Privacy Policy | Benká Group

1. Purpose and Commitment: Our promise of trust

At Benká Group, a strategic consulting firm with a presence in Colombia and Latin America, we understand that trust is the foundation of every relationship. That is why we are committed to protecting the personal information entrusted to us by our clients, partners, employees, suppliers and users. This Privacy Policy describes how we collect, use, store, share and protect personal data in the course of our consulting, innovation and organizational transformation activities. We are governed by Law 1581 of 2012, Decree 1377 of 2013 and other complementary personal data protection regulations in Colombia, as well as by the international privacy standards applicable in the countries where we operate.

2. Responsibility and Scope: Who safeguards your data?

The controller of personal data is Benká Group S.A.S., identified with NIT 901.920.949, domiciled in Santiago de Cali, Colombia, and operating across Latin America. In some cases, Benká Group may act as processor or joint controller of data together with clients or strategic partners, always under agreements that ensure the protection, confidentiality and ethical use of the information.

3. Sources of Information: How do we obtain data?

We collect personal information through legitimate channels, including web forms, hiring or job application processes, participation in events, digital interaction through cookies, and public or legitimately accessible sources. Under no circumstances do we collect information without a legal basis, consent or valid contractual justification.

4. Purpose of Processing: What do we use your information for?

Personal information is used for purposes strictly aligned with Benká Group’s strategic and operational management: management of commercial relationships, institutional communication, talent processes, accounting and administrative management, research and service improvement, and information security.

Management of the commercial relationship

Name, phone number, email, organization, position, business contact details

Legitimate interest / performance of a contract

Internal sales and administration teams; CRM service providers

Handling of inquiries, requests or complaints

Contact details, interaction history

Legitimate interest / performance of the relationship

Customer service staff, support providers

Sending communications, newsletters, news or event information

Contact details, interaction history

Consent or legitimate interest (where permitted)

Mailing systems, marketing platforms

Registration and logistics for events/conferences

Name, company, position, logistics information, special data (dietary requirements, accessibility)

Performance of a contract / consent

Event suppliers, registration platforms

Analysis, research, benchmarking and data science

Anonymized and aggregated data

Legitimate interest / consent

Internal research teams, third-party analysts

Security, maintenance and system improvements

Technical data, usage information, access logs

Legitimate interest

Hosting and IT security providers

Legal compliance and legal protection

Data required by regulation or for defense against claims

Compliance with legal obligations / legitimate interest

Authorities, legal advisors, auditors

5. Privacy Philosophy: What we don’t do

• We do not sell or rent personal information to third parties. • We do not use personal data for campaigns unrelated to Benká Group. • We do not make automated decisions that affect rights without human oversight. • We do not collect sensitive information without legal justification or explicit consent.

6. Ecosystem of Trust: With whom do we share data?

Benká Group may share personal information only with strategic partners or affiliates that support project execution, providers bound by confidentiality clauses, public authorities where there is a legal obligation, and partners or investors in due diligence processes. In international transfers, we guarantee compliance with the Standard Contractual Clauses approved by the SIC.

7. Information Security: Our protection framework

We apply technical, human and organizational measures aligned with industry best practices: encryption, access control, monitoring, incident response protocols and ongoing training.

8. Retention Period: Responsible safekeeping over time

We retain data only for as long as necessary to fulfill its purpose or legal obligations. It will then be deleted or anonymized in accordance with applicable regulations.

9. Rights of Data Subjects: Your control, our guarantee

Data subjects may access, update, rectify or delete their data or revoke its use, and may file complaints with the Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio). Requests may be sent to comunicaciones@benkagroup.co, stating the requester’s identification and the specific request. They will be answered within the legal time limits.

10. Privacy for Minors: Extended protection

Benká Group does not intentionally collect personal information from minors. If data from a minor is identified without authorization, it will be deleted immediately.

11. Policy Updates: Transparency as it evolves

This Policy may be amended in response to regulatory, technological or strategic changes. The current version will be available at www.benkagroup.co, with its update date.

12. Final Statement: Ethics, transparency and trust

At Benká Group we believe that information is a tool for progress, but also a shared responsibility. Every piece of data entrusted to us is handled with the same ethics, rigor and confidentiality that guide each of our consulting engagements.

13. Contact for the Exercise of Rights

To access, update, rectify or delete their data, revoke authorizations or submit inquiries related to the processing of personal information, data subjects may contact our official channel: comunicaciones@benkagroup.co Requests must include the data subject’s identification and a clear description of the request. They will be handled within the time limits established by current regulations, always ensuring a transparent, diligent and respectful process.