Last updated: 5 October 2026
This policy explains what personal data Colombian Origin collects through colombianorigin.eu and at the trade fairs where we present Colombian producers, why we use it, how long we keep it, who we share it with and what rights you have. It also explains the cookies this website uses.
In short: you can browse this website without giving us any personal data. We only collect what you choose to send us (a message, a chat, a business contact) and what is technically needed to run the website. We never sell your data. Optional cookies are only used if you accept them.
1. Who is responsible for your data
The controller of your personal data is:
- SOMOS GRAMOR S.A.S. B.I.C., a benefit and collective interest company registered in Colombia
- Address: La Mesa, Cundinamarca, Colombia
- Tax ID (NIT): 901939904-2 · Commercial registration no. 122418
- Email for privacy matters: info@colombianorigin.eu
Colombian Origin is a start-up initiative of SOMOS GRAMOR S.A.S. B.I.C. (gramorcolombia.org), currently in its validation phase. It does not yet have its own legal entity; until it does, SOMOS GRAMOR is responsible for this website and for the personal data processed through it. Our team in the European Union can be reached at the same email address.
2. What data we collect and why
2.1 When you visit the website
Our hosting provider automatically records technical data each time a page is requested: IP address, date and time, the page requested, browser and device type, and the referring page. We use it only to deliver the website, keep it secure (for example, to block attacks and repeated failed log-in attempts) and fix errors.
- Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
- Retention: for the short period set by our hosting provider, after which logs are deleted.
2.2 When you contact us
If you write to us by email (for example info@colombianorigin.eu or b2b@colombianorigin.eu) or through a contact form, we use your name, email address, company and the content of your message to answer you.
- Legal basis: taking steps at your request before a possible agreement (Art. 6(1)(b) GDPR), or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
- Retention: up to 2 years after our last exchange, unless a business relationship follows.
2.3 Live chat
The chat window on this website is provided by tawk.to. If you use it, your messages, the name and email address you choose to give, your IP address and basic information about your browser are processed by tawk.to on our behalf so that we can reply to you.
- Legal basis: your consent (Art. 6(1)(a) GDPR), given through the cookie banner and by starting a chat.
- Retention: chat transcripts are kept for up to 12 months.
2.4 Newsletter
If you subscribe to our updates, we use your email address (and your name, if you give it) to send them. You can unsubscribe at any time with the link in every email.
- Legal basis: your consent (Art. 6(1)(a) GDPR).
- Retention: until you unsubscribe. We remove inactive addresses periodically.
2.5 Business contacts we meet at trade fairs and events
At trade fairs, festivals and business meetings we may collect the contact details of buyers, importers, roasters, retailers, investors and other professionals who are interested in the products we present (name, company, role, country, email, phone and what you told us about your interest).
- Why: to follow up on your interest and to report to the Colombian producer what visitors said about their products.
- Legal basis: your consent (Art. 6(1)(a) GDPR), which we ask for at the moment we take your details. We ask for two separate permissions: one to keep your details, and another to share them with the Colombian producer.
- Sharing with the producer: only if you agreed to it. Producers are based in Colombia, outside the European Economic Area. Because there is no adequacy decision for Colombia, this transfer is based on your explicit consent (Art. 49(1)(a) GDPR). You can withdraw it at any time, and we will stop sharing your details from that moment.
- Without your permission to share, producers only receive anonymous feedback, such as the type of company and what was said about the product, never who said it.
- Retention: up to 2 years after our last contact, or until you withdraw your consent. After that we delete or anonymise your details.
2.6 Comments
If you leave a comment, we store the name, email address and website you enter, the text and your IP address, so that we can moderate it and prevent spam. Your email address is never published.
- Legal basis: your consent (Art. 6(1)(a) GDPR).
- Retention: as long as the comment is published, or until you ask us to delete it.
We do not use your data for automated decision-making or profiling. We do not process special categories of data (such as health or religious beliefs).
3. Who we share your data with
We never sell your personal data. We share it only with:
- Service providers who process data on our behalf, under a data processing agreement: our hosting provider, Hostinger International Ltd. (servers in the EU); and tawk.to (live chat).
- Colombian producers, only in the case described in section 2.5.
- Public authorities, when the law requires it.
4. Transfers outside the European Economic Area
Because SOMOS GRAMOR is based in Colombia, personal data collected through this website is accessed from Colombia. Colombia does not have an adequacy decision from the European Commission; we protect your data with the same standards described in this policy, and where we share it with producers we ask for your explicit consent first. Some service providers may also process data outside the EEA. When that happens, the transfer is protected by an adequacy decision of the European Commission (including the EU–U.S. Data Privacy Framework, where the provider is certified) or by the European Commission’s Standard Contractual Clauses. Sharing your details with producers in Colombia relies on your explicit consent, as explained in section 2.5. You can ask us for more information about these safeguards.
5. Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict how we use it;
- object to processing based on our legitimate interest;
- receive your data in a portable format (data portability), where processing is based on consent or a contract;
- withdraw your consent at any time, without affecting what was done before you withdrew it.
To exercise any of these rights, write to info@colombianorigin.eu. We will reply within one month. We will only ask for proof of identity if we have reasonable doubts that the request comes from you.
You also have the right to lodge a complaint with the data protection supervisory authority of the EU country where you live or work, or where you believe the infringement took place.
6. How we protect your data
The website uses an encrypted connection (HTTPS), is protected by a security firewall, and access to personal data is limited to the people who need it for their work. We review these measures regularly.
7. Cookies
This website uses cookies. Necessary cookies keep it working; optional cookies (such as the live chat) are only used if you accept them. The full list of cookies, what each one does and how long it lasts is in our Cookie Policy. You can change your choice at any time with the Manage consent link at the bottom of every page.
8. Children
This website is aimed at adults and businesses. We do not knowingly collect personal data from children under 16.
9. Links to other websites
Product pages link to the producers’ own websites and shops. Once you leave colombianorigin.eu, the privacy policy of that website applies.
10. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last updated. If the changes are significant, we will tell you on the website.
11. Contact
For any question about this policy or your data: info@colombianorigin.eu