Effective Date: Sep 08 2025
Last Updated: Sep 08 2025
1. Introduction
Welcome to Zeotech. This Privacy Policy outlines how Zeotech, S.A.S. (“Zeotech,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit our website https://zeotech.com.co (the “Site”) and use our services.
We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy has been drafted to comply with the highest data protection standards in the jurisdictions where we operate, including the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We encourage you to read this policy in its entirety, along with any supplementary notices that may apply to your region of residence.
2. Information We Collect
We collect information to provide and improve our services. The types of personal information we collect fall into the following categories:
• Information You Provide Directly: This includes information you voluntarily enter on our Site, such as when you fill out a contact form, subscribe to a newsletter, or otherwise communicate with us. This information may include:
◦ Full name
◦ Email address
◦ Phone number
◦ Company name and job title
◦ Any other information you choose to share in your communications.
• Information We Collect Automatically: When you interact with our Site, we may collect certain information automatically through technologies like cookies, web beacons, and server logs. This information may include:
◦ Internet Protocol (IP) address
◦ Browser type and operating system
◦ Pages visited on our Site and time spent on those pages
◦ The date and time of your visit
◦ General geolocation data (e.g., country or city).
• Sensitive Personal Information: Certain services offered by Zeotech, particularly those related to our ZEOPHYTOZ business line, may involve the collection of information considered sensitive, such as health-related data.
We will never collect this type of information without your prior, explicit, informed, and specific consent for the stated purpose. The processing of such information is governed by the strictest security and confidentiality protocols and is subject to the additional rights granted to you by the laws of your jurisdiction.
3. How We Use Your Information
We use the information we collect for specific, explicit, and legitimate purposes. These purposes include:
• To Provide and Manage Our Services: Using your information to operate our Site, respond to your inquiries, and fulfill our contractual obligations.
• To Communicate With You: Sending you administrative information, notifications about our services, responding to your support requests, and, with your consent, sending you marketing communications.
• For Research and Development: Using data in an aggregated and anonymized form to analyze trends, improve our products, and develop new technologies, such as our ZeoDry technology.
• For Security and Legal Compliance: Protecting the security and integrity of our Site, preventing fraud, and complying with our legal and regulatory obligations.
• For Marketing and Advertising: With your prior consent, we may use your information to inform you about products and services that may be of interest to you.
4. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience on our Site, analyze performance, and personalize content. A cookie is a small text file stored on your device. We use both essential cookies (necessary for the Site to function) and non-essential cookies (for analytics and marketing). How we manage your consent for non-essential cookies varies based on your geographical location, as detailed in the jurisdictional notices below.
5. Data Security
We have implemented appropriate technical and organizational security measures to protect the personal information we process against unauthorized or unlawful processing and against accidental loss, destruction, or damage. These measures include data encryption, strict access controls, and regular training for our staff. However, no data transmission or storage system is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We will retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.
7. Children’s Privacy
Our Site and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a child without parental or guardian consent, we will take steps to delete that information from our servers.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post any changes on this page and, if the changes are significant, we will provide a more prominent notice. We encourage you to review this policy regularly.
9. Contact Information
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Zeotech, S.A.S.
hola@zeotech.com.co
Supplemental Notice for Residents of the European Economic Area (EEA), United Kingdom, and Switzerland
If you are a resident of the EEA, UK, or Switzerland, the following additional provisions apply to you in accordance with the General Data Protection Regulation (GDPR).
• Data Controller: Zeotech, S.A.S. is the data controller for your personal information.
• Legal Bases for Processing: We process your personal information on the following legal bases, in accordance with Article 6 of the GDPR :
◦ Consent: Where you have given us explicit consent to process your data for a specific purpose (e.g., for marketing). For special categories of data (health data), we will rely on your
explicit consent under Article 9 of the GDPR.
◦ Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
◦ Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
◦ Legitimate Interest: Where processing is necessary for our legitimate interests (e.g., for website security), provided your fundamental rights and freedoms do not override those interests.
• Your Rights Under the GDPR: You have the following rights with respect to your personal information:
◦ Right of Access: To request a copy of the personal data we hold about you.
◦ Right to Rectification: To request the correction of inaccurate or incomplete data.
◦ Right to Erasure (‘Right to be Forgotten’): To request the deletion of your data under certain circumstances.
◦ Right to Restrict Processing: To request that we limit the processing of your data.
◦ Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
◦ Right to Object: To object to the processing of your data based on our legitimate interest or for direct marketing purposes.
◦ Rights in Relation to Automated Decision-Making: To not be subject to a decision based solely on automated processing that produces legal effects concerning you.
To exercise any of these rights, please contact us using the information provided above.
• International Data Transfers: Your personal information will be transferred to and processed in Colombia, a country outside the EEA. As Colombia does not have an adequacy decision from the European Commission, we ensure the protection of your data by implementing the Standard Contractual Clauses (SCCs) approved by the European Commission, which impose data protection obligations on the data recipient.
• Data Protection Officer (DPO): Given the nature of our processing, which may include sensitive data on a large scale, we have appointed a contact point for all privacy matters. You can contact our privacy lead at [Privacy Contact Email].
Supplemental Notice for Residents of California (and other applicable U.S. states)
This notice supplements the information contained in our Privacy Policy and applies solely to residents of California, pursuant to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
• Your Rights Under the CCPA/CPRA: You have the following rights :
◦ Right to Know/Access: The right to request that we disclose what personal information we collect, use, disclose, and sell or share.
◦ Right to Delete: The right to request the deletion of your personal information, subject to certain legal exceptions.
◦ Right to Correct: The right to request the correction of inaccurate personal information.
◦ Right to Opt-Out of Sale/Sharing: The right to direct us not to “sell” or “share” your personal information with third parties. You can exercise this right by clicking the following link: Do Not Sell or Share My Personal Information.
◦ Right to Limit the Use and Disclosure of Sensitive Personal Information (SPI): As we may collect health data, you have the right to direct us to limit our use of your SPI to that which is strictly necessary to provide the services you requested. You can exercise this right via this link: Limit the Use of My Sensitive Personal Information.
• Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, or provide you with a different level or quality of service.
• Notice at Collection: In the preceding 12 months, we have collected the categories of personal information described in the “Information We Collect” section of our main policy. The business and commercial purposes for collecting this information are also described in the “How We Use Your Information” section. We do not sell personal information for monetary consideration. However, the use of certain third-party cookies for advertising may be considered a “sale” or “sharing” under the CCPA.