1. Identification of the data controller
Paola Sandoval, as the controller of the personal data collected through the Pallares Enterprise website and its contact channels, establishes this Personal Data Processing Policy in accordance with applicable Colombian regulations.
The purpose of this policy is to inform data subjects of how their personal information is collected, used, stored, protected, shared and, where applicable, deleted.
- Controller: Paola Sandoval.
- Location: Bogotá D. C., Colombia.
- Trade name: Pallares Enterprise.
- Website: PallaresEnterprise.com.
- Email: pallaresbackup@gmail.com.
- Phone / WhatsApp: +57 305 728 0896.
2. Legal framework
This Policy is mainly based on:
- Political Constitution of Colombia, article 15.
- Law 1581 of 2012, which establishes general provisions for the protection of personal data.
- Decree 1377 of 2013, insofar as applicable.
- Single Regulatory Decree 1074 of 2015, regarding personal data protection.
- Any other regulations that amend, supplement or replace the foregoing.
3. Definitions
Personal data: Any information that can be associated or related to an identified or identifiable natural person.
Processing: Any operation performed on personal data, such as collection, storage, use, consultation, updating, disclosure or deletion.
Data subject: The natural person to whom the personal data belongs.
Data controller: A natural or legal person who decides on the database and/or the processing of personal data.
Data processor: A natural or legal person who processes personal data on behalf of the controller.
Authorization: Prior, express and informed consent given by the data subject for the processing of their personal data.
Cookies: Small files or similar technologies stored on the visitor's device that make it possible to remember certain preferences or collect information about browsing, depending on their purpose and configuration.
4. Personal data that may be collected
Through the website, contact forms and communication channels enabled by Pallares Enterprise, the following data may be collected:
- Name.
- Company or organization, when the data subject chooses to provide it.
- Email address.
- WhatsApp or phone number, when provided.
- Information related to the need or service requested.
- Information voluntarily included by the data subject in the message field.
- Information necessary to manage a request, proposal, quote or communication.
- Technical and browsing data collected through cookies and analytics technologies, as explained in section 12.
Sensitive personal data will not be deliberately requested through the contact form.
The data subject should avoid providing sensitive, financial, medical or biometric information, information related to minors, or other specially protected information when such information is not necessary to handle their request.
5. Purposes of the processing
The personal data collected may be processed for the following purposes:
5.1. Handling of requests. To handle, respond to and follow up on inquiries, requests or messages sent through the website.
5.2. Professional contact. To contact the data subject by email, WhatsApp or phone when necessary to respond to their request or to discuss the services requested.
5.3. Management of business opportunities. To understand the needs of potential clients, follow up on requests and manage opportunities related to Pallares Enterprise's services.
5.4. Preparation and management of proposals. To use the information provided to analyze needs and prepare business proposals, quotes and recommendations related to the services requested.
5.5. Provision of services. When the data subject decides to hire a service, to use the necessary information to manage the business relationship, coordinate activities and properly provide the contracted service.
5.6. Administrative and commercial management. To manage communications, requests, quotes, meetings and other activities necessary to properly handle a professional or business relationship.
5.7. Website security and operation. To use technical information and data necessary to ensure the security, operation, maintenance and protection of the website.
5.8. Compliance with legal obligations. To process data when necessary to comply with legal obligations, respond to requests from competent authorities or exercise rights in judicial or administrative proceedings.
5.9. Measurement and improvement of the website. To analyze, through analytics tools and when the visitor has given the corresponding consent, how the website is used, where visits come from and which content generates the most interest, in order to improve the experience and the information published.
Personal data will not be used for purposes other than those described herein without first informing the data subject and obtaining the corresponding authorization when necessary.
6. Authorization of the data subject
When required by applicable regulations, the processing of personal data will be subject to the prior, express and informed authorization of the data subject.
In the website contact form, authorization is given by expressly accepting the corresponding checkbox, whose text is:
“I authorize the processing of my personal data in accordance with the Personal Data Processing Policy, to manage my request, contact me and provide me with information related to the services requested.”
Accepting the authorization is independent of the decision to later hire any of the services offered.
As evidence of the authorization given through the form, the request data, the version of the policy in force and the accepted authorization text will be kept, together with the date and time the request was received and recorded in the system.
