Security policies

Terms and Conditions

AEX Technology S.A.S. Personal Data Processing Policy

I. Applicable Regulations

AEX Technology S.A.S. is committed to processing users’ personal data in accordance with Law 1581 of 2012 (Personal Data Protection Law in Colombia) and its regulatory decrees. This section details how personal data provided by users of the “Esperar” platform is collected, used, stored, and protected.

II. Data Collected

The personal data provided by users when registering on the platform includes, but is not limited to:

  • Full name
  • Identification document
  • Contact information (phone number, email)
  • Vehicle and driver’s license information
  • Bank and financial data, when necessary to process payments

III. Purpose of Data Processing

The collected data will be used for the following purposes:

  1. Management and operation of the platform and its services, including the registration and verification of drivers and users.
  2. Verification of criminal backgrounds and review of national and international sanctions lists (such as OFAC, Clinton, etc.) to ensure user safety and legal compliance.
  3. Payment processing and subscription management.
  4. Sending communications related to the use of the platform, including updates, security notifications, and changes to the Terms and Conditions.
  5. Conducting statistical analysis and market research to improve the service, always keeping data anonymous when applicable.

IV. Data Subject’s Rights

Users have the following rights regarding their personal data:

  1. Access: To know, update, and rectify their personal data at any time.
  2. Correction: To request the correction of inaccurate or incomplete data.
  3. Deletion: To request the deletion of their data when they believe it is not being processed in accordance with applicable laws.
  4. Revocation of Authorization: To withdraw their consent for data processing at any time, provided there is no legal or contractual obligation preventing it.
  5. Filing Complaints: To submit queries or complaints to the Superintendence of Industry and Commerce (SIC) if they believe their rights have been violated.

V. Personal Data Security

AEX Technology implements the necessary technical, administrative, and security measures to ensure the protection of users’ personal data against unauthorized access, misuse, loss, or alteration. However, AEX Technology is not responsible for situations arising from force majeure or cyber-attacks beyond its control.

VI. Data Retention

Personal data will be retained only for the time necessary to fulfill the purposes outlined in these Terms and Conditions or for the period required by law. Once the purpose has been fulfilled or the legal period has expired, the data will be securely deleted.

VII. Data Transfer and Sharing

AEX Technology may share personal data with third parties, such as financial institutions, technology service providers, or competent authorities, whenever necessary to fulfill contractual and legal obligations or with the user’s prior consent. The company ensures that these third parties are subject to strict confidentiality and data protection requirements.

VIII. Procedure for Exercising Rights

Users may exercise their rights to access, rectify, cancel, and oppose their data through a written request using the contact channels established by AEX Technology, including email legal@aex.com.co and online forms.