Privacy Policy and Personal Data Processing

1. Data controller

Jhon Sebastián Tajumbina Bolaños ("the Controller"), an individual domiciled in Cali, Colombia, email jhonse.tajumbina@gmail.com, owner of the website https://jhon-tajumbina.vercel.app. This policy is adopted under Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and other Colombian data protection rules.

Channel for queries and complaints: jhonse.tajumbina@gmail.com.

2. Data I collect (only what is necessary)

The contact form requests only:

• Name: to address you.
• Email: to reply to you.
• Message: the content of your inquiry.
• Consent record (see section 5): date and time, versions of accepted documents, language, source page and browser type.

3. Purposes

• Reply to your inquiry or proposal about software development or digital marketing.
• Keep a record of the conversation and, if one arises, of the business relationship.
• Keep proof that you accepted the Terms and the Privacy Policy.
• Comply with legal obligations and requests from authorities.

I do not use your data for advertising, profiling, sale or disclosure to third parties, and I will not send you commercial communications without your prior, express authorization.

4. Authorization

Processing is based on your prior, express and informed authorization, given by ticking the corresponding box before submitting the form. You may revoke it at any time by emailing the address above, unless there is a legal or contractual duty to retain the data.

I do not request sensitive data or data about children or adolescents. The site is not aimed at people under 18. If you include sensitive data in your message you are not required to, and you may request its deletion.

5. Consent record

When you submit the form, a record proving when and how you accepted is stored with your message (Decree 1377 of 2013 – proof of authorization):

• That you separately ticked the Terms and Conditions box and the Privacy Policy box.
• Exact date and time of acceptance (UTC and your device’s local time).
• Version of each accepted document.
• Site language, page address and browser type (user agent).
• Mechanism: unchecked-by-default checkbox on the contact form.

6. Processors and third parties

These providers process data on behalf of the Controller to operate the site:

• FormSubmit (formsubmit.co): receives your name, email, message and consent record and forwards them by email to the Controller.
• Gmail / Google: stores the received email in the Controller’s inbox.
• Vercel Inc.: hosts the site and provides aggregated visit and performance analytics (cookie-free; see Cookie Policy).

7. International transfer

These providers operate mainly in the United States. By accepting this policy you expressly authorize the international transfer and transmission of your data for the purposes described (Law 1581 of 2012, art. 26). Only strictly necessary data is shared.

8. Retention

I keep your message and its consent record as long as needed to handle your request and, at most, 2 years from the last contact, unless a business relationship is established or the law requires longer retention. They are then securely deleted.

9. Your rights as data subject

• Know, update and rectify your data.
• Request proof of the authorization you gave.
• Be informed about how your data has been used.
• File complaints with the Superintendence of Industry and Commerce (SIC) for legal violations (www.sic.gov.co).
• Revoke the authorization and/or request deletion of your data when legal principles and guarantees are not respected.
• Access your personal data free of charge.

10. How to exercise your rights

Email jhonse.tajumbina@gmail.com with your name, the email used on the form and your request.

Queries are answered within 10 business days (extendable by 5 more, with reasons). Claims for correction, update or deletion are resolved within 15 business days (extendable by 8 more). You may complain to the SIC only after going through this procedure with the Controller.

11. Security

The site uses HTTPS and security headers and collects only essential data. No system is infallible; if an incident affects your data, the SIC and data subjects will be notified where the law requires.

12. National Database Registry

The Controller is an individual with a minimal database; if the Controller becomes obliged to register it in the SIC’s RNBD, it will be done within the legal deadlines.

13. Changes to this policy

If purposes or processing change materially, a new dated version will be published and, where required by law, new authorization will be requested.