Personal Data Protection Policy

1. Data Controller

DNTKR STUDIO SAS, Colombian Tax ID (NIT) 901.982.335, domiciled in Armenia, Quindío, Colombia, is the entity responsible for the Processing of personal data collected through this website and through the contact channels associated with the DNTKR Studio brand.

Contact channel for data protection matters: [email protected].

2. Definitions

For purposes of this Policy, and under article 3 of Law 1581 of 2012, the following terms mean:

• Personal data: any information linked to, or that can be associated with, one or more identified or identifiable natural persons.
• Sensitive data: personal data that affects the Data Subject's privacy or whose misuse may lead to discrimination (racial or ethnic origin, political affiliation, religious or philosophical beliefs, union membership, health data, biometric data, and data concerning sex life).
• Processing: any operation performed on personal data, such as collection, storage, use, circulation, or deletion.
• Data Controller: the natural or legal person who decides on the database or the Processing of the data — in this case, DNTKR STUDIO SAS.
• Data Processor: the natural or legal person who, on behalf of the Controller, carries out the Processing of personal data (for example, technology infrastructure providers).
• Data Subject: the natural person whose personal data is Processed.
• Authorization: the Data Subject's prior, express, and informed consent to carry out the Processing of their personal data.
• Privacy notice: verbal or written communication addressed to the Data Subject informing them of the existence of this Policy and how to access it.

3. Principles Governing the Processing

DNTKR Studio's Processing of personal data is governed by the principles set out in article 4 of Law 1581 of 2012:

• Legality: Processing is a regulated activity subject to the law and the rules that develop it.
• Purpose: Processing serves a legitimate purpose, disclosed to the Data Subject.
• Freedom: Processing is only carried out with the Data Subject's prior, express, and informed consent. We do not collect data without authorization.
• Truthfulness or quality: the information subject to Processing is truthful, complete, accurate, up to date, verifiable, and understandable.
• Transparency: we guarantee the Data Subject's right to obtain from the Controller, at any time and without restrictions, information about the existence of data concerning them.
• Restricted access and circulation: Processing is subject to the limits arising from the nature of the data, legal provisions, and this Policy; except for public information, data will not be available on the internet or other mass media, unless access can be technically controlled.
• Security: information subject to Processing is handled with the technical, human, and administrative measures needed to prevent its adulteration, loss, unauthorized or fraudulent access, use, or consultation.
• Confidentiality: everyone involved in the Processing is bound to keep the information confidential, even after their relationship with DNTKR Studio ends.

4. Personal Data We Collect

Depending on the channel you use to interact with DNTKR Studio, we may collect the following categories of personal data:

• Quote form: full name, country code and WhatsApp number, email address, business stage, services of interest, estimated budget, expected start date, and, if you choose to share it, a short description of your project.
• Careers form: full name, email address, city, date of birth, a link to your portfolio, and any information about your experience you choose to include.
• Email and WhatsApp: the contact details and information you provide directly when you write to us through these channels.
• Technical browsing data: IP address, browser type, and the date and time of your requests, recorded automatically as evidence of the authorization granted and for security purposes.

5. Sensitive Data and Minors

DNTKR Studio does not request or collect special categories of sensitive data through this website (racial or ethnic origin, political opinions, religious beliefs, union membership, health data, biometric data, or data concerning sex life). Please do not include this type of information in the free-text fields of our forms.

This website and DNTKR Studio's services are directed at adults. We do not knowingly collect personal data from children or teenagers. If you are the parent or legal guardian of a minor and believe they have provided us with personal data without your authorization, please contact us so we can remove it.

6. Purposes of the Processing

The personal data you provide is Processed for the following purposes:

• Evaluate, prepare, and send you a quote for our brand design services.
• Contact you by WhatsApp, email, or another channel to follow up on your request.
• Carry out the selection process when you apply to a job opening, including reviewing your profile and portfolio.
• Provide commercial and after-sales follow-up on projects and services delivered.
• Handle requests, complaints, and claims related to the exercise of your rights as a Data Subject.
• Keep a record of the authorization granted, including the date, time, IP address, and the version of the text accepted, as evidence in the event of a request or claim.
• Comply with legal, contractual, and regulatory obligations applicable to DNTKR Studio.
• If you expressly and separately authorize it, send you content, news, and promotions from DNTKR Studio.

7. Authorization

DNTKR Studio only Processes the personal data you voluntarily provide through our forms once you grant your express authorization by checking the consent box provided for that purpose and clicking submit.

If you do not grant the required authorization, we will not be able to process your quote or job application request, since the fields marked as required are necessary for that purpose.

8. Duties of the Data Controller

As Controller, DNTKR Studio commits to:

• Guarantee the Data Subject the full and effective exercise of their rights at all times.
• Request and keep the authorization granted by the Data Subject.
• Duly inform the Data Subject about the purpose of the collection and the rights that assist them.
• Keep the information under the security conditions needed to prevent its adulteration, loss, unauthorized or fraudulent access, use, or consultation.
• Ensure that the information provided to the Data Processor is truthful, complete, accurate, up to date, verifiable, and understandable.
• Correct information when it is inaccurate and communicate the correction to the Data Processor.
• Handle Data Subjects' inquiries and claims under the terms set out in this Policy.

9. Your Rights

As a Data Subject, you have the right to:

• Know, update, and correct your personal data held by DNTKR Studio.
• Request proof of the authorization granted, unless the law exempts this requirement.
• Be informed by DNTKR Studio, upon request, about the use given to your personal data.
• File complaints with the Superintendency of Industry and Commerce (SIC) for violations of applicable law, once the inquiry or claim process before DNTKR Studio has been exhausted.
• Revoke the authorization and/or request deletion of your data when the Processing fails to respect the constitutional and legal principles, rights, and guarantees.
• Access your personal data that has been Processed, free of charge.

10. Exercising Your Rights: Inquiries

You, your successors, or your representative or attorney-in-fact may inquire about the personal information held in our databases by writing to [email protected], indicating your full name, a contact method, and the specific request.

Inquiries will be handled within a maximum of ten (10) business days from the date of receipt. When it is not possible to respond within that term, we will inform you of the reasons for the delay and the date on which your inquiry will be answered, which in no case may exceed five (5) additional business days beyond the first term.

11. Exercising Your Rights: Claims

If you believe the information held in our databases should be corrected, updated, or deleted, or if you notice an alleged breach of this Policy or applicable law, you may file a claim by writing to [email protected], identifying the Data Subject, describing the facts, providing a contact address, and attaching any supporting documents.

If the claim is incomplete, we will request that you correct it within five (5) days of receipt. If two (2) months pass from that request without you providing the required information, the claim will be deemed withdrawn.

The maximum term to resolve the claim is fifteen (15) business days from the day following receipt. When it is not possible to resolve it within that term, we will inform you of the reasons for the delay and the date on which your claim will be resolved, which in no case may exceed eight (8) additional business days beyond the first term.

While a claim is being processed, the affected information will be flagged with the notice "claim in process" and the reason for it, within no more than two (2) business days of receipt.

12. Data Processors and Third Parties

To operate this website and deliver our services, DNTKR Studio relies on technology providers acting as Data Processors, including hosting and cloud infrastructure providers and messaging services used for WhatsApp support. These providers only Process personal data under our instructions and for the purposes described here; they are not authorized to use it for their own purposes.

DNTKR Studio does not sell, rent, or trade personal data for third-party advertising purposes.

13. International Data Transfer

Some of our technology infrastructure providers — including web hosting and email delivery services — may store or process information on servers located outside Colombia. This constitutes an international transfer of personal data under article 26 of Law 1581 of 2012, and may be made to countries that have not been declared to offer an adequate level of data protection by the Superintendency of Industry and Commerce (SIC).

DNTKR Studio carries out this transfer on the basis of article 26(a) of Law 1581 of 2012 — that is, with the prior, express, and unequivocal authorization you grant by accepting this Policy and submitting your data through our forms, and by this notice expressly informing you that your information may be transferred internationally. DNTKR Studio also contractually requires these providers to meet security and confidentiality standards adequate and equivalent to those required by Colombian law, and only shares with them the data strictly necessary to provide the contracted service.

14. Security Measures

DNTKR Studio has adopted reasonable technical, human, and administrative measures to protect personal data against unauthorized access, loss, alteration, or misuse, including the use of encrypted connections (HTTPS), access controls over information, and limiting database access to staff who need it to perform their duties.

15. Data Retention

Personal data will be kept for as long as reasonably necessary to fulfill the purposes described in this Policy and, in any case, for as long as the business relationship or DNTKR Studio's legitimate interest persists, and afterward for the term required by applicable legal, tax, and accounting rules. Once that term has elapsed, the data will be deleted from our active databases.

16. Use of Cookies

This website uses cookies. Details of the cookies we use, their purpose, and how to manage them are available in our Cookie Policy.

17. National Database Registry

DNTKR Studio continuously assesses compliance with its obligations regarding the National Database Registry (RNBD) administered by the Superintendency of Industry and Commerce, and will register or update its databases whenever applicable law requires it.

18. Changes to This Policy

DNTKR Studio may modify this Policy at any time to adapt it to legislative or case-law developments, or to new industry practices. Any material change will be published on this same page, indicating the date of the new version. We recommend reviewing this Policy periodically.

19. Supervisory Authority and Applicable Law

This Policy is governed by the laws of the Republic of Colombia, in particular article 15 of the Political Constitution, Statutory Law 1581 of 2012, Decree 1377 of 2013 (compiled into Sole Regulatory Decree 1074 of 2015, Title 2, Chapter 25), and the Single Circular of the Superintendency of Industry and Commerce (SIC), the supervisory authority for personal data protection in Colombia (www.sic.gov.co).

20. Contact

To exercise your rights as a Data Subject or resolve any question about the Processing of your personal data, write to us at [email protected].