Privacy Policy and Personal Data Processing

Legal name: TREKING SAS.

Tax ID (NIT): 901.349.779-6.

Address: Cl 33 A No. 21-09, Bogotá D.C., Colombia.

Data protection email: legal@treking.com.co.

Phone: +57 320 866 6258.

• Personal data: any information linked or that can be associated with a specific or identifiable natural person.
• Sensitive data: data that affects the data subject's privacy or whose misuse may lead to discrimination (health, racial origin, political or religious orientation, biometric data, among others).
• Data subject: the natural person whose personal data is processed.
• Processing: any operation on personal data, such as collection, storage, use, circulation or deletion.
• Controller: the party that decides on the database and/or the processing (Treking).
• Processor: the party that processes data on behalf of the Controller.
• Authorization: the data subject's prior, express and informed consent to process their data.

Depending on the interaction channel, we may collect:

• Identification and contact data: name, email, phone.
• Professional or company data: company, role or area, and commercial interest (Go, In, IQ).
• Content you voluntarily share with us through forms or communications.
• Technical browsing data strictly necessary for the site to function.

We do not request sensitive data through the website. If you voluntarily provide it, we understand that you authorize its processing to handle your request.

Personal data is processed for the following purposes:

• Handle contact, demo and quote requests.
• Manage the commercial relationship and provide the services of the Treking ecosystem (Go, In, IQ).
• Send information about products, news or relevant content, where authorized.
• Comply with legal, contractual and information-security obligations.
• Improve the experience, quality and security of our site and services.

The collection and processing of your data are carried out with prior authorization, which may be given expressly by filling out a form, accepting this Policy, or through unequivocal conduct that reasonably allows us to conclude it was granted.

As a data subject, you have the right to:

• Access, update and rectify your personal data.
• Request proof of the authorization granted.
• Be informed about the use given to your data.
• Submit inquiries and complaints to Treking for breaches of the regulations.
• Revoke the authorization and/or request the deletion of the data, where applicable.
• Access, free of charge, your personal data subject to processing.

You may exercise your rights by writing to legal@treking.com.co, indicating your name, contact method and the specific request.

Inquiries: handled within a maximum of ten (10) business days from receipt. Complaints: handled within a maximum of fifteen (15) business days, extendable as provided by law.

To operate the site and provide the services, we may rely on technology providers (for example, email, hosting and form-processing services), who act as processors and handle the data following our instructions and security standards. We only share data when necessary for the described purposes or when required by law.

We adopt reasonable technical, human and administrative measures to protect personal data against unauthorized access, loss, alteration or misuse. No transmission over the Internet is completely infallible, so we cannot guarantee absolute security.

Our site and services are directed to companies and adults. We do not intentionally collect data from minors; if we detect that it has been provided, we will proceed to delete it.

The site uses only the cookies or local storage strictly necessary for its operation. If analytics or advertising tools are added in the future, this Policy will be updated to inform their use and the control options available.

Where applicable under current regulations, the databases managed by Treking are registered with the National Database Registry (RNBD) of the Superintendence of Industry and Commerce (SIC), the data-protection supervisory authority in Colombia.

This Policy is effective as of its publication and may be modified at any time. Changes will be communicated through the website. Databases will remain active for the time necessary to fulfill the described purposes and applicable legal obligations.