Privacy Policy

This privacy policy (hereinafter, the "Policy") aims to inform visitors or users (hereinafter, the "User") of the website www.laverdadensansilvestre.veolia.co (hereinafter, the "Site") about the methods of protecting their personal data in accordance with Law 23 of 1982, which establishes the regulations on copyright and related rights for literary, artistic, scientific, technological development works, etc., Law 1581 of 2012, which establishes the General Regime for the Protection of Personal Data in Colombia, partially regulated by National Decree 1377 of 2013, Decree 1081 of 2015, and Decree 255 of 2022, as well as what is established in the Personal Data Treatment Policy for Suppliers and Third Parties adopted by Veolia Colombia SAS ESP in compliance with these regulations (hereinafter, collectively, the "Regulation").

 

The publisher of the Site is Veolia Colombia SAS ESP, a simplified joint-stock company registered in the Mercantile Registry of Cúcuta and identified with NIT 807.005.020-8, with a Commercial Establishment opened at Calle 96 No. 10-72 Piso 3 in Bogotá, D.C., Colombia (hereinafter, "the Publisher" or "Veolia").

 

The terms and conditions for the processing of data collected through the contact forms are detailed in the informational notice thereof.

 

This Privacy Policy forms an integral part of the Website's Terms of Use.

 

The Policy may be modified at any time by Veolia, particularly to comply with any regulatory, jurisprudential, editorial, or technical evolution.

 

The methods for collecting and processing the information collected through cookies are detailed in the " Cookie Policy ".

 

Identification of the Data Controller

 

The controller of the User's personal data is, where applicable, one of the following entities:

  • Veolia Colombia SAS ESP;
  • The Veolia entity responsible for processing the User's request or responding to their query, depending on the subject matter of the request indicated in the contact form.

Description of Processing

 

In the course of the Site's operation, the Publisher may collect and process personal data to allow the User to access the functions and services offered by the Site (hereinafter, the "Services").

 

1) What categories of data are collected?

  • Contact Data: refers to the mandatory data that the User provides when completing the contact form(s), namely: name, surname, email address, company name, telephone number, address, postal code, city.
  • Voluntarily Published Data: refers to the personal information that the User voluntarily provides to the Publisher by filling in the free-text fields provided for this purpose in the contact form(s), namely, "Subject of the request" and "Message." The Publisher strongly recommends the User to avoid communicating personal data through these fields or, in any case, to limit such communication to what is strictly necessary to process their request (hereinafter, "Published Data").
  • Data related to the management of User contacts (timestamp and subject of the request, follow-up, actions taken, statistics);

All of this data will be collectively referred to hereinafter as the "Data."

 

2) Why does the Publisher collect User Data?

 

The data collected through the forms are used for the following purposes:

  • To put contact forms (web forms) and calls for contributions (consultations) online
  • Presenting the purpose of the Veolia Group (governance, strategic program, social and environmental responsibility, ecosystem, innovation, finance) and an overview of its activities.
  • To allow access to the Group's local and/or specialized sites
  • To collect information requests from target audiences (customers, consumers, stakeholders)
  • To consult media and documents
  • To discover the Group's HR policy and access the careers portal (job offers, internal mobility)
  • To navigate the financial section dedicated to individual shareholders and investors (Dissemination of press releases, financial, and regulatory information).

The data collected for the purposes indicated below are mandatory, unless otherwise specified in the corresponding forms.

 

The fields marked with an asterisk are mandatory in the contact form. If you do not complete them, Veolia will not be able to respond to your request.

 

Any request from a User regarding the exercise of their rights must be submitted through the specific form enabled for this purpose. The procedures for the processing of data collected through this form are detailed in the corresponding informational notice.

 

3) On what legal basis is the processing of User Data based?

 

Data processing is only lawful if it is based on one of the legal bases defined by the Regulation. In the context of the Site's operation, data processing is based on the following legal bases:

  • If the User is a potential professional who wishes to receive information or make requests about the activities and services offered by Veolia in relation to previously expressed specific needs, or if the User is already a Veolia client: Veolia's legitimate interest.
  • If the User is a shareholder or potential shareholder: the contract or the execution of pre-contractual measures adopted at the request of the data subject.
  • If the User is an investor or potential investor: the contract or the execution of pre-contractual measures adopted at the request of the data subject.

4) Data Subjects

 

Data processing relates to:

  • Site Users;

5) Recipients of the collected data

 

Depending on their respective needs, the recipients of all or part of the data are:

  • Veolia personnel responsible for content publication and technical administration of the website, as well as their superiors;
  • Veolia personnel responsible for processing requests received through forms;
  • Authorized service providers;
  • Site Users;
  • Personnel responsible for supervising the security of Veolia's information systems.

