Privacy Policy and Data Processing

Logali Consulting (Logali Group)

Last updated: January 13, 2026

1. Scope and Application

This policy applies to all personal data processed by Logali Consulting (hereinafter, "the Company"), regardless of the geographic location of the data subjects (clients, consultants, suppliers or web users). We comply with international regulatory frameworks to ensure a uniform standard of protection.

2. Data Controller

• Trade Name: Logali Consulting
• Legal Entity: LOGALI S.A.S.
• Main Office: Carrera 84 B # 37 A 36, Medellin, Colombia
• Privacy Email: [email protected]
• Website: logaliconsulting.com

3. Legal Basis for Processing

In accordance with global standards (such as GDPR), we process your data under the following legal bases:

• Consent: When you register on our website or request information through forms.
• Contractual Performