Personal Data Processing Policy

01Data controller

Company name

KAMON & CO. S.A.S.

Tax ID (NIT)

902.086.955-1

Registered domicile

Medellín, Colombia. The firm operates 100% online and has no physical office open to the public; all service is provided through digital channels.

Phone and WhatsApp

+57 323 944 4716

Email for queries and claims

contact@kamonandco.com (candidates and calls: jobs@kamonandco.com)

02Scope and legal framework

This policy applies to all personal data KAMON & CO. S.A.S. receives through its website, email, WhatsApp, social media, forms, virtual meetings, calls for applications, contracts and any other channel.

It is governed by Article 15 of the Colombian Constitution, Law 1581 of 2012, Decree 1074 of 2015 (which compiles Decree 1377 of 2013) and any rules that amend or complement them. The section “People in other countries” explains what applies when the relationship takes place from another jurisdiction.

03Data we process

• Identification and contact: name, company, position, email, phone, country and city.
• Project information: what you share with us to quote or deliver a service, such as drawings, models, technical documents and property data. It may contain data of third parties (for example, owners or professionals).
• Partners and suppliers: contact and professional data of the people who represent a partner organization.
• Candidates: CV, education, experience, portfolio, professional links, English level and submissions to calls.
• Communications: messages, emails and meeting records we exchange with you.
• Browsing: aggregated, anonymous statistics of visits to the website.

We do not ask for sensitive data (health, ethnic origin, beliefs, sexual orientation, biometric data or others) or data of minors. Please do not send it. If you include it voluntarily, providing it is optional and does not affect any service or process.

04Purposes

• Answer requests, prepare proposals and quotes, and deliver the contracted services.
• Manage the relationship with clients, partners and suppliers: contracts, invoicing, payments and support.
• Receive and evaluate applications and calls, and contact the selected profiles.
• Send information about the firm, its services and its technical content, when you have authorized it. You can unsubscribe at any time.
• Improve the website with statistics that do not identify anyone.
• Comply with legal, accounting and tax obligations, and respond to requests from competent authorities.
• Prevent fraud and misuse, protect the security of our systems, and exercise or defend the rights of KAMON & CO. S.A.S. in administrative, judicial or arbitration proceedings.

We do not sell or rent personal data, nor use it for third-party advertising.

05Authorization

We process your data with your prior, express and informed authorization, which may be given in writing, orally or through unequivocal conduct, such as sending us a message, ticking a form box or applying to a call. We keep proof of it.

Authorization is not required in the cases provided by law, such as public data, requests from authorities, medical or health emergencies, or processing needed to perform a contract to which you are a party.

You may revoke your authorization at any time, unless a legal or contractual duty requires the data to be kept.

06Information you send us

Anyone who sends us data of third parties —for example in drawings, models, project documents or a team’s CVs— represents that they have those people’s authorization to share it and for us to process it under this policy, and is accountable for it to KAMON & CO. S.A.S. and to those third parties.

Personal data contained in project information is processed only to deliver the service and, where applicable, as a data processor on behalf of the client, according to its instructions and the contract.

Sending unsolicited proposals, ideas, designs or documents does not create a contractual relationship or a duty of confidentiality, unless agreed in writing with KAMON & CO. S.A.S. (for example, a non-disclosure agreement), without prejudice to the protection of any personal data they contain.

07Your rights

• Know, update and correct your data.
• Request proof of the authorization you gave us.
• Be informed about how we use your data.
• Revoke the authorization and request deletion of your data when legal principles, rights and guarantees are not respected.
• Access your personal data free of charge.
• File complaints with the Colombian Superintendence of Industry and Commerce (SIC) for violations of the law, once the procedure with us has been exhausted.

08How to exercise your rights

Write to contact@kamonandco.com (or jobs@kamonandco.com if you are a candidate) with the subject “Habeas Data”, stating your name, your ID or candidate code if you have one, your request and how you want to receive the answer. We may ask for additional information to verify your identity.

Queries are answered within 10 business days, extendable by 5 more business days. Claims are answered within 15 business days, extendable by 8 more business days.

09Who can access your data

• Authorized staff and collaborators of KAMON & CO. S.A.S., bound by confidentiality duties.
• Technology providers acting on our behalf (web hosting, email, cloud storage, forms, messaging and analytics), bound by confidentiality and security obligations.
• Partners involved in delivering a project, only as far as necessary and under confidentiality duties.
• Legal, accounting and audit advisors, and authorities when required by law.

10International transfers and transmissions

KAMON & CO. S.A.S. works with clients, partners and suppliers in different countries, and its technology providers’ servers may be located outside Colombia. By authorizing the processing, you expressly authorize the international transfer and transmission of your data to those recipients, who must apply adequate security measures, in accordance with Colombian law.

11Security

We apply reasonable technical, human and administrative measures to protect data against loss, unauthorized access, alteration or fraudulent use: need-based restricted access, protected accounts and providers with recognized security standards.

No system connected to the internet is completely invulnerable. If an incident affects your data, we will manage it and notify the affected people and the authority as required by law. KAMON & CO. S.A.S. is not liable for acts of third parties, force majeure or acts of God beyond the reasonable measures adopted.

12Website, analytics and third-party services

We measure visits to the site with analytics tools that do not use cookies or identify people; they only produce aggregated statistics such as page views, country and device type. We do not use advertising cookies.

When you write to us on WhatsApp, by email or on our social media, or open content hosted by third parties (for example YouTube or LinkedIn), those platforms process your data under their own policies, for which KAMON & CO. S.A.S. is not responsible.

13Retention

• We keep data only for as long as needed for the purpose for which it was collected and for the periods required by law, contracts and statutes of limitation.
• Candidates not selected in calls: up to 12 months after results are announced. We then delete or anonymize the data.
• Once the period ends, data is securely deleted or anonymized.

14Minors

Our services, recruitment processes and calls are intended for people over 18. If we learn that we have received data of a minor without the authorization of their representative, we will delete it.

15People in other countries

If you interact with the firm from the European Union, the United Kingdom, the United States, Brazil or another jurisdiction with its own data protection rules, to the extent they apply, we process your data based on your consent, the performance of a contract, compliance with legal obligations or our legitimate interest in managing the professional relationship.

In addition to the rights above, you may request portability, restriction of and objection to processing, and lodge a complaint with the data protection authority of your country. With your consent, your data is transferred to Colombia, where KAMON & CO. S.A.S. is domiciled.

16Changes, effective date and governing law

We will publish any change on this page, with its date and version. If the change is substantial, we will inform you through the available contact channels. This version is effective from October 31, 2026 and replaces version 1.0 of September 30, 2026.

The database will remain in force while KAMON & CO. S.A.S. carries out its corporate purpose and for the retention periods indicated. This policy is governed by Colombian law.