Internal recipients may also be subsidiaries of Veolia Colombia SAS ESP located in Colombia and Panama or the subsidiaries of its parent company Veolia Environnement SA outside the Republic of Colombia and the Republic of Panama, it being understood that any transfer of Data outside the EU will be carried out under the conditions of the section “Transfer of Data outside Colombia” set out below.

 

Each receiving subsidiary may, as the case may be, be a sub-processor or data controller for the communicated Data.

 

The Data may also be transferred/used by third parties under the following conditions:

  • Data transferred to public authorities and/or bodies
    In accordance with applicable regulations, the Data may be transmitted to competent authorities upon request, and particularly to public bodies, exclusively to comply with legal obligations, legal professionals, ministerial officials, and bodies responsible for debt collection, as well as in the event of the search for the perpetrators of crimes committed on the internet.
  • Data communicated to third parties
    The Data may be communicated to or made accessible to the Publisher's subcontractors, suppliers, and external service providers (such as the Site's hosting provider, Veolia's IT and/or technical service providers).
  • Social Networks:
    Users can share pages of interest on social networks by clicking on the sharing buttons.

    The collection of information using these buttons is subject to the privacy policies of these third parties. We recommend reading the policies of these social networks to understand how your personal data is used.

Exercise of User Rights

 

In accordance with the Regulation, every natural person User has the right to access, limit, rectify, delete, and, depending on the applicable legal basis, to object to and to the portability of the data concerning them.

 

The User also has the right to define general and specific guidelines defining how they intend for their rights to be exercised after their death.

 

For all processing carried out within the framework of the Site and only within this framework, regardless of the entity responsible for the processing, the User may exercise their rights,

  • by writing to [email protected]
  • by mail to: Veolia Colombia - Centro de Servicios Compartidos, Calle 96 No. 10-72 Piso 3, Bogotá D.C.

by sending proof of identity, or any other official document that serves as proof.

 

In case of any difficulty related to the management of their Personal Data by the Publisher, the User can contact the Data Protection Officer of Veolia Colombia (email: [email protected] If the response from the Data Protection Officer is not satisfactory, the User can file a complaint by mail with the competent data protection authority in Colombia: the Superintendencia de Industria y Comercio located at Carrera 13 No. 27-00 Bogotá, D.C., Colombia or online (https://sedeelectronica.sic.gov.co/atencion-y-servicios-a-la-ciudadania/peticiones-quejas-reclamos-y-denuncias)

 

The Publisher reminds the User that they may, for legitimate reasons, object to the processing of their Data.

 

It is specified that if the User exercises some of their aforementioned rights, the Publisher may not be able to carry out the necessary actions to achieve the purposes described above, or the User may not be able to use all or part of the Services.

 

The Publisher is obliged to keep the Data collected from Users up to date. Users are therefore advised to inform the Publisher of any changes affecting them by sending an email to the following address: [email protected]

 

Data Retention Period and Archiving

 

The User's Data will not be retained beyond the period strictly necessary for the purposes pursued as established herein and in accordance with the Regulation.

 

Data for publication preparation (order, follow-up, editorial content) are kept for 5 years from the date of online publication.

 

Data collected through web forms or inquiries are kept in an active database for 13 months from the date of registration of the User's request.

 

Registration data is kept for 6 months.

 

Data related to cookies and trackers are stored in accordance with the periods specified in the Cookie Policy.

 

Data collected to respond to User information and consultation requests are kept in an active database for 18 months from the date of registration of the User's request.

 

The Data is kept in an intermediate archive to allow Veolia to defend itself in the context of possible legal actions or for the purpose of preventing and detecting criminal offenses, with the objective of making this Data available to the judicial authority.

 

The user's data will subsequently be permanently deleted.

 

Furthermore, the Publisher may keep anonymized Data to elaborate statistical studies. These studies will in no case allow the identification of Users and will focus only on trends derived from their aggregated Data.

 

Security

 

The Publisher adopts appropriate technical and organizational measures to ensure the security of the Data and prevent unauthorized access to or disclosure of the User's Data. However, the Publisher cannot guarantee the elimination of all risks of misappropriation, alteration, illicit reproduction, or misuse of the Data.

The database created upon sending a request through the contact form is strictly confidential. Veolia undertakes to take all necessary precautions and appropriate organizational and technical measures to preserve the security, integrity, and confidentiality of the Data and, in particular, to prevent its distortion, damage, or access by unauthorized third parties.

 

Transfer of Data outside Colombia

 

Publications may be accessible, due to their presence on the Internet, outside of Colombia.

In case of transfer of User Data to a subsidiary of the Veolia Group or to a third party located outside of Colombia, Veolia guarantees that the receiving country has been subject to an adequacy decision by the Superintendencia de Industria y Comercio. Otherwise, Veolia commits to regulating the transfer through the relevant legal instruments.