Data controller
Leidis Margarita Lascarro Tapia (trade name Eventos Leymar), an individual merchant, identified with 1.345.501.788, domiciled at Calle 5 #6-83, Castillogrande, Edificio Costa Brava, piso 2, apartamento 2B, Cartagena, Bolívar, Colombia. Email: [email protected]. For privacy, personal data and data-subject rights requests: +57 318 708 8676. For business enquiries: +57 300 822 6599 (phone and WhatsApp).
Data we process
- Contact requests: name, email, phone or WhatsApp (optional), type of event, approximate date (optional) and message; also the date and time of your authorization, the language of the page and the IP address you send from, for security and abuse prevention.
- Clients: the data needed to prepare the quote, organize the event and perform the contract.
- Event photographs: images published in the portfolio only with authorization (see “Photographs and minors”).
We do not ask for sensitive data or data about children or adolescents in the form. If you include it in your message, it is optional and is used only to handle your request.
What we use it for
- Responding to your request and, if you ask for one, preparing and sending you a quote.
- If you become a client: organizing the event, communicating with you, performing the contract and meeting accounting and tax obligations.
- Protecting the site and the internal panel (submission limits and security log).
- Handling inquiries, claims and requests from authorities.
We do not use your data for advertising, and we do not sell or transfer it to third parties. If we ever wanted to send you news, we would ask for a separate, optional and revocable authorization.
Service providers and international transmission
To run the site we use providers that process data on our behalf, as processors:
- Railway: application hosting.
- Neon: database, with servers in the United States.
- Cloudflare: security, content delivery network and photo storage.
- GitHub and Backblaze: encrypted backups.
This involves an international transmission of data to processors, carried out under Colombian Decree 1377 of 2013 (compiled in Decree 1074 of 2015).
Your rights and how to exercise them
As the data subject (Law 1581 of 2012, article 8) you may:
- Know, update and correct your data.
- Request proof of the authorization you gave us.
- Be informed of how your data has been used.
- File complaints with the Superintendence of Industry and Commerce (SIC), after submitting your inquiry or claim to us.
- Revoke the authorization or request deletion of your data, when there is no legal or contractual duty to keep it.
- Access your data free of charge.
Write to [email protected] with the subject “Personal data” or contact +57 318 708 8676, the dedicated number for privacy, personal data and data-subject rights,, stating your name, the email or phone you contacted us with and what you are requesting; for a claim, describe the facts and attach any supporting documents. The request may be made by the data subject, their successors, representative or attorney.
- Inquiries: answered within 10 business days at most. If that is not possible, we will tell you why and give a new date, no more than 5 additional business days later.
- Claims (correcting, updating or deleting data, revoking the authorization or reporting a breach): if the claim is incomplete, we will ask for what is missing within 5 days; if it is not completed within 2 months, we will consider it withdrawn. We answer within 15 business days from the day after receipt, extendable by up to 8 business days with a reasoned notice.
How long we keep it
Requests that do not become clients are kept for 12 months from receipt and then deleted. Client data is kept for the duration of the relationship and afterwards for the periods required by accounting, tax and commercial rules.
Photographs and minors
We only publish event photographs with the authorization of the people portrayed or of whoever may give it; for minors, with the authorization of their legal representative and respecting their best interests. Anyone may ask for a photograph to be removed by writing to [email protected]: we remove it from the site upon receiving the request.
Security
Encrypted connections (HTTPS), access to the internal panel restricted to the data controller, passwords protected with Argon2id, an audit log, form submission limits (the IP address is stored as a cryptographic fingerprint) and encrypted backups.
Effective date and changes
This policy applies from the date shown at the top. The databases remain in force while the purposes described above apply. We will announce any substantial change on this site before applying it and, if the purpose changes, we will ask for a new authorization.