Processing of personal data

1. Data controller

INNSYSTE is the controller of the personal data it receives through this site.

Contact channel: privacidad@innsyste.com · www.innsyste.com.

2. Data we collect

Through the contact form we collect the data the data subject provides voluntarily: name, email address, company, phone number, and the content of the message.

We do not collect sensitive data or data from minors.

We also use Google Analytics to measure site usage in aggregate: pages visited, source of the visit, and device type. This tool uses cookies and does not give us data that identifies a person.

3. Purpose

The data is processed to:

• Attend to, manage, and follow up on the request or inquiry.
• Contact the data subject through the channels they provided.
• Send commercial information about INNSYSTE's services, when authorized by the data subject.
• Meet legal and contractual obligations.

4. Authorization

By submitting the form, the data subject gives prior, express, and informed authorization for the processing of their data for the purposes described.

This authorization may be revoked at any time by writing to the contact channel, with no retroactive effect.

5. Data-subject rights

Under Colombian Law 1581 of 2012, the data subject may:

• Know, update, and correct their data.
• Request proof of the authorization granted.
• Be informed about how their data has been used.
• File complaints with Colombia's Superintendencia de Industria y Comercio (the national data protection authority) for violations of the law.
• Revoke the authorization and request deletion of the data, when there is no legal or contractual duty to retain it.

6. How to exercise these rights

Inquiries and complaints are submitted to privacidad@innsyste.com, stating the data subject's name, a description of the request, and a contact method.

They are handled within the timeframes set by Law 1581 of 2012.

7. Retention

Data is retained for as long as necessary to fulfill the purposes described and applicable legal obligations.

Once that period ends, it is deleted or anonymized.

8. Effective date

This policy is effective as of its publication.

INNSYSTE may update it; changes are published on this same page.

Last updated: August 2026.

Initial version, subject to legal review.