This English version is provided for convenience. In case of any discrepancy, the Spanish version published at https://www.leukos.com.co/aviso-de-privacidad/ prevails.
| Data Controller | LEUKOS CONSULTING S.A.S. · NIT 900817314-1 |
|---|---|
| Legal representative | Diana Angulo Lozano |
| Domicile | Bogotá D. C., Colombia |
| Data protection channel | diana.angulo@leukos.com.co |
Purpose, scope and legal framework
This Privacy Notice and Web Consents document sets out the information that LEUKOS CONSULTING S.A.S. provides to data subjects in its forms, chats, digital assistants and other data collection points on its website, as well as the mechanisms through which authorization is obtained and kept when it is required.
It is governed by Article 15 of the Colombian Political Constitution, Law 1581 of 2012, Decree 1074 of 2015 (which compiles the regulations of the general personal data protection regime), Law 2300 of 2023 on commercial and advertising contact, Law 527 of 1999 on data messages and electronic evidence, CRC Resolution 7356 of 2024 on the Do-Not-Call Registry (Registro de Números Excluidos), Title V of the current Single Circular of the Superintendence of Industry and Commerce (SIC), and any rules that amend, add to or replace them.
This Privacy Notice does not replace the data subject's authorization when it is legally required. LEUKOS CONSULTING S.A.S. will request authorization in a prior, express and informed manner and will keep verifiable evidence that it was granted.
Article 1. General privacy notice for the website
LEUKOS CONSULTING S.A.S., tax ID (NIT) 900817314-1, domiciled in Bogotá D. C., is the Data Controller for the personal data provided through its website and the digital channels under its control. Data may be collected, stored, organized, used, updated, consulted, transmitted, deleted and, where legally appropriate, transferred, exclusively for the purposes previously disclosed to the data subject.
The purposes associated with the contact forms include: handling requests, questions and inquiries; managing contact with the data subject; understanding the needs of the project or service in question; preparing and sending proposals, quotes or requested information; carrying out pre-contractual and contractual activities; providing and managing services; keeping a record of communications; managing the security of the information and the website; meeting legal, regulatory, accounting or evidentiary obligations; and exercising or defending the company's rights when necessary.
Sending news, content, invitations, commercial information, advertising or offers that are not strictly necessary to handle the initial request will require a separate and optional authorization. Declining it will not prevent the form from being sent or the main request from being handled.
Article 2. Data subjects' rights and service channels
Data subjects may know, update and correct their data; request proof of authorization where applicable; be informed about how their information has been used; access the data being processed free of charge; request its deletion or revoke the authorization where legally appropriate; submit inquiries and complaints; and go to the Superintendence of Industry and Commerce once the applicable legal requirements have been met.
Requests related to personal data protection may be sent to diana.angulo@leukos.com.co. The Personal Data Processing and Protection Policy is available on the website https://www.leukos.com.co/ and may be consulted before providing any data.
Article 3. Short text shown below the form
LEUKOS CONSULTING S.A.S. will process the data you provide to handle your request, contact you about the project or service you asked about, and manage any relationship that may follow. You can read the Personal Data Processing Policy and exercise your rights by writing to diana.angulo@leukos.com.co. Non-essential commercial communications require a separate and optional authorization.
Article 4. Authorization to handle the request
☐ I give LEUKOS CONSULTING S.A.S. my prior, express and informed authorization to collect, store, use, update, consult, transmit and process the personal data I provide through this form in order to handle my request, contact me about the project or service I asked about, prepare and send proposals or quotes, manage any pre-contractual or contractual relationship that may follow, and keep a record of the communication. I declare that I have been informed of my rights as a data subject and of the Personal Data Processing and Protection Policy of LEUKOS CONSULTING S.A.S.
Article 5. Optional authorization for commercial communications
☐ I authorize LEUKOS CONSULTING S.A.S. to send me news, content, invitations, commercial information and offers related to its services through the channels I select, respecting my preferences, applicable regulations and my right to withdraw this authorization at any time.
- ☐ WhatsApp or app/web messaging
- ☐ Phone calls
- ☐ SMS messages
Contact preferences must be recorded separately. LEUKOS CONSULTING S.A.S. will respect opt-out requests and the rules of the Do-Not-Call Registry (RNE) where applicable, as well as the time slots, frequency and other contact restrictions set out in Law 2300 of 2023.
Article 6. Sensitive data and data of children and adolescents
The website's general forms are not designed to request sensitive data or information about children or adolescents. When, exceptionally, a legitimate purpose requires sensitive data, the optional nature of providing it will be expressly stated and explicit authorization will be requested where appropriate. Data of children and adolescents will only be processed when legally appropriate, respecting their best interests and guaranteeing their fundamental rights.
Article 7. Chat, digital assistant and other interactive channels
Before collecting personal data through a chat, digital assistant or interactive mechanism on the site, a short notice will be shown that identifies LEUKOS CONSULTING S.A.S., states the purpose of the collection and gives access to the Processing Policy. If the information is later intended for advertising or commercial purposes other than handling the interaction, a separate authorization will be requested. These channels will not request sensitive data or information that is excessive for the stated purpose.
Article 8. Obtaining, proving and tracing consent
Authorization checkboxes will be unchecked by default and will require an affirmative action by the data subject. The system must keep reasonable evidence of consent, including at least the date and time, the form or collection point, the version of the authorized text, the purpose, the commercial channels selected where applicable, and any other technical metadata needed to prove the expression of will.
Accepting the Processing Policy or the Privacy Notice will not, by itself, be understood as authorization for purposes other than those disclosed. Refusing to authorize commercial communications will not affect the ability to make requests, ask for quotes or access services that are not conditional on that purpose.
Article 9. Mandatory website configuration
- The link to the Personal Data Processing and Protection Policy must be visible before the form is submitted and permanently available in the footer or legal section of the site.
- The checkbox for the processing needed to handle the request must remain empty until the data subject voluntarily checks it.
- Authorization for commercial communications will be independent and optional, and may not be a condition for submitting the main form.
- The channels authorized by the data subject for commercial purposes must be recorded separately and respected in later campaigns.
- The system must provide a clear and simple way to withdraw authorization for commercial communications or to opt out of such messages.
- LEUKOS will keep the historical versions of the authorization texts used, and evidence of their acceptance, for as long as necessary to prove compliance with its obligations.
Article 10. Effective date and updates
This Privacy Notice and Web Consents document is effective as of September 28, 2026. Any substantial change concerning the identity of the Controller, the purposes of processing, the authorization mechanisms or the rights of data subjects will be communicated in a timely manner and, where the change affects the content of a previously granted authorization, a new authorization will be requested in the cases required by applicable regulations.