The recorded date and time correspond to the moment the system receives and records the request, and not necessarily to the exact instant the data subject checked the authorization box.
7. Rights of data subjects
In accordance with Colombian personal data protection regulations, data subjects have the right to:
- Know the personal data being processed.
- Request the updating of their data when it is outdated.
- Request the correction of their data when it is incorrect, incomplete or inaccurate.
- Request proof of the authorization given for the processing of their data.
- Request information about the use that has been made of their personal data.
- Request the deletion of their personal data when appropriate.
- Revoke the authorization given for the processing of their data, when applicable.
- File complaints with the Superintendence of Industry and Commerce (SIC) when they consider that the applicable personal data protection rules have been violated, once the inquiry or claim procedure before the controller has been exhausted.
- Access, free of charge, their personal data that has been processed.
8. Procedure for exercising rights
Inquiries and requests related to the processing of personal data will be handled by Paola Sandoval, as data controller.
The data subject may submit requests to the following email address:
The request must include, at a minimum:
- Full name of the data subject.
- Contact method to receive the response.
- Clear description of the request.
- Information that makes it possible to identify the data to which the request refers, when applicable.
When necessary, additional information may be requested to verify the identity of the requester and prevent unauthorized third parties from accessing personal information.
Inquiries: Will be answered within a maximum of ten (10) business days from the date of receipt. When it is not possible to answer within that period, the data subject will be informed of the reasons for the delay and the date on which the inquiry will be answered, which may not exceed five (5) business days after the first period expires.
Claims: Claims related to updating, correction, deletion or revocation will be answered within a maximum of fifteen (15) business days from the day following the date of receipt. When it is not possible to answer within that period, the data subject will be informed of the reasons for the delay and the date on which the claim will be answered, which may not exceed eight (8) business days after the first period expires.
9. Revocation of authorization and deletion of data
The data subject may request the revocation of the authorization given for the processing of their personal data, or the deletion of such data, when legally appropriate, by email at:
The request will be handled in accordance with the procedures and periods established by applicable regulations.
Revocation will not have retroactive effects on processing lawfully carried out before the request.
When a legal or contractual obligation requires certain information to be kept, the data may be retained for the corresponding period, even if deletion is requested.
10. Information security
Paola Sandoval will adopt reasonable technical, human and administrative measures to protect personal data against loss, unauthorized access, alteration, misuse or unauthorized disclosure.
Access to the information will be limited to the persons or providers who need such information for the purposes authorized or permitted by applicable regulations.
Efforts will be made to ensure that the technology providers used have appropriate security measures for the storage, processing and transmission of information.
However, no system for storing or transmitting information over the Internet can guarantee absolute security.
11. Processing through third parties and technology providers
For the operation of the website, the receipt of requests and the provision of services, technology providers may be used that take part in the processing of personal data and that, depending on the service provided and the applicable conditions, may act as data processors.
The providers and tools used include:
- Google LLC: Google Sheets, Google Apps Script and Gmail, used to store and manage requests received through the form and to manage email communications.
- Google LLC: Google Analytics 4, used to statistically measure the use of the website, in accordance with the visitor's cookie preferences and consent.
- Netlify, Inc.: used for hosting, publishing and operating the website.
- WhatsApp / Meta Platforms, Inc.: used as a communication channel when the data subject decides to contact or receive communications via WhatsApp.
Providers may process information in accordance with their own policies, terms of service and applicable data protection obligations.
The incorporation of new tools or providers involving relevant changes in data processing may lead to an update of this Policy.
12. Cookies and similar technologies
The Pallares Enterprise website uses cookies and similar technologies to enable its operation, remember certain preferences and, when the visitor authorizes it, collect statistical information about the use of the site.
12.1. Cookie preferences
The website provides a mechanism for visitors to manage their cookie preferences.
Cookies strictly necessary for the operation and security of the site may be used without requiring consent when applicable regulations allow it.
Analytics cookies, including those used by Google Analytics 4, will be activated only when the visitor gives their consent through the cookie preferences mechanism.
The visitor's choice is kept in the browser's local storage for a period of up to one hundred eighty (180) days, in order to remember their preference.
The visitor may later change or withdraw their choice through the cookie settings link or mechanism available on the website.
