POLICY FOR THE PROCESSING OF PERSONAL DATA OF AUDISOFT CONSULTING SAS

Definitions. In accordance with current legislation on the matter, it is understood by:

Authorization: Prior, express and informed consent of the Holder to carry out the Processing of personal data.
Database: Organized set of personal data that is subject to Treatment.
Personal data: Any information linked or that can be associated with one or several determined or determinable natural persons.
Sensitive data: Data that affects the privacy of the Holder or whose improper use can generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership in unions, social organizations, human rights or that promotes the interests of any political party or that guarantees the rights and guarantees of opposition political parties, as well as data related to health, sexual life, and biometric data.
Treatment Manager: Natural or legal person, public or private, that by itself or in association with others, performs the processing of personal data on behalf of the controller.
Responsible for the Treatment: Natural or legal person, public or private, that by itself or in association with others, decides on the database and/or the Treatment of the data.
Holder: Natural person whose personal data is subject to Treatment.
Treatment: Any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion.

Treatment Manager. AudiSoft Consulting SAS is the Manager for the Processing of personal data. The contact details are as follows: Address: Calle 51 # 9-69 Office 302, Bogotá, Colombia. Telephone: 2487096 Email: comunicaciones@audisoft.com.

Responsible for the Treatment. AudiSoft Consulting SAS is the Responsible for the Processing of personal data. The contact details are as follows: Address: Calle 51 # 9-69 Office 302, Bogotá, Colombia. Telephone: 2487096 Email: comunicaciones@audisoft.com.

Personal Data Collected. The personal data that will be collected and included in the database will be limited to the personal data that is relevant and adequate for the purpose for which it will be collected, and are the following:

Type, number and date of identification documents.
Names.
Last names.
Date of birth.
Place of birth.
Blood type.
Height.
Gender.
Phone numbers.
Addresses.
Geographical coordinates.
Emails.
Work experiences.
Studies performed.
Personal references.
Family references.
Medical exams.
Digital fingerprint.
Photographs.
Bank accounts.
Financial states.

Purpose of the Collection of Personal Data. The personal data related in the previous article will be used directly, among others, and in a merely illustrative manner, for the following direct and indirect purposes related to the object and purposes of AudiSoft Consulting SAS:

Recruitment and personnel selection processes.
Personnel hiring processes.
Personnel management.
Supplier management.
Management of clients and prospects.
Prevention of money laundering and financing of terrorism.
Credit study.
Courses and training.
For all purposes necessary for the execution and development of the corporate purpose of AudiSoft Consulting SAS.

Duties of the Responsible for the Treatment. AudiSoft Consulting SAS in its capacity as Responsible for the Treatment will have the following duties:

Guarantee the Holder, at all times, the full and effective exercise of the right of habeas data.
Request and keep, under the conditions provided by law, a copy of the respective authorization given by the Holder.
Duly inform the Holder about the purpose of the collection and the rights that assist him by virtue of the authorization given.
Keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, unauthorized or fraudulent use or access.
Guarantee that the information provided to the Treatment Manager is true, complete, exact, updated, verifiable and understandable.
Update the information, communicating in a timely manner to the Treatment Manager, all the news regarding the data that has previously been provided and adopt the other necessary measures so that the information provided to him is kept up to date.
Rectify the information when it is incorrect and communicate what is pertinent to the Treatment Manager.
Provide the Treatment Manager, as the case may be, only data whose Treatment is previously authorized in accordance with the provisions of Law 1581 of 2012.
Demand from the Treatment Manager at all times, respect for the security and privacy conditions of the Holder's information.
Process the inquiries and complaints formulated in the terms indicated in Law 1581 of 2012.
Inform the Treatment Manager when certain information is under discussion by the Holder, once the complaint has been filed and the respective process has not been completed.
Inform at the request of the Holder about the use given to their data.
Inform the data protection authority when there are violations of the security codes and there are risks in the administration of the information of the Holders.
Comply with the instructions and requirements issued by the Superintendence of Industry and Commerce.

Rights of the Holders. The Holder of the personal data will have the following rights:

Guarantee the Holder, at all times, the full and effective exercise of the right of habeas data.
Know, update and rectify their personal data against AudiSoft Consulting SAS or the other companies in charge of processing your personal data, which are indicated in this policy. This right may be exercised, among others, against data that is partial, inaccurate, incomplete, divided, misleading, or whose Treatment is expressly prohibited or has not been authorized.
Request proof of the authorization granted to AudiSoft Consulting SAS, except in the case of personal data for which Law 1581 of 2012 expressly excludes authorization as a requirement for Treatment.
To be informed by AudiSoft Consulting SAS upon request, regarding the use that has been given to your personal data.
Submit complaints to the Superintendence of Industry and Commerce for violations of the provisions of Law 1581 of 2012 and other regulations that modify, add or complement it.
Revoke the authorization and/or request the deletion of the data when the principles, rights and constitutional and legal guarantees are not respected in the treatment. The revocation and/or deletion will proceed when the Superintendence of Industry and Commerce has determined that in the treatment the Responsible or Manager has incurred in conduct contrary to the law and the Constitution.
Free access to your personal data that have been subject to Treatment.

