Personal Data Processing Policy

1. DATA CONTROLLER IDENTIFICATION

This Personal Data Processing Policy applies to the information collected and managed by Globalquimia Ltda (hereinafter,

Company Name: Globalquimia Ltda

Main Address: Av. Calle 12 # 79A-25, Warehouse 21, Bogotá D.C., Colombia

Adress: EE.UU: 2423 SW 147th ave #762 Miami, FL 33185.

Contact Emails: info@globalquimia.com.co – sales@globalquimia.com.co

Contact Phone: +57 601 764 2282

Website: https://globalquimia.com.co

2. SCOPE AND LEGAL FRAMEWORK

This Policy applies to all personal databases containing information of clients, suppliers, distributors, employees, business partners, and website users of THE COMPANY.

The regulatory framework governing this policy includes:

Colombia: Statutory Law 1581 of 2012, Regulatory Decree 1377 of 2013, Decree 1074 of 2015, and other complementary regulations issued by the Superintendence of Industry and Commerce (SIC).

United States: Applicable federal and state regulations regarding commercial data privacy and online user protection, including, as applicable, the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), and any other applicable privacy regulatory frameworks based on the state of operation.

3. PURPOSES OF DATA PROCESSING

THE COMPANY collects, stores, processes, uses, and transmits personal data of natural or legal persons primarily for B2B management and the commercialization of its specialized portfolio (empty capsules, liners, silica gel, reference standards, quality control equipment, and production equipment, among others).

Specific purposes include:

3.1. Commercial Management and Contracting

Processing quotes, orders, invoicing, and shipments of pharmaceutical products and supplies.
Credit validation, collection management, and verification of commercial or financial references.

Sending Certificates of Analysis (CoA), technical specifications, and product safety data sheets (MSDS).
Compliance with contractual obligations with clients, distributors, and suppliers.

3.2. Pharmaceutical Operations and Quality

Handling and traceability of quality audit requests, complaints, or technical equipment support.

Management of the calibration, preventive maintenance, and quality control history of commercialized equipment.

Ensuring compliance with traceability standards in the pharmaceutical supply chain.

3.3. Commercial Marketing and Communications

Sending technical newsletters, updated product catalogs, and launches of new production technologies.

Invitations to seminars, training sessions, and specialized trade fairs for the pharmaceutical and food/cosmetic sectors.

4. DATA SUBJECT RIGHTS

In accordance with Colombian legislation (Law 1581 of 2012) and applicable standards in the United States, data subjects have the following rights:

Access and Knowledge: To know, update, and rectify their personal data before THE COMPANY.

Proof of Authorization:

To request proof of the authorization granted to the Data Controller.
Usage Information: To be informed upon request regarding the use given to their personal data.

Revocation and Suppression: To revoke the authorization and/or request the suppression of data when there is no legal or contractual duty to remain in the database.

Right of Exclusion (Opt-Out – USA): To opt out of receiving commercial marketing communications or the commercial sale/transfer of data (THE COMPANY does not sell personal data to third parties).

Filing of Complaints: To file complaints for violations of the provisions of the law before the Superintendence of Industry and Commerce (SIC) in Colombia or state/federal consumer protection authorities in the USA.

5. PROCEDURE FOR THE EXERCISE OF RIGHTS (HABEAS DATA)

Data subjects or their legal successors may exercise their rights of inquiry, update, rectification, or suppression by sending a formal request through the following channels:

Email: info@globalquimia.com.co – sales@globalquimia.com.co

Adress: Av. Calle 12 # 79A-25. Bodega 21, Bogotá D.C, Colombia.

Response Times:

Inquiries: They will be addressed within a maximum term of ten (10) business days from the date of receipt.

If this is not possible, the data subject will be notified, extending the term by up to five (5) additional business days.

Claims (Correction, suppression, or revocation):

They will be addressed within a maximum term of fifteen (15) business days.

If the request is incomplete, the interested party will be required within five (5) days following receipt to remedy the deficiencies.

6. TRANSFERENCIA Y TRANSMISIÓN INTERNACIONAL DE DATOS

Due to the presence and commercial operation of THE COMPANY in Colombia and the United States, the personal data collected may be transmitted or transferred to servers hosted in the USA or Colombia, or to international logistic, customs, and transport partners, ensuring adequate levels of information security through standard contractual clauses and data protection protocols.

7. INFORMATION SECURITY AND COOKIES

LA EMPRESA implementa medidas técnicas, humanas y administrativas de seguridad para evitar la alteración, pérdida, consulta, uso o acceso no autorizado de la información.

The website uses technical, analytical, and preference cookies to optimize commercial navigation.

Users can disable cookies directly from their web browser settings.

8. EFFECTIVE DATE AND AMENDMENTS

This policy is effective as of its publication. THE COMPANY reserves the right to modify this Personal Data Processing Policy at any time. Any material changes will be communicated in a timely manner through our website prior to their entry into force.