Privacy Policy and Personal Data Processing
Tecbisol Soluciones SAS, operating in Colombia, adopts this Policy to inform data subjects how we collect, use, store, protect, share, and delete personal data.
Data Controller
Responsible: Tecbisol Soluciones SAS.
Country: Republic of Colombia.
Email for privacy, inquiries, and complaints: soluciones@tecbisol.com
Website: https://tecbisol.com/
For requests related to data protection, the data subject may use the email mentioned above.
Applicable regulatory framework in Colombia
This Policy is adopted considering the Colombian legislation applicable to the processing of personal data, particularly the Statutory Law 1581 of 2012, its regulatory norms, and the Decree 1074 of 2015, as applicable.
The instructions and guidelines issued by the Superintendence of Industry and Commerce (SIC) regarding personal data protection are also taken into account.
Principles of processing
Tecbisol applies, as appropriate, the principles of legality, purpose, freedom, truthfulness or quality, transparency, access and restricted circulation, security, and confidentiality, ensuring that the processing is proportional and limited to the stated purposes.
Personal data we may collect
- First and last name.
- Email address.
- Contact and account details.
- Billing information when necessary to provide a service.
- Usage and configuration information of our services.
- Technical information necessary for security, operation, and support.
- Data obtained from third-party services when the user expressly authorizes them.
Google data that the application can access
When the user connects a Google account via OAuth, Tecbisol can only access the data corresponding to the scopes that the user authorizes on the Google consent screen. We do not request or know the user's Google password.
Depending on the scopes configured for the application, this data may include basic account information and data from Google services, such as Google Calendar, only when such permissions have been requested, authorized, and are necessary for a specific function of the application.
The application should only request the minimum necessary permissions for the functions it offers. If a scope is not necessary for a function, it is not requested.
Basic information from Google
When the user authorizes the corresponding permissions, we may receive basic information such as name, email address, and account identifiers necessary to identify or associate the user's account with our services.
This information is used for authentication, account creation or association, user identification, and providing the requested functions.
Google Calendar data
If the application requests Google Calendar permissions and the user grants them, we will be able to access the calendars and events necessary for the calendar functions requested by the user.
- Consult authorized calendars or events.
- Consult dates and times necessary for availability or scheduling.
- Create, modify, or delete events only when the corresponding function is implemented and the user has authorized the necessary permissions.
We do not use Calendar information for purposes unrelated to the functionality requested by the user.
Purposes of processing personal data
- Provide, manage, and maintain our services.
- Create and manage user accounts.
- Authenticate users through authorized services.
- Provide integration functions with Google and other authorized services.
- Manage calendars, events, scheduling, and automations when the user requests it.
- Address requests, inquiries, support, and complaints.
- Process payments and contractual obligations when applicable.
- Prevent fraud, abuse, unauthorized access, and security risks.
- Comply with legal, regulatory, or requirements from competent authorities.
- Enhance the security, stability, and functionality of services, using only the information permitted for such purposes.
Limited use of Google user data
Tecbisol limits the use of data obtained through Google APIs to the practices described in this Policy and to the functions that are visible and requested by the user.
Data obtained from Google is not sold, rented, or commercialized. It is not used for personalized advertising, content-based advertising from Google data, remarketing, or advertising profiling.
Tecbisol does not use data obtained through Google APIs to develop, train, or improve general artificial intelligence or machine learning models.
Google data is not used to determine creditworthiness, loans, or credit operations.
The processing is carried out in accordance with the Google API Services User Data Policy and its requirements for Limited Use, as well as applicable Colombian legislation.
Sharing, transfer, and disclosure
Tecbisol does not sell or commercialize personal data or data obtained from Google.
We may share information with technology providers acting on behalf of Tecbisol when necessary to provide the service, security, hosting, communications, support, or other essential functions. These providers may only process the information for authorized purposes and under confidentiality and security obligations.
We may also disclose information when there is a legal obligation, an order from a competent authority, or when necessary to protect the rights, security, and integrity of our services.
Human access to Google data
Human access to data obtained from Google is limited to situations necessary to provide requested support, investigate security, fraud, or abuse, comply with legal obligations, or address situations expressly authorized by the user.