Legitimation for the exercise of the rights of the Holders. The rights of the Holders may be exercised by the following persons:

By the Owner, who must prove their identity.
By their successors in title, who must prove such quality.
By the representative and/or attorney of the Holder, prior accreditation of the representation or empowerment.
By stipulation in favor of another or for another.
Inform the data protection authority when there are violations of the security codes and there are risks in the administration of the information of the Holders.
Comply with the instructions and requirements issued by the Superintendence of Industry and Commerce.

Authorization. For the collection and processing of personal data, the prior, express and informed authorization of the Holder will be required, which will be in writing. The authorization request will inform about the data that will be collected and its purpose, as well as the rights that assist the Holder and the contact information of AudiSoft Consulting SAS. This authorization will be available for subsequent consultation by the Holder.

Cases in which authorization is not required. In accordance with Law 1581 of 2012, the authorization of the Holder will not be necessary in the case of:

Information required by a public or administrative entity in the exercise of its legal functions or by court order.
By their successors in title, who must prove such quality.
Data of a public nature.
Cases of medical or health urgency.
Treatment of information authorized by law for historical, statistical or scientific purposes.
Data related to the Civil Registry of People.

Inquiries. The Holder may consult the information that rests on him in the databases and the use that has been given to his personal data. He may also request proof of the authorization granted to AudiSoft Consulting SAS, for the processing of his personal data. Jorge Eliécer Arbeláez Rubio has been appointed responsible for the attention to the queries described, and the following means have been enabled:

Email: comunicaciones@audisoft.com.
Written communication addressed or located at: Calle 51 # 9-69 Oficina 302, Bogotá, Colombia.
Phone: 2487096 de Bogotá, Colombia.

The Holder must indicate his full name and identification number, as well as the physical address or email where he will receive the response to his query. All inquiries will be answered in a term not exceeding ten (10) business days from the date of receipt. If it is not possible to respond to the query within the indicated term, the interested party will be informed of the reason for the delay, also indicating the date on which the query will be answered. In any case, the new date will not be more than five (5) business days after the expiration of the initial term of ten (10) days.

Complaints. The Owner who considers that the information on him or her in the databases must be corrected, updated or deleted, or who wishes to revoke the authorization granted for the processing of their data, may file a claim with AudiSoft Consulting SAS, which will be processed under the following rules: The claim will be made by means of a request addressed to AudiSoft Consulting SAS, and must contain the description of the facts that give rise to the claim, the address for sending the response, and documents that are to be asserted. If the claim is incomplete, the interested party will be required within five (5) days following receipt of the claim to correct the failures. After two (2) months from the date of the request, without the applicant submitting the required information, it will be understood that the claim has been withdrawn. Once the complete claim is received, a legend that says “claim in process” and the reason for it will be included in the database, within a term of no more than two (2) business days. Said legend must be maintained until the claim is decided. The maximum term for AudiSoft Consulting SAS +57 (1) 2487096 Calle 51 # 9-69 Office 302 NIT: 900.931.991-3 Mobile: + 57 (317) 656 9473 Bogotá, DC – Colombia to attend the claim will be fifteen (15 ) business days from the day following the date of receipt. When it is not possible to address the claim within said term, the interested party will be informed of the reasons for the delay and the date on which the claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the initial term period of fifteen (15) days.

Complaints to the Superintendence of Industry and Commerce. The Holder may only file a complaint with the Superintendency of Industry and Commerce once the consultation or claim process with AudiSoft Consulting SAS has been exhausted.

Changes to this policy. AudiSoft Consulting SAS reserves the right to modify this Policy at any time. When substantial modifications are made to this Policy, this fact will be communicated to the holders of the information by sending a notice to the email they have registered, before or at the latest at the time of implementation, informing them that they can consult the new Policy at the portal of AudiSoft Consulting SAS. Said notice will indicate the date from which the new Policy will take effect. When the change refers to the purposes of the treatment, a new authorization will be requested from the owners to apply them.

Validity. This Policy will take effect as of October 20, 2016.

Jorge Arbeláez

Legal Representative

AudiSoft Consulting SAS