of Colombian Law 1581 of 2012, its regulatory decrees, and any regulations that amend or complement it. The competent authority for the protection of personal data in Colombia is the Superintendence of Industry and Commerce.