PRIVACY POLICY (DATA PROCESSING POLICY)


Effective Date: October 2025
Last updated: September 2026


1. Who We Are (Data Controller)
MASTEFI EXPORT S.A.S. (“MASTEFI”, “we”, “our”, “us”) is the controller of the personal data processed through this website.

• Company: MASTEFI EXPORT S.A.S.
• Location: Bogotá, Colombia
• Email: export@mastefi.com
• Phone: +57 (314) 249-80-25
• Website: https://mastefi.com

To ask a question about this policy or to exercise your rights, write to export@mastefi.com with the subject “Privacy request”.


2. What Data We Collect

• Data you submit through our enquiry form: your name, email address, phone number and the content of your message.
• Technical data collected automatically: IP address, browser and device type, and data stored by cookies (see section 7).

3. Why We Process Your Data
Data submitted through the enquiry form is used to:

• reply to your enquiry and send the commercial information you asked for — offers, specifications, availability and pricing;
• take steps at your request before entering into a contract, including quotations and negotiation of supply terms;
• manage ongoing communication with clients, partners and suppliers;
• keep the records required by accounting, tax, customs and export legislation;
• operate, secure and improve this website.

We do not use enquiry-form data to send marketing emails or newsletters.


4. Legal Basis for Processing (GDPR)
Where the GDPR applies, we rely on:

• Article 6(1)(b) — steps taken at your request before entering into a contract, and performance of a contract. This is our main basis for handling commercial enquiries;
• Article 6(1)(f) — our legitimate interest in operating this website, running our export business and preventing abuse of our forms;
• Article 6(1)(c) — compliance with our legal obligations;
• Article 6(1)(a) — your consent, where we ask for it separately, for example for non-essential cookies.

The checkbox in our enquiry form confirms that you have read this Privacy Policy. It is not a consent to marketing.
As a company established in Colombia, we also process personal data in accordance with Ley 1581 de 2012 and its implementing decrees.


5. How Long We Keep Your Data
We keep personal data only for as long as it is needed for the purpose it was collected for.

• Enquiries that do not lead to a business relationship: kept while the commercial conversation is active and for a reasonable period afterwards, then deleted.
• Data connected to a contract or a shipment: kept for the duration of the commercial relationship and afterwards for the periods required by Colombian accounting, tax and export legislation.

You can ask us at any time to delete data that we are not legally required to keep.


6. Sharing of Data
We do not sell or rent your personal data.
We share data only with service providers who help us operate this website and our correspondence — our website platform and our email and hosting providers — under confidentiality obligations, and with public authorities where the law requires it.


7. Cookies
Our website uses cookies. Essential cookies are always active because the site cannot work without them. Analytics and advertising cookies are optional and are used only if you enable them.

When you first visit the site, the consent banner lets you choose:

• Accept All — enable all categories;
• Reject All — keep only the essential cookies;
• Cookie Settings — enable or disable each category individually.

As at the date of this policy MASTEFI does not run Google Analytics, Google Tag Manager, Meta Pixel or any third-party advertising trackers on this website. Only the technical and statistical cookies of our website platform are in use. If this changes, we will update this policy and the categories in the consent banner.

You can change or withdraw your cookie preferences at any time using the cookie settings widget available on the website. You may also clear cookies through your browser settings.


8. Data Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. The website is served over HTTPS.


9. International Data Transfers
If you are located outside Colombia, your information may be transferred to and processed in Colombia or in other countries where our service providers operate. Where required, we rely on standard contractual clauses and equivalent legal safeguards.


10. Your Rights
Subject to the applicable law, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• request deletion of your data;
• request restriction of processing;
• object to processing based on our legitimate interests;
• receive your data in a portable format;
• withdraw your consent at any time, where processing is based on consent;
• lodge a complaint with a supervisory authority — your local data protection authority in the EU, or the Superintendencia de Industria y Comercio in Colombia.

For California residents: we comply with the CCPA and you may request access to, or deletion of, your personal information, and opt out of its collection.

To exercise any of these rights, write to export@mastefi.com. We will respond within the period set by the applicable law.


11. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always published on this page, with the date of the last update shown at the top.


12. Contact
MASTEFI EXPORT S.A.S., Bogotá, Colombia
Email: export@mastefi.com
Phone: +57 (314) 249-80-25
Website: https://mastefi.com