PRIVACY POLICY AND DATA PROCESSING

Maison Vintage is committed to protecting and respecting your privacy, and we will only use your personal information to manage your account and provide the products and services you request from us.

We would like to contact you to share our products and new releases, as well as other content that may interest you. If you agree to us communicating with you for this purpose, please check the box below to indicate how you would like us to communicate with you: I accept receiving other communications from Maison Vintage.

In order to provide you with the requested content, we need to store and process your personal data. If you agree to the collection and storage of your data, you authorize us to transfer, assign, or provide them to companies belonging to Maison Vintage or necessary entities in order to conduct studies and analyses that allow us to provide you with a better service. If you agree to us storing your personal data for this purpose, please check the box below.

I accept allowing analyses to store and process my personal data. You can unsubscribe from these communications at any time. For more information on how to unsubscribe from communications, our privacy practices, and how we commit to protecting and respecting your privacy, please review our Privacy Policy.

Presentation

In order to comply with current data protection legislation, especially Law No. 1581 of 2012 (and other regulations that modify, add, complement, or develop it) and Decree No. 1377 of 2013, we hereby inform you of the relevant aspects regarding the collection, use, transmission, and transfer, if applicable, of personal data that Maison Vintage SAS, a legally constituted company identified with NIT 9 0 1 7 3 6 2 4 5 - 5 respectively (hereinafter "Maison Vintage"), carries out of your personal data, pursuant to the applicable law or the authorization granted by you to carry out such processing, as well as the handling of such information.

In this personal data processing policy (the "Policy"), you will find the corporate and legal guidelines under which Maison Vintage processes your data, the purpose, your rights as a data subject, as well as the internal and external procedures for the exercise of such rights.

In accordance with Article 15 of the Political Constitution of Colombia and applicable legislation (Law 1266 of 2008, Law 1581 of 2012, Decree 1377 of 2013, and all those regulations that regulate, add, repeal, or modify them), we have a clear privacy and data protection policy: we do not obtain personal information from third parties who have a commercial or legal relationship with Maison Vintage, including you as a User of the Maison Vintage online platform, unless they have voluntarily provided it with their prior, express, and qualified consent.


Definitions

For the interpretation of this Policy, please consider the following definitions:

  • Personal data: Any information linked or that can be associated with one or more specific or identifiable natural persons.
  • Sensitive data: Those data that affect the privacy of the Data Subject or whose misuse may lead to discrimination.
  • Data Processor: Natural or legal person, public or private, who, on its own or in association with others, processes personal data on behalf of Maison Vintage as the Data Controller.
  • Treatment Policy or Policy: Refers to this document, as the policy for the processing of personal data applied by Maison Vintage in accordance with the guidelines of the current legislation on the matter;
  • Data Controller: Natural or legal person, public or private, who, on its own or in association with others, decides on the database and/or the Processing of the data, for the purposes of this policy, Maison Vintage will act as the Controller, in principle.
  • Data Subject: Natural person whose personal data are subject to Processing, whether a client or any third party who, by virtue of a commercial or legal relationship, provides personal data to Maison Vintage.
  • Transfer: Refers to the sending by Maison Vintage as the Data Controller or a Data Processor, to a third party or natural/legal person (recipient), within or outside the national territory, for the effective processing of personal data.
  • Transmission: Refers to the communication of personal data by the Data Controller to the Processor, located inside or outside the national territory, so that the Processor, on behalf of the Controller, processes personal data.
  • Treatment: Any operation or set of operations on personal data, such as collection, storage, use, circulation, or deletion.
  • For the understanding of terms not included in the above list, you should refer to the current legislation, especially Law No. 1581 of 2012 and Decree No. 1377 of 2013, giving the meaning used in said norm to the terms of which there is any doubt in definition.

Before storing or handling personal data, Maison Vintage declares that it complies with the following requirements:

The Data Subject must give explicit authorization for such processing, except in cases where authorization is not required by law.

In the event that the Data Subject is physically or legally incapacitated, legal representatives must give their authorization.

Inform the Data Subject of the reason for using their data and delimiting the limits of such processing.

Purposes / Purposes of Processing

The databases of customers and/or Users of the Maison Vintage online platform are intended to use the data for the proper provision of the service by Maison Vintage, as well as the strengthening of commercial communication channels for the benefit of the data subjects.

Personal data collected through the Maison Vintage online platform of the Users will be processed for pre-contractual, contractual, post-contractual, commercial, customer service, and marketing purposes, Offers, mailing campaigns, launch and activation communications, and brand campaigns.

Specifically, Maison Vintage will process personal data to:

  • Carry out the necessary procedures for the development of the pre-contractual, contractual, and post-contractual stages with Maison Vintage SAS and third parties who contract with it through the online platform, regarding any of the products and/or services offered by Maison Vintage SAS that have been or have not been acquired or, regarding any business or commercial relationship that it has with Maison Vintage SAS, as well as to comply with Colombian or foreign law and orders of judicial or administrative authorities.
  • Manage procedures (requests, complaints, claims), conduct risk analysis, conduct satisfaction surveys regarding the services offered Maison Vintage SAS , as well as Maison Vintage's commercial allies
  • Provide contact information and relevant documents to the commercial force and/or distribution network, telemarketing, market research, and any third party with which Maison Vintage has a contractual relationship of any kind
  • To disclose, transfer, and/or transmit the personal data of the data subject within and outside the country, to any company or third party as a result of a contract, law, or lawful bond that so requires, or to implement cloud computing services.
  • Create databases for the purposes described in this authorization.
  • Maison Vintage may contact the data subject by any means it deems relevant, including, but not limited to, text message (SMS), messaging through web applications, social networks, emails, or commercial or advertising calls. Likewise, the data subject authorizes Maison Vintage to be contacted outside the hours established in Law 2300 of 2023, in accordance with the purposes established in this policy.