12.2. Google Analytics 4
The website uses Google Analytics 4, a web analytics service provided by Google LLC, to learn statistically how the site is used and to improve its content and operation.
When the visitor accepts analytics cookies, Google Analytics 4 may use cookies such as _ga and _ga_<ID>, whose duration may reach up to two (2) years, depending on its configuration.
Data such as the following may be collected through this tool:
- Pages visited and time spent.
- Source of the visit, for example, a search engine, a social network, a shared link or a QR code.
- Type of device, browser, operating system and language.
- Approximate location, such as city or country.
- Interactions with the site, such as clicks on contact or WhatsApp buttons and form submissions.
The information is used to generate browsing statistics and analyze the performance of the website.
When the visitor rejects analytics cookies, they must not be activated. The site is configured to delete Google Analytics cookies when the visitor rejects their use, in accordance with the implementation of the consent mechanism.
Google Analytics and its associated technologies are subject to Google's terms and privacy policies.
For more information about Google's processing of data, the visitor may consult:
- https://policies.google.com/technologies/partner-sites
- https://support.google.com/analytics/answer/6004245
12.3. Cookie control from the browser
Additionally, the visitor may configure their browser to block or delete cookies.
Disabling analytics cookies does not prevent browsing the website or using the contact channels.
13. Data of minors
The website and the services offered by Pallares Enterprise are not specifically directed at minors.
Personal data of children or adolescents will not be deliberately requested through the contact form.
If it is detected that personal data of a minor has been collected without the corresponding guarantees, the necessary measures will be adopted in accordance with applicable regulations.
14. International transfer and transmission of data
Some of the technology providers mentioned in this Policy may store or process information on servers located outside Colombia.
Consequently, personal data could be subject to international transmission or transfer operations, depending on the service used and the applicable conditions.
Where applicable, the measures and conditions required by Colombian regulations will be adopted to guarantee the protection of personal data.
Providers must process the information in accordance with the purposes informed, their terms of service and the applicable data protection obligations.
15. Retention of personal data
Personal data will be kept for the time necessary to fulfill the purposes for which they were collected.
In particular:
- Requests that do not become a business relationship: may be kept for up to two (2) years from the last interaction with the data subject, in order to manage the follow-up of the request and maintain traceability of the service provided.
- Business relationships and provision of services: may be kept for the time necessary to manage the contractual relationship and meet the corresponding legal, accounting, administrative or commercial obligations.
- Evidence of authorization: may be kept for the time necessary to demonstrate the authorization given and to respond to possible legal requirements or liabilities.
- Technical and security records: may be kept for the time necessary to ensure security, prevent abuse and maintain technical traceability of the operation of the site and its forms.
Once the purposes have been fulfilled and the applicable retention periods have expired, the data will be deleted or appropriate measures will be applied to prevent their use, unless a legal or contractual obligation requires them to be kept.
16. Effective date and updates to the policy
This Policy corresponds to version 2.0 and takes effect on November 4, 2026.
This version updates the identification of the controller, the trade name, the website, the contact channels, the purposes of the processing, the management of requests and business opportunities, data retention, and the conditions related to cookies and analytics.
The Policy may be updated when necessary as a result of regulatory changes, modifications to the services, new processing purposes, changes in the tools used or adjustments to information management procedures.
When relevant changes are made, an updated version will be published on the Pallares Enterprise website.
The version published on the website will be the version in force and will be available for consultation by data subjects.
17. Contact
For inquiries and requests for updating, correction, deletion or revocation related to the processing of personal data, the data subject may contact us through the following channels:
- Controller: Paola Sandoval.
- Trade name: Pallares Enterprise.
- Location: Bogotá D. C., Colombia.
- Email: pallaresbackup@gmail.com.
- WhatsApp: +57 305 728 0896.
- Website: PallaresEnterprise.com.
18. Authorization
By using the contact form available on the Pallares Enterprise website, the data subject may give their authorization by expressly accepting the corresponding checkbox.
The authorization will be linked to the information provided, to the purpose informed at the time of collection and to the version of this Policy in force at that time.
The data subject may consult this Policy before giving their authorization and later exercise the rights granted by Colombian personal data protection regulations.