Privacy and personal data policy

ECOHIDRO, the trade name of a natural person domiciled in Dosquebradas, Risaralda, Colombia, is the controller of the personal data described in this policy. The controller's full identification details are provided on request through the contact channels.

Contact channels: email [email protected], phone and WhatsApp +57 333 224 2255, monday to friday: 8:00 a.m. – 6:00 p.m. (colombia time) and saturdays: 8:00 a.m. – 1:00 p.m..

This policy applies to the personal data that ECOHIDRO receives through the website https://ecohidro.com.co, the client portal (https://portal.ecohidro.com.co), WhatsApp, email and the provision of its environmental consulting and engineering services, in compliance with Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and the rules that complement them.

We only collect the data needed for each purpose:

• While you browse the website: none. The website has no forms, accounts, analytics or advertising tools. The assessments and calculators run in your browser and do not send what you type. Only technical preferences are stored in your browser (theme, chosen sector and that you saw the notice), as explained in the cookie policy. The server and the network that protects the website record technical data (IP address, date, page visited and browser) for security purposes only and for a limited time.
• When you write to us: your name, phone number, email, company, position and the information you share about your case (for example, the result of an assessment). WhatsApp and email are third-party services with their own policies.
• When you request a quote: the request is made on the client portal's form (portal.ecohidro.com.co/registro), not on this website. It asks for identification and contact data (name or company name, ID or tax number, phone number, email and contact person), project data (services, spaces, areas, municipality, address and location on the map) and an optional message. Before sending it, you give your prior, express and informed authorization, and we keep evidence of that authorization (date and IP address). The form's map loads Esri and OpenStreetMap images through the portal's server: your browser does not connect to them directly. The travel route to the project is calculated on the server with Google Maps (Routes) from the project's location.
• When you hire a service: identification and contact data of the company and of its representatives or contact persons (company name, tax ID or identity number, address, emails, phone numbers), data about its sites and sampling points (location, photographs of the facilities), documents needed for the procedure (tax registration, chamber of commerce certificate, permits, utility bills) and billing and payment data.
• In the client portal: email address, name, password (stored encrypted, never in plain text) and access logs.

We do not request sensitive data or data about minors. If a photograph of a sampling point showed an identifiable person, we take or crop it so that the person cannot be recognized.

• Answering your requests and preparing quotes and technical proposals.
• With a request sent through the quote form: preparing the quote, contacting you about it and registering you as a prospective client in ECOHIDRO's directory.
• Providing the services hired: sampling plans, characterizations, reports, designs and procedures before environmental authorities and sewer service providers.
• Issuing invoices, recording payments and meeting accounting and tax obligations.
• Sending you communications related to your service (quotes, plans, reports, expiry reminders).
• Keeping the website and the portal secure and responding to incidents.
• Complying with legal obligations and responding to requests from authorities.

We do not use your data for mass advertising, nor do we sell or transfer it to third parties for commercial purposes. If we ever wished to send you commercial information, we will ask for your authorization first and you may withdraw it at any time.

You authorize us to process your data when you write to us through the contact channels, when you accept a proposal or hire a service, or when you log in to the client portal. On the quote form, the authorization is prior, express and informed: it is given before the request is sent and we keep evidence of it (date and IP address). In each case we inform you of the purposes in this policy. You may revoke the authorization at any time, unless a legal or contractual duty requires us to keep the data.

We only share the data that is essential to provide the service or to comply with the law:

• Accredited laboratories that analyze the samples (company and sampling point data).
• Environmental authorities and sewer service providers, when the procedure hired requires it.
• Technology providers that serve us: email (Zoho Mail), messaging (WhatsApp, by Meta), the website's delivery and protection network (Cloudflare), route calculation (Google, which receives the project location from the quote form) and the server where the website and the portal run, managed by ECOHIDRO.
• The accountant and advisers who support us with accounting and tax obligations, under a duty of confidentiality.

Some of these providers may process the data outside Colombia, in countries that offer an adequate level of protection or under contracts that guarantee its security. We never authorize them to use your data for their own purposes.

As the data subject, you have the right to:

• Know, update and correct your data.
• Request proof of the authorization you gave us.
• Be informed about how we have used it.
• File complaints with the Superintendence of Industry and Commerce (SIC) for violations of the law, after first submitting the query or claim to ECOHIDRO.
• Revoke the authorization or request the deletion of your data when there is no legal or contractual duty to keep it.
• Access the data we process about you free of charge.

How to exercise them: write to [email protected] or call +57 333 224 2255, stating your name, a means of contact and your request. Queries are answered within a maximum of ten (10) business days and claims within a maximum of fifteen (15) business days, counted from the day after they are received; if that is not possible, we will tell you why and give you a new date, within the limits of the law (articles 14 and 15 of Law 1581 of 2012).

We apply reasonable measures to protect your data: encrypted connections (HTTPS), passwords stored with one-way hashing functions, portal access with an account and password, backups, security headers on the website and system access restricted to the staff who need it.

We keep the data for as long as the business relationship lasts and for the periods required by accounting, tax and environmental rules for service records (for example, characterization reports that the authority may request later). After those periods, we delete or anonymize it.

We may update this policy when the law, our services or our providers change. The current version is the one published on this page, with its update date. If a change substantially affects the processing of your data, we will let you know through the contact channels.

Please also read the website's terms and conditions of use and the cookie policy.