Responsibilities of the Data Controller

Understood that Maison Vintage acts as the Data Controller of personal data, in accordance with the definitions of Law No. 1581 of 2012, it undertakes to:

  1. a) Guarantee the Data Subject, at all times, the full and effective exercise of the habeas data right;
  2. b) Request and keep a copy of the respective authorization granted by the Data Subject in accordance with Law 1581/2012;
  3. c) Properly inform the Data Subject about the purpose of the collection and the rights granted to them by virtue of the authorization granted to Maison Vintage;
  4. d) Keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, use, or unauthorized or fraudulent access;
  5. e) Ensure that the information provided to the Data Processor, in cases where applicable, is true, complete, accurate, current, verifiable, and understandable;
  6. f) Update the information, timely informing the Data Processor of any changes regarding the data previously provided and take the necessary measures to ensure that the information provided remains updated in cases where applicable;
  7. g) Rectify the information when it is incorrect and communicate the pertinent information to the Data Processor in cases where applicable;
  8. h) Provide the Data Processor, as appropriate, only with data whose Processing has been previously authorized in accordance with the provisions of Law 1581/2012;
  9. i) Demand from the Data Processor at all times, respect for the security and privacy conditions of the Data Subject's information, in cases where applicable;
  10. j) Process the inquiries and claims made under the terms set forth in Law 1581/2012;
  11. k) Adopt an internal manual of policies and procedures to ensure compliance with the Colombian regulatory framework on the protection of personal data, for the handling of inquiries and claims;
  12. l) Inform the Data Processor, if applicable, when certain information is under discussion by the Data Subject, once the claim has been filed and the respective process has not been completed;
  13. m) Inform at the request of the Data Subject about the use given to their data;
  14. n) Inform the data protection authority when violations of security codes occur and there are risks in the administration of the information of the Data Subjects.
  15. o) Comply with the instructions and requirements issued by the Superintendence of Industry and Commerce.

Rights of the Data Subjects

The rights of the data subjects are:

To know, update, and rectify their personal data against the Data Controllers or Data Processors. This right may be exercised, among others, against partial, inaccurate, incomplete, fractioned, misleading data, or those whose Processing is expressly prohibited or has not been authorized in terms of Law No. 1581 of 2012 (or failing that, with the rules that regulate, add, execute, complement, modify, suppress or derogate from it).

Request proof of the authorization granted to the Data Controller by the Data Subject unless it is expressly exempted as a requirement for Processing, in accordance with the provisions of Article 10 of Law No. 1581 of 2012 (or failing that, with the rules that regulate, add, execute, complement, modify, suppress or derogate from it) or when the continuity of the processing has been presented in accordance with Article 10 number 4° of Decree No. 1377 of 2013.

To be informed by the Data Controller or the Data Processor, upon request, regarding the use they have given to their personal data.

To file complaints with the Colombian Personal Data Protection Authority for breaches of Law No. 1581 of 2012 (or failing that, with the rules that regulate, add, execute, complement, modify, suppress or derogate from it).

To revoke the authorization and/or request the deletion of the data when the Processing does not respect the constitutional and legal principles, rights, and guarantees. The revocation and/or deletion shall proceed when the Colombian Personal Data Protection Authority has determined that the Data Controller or Processor have engaged in conduct contrary to Law No. 1581 of 2012 (or failing that, with the rules that regulate, add, execute, complement, modify, suppress or derogate from it) and/or the Constitution. The request for deletion of information and the revocation of the authorization shall not proceed when the Data Subject has a legal or contractual duty to remain in the database or the Data Controller has a legal or contractual duty to continue with the processing.

To access their personal data that have been subject to Processing free of charge. The data subject may consult their personal data free of charge: (i) at least once every calendar month, and (ii) whenever there are substantial changes to the information processing guidelines that prompt them to make new inquiries.

Communication Channels for the Exercise of Rights / Questions, Complaints, and Claims

If you have any questions, concerns, or complaints regarding the administration of the Privacy Policy by Maison Vintage, please contact us through any of the following means:

Mail: 

Address: 

In the case of exercising a complaint, rectification, updating, consultation, or request for access or deletion of data, you must send it to our email.

Please note that once you inform the responsible area within the Company, depending on which one your request is addressed to, the consultation, request, or complaint will be processed.

Your request or petition regarding your personal data must be addressed within a maximum term of five (5) business days from the receipt of the request or petition. For the correct and complete consideration of your request, petition, or complaint, we request that you provide the identity of the requester, their identification number, the address for notifications/responses, and the documents you wish to assert.

If your request or petition does not contain sufficient data and facts that allow Maison Vintage to address it correctly and completely, you will be required to rectify it within five (5) business days following the receipt of the request, petition, or complaint so that it meets the required standards. After five (5) business days from the date of the requirement have elapsed, if you as the requester have not rectified as required, the receiving Company understands that you have withdrawn your request.

Modification of This Policy

This policy may be modified at any time, which is why we recommend reviewing it regularly or periodically on our website, through the intranet, where the latest version of this Policy will be made available, or the mechanisms to obtain a copy of it.