In compliance with the provisions of the Political Constitution of Colombia and current data protection regulations—Law 1581 of 2012, Law 1266 of 2008, Law 1480 of 2011, and their implementing decrees 1727 of 2009, 2952 of 2010, and 1377 of 2013—OROROSA implements and maintains a Personal Data Protection Policy that governs the proper handling of information.

Under this framework, the processing of personal data will be carried out solely for purposes related to the development of its corporate purpose and related or complementary activities arising therefrom.