Skip to content

Legal

Personal Data Processing Policy

DA2GROUP S.A.S. protects the personal data of clients, prospects, suppliers, employees and visitors. This policy complies with Law 1581 of 2012, Decree 1377 of 2013 (now part of Single Decree 1074 of 2015) and all other Colombian personal data protection regulations.

1. Data controller

  • Company name: DA2GROUP S.A.S.

  • NIT: 902.071.318-2

  • Registered office and address: Carrera 32B # 1H-69, Bogotá D.C., Colombia

  • Email: contacto@da2group.com

  • Website: da2group.com

2. Definitions

  • Personal data: any information that identifies or can identify a natural person.

  • Sensitive data: data that affects privacy or may lead to discrimination, such as racial origin, health, sexual orientation or biometric data.

  • Data subject: the person who owns the data.

  • Processing: any operation involving data, such as collecting, storing, using, sharing or deleting it.

  • Authorization: the data subject's prior, express and informed consent.

  • Data processor: a party that processes data on our behalf, for example a hosting provider.

  • Transmission and transfer: sending data to a processor (transmission) or to another controller (transfer), inside or outside Colombia.

3. Principles

We apply the principles of legality, purpose, freedom, accuracy or quality, transparency, restricted access and circulation, security and confidentiality. We only request the data needed for each purpose and never use it for purposes other than those disclosed.

4. Data we process

  • Identification and contact: name, company, job title, email, phone, country and city.

  • What you tell us: the details of your request, chat messages, your AI maturity assessment answers and any files you attach.

  • Scheduling: date, time and type of meeting you book.

  • Commercial and contractual: quotes, contracts, invoicing and tax information of clients and suppliers.

  • Browsing: pages visited, language, device and traffic source, measured without identifying you (see the Cookie Policy).

  • Calls and video calls you make from the site, when you use them.

We do not request sensitive data on this site. If we ever need it for a service, we will tell you, ask for your express authorization, and you will not be required to provide it.

5. Purposes

  • Handling requests, questions, complaints and claims.

  • Scheduling and running assessments, meetings and demos.

  • Preparing quotes and proposals, entering into and fulfilling contracts, and providing support.

  • Invoicing, collecting payments and meeting accounting, tax and legal obligations.

  • Sending commercial information, content, invitations and satisfaction surveys, only with your authorization; you can withdraw it at any time.

  • Managing suppliers, partners and recruitment processes.

  • Protecting the security of the site, our systems and people (fraud and abuse prevention).

  • Producing internal statistics and reports that do not identify anyone.

6. Authorization

We ask for your authorization before collecting your data: when you tick the box on forms and booking pages, when you write in the chat or when you send us an email. We keep a record of that authorization. Authorization is not required in the cases set out by law, such as public data or orders from an authority.

7. Children and adolescents

This site and our services are aimed at companies and adults. We do not knowingly collect data from anyone under 18. If we identify any, we delete it.

8. Data subject rights

  • Access, update and correct your data.

  • Request proof of the authorization you gave us.

  • Be informed about how we use your data.

  • File complaints with the Superintendency of Industry and Commerce (SIC), after completing the process with us first.

  • Withdraw your authorization or request deletion of your data, where no legal or contractual duty to keep it applies.

  • Access your personal data free of charge.

9. How to submit inquiries and claims

Write to contacto@da2group.com including: full name, ID number, a description of your request, the address or email where we should reply, and any supporting documents. Your successors or a representative or proxy may also do so, provided they prove their capacity.

  • Inquiries: we respond within a maximum of 10 business days. If that is not possible, we will tell you why and respond within a maximum of 5 additional business days.

  • Claims (correction, update, deletion or non-compliance): we respond within a maximum of 15 business days, extendable by up to 8 additional business days with prior notice. If the claim is incomplete, we will ask you to complete it within the following 5 days; if 2 months pass without a response, the claim is deemed withdrawn.

10. Processors and international transfers

We do not sell or rent personal data. We share it only with providers that help us operate and that act as processors under contract and a duty of confidentiality: cloud hosting and servers (located mainly in the European Union), email, telephony, messaging (such as WhatsApp) and artificial intelligence model providers that power the chat (located in the United States).

Some of these providers are outside Colombia. By giving us your authorization you accept this international transmission, which we carry out under contracts requiring adequate levels of protection, in accordance with Law 1581 of 2012 and SIC guidelines. We also disclose data to authorities when required by law or by an order.

11. Security

We apply technical, human, and administrative measures to prevent the loss, unauthorized access, or misuse of data. These are described in Information Security. If an incident affecting your data occurs, we will report it to the SIC and, where applicable, to the affected data subjects.

12. Retention

We keep data for as long as it is necessary for the purpose that justified it, for the duration of our relationship with you, and for the periods required by accounting, tax, and commercial regulations (generally up to 10 years for accounting records). After that, we delete or anonymize it.

13. Use of artificial intelligence

The site's chat uses an artificial intelligence assistant. Its responses do not produce automated decisions with legal effects on you, and you can always ask to speak with a person. More details in Responsible Use of Artificial Intelligence.

14. Visitors and clients in the European Union (GDPR)

If you are in the European Union or the European Economic Area and we offer you services or analyze your browsing, we also apply Regulation (EU) 2016/679 (GDPR).

  • Legal bases: your consent (forms, chat, commercial communications), the performance of a contract or pre-contractual steps taken at your request (proposals and services), our legitimate interest (site security and statistics that do not identify you), and compliance with legal obligations.

  • Rights: in addition to those listed above, you have the right to restriction of processing, data portability, objection to processing, and not to be subject to decisions based solely on automated processing.

  • Transfers: your data is processed in Colombia and with providers in the European Union and the United States. For transfers outside the European Economic Area, we use appropriate safeguards, such as the standard contractual clauses approved by the European Commission.

  • Complaints: you may contact the data protection authority in your country; in Spain, the Spanish Data Protection Agency (www.aepd.es).

  • Contact to exercise your rights: contacto@da2group.com. We respond within one month.

15. Effective date and changes

This policy is effective from its publication date. Any significant change will be posted on this page before it takes effect and, if the purposes change, we will request new authorization from you. The databases will remain active for as long as the purposes described are fulfilled. Last updated: October 25, 2026.

Data Processing Policy | Da2 Group