RAPITRA, in compliance with Law 1581 of 2012, Decree 1377 of 2013, and other related regulations on personal data protection in Colombia, adopts this Personal Data Processing Policy, which governs the collection, storage, use, circulation, and deletion of information provided by data subjects.

1. Purpose of Processing

The personal data collected will be used to:

• Manage contractual, commercial, and employment relationships.
• Provide information about products, services, promotions, and events.
• Handle requests, complaints, and claims.
• Comply with legal and regulatory obligations.
• Conduct internal market analysis and customer satisfaction studies.

2. Rights of Data Subjects

In accordance with current regulations, personal data subjects have the right to:

• Know, update, and rectify their data.
• Request proof of the authorization granted.
• Be informed about how their data is used.
• File complaints with the Superintendence of Industry and Commerce (SIC).
• Revoke authorization and/or request the deletion of their data when applicable.

3. Duties of the Data Controller

RAPITRA commits to:

• Guarantee the security and confidentiality of information.
• Implement technical, human, and administrative measures to prevent alteration, loss, consultation, or unauthorized access.
• Respect the principles of legality, purpose, freedom, truthfulness, transparency, and confidentiality in data processing.

4. Procedure for Exercising Rights

Data subjects may exercise their rights by sending a written communication to the email info@rapitra.app, clearly stating the request.