Synestesys Privacy Policy and Personal Data Processing
1. Introduction
Synestesys S.A.S. (hereinafter “Synestesys”) respects the privacy of all individuals who entrust us with their personal data and is committed to its protection, storage, and proper processing, in accordance with Law 1581 of 2012, Decree 1377 of 2013, and other applicable regulations governing personal data protection in Colombia.
This Privacy Policy outlines the principles, rights, and procedures applicable to the processing of personal data collected by Synestesys through its website, social media platforms, electronic communications, forms, or any other means.
2. Data Controller
Company name: Synestesys SAS
Tax ID (NIT): [include company NIT]
Address: Bogotá, Colombia
Email: [correo@synestesys.co]
Telephone: [contact number]
Synestesys acts as the Data Controller responsible for the processing of personal data.
3. Purpose of Data Processing
The personal data collected by Synestesys may be processed for the following purposes:
-
Managing contractual, employment, or commercial relationships.
-
Sending information related to projects, productions, calls for proposals, or events connected to audiovisual activities.
-
Conducting marketing, promotional, and communication activities related to audiovisual content.
-
Complying with legal, accounting, and tax obligations.
-
Maintaining communication with suppliers, partners, clients, and collaborators.
-
Managing databases of talent, technicians, collaborators, and other stakeholders.
Personal data will always be processed within the limits established by law and based on the prior, express, and informed consent of the data subject.
4. Rights of the Data Subject
In accordance with Colombian law, data subjects have the right to:
-
Know, update, and correct their personal data.
-
Request proof of the authorization granted.
-
Be informed about the use made of their personal data.
-
File complaints before the Superintendence of Industry and Commerce (SIC) for violations of applicable regulations.
-
Revoke authorization and/or request the deletion of their data when constitutional and legal principles are not respected.
-
Access their personal data free of charge.
5. Procedure for Exercising Rights
Data subjects or their authorized representatives may exercise their rights by submitting a written request to: [protecciondedatos@synestesys.co], including:
-
Full name and identification number.
-
A clear description of the request or right being exercised.
-
Contact information to receive a response.
Synestesys will respond within the timeframes established by law:
-
Ten (10) business days for inquiries.
-
Fifteen (15) business days for complaints or claims.
6. Data Transfer and Transmission
Synestesys may share personal data with strategic partners, co-producers, service providers, or public entities when necessary to fulfill its corporate purpose, always under confidentiality agreements and in compliance with applicable data protection regulations.
Under no circumstances will personal data be sold, rented, or disclosed without the prior authorization of the data subject, unless required by law.
7. Information Security
Synestesys implements appropriate technical, administrative, and organizational measures to safeguard personal data against loss, misuse, unauthorized access, alteration, or disclosure.
8. Validity
This Privacy Policy becomes effective upon publication and will remain in force for as long as Synestesys processes personal data. Any amendments or updates will be communicated through the company’s official channels.
Last updated: October 28, 2025