Privacy policy

This policy explains how D.D.I. S.A.S. processes the personal data of people who contact it through its website www.ddi.com.co, by e-mail, by WhatsApp or by phone, and how you can exercise your rights. It is issued under Colombian Law 1581 of 2012 and Decree 1074 of 2015 (which compiles Decree 1377 of 2013). The Spanish version is the reference text.

1. Data controller

D.D.I. S.A.S. (“DDI”), brand “DDI — Desarrollos de Ingeniería”.
Tax ID (NIT) 811007315-9, registered with the Cámara de Comercio Aburrá Sur.
Registered address: Cra 42 # 39 Sur - 130, Envigado, Antioquia, Colombia.
E-mail: ddi@ddi.com.co
Phone: +57 604 202 4588 · WhatsApp: +57 315 891 4950

2. Data we process

Contact and project data: whatever you choose to send us when you write or call, for example your full name, company, country, e-mail address, phone or WhatsApp number, and details of your project (product, container, industry, approximate output, reference machine or project, and your message).

Technical connection data: when you visit the site, your browser sends data such as your IP address, the date and time of the request, the page requested and the browser type. It is used to deliver the pages to you and to protect the site.

The contact form does not send or store your data on the website. It turns what you type into a message that opens in your own e-mail app or in WhatsApp (you can also copy it), and you decide whether to send it. DDI only receives your data when you send that message.

The site uses no cookies or other analytics, advertising or tracking tools. Your browser keeps a few technical preferences (such as the language you chose) on your own device; they are not sent to DDI. Some videos are hosted on YouTube (Google) and only load, in privacy-enhanced mode, if you press play; from then on YouTube receives data about your connection under its own terms. The same applies to external sites you open from links on this site, such as Google Maps, LinkedIn or ProColombia.

DDI does not ask for sensitive data (for example health or biometric data, racial or ethnic origin, or religious or political beliefs) or for data about children or adolescents. Please do not include such data in your messages; answering any question about it would always be optional.

3. Purposes

DDI processes your personal data to:
a) answer your inquiries and quote requests received by e-mail, WhatsApp or phone, and follow them up (clarifying technical requirements, preparing and sending proposals);
b) if you decide to do business with DDI, manage the resulting relationship: offers, contracts, design, manufacturing, delivery, installation, commissioning, technical support, invoicing, collection, and the related accounting, tax and legal obligations;
c) run and protect the website: deliver its pages, prevent abuse and attacks, and diagnose technical faults;
d) handle data subjects’ inquiries and complaints and requests from the competent authorities.

DDI will not use your data for purposes other than those described here without informing you first and, where the law requires it, obtaining a new authorization.

4. Authorization

Next to the send buttons of the contact form, a privacy notice identifies DDI, explains what your data will be used for, summarizes your rights and links to this policy. If, after reading it, you decide to send your message by e-mail or WhatsApp, that act is an unequivocal conduct by which you authorize the processing described (article 9 of Law 1581 of 2012 and article 2.2.2.25.2.4 of Decree 1074 of 2015). The same applies when you write to or call DDI directly and give it your data in order to receive an answer. DDI keeps the message received as proof of the authorization.

You can withdraw your authorization at any time through the channels in section 6, except where a legal or contractual duty requires the data to be kept.

5. Your rights as data subject

Under article 8 of Law 1581 of 2012, you have the right to:
a) access, update and correct your personal data, including partial, inaccurate, incomplete, fragmented or misleading data;
b) request proof of the authorization given to DDI;
c) be informed, on request, of how DDI has used your data;
d) file complaints with the Superintendencia de Industria y Comercio (SIC) for breaches of the law, after completing the procedure with DDI (section 7);
e) withdraw your authorization and request the deletion of your data, except where a legal or contractual duty requires it to remain in the database;
f) access your personal data free of charge, at least once every calendar month and whenever this policy changes substantially.

These rights may be exercised by the data subject, their successors, their representative or attorney, and anyone acting under a stipulation in favor of another, upon proof of identity or capacity.

6. Channels for inquiries and complaints

DDI handles inquiries and complaints about personal data through these channels:
E-mail: ddi@ddi.com.co, with the subject “Personal data”.
Mail: D.D.I. S.A.S., Cra 42 # 39 Sur - 130, Envigado, Antioquia, Colombia.

Your request should include your name and identification, a description of what you are requesting or of the facts behind your complaint, an address or e-mail for the reply and, if you wish, any supporting documents.

7. Procedure and time limits

Inquiries: DDI answers within ten (10) business days of receipt. If that is not possible, it will tell you why and when it will answer, which will be no more than five (5) additional business days.

Complaints (correction, update, deletion, withdrawal of authorization or alleged breach of the law): if a complaint is incomplete, DDI will ask you to complete it within five (5) days of receipt; if two (2) months pass without the missing information, the complaint is deemed withdrawn. Once the complete complaint is received, DDI will mark the data as “complaint in progress” within two (2) business days and resolve it within fifteen (15) business days from the day after receipt. If that is not possible, it will tell you why and when it will answer, which will be no more than eight (8) additional business days.

Prior procedure requirement: under article 16 of Law 1581 of 2012, you may only file a complaint with the SIC (www.sic.gov.co) after completing the inquiry or complaint procedure with DDI.

8. Service providers and data outside Colombia

DDI relies on technology providers that process data on its behalf and may do so on servers outside Colombia:
Google (Google Workspace): DDI’s e-mail, where messages sent to ddi@ddi.com.co are received and kept.
Cloudflare: hosting, delivery and protection of the website; it processes the technical connection data.
Meta (WhatsApp): conversations with DDI’s WhatsApp Business account.

The site is developed and technically administered by a provider acting on DDI’s behalf, which only accesses technical connection data in order to maintain and protect the site. Apart from these cases, DDI only discloses personal data to third parties with your authorization or when the law or a competent authority requires it.

9. Security

DDI applies reasonable technical, human and administrative measures to protect your data against alteration, loss, and unauthorized or fraudulent access, consultation or use. No system is infallible: if a security incident puts the information at risk, DDI will report it to the SIC, as the law requires.

10. Retention

DDI keeps your data for as long as is reasonable and necessary for the purposes described and, after that, only while a legal or contractual obligation requires it. Once those purposes and obligations are fulfilled, the data is deleted. The databases covered by this policy remain in force for as long as DDI carries out the activities that justify the processing.

11. Validity and changes

This policy applies from its publication on www.ddi.com.co. Any change will be published on this page. If a substantial change affects DDI’s identification as data controller or the purpose of the processing, DDI will communicate it before or, at the latest, when applying it, and will ask for a new authorization when the change concerns the purpose.