Employee or contractor access to Google data for their own commercial purposes, advertising, or purposes incompatible with this Policy is not allowed.
Data retention
Tecbisol retains personal data for the time necessary to fulfill the stated purpose, provide the service, maintain operational records, meet legal obligations, or resolve disputes.
Data that is no longer necessary will be deleted, anonymized, or subjected to the appropriate retention measures according to applicable legal obligations.
When the user revokes access to Google, the application will stop obtaining new data through the revoked permissions. Revocation does not automatically imply the deletion of information that has been legitimately stored prior to revocation; the deletion procedure described in this Policy may be used for that.
Information security
We apply reasonable and proportional technical, administrative, and organizational measures to protect data against loss, destruction, unauthorized access, use, modification, or disclosure.
- Communications via HTTPS/TLS when applicable.
- Access controls and privileges.
- Protection of credentials and tokens.
- Monitoring and incident management.
- Backup and recovery measures when applicable.
Cookies and similar technologies
The site may use cookies and similar technologies necessary for operation, security, preferences, and analysis. The user can manage cookies from their browser when that option is available.
Rights of data subjects in Colombia
According to Law 1581 of 2012 and applicable regulations, the data subject may, among other rights:
- Know, update, and rectify their personal data.
- Request proof of the authorization granted, when applicable.
- Be informed about the use given to their personal data.
- Submit inquiries and complaints related to processing.
- Request the deletion of their data when appropriate.
- Request the revocation of the authorization when applicable.
- Access their personal data free of charge under the terms of applicable legislation.
Procedure for inquiries and complaints
The data subject may send their request to soluciones@tecbisol.com.
The request must allow identifying the data subject, clearly describe the inquiry or complaint, and, when necessary, provide the information that allows verifying identity and locating the data subject to the request.
Inquiries and complaints will be addressed in accordance with the terms and procedures established in Law 1581 of 2012 and its regulatory provisions.
Revocation of Google access
The user can withdraw at any time the access granted to Tecbisol from their Google account settings. Upon revoking a permission, Tecbisol will no longer be able to obtain new data through that permission.
The user can also request Tecbisol to delete stored information via email soluciones@tecbisol.com.
Data Deletion
The holder can request the deletion of their personal data and the information associated with their account. Tecbisol will delete the relevant information, except for that which must be retained due to legal obligations, security, fraud prevention, or to address legitimate responsibilities.
The deletion will be carried out within the applicable terms and in accordance with internal security and retention procedures.
Sensitive Data
Tecbisol does not request sensitive data for the ordinary functions of authentication via Google OAuth. If a future functionality requires the processing of sensitive data, the special rules of Colombian legislation will apply, and the holder will be informed about its nature and, when applicable, explicit authorization will be requested.
Children and Adolescents
The services are not specifically aimed at collecting personal data from children or adolescents. When legislation requires special conditions for the processing of their data, Tecbisol will apply the corresponding measures and authorizations.
International Transfers
The operation of technological services and infrastructure providers may involve hosting or processing information outside of Colombia. When there is an international transfer or transmission of personal data, Tecbisol will apply the obligations and mechanisms required by Colombian legislation and applicable agreements, including the necessary contractual and security measures.
Providers and Data Processors
When third parties process data on behalf of Tecbisol, they will act as providers or processors as appropriate and may only use the information for the authorized purposes. Tecbisol will seek to maintain agreements, access controls, confidentiality, and appropriate security measures.
Authorization and Consent
When the law requires authorization for the processing of personal data, Tecbisol will request prior, express, and informed authorization from the holder, will retain the corresponding evidence, and will use the data for the informed purposes.
The authorization granted to Google via OAuth is independent of the authorization that may be necessary for the processing of personal data by Tecbisol. The Google consent screen informs the user about the permissions that the application requests.
Changes to this Policy
This Policy may be updated to reflect legal, technological, operational changes, or changes in our services. The current version will be published on this page indicating the date of the update. If a change substantially modifies the way personal data or Google data is processed, the corresponding information or authorization measures will be adopted.
Tecbisol Soluciones SAS
Privacy and data protection email: soluciones@tecbisol.com
Website: https://tecbisol.com/
For inquiries, complaints, updates, corrections, deletions, or revocations related to personal data, please use the indicated email.
