Personal Data Processing Policy

1. Data controller

Controller: Aires AG, NIT 901.581.208-5.

Address: Medellín, Antioquia, Colombia.

Emails: comercial@airesag.com · gerencia@airesag.com.

Phone / WhatsApp: +57 324 3455209.

Website: https://airesag.com.

2. Definitions

• Personal data: any information linked or linkable to a natural person.
• Data subject: the natural person whose data is processed.
• Processing: collection, storage, use, circulation, or deletion of personal data.
• Authorization: the data subject’s prior, express, and informed consent.

3. Data processed

Depending on how you interact with Aires AG, we may process:

• Identity and contact data (name, phone, email, project or property address).
• Commercial and technical data related to quotes, visits, maintenance, repairs, and HVAC projects.
• Content of communications sent by the data subject (web forms, WhatsApp, email, or calls).
• Website browsing data when needed for operation and security.

4. Processing purposes

• Handle requests for quotes, supply, installation, maintenance, repair, advisory, and industrial projects.
• Contact the data subject to schedule visits, confirm availability, and provide technical or commercial support.
• Prepare proposals, work orders, and warranty or maintenance-plan follow-up.
• Handle emergencies and operational needs related to air-conditioning equipment.
• Send commercial information about HVAC services when authorization exists or there is an active commercial relationship.
• Meet legal, contractual, and authority requirements.

5. Authorization

Authorization is deemed granted when the data subject submits the website form (which opens WhatsApp), writes or calls official channels, or enters a service relationship with Aires AG after being informed of this policy through the website or contact channels.

The data subject may refuse or revoke authorization, except where processing is required to perform a contract or meet a legal duty.

6. Data subject rights

Under Law 1581 of 2012, the data subject may:

• Know, update, and correct their personal data.
• Request proof of the authorization given, except where the law provides otherwise.
• Be informed about how their data has been used.
• File complaints with the Superintendence of Industry and Commerce for breaches of the rules.
• Revoke authorization and/or request deletion when applicable.
• Access free of charge their personal data undergoing processing.

7. How to exercise rights

Queries and claims may be sent to comercial@airesag.com or gerencia@airesag.com, or via WhatsApp at +57 324 3455209, stating full name, contact details, and a clear description of the request.

Queries will be answered within a maximum of ten (10) business days. Claims will be resolved within a maximum of fifteen (15) business days, extendable by law when they cannot be handled within that period.

8. Processors and transfers

Aires AG may rely on hosting, email, messaging (including WhatsApp), or other tools needed to run the site and commercial support. Those providers process data only as required to deliver the service and under reasonable confidentiality and security duties.

We do not make international transfers for commercial purposes unrelated to the service, other than those inherent in global technology platforms needed for the contact channel.

9. Security and retention

We adopt reasonable measures to protect information against unauthorized access, loss, or misuse, according to the nature of the data and the size of the operation.

Data is kept while the processing purpose, commercial relationship, or legal retention duty exists, and may then be deleted or anonymized.

10. Validity

This policy applies from the update date shown on this page and remains in force while Aires AG processes personal data in its activities. Any material change will be published on this same site.