PRIVACY POLICY AND PERSONAL DATA PROCESSING POLICY

Last updated: July 2026

1. Identification of the Data Controller

Consultores y Asesores TIC S.A.S., identified with Tax ID No. 901.360.556-5, as the company responsible for the VR-Elab platform and brand, informs users, clients, representatives of educational institutions, teachers, students, suppliers, and visitors to the website https://vr-elab.com/ about how personal data is collected, used, stored, protected, and processed.

Data Controller contact information:

Trade name: VR-Elab
Legal name: Consultores y Asesores TIC S.A.S.
Tax ID: 901.360.556-5
Registered office: Bogotá D.C., Colombia
Address: Calle 55 No. 37-15, Office 301, Bogotá D.C.
Email address: info@vrelab.com.co
Telephone: +57 318 644 5719
Website: https://vr-elab.com/

2. Legal Framework

Personal data will be processed in accordance with the Political Constitution of Colombia, Statutory Law 1581 of 2012, Decree 1377 of 2013, Decree 1074 of 2015, and any other regulations that amend, supplement, or replace them.

Law 1581 of 2012 recognizes the right of individuals to access, update, and correct information collected about them in databases or records.

3. Personal Data We May Collect

Depending on how users interact with the platform, VR-Elab may collect the following information:

First and last names.
Type and number of identification document.
Email address.
Telephone number.
City, country, and address.
Educational institution, company, or organization to which the user belongs.
Job title or relationship with the institution.
Information submitted through contact forms.
Requests for demonstrations, quotations, or technical support.
Information related to contracts, licenses, or service provision.
IP address, browser, device, and technical browsing data.
Information obtained through cookies or similar technologies.
Platform access and usage records, where applicable.
Communications sent by email, WhatsApp, or other authorized channels.

VR-Elab will seek to avoid collecting information that is not necessary for the purposes disclosed.

4. Purposes of Data Processing

Personal data may be processed for the following purposes:

To respond to requests for information, contact, quotations, or demonstrations.
To provide information about the platform, immersive experiences, virtual reality kits, and educational services.
To manage commercial, contractual, and licensing relationships.
To create, manage, and verify user accounts.
To provide technical support and customer service.
To coordinate training sessions, demonstrations, and educational activities.
To manage the delivery, installation, or maintenance of equipment and software.
To improve the browsing experience and the operation of the website.
To analyze platform usage and prepare internal statistics.
To send informational, educational, or commercial communications, where authorization has been granted.
To comply with legal, tax, accounting, and contractual obligations.
To prevent fraud, unauthorized access, and misuse.
To protect the security of the platform, its users, and its intellectual property.
To manage inquiries, petitions, complaints, claims, and requests.
To maintain historical records of relationships with clients, partners, and suppliers.

5. Data Relating to Children and Adolescents

VR-Elab is an educational solution that may be used by underage students. Therefore, the processing of data relating to children and adolescents will be exceptional, limited, and carried out with full respect for their best interests and fundamental rights.

Where it is necessary to collect information relating to a minor, prior authorization will be requested from the parent, legal guardian, or duly authorized educational institution, as applicable.

The participation of minors in photographs, videos, testimonials, recordings, demonstration activities, or promotional materials will require the appropriate authorizations.

VR-Elab will not directly request sensitive, financial, or unnecessary information from minors.

6. Authorization

Personal data will be processed with the prior, express, and informed authorization of the data subject, except in cases permitted by law.

Authorization may be obtained through:

Physical or electronic forms.
Acceptance checkboxes.
Email messages.
Written communications.
Voice recordings.
Contracts or engagement documents.
Unequivocal conduct that reasonably demonstrates that the data subject has authorized the processing.

Silence shall not be considered authorization.

7. Rights of Data Subjects

Data subjects may:

Access, update, and correct their personal data.
Request evidence of the authorization granted.
Be informed about how their personal data has been used.
Submit inquiries, complaints, or claims.
Request deletion of their data where legally applicable.
Revoke authorization, unless a legal or contractual obligation prevents this.
Access their personal data free of charge.
Submit complaints to the Colombian Superintendence of Industry and Commerce after completing the corresponding procedure before the Data Controller.

8. Procedure for Inquiries and Claims

Data subjects may exercise their rights by sending a request to:

info@vrelab.com.co

The request must include:

The full name of the data subject.
Identification number, where necessary.
Contact details.
A clear description of the request.
Documents proving identity or representation, where applicable.

Inquiries and claims will be handled within the time limits established under Colombian law.

9. Cookies and Similar Technologies

The website may use first-party or third-party cookies for the following purposes:

To enable the technical operation of the website.
To remember browsing preferences.
To analyze visits, traffic, and aggregated behavior.
To improve content and performance.
To integrate videos, social networks, or external services.
To measure the performance of digital campaigns.

Users may configure their browser to block or delete cookies. However, some website functions may not operate correctly as a result.

Where non-essential cookies are used, user consent will be requested through the corresponding notice whenever applicable.

10. Data Transfers and Data Processing by Third Parties

VR-Elab may share or transmit information to:

Technology providers.
Web hosting and storage services.
Email platforms.
Analytics services.
Technical support companies.
Logistics providers.
Legal, accounting, or administrative advisers.
Public authorities where there is a legal obligation.
Educational institutions or clients with whom there is a contractual relationship.

Third parties must process information exclusively for the authorized purposes and under appropriate confidentiality and security measures.

Where service providers located outside Colombia are used, the applicable contractual and legal safeguards will be implemented.

11. Information Security

VR-Elab will adopt reasonable technical, administrative, and organizational measures to protect personal data against loss, alteration, consultation, misuse, unauthorized access, or fraud.

However, no internet transmission or data storage system is completely infallible. Therefore, absolute security cannot be guaranteed.

12. Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected and while a legal, contractual, commercial, or educational relationship remains in force.

Once the purpose has been fulfilled and where there is no legal obligation to retain the information, the data may be deleted, anonymized, or securely archived.

13. Commercial Communications

VR-Elab may send information regarding products, services, educational experiences, events, content, or updates only where authorization has been granted or where an existing relationship legally permits such contact.

Data subjects may request at any time that commercial communications cease by writing to info@vrelab.com.co or by using the unsubscribe mechanism included in the communication.

14. Third-Party Links

The website may contain links to third-party platforms, social networks, videos, or websites. VR-Elab does not control their privacy practices and recommends reviewing their policies before submitting personal information.

15. Amendments

This policy may be amended due to legal, technical, commercial, or service-related changes.

Updates will be published on the website together with the date of the latest revision.