Personal data processing policy

1. Data controller

• Legal name: INMOART SAS, trading as "Andavo".
• NIT (Colombian tax ID): 901.502.180-0.
• Registered address: Cra. 15 # 19-60, Chía, Cundinamarca, Colombia.
• Email: info@andavosabana.com.
• WhatsApp and phone: +57 313 375 1400.

2. Personal data we collect

Depending on the channel and the interaction, we may collect:

• Identification and contact data: name, phone, email and, when you provide it, your city or area of interest.
• Conversation content: the messages you send us on WhatsApp, Facebook Messenger or Instagram Direct, including text, images or files you choose to share with our agents.
• Information about your property interest: property type, budget, preferred school or area, and whether you intend to buy, rent, sell or have a property managed.
• Browsing data: technical information about the site (pages visited, device) collected through cookies or analytics tools, with your consent.

We do not request sensitive data. Please do not share sensitive or financial information through these channels (card numbers, passwords, identity documents) unless it is strictly necessary.

3. Purposes of processing

• To handle, answer and follow up on your requests, questions and conversations through a single service inbox managed by our agents.
• To present and manage our offering of properties, projects and services (sale, rental, management, maintenance and related services).
• To coordinate visits, send commercial information you request and carry out commercial follow-up.
• To meet legal and contractual obligations and improve the quality of our service.
• To send commercial communications about our services, only where you have authorized it, with the option to opt out at any time.

4. Processing through Meta platforms

When you write to us on Facebook Messenger or Instagram Direct, Andavo receives and answers those messages using tools provided by Meta Platforms, Inc. and through our own application connected to those platforms. The information is processed to bring the conversation into our service inbox and let a human agent reply within the messaging windows Meta allows. Use of this data is limited to handling your request. We do not send bulk or unsolicited promotional messages through these APIs. Meta's own processing is additionally governed by that company's policies.

5. Transfer and transmission of data

To provide messaging and website hosting, your data may be processed by technology providers located outside Colombia (including Meta Platforms, Inc. and our infrastructure providers), acting as processors under adequate security standards. Andavo takes reasonable measures so that these transfers comply with Colombian law.

6. Rights of the titular (habeas data)

As the titular (data subject) of your personal data, you have the right to:

• Access, update and correct your personal data.
• Request proof of the authorization you granted.
• Be informed about how your data has been used.
• File complaints with the Superintendencia de Industria y Comercio (SIC, the Colombian data protection authority) for breaches of the law.
• Revoke your authorization and request deletion of your data where no legal or contractual duty to keep it exists.
• Access your personal data free of charge.

7. How to exercise your rights

You may submit queries or claims by writing to info@andavosabana.com or to WhatsApp +57 313 375 1400, stating your name, your contact channel and your specific request. Under Colombian law, queries are answered within a maximum of ten (10) business days and claims within fifteen (15) business days, extendable on the terms set by law.

8. Data deletion (instructions for Meta users)

Data deletion request. If you interacted with Andavo on Facebook Messenger or Instagram and want us to delete the data and conversation history linked to your profile, you may request it at any time:

• Write to info@andavosabana.com with the subject "Eliminación de datos" (data deletion), stating your Instagram or Facebook username.
• Or send us a message on the same channel asking for deletion.

We will verify your identity and delete the personal data under our control associated with your request within a reasonable period, unless a legal duty to retain it applies.

9. Information security

Andavo applies reasonable technical, human and administrative measures to protect personal data against unauthorized access, loss, misuse or alteration. Access to conversations is limited to the authorized agents handling your request.

10. Retention

We keep data for as long as needed to fulfil the purposes described here and the applicable legal obligations. Once those terms expire, the data is deleted or anonymized.

11. Term and changes

This Policy applies from its publication and may be amended. Any substantial change will be announced on this website. The database managed by Andavo will remain in force for as long as needed to fulfil the purposes of processing.