1. Data controller
Nexusconsultoreco S.A.S., Tax ID 901.587.342-1, with domicile at Calle 93 # 11-27, office 502, Bogotá D.C., is the controller of the personal data collected through the website. For any request related to your data you may write to habeasdata@nexusconsultoreco.com.
2. Data we collect
We collect the data you provide directly through contact and subscription forms (name and email address) and the technical data generated by navigation (IP address, device identifiers, pages visited, preferred language and campaign metrics).
3. Purposes of processing
We process your data to send you information about real estate investment opportunities in Colombia, respond to your queries, comply with legal and accounting obligations, measure the performance of the site and prevent fraud or misuse of the platform.
4. Legal basis
Processing is based on the prior, express and informed consent you provide when subscribing to the newsletter, on compliance with legal obligations applicable to the Colombian financial sector and on the legitimate interest of the Platform to secure the operation of the service.
5. Transfers and transmissions
We do not sell your data. We may share information with technology providers located in the European Union, the United States and Latin America that provide hosting, analytics, transactional email and customer support services, under contractual clauses that guarantee an adequate level of protection.
6. Your rights (Habeas Data)
As data subject you have the right to access, update, rectify, delete, object to processing, withdraw consent and request proof of authorisation. These requests are addressed within a maximum of fifteen (15) business days from receipt.
7. Retention
We keep your data for as long as your subscription is active and for a maximum of ten (10) additional years to meet accounting and financial obligations, in accordance with article 28 of Colombian Law 962 of 2005.
8. Security measures
We implement technical, administrative and physical controls to protect your data: encryption in transit (TLS 1.3), role-based access control, audit logs and continuity plans aligned with ISO/IEC 27001.
9. Changes to this policy
We will publish any material change to this Privacy Policy on this same website at least ten (10) calendar days before it enters into force.