INNOVARATEC / PRIVACY
Personal data processing policy
Current version: 2026-10-14-v3
Controller and contact
INNOVARATEC S.A.S., Colombian tax ID (NIT) 902105202-5, domiciled in Bogotá D.C., Colombia, at Carrera 112B # 77C-38, Bogotá D.C., Colombia, is the data controller. Questions, complaints, and requests to access, update, correct, withdraw authorization, or request deletion where applicable may be sent to control@innovaratec.com or made by phone at +57 333 718 4438. Website: innovaratec.com.
Data we process
We may process identification and contact data, organization, country, requirement information, assessment data, results and versions, consent decisions, and minimal generation and audit evidence. Do not submit passwords, secrets, sensitive categories, or data you are not authorized to share.
Necessary purposes
We process information to receive and handle requests, analyze requirements, generate and retain assessments, maintain traceability, respond, follow up on the request, and manage a commercial relationship where applicable.
Optional communications
We send marketing content and communications only when separate authorization exists. Declining does not prevent Navigator use or a response to a request. Authorization can be withdrawn by writing to control@innovaratec.com.
Technology providers
We use external providers for the site, hosting, database, authentication, and AI capabilities. Only if you accept the optional AI authorization, your conversation content and generated responses are sent to Google through the Gemini API to provide guidance. Under the free service, Google may use that content to improve its products, and human reviewers may read, annotate, and process it under Google’s terms. Automated controls block common contact-data and secret patterns but cannot detect every kind of personal or confidential information; do not include such information. Your contact name, email, and phone are not added to the model request. Applicable providers and terms may change; material changes will be reflected in a new policy version.
Retention
Information is retained while needed for the stated purposes, the commercial relationship, and applicable obligations. Each assessment enters retention review after 24 months; review does not mean automatic deletion and may result in justified retention, anonymization, or secure deletion. Original versions, consent, and audit evidence are protected against modification.
Rights and security
You may access, update, and correct your data; request proof of authorization; learn how it was used; submit questions or complaints; withdraw authorization; and request deletion where applicable. We apply restricted access, least privilege, server-side validation, RLS, audit, and idempotency.
National and international scope
This policy covers requests from individuals and companies in Colombia and abroad. Processing is managed under the framework applicable to INNOVARATEC in Colombia. Depending on your location, you may have additional rights. We do not claim universal compliance with every jurisdiction; additional requirements will be evaluated before services are specifically directed to another regulated jurisdiction.