Your data,
protected

VISIÓN EXTERNA PROFESIONAL CONSULTORES LTDA (VEXPRO CONSULTORES LTDA, hereinafter VEXPRO): A consulting firm specializing in advisory, management and processing before INVIMA, and consulting related to GMP, GLP, CCAA, among others.

Personal data collected, stored, used, shared, or deleted by VEXPRO will be used for the following purposes:

Related to VEXPRO's core activities

• Clients: Individual clients who hire our services may have their data included in our accounting system for billing purposes.

Related to VEXPRO's internal operations

• Human Resources: Data is processed for hiring, job performance, and termination, depending on the legal relationship established with VEXPRO.
• Suppliers and Contractors: Data is processed for accounting and to maintain minimum information on goods or services required for VEXPRO's operations.
• Facility Security: Processing is carried out for the surveillance and security of people, property and VEXPRO's premises.

• Know, update and correct your personal data held by VEXPRO, especially if the data is partial, inaccurate, incomplete, misleading, or if its processing is prohibited.
• Request proof of the authorization granted to VEXPRO for data processing, except in cases legally exempt from this requirement under Article 10 of Law 1581 of 2012.
• Be informed, upon request, of the use that VEXPRO has made of your personal data.
• File complaints before the Superintendence of Industry and Commerce (SIC) for violations of Law 1581 of 2012 or related regulations.
• Revoke authorization or request deletion of personal data if processing violates constitutional principles, rights, and guarantees, or if SIC has determined that the data controller or processor has breached Law 1581 of 2012.
• Access your personal data free of charge.

• Sensitive Data: You have the right to choose not to provide any sensitive information requested by VEXPRO, including data related to racial or ethnic origin, union membership, political or religious beliefs, sexual life, biometric data, or health information.
• Minors' Data: Providing personal data of minors is voluntary and must be done with authorization from parents or legal guardians.

Unless otherwise provided by law, processing requires prior, express, and informed consent from the data subject, obtained in any verifiable manner.

Cases where authorization is NOT required

• Information required by VEXPRO in the exercise of its legal functions or by court order.
• Data of a public nature.
• Medical or health emergencies.
• Processing authorized by law for historical, statistical, or scientific purposes.
• Data related to civil registry records.

To exercise your rights regarding personal data — including the right to know, update, correct, delete, or revoke authorization — contact us through:

7.1 Inquiries

• Resolved within a maximum of ten (10) business days from receipt.
• If not possible within that period, the data subject will be notified before the deadline with reasons for the delay and a new response date, not exceedingfive (5) additional business days.

7.2 Complaints

A complaint must include: full name and ID, precise description of the facts, physical or electronic address for the response, and supporting documents. VEXPRO will mark the database with "complaint in process" within two (2) business days and resolve the complaint within fifteen (15) business days.