Personal Data Protection Policy
1. Data Controller Identification
VITA INVERSIONES Y MERCADEO S.A.S. (hereinafter "CJS" or "the Company"), headquartered in Bogotá D.C., Colombia, is responsible for the processing of personal data collected through its website, in the course of its qualitative market research projects, and in its commercial relationships.
For inquiries or requests related to personal data processing, you may contact us through the form available on our website www.cjs.com.co or via the email address designated for this purpose.
2. Legal Framework
This policy is governed by Statutory Law 1581 of 2012, Sole Regulatory Decree 1074 of 2015 (which consolidates Decree 1377 of 2013), and any other regulations that supplement, amend, or replace them, relating to personal data protection in Colombia.
3. Types of Data We Process
CJS processes personal data in three distinct contexts:
3.1. Research Study Participants
In the context of its qualitative research projects, CJS may collect information from individuals who voluntarily participate in focus groups, in-depth interviews, ethnographies, online panels, and other qualitative techniques. The data processed may include:
Name and basic contact information
Sociodemographic profile (age, gender, socioeconomic level, city of residence)
Consumer habits, opinions, motivations, and perceptions
In some cases, audio and/or video recordings of sessions, with prior authorization
3.2. Clients and Commercial Contacts
For the purpose of maintaining commercial relationships and providing services, CJS processes data from its clients and corporate contacts, including:
Full name and job title
Corporate email address and phone number
Company affiliation
Information related to contracted projects
3.3. Website Visitors
Through the contact form on the website www.cjs.com.co, CJS collects basic information such as name, company, email address, and the message or inquiry the visitor wishes to share.
4. Purposes of Data Processing
CJS processes personal data exclusively for the following purposes:
To contact and recruit participants for qualitative market research studies
To conduct the dynamics, sessions, and activities involved in each research project
To manage commercial relationships with clients and prospects
To send information about our services to those who have expressed interest
To comply with applicable legal, accounting, and regulatory obligations
To ensure the security and proper functioning of our internal processes
5. Rights of the Data Subject
In accordance with Law 1581 of 2012, as the holder of personal data you have the right to:
Access, update, and correct your personal data
Request proof of the authorization granted for the processing of your data
File complaints with the Superintendencia de Industria y Comercio for violations of data protection law
Revoke authorization and/or request the deletion of your data, provided there is no legal or contractual obligation preventing it
Access your personal data that has been processed, free of charge
6. Authorization of the Data Subject
CJS will obtain prior, express, and informed consent from the data subject before processing their personal data. In the context of research projects, this authorization is obtained through an informed consent form presented at the beginning of each session or activity. On the website, submission of the contact form implies acceptance of this policy.
7. Confidentiality of Information
CJS is committed to maintaining strict confidentiality over the personal data processed in the context of its research projects. Research findings and study results are always presented in aggregate form and do not allow for the individual identification of participants, unless explicitly authorized by them.
Audio and/or video recordings made during research sessions are used solely for the purposes of study analysis and are not shared with uninvolved third parties without the prior authorization of the participant.
8. Data Transfers and Transmission
CJS does not sell, rent, or commercialize personal data. In the course of research projects, information may be shared with the client brands or companies that commissioned the study, always in aggregate form and ensuring the confidentiality of participants.
In exceptional cases where data must be transmitted to third-party service providers (digital platforms for virtual studies, external recruiters), CJS will ensure that such third parties have data protection policies consistent with this policy.
9. Information Security
CJS implements the technical, human, and administrative measures necessary to ensure the security of personal data and prevent its alteration, loss, unauthorized access, use, or fraudulent consultation.
10. Data Retention Period
Personal data will be retained for the time necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations. Once the purpose has been fulfilled, data will be securely deleted or anonymized.
11. How to Exercise Your Rights
CJS will respond to your request within the timeframes established by law: ten (10) business days for inquiries and fifteen (15) business days for complaints.
12. Effective Date and Amendments
This policy takes effect upon its publication on the website www.cjs.com.co and may be amended at any time. Any material changes will be communicated in a timely manner to data subjects through the available channels.
CJS · Bogotá, Colombia · www.cjs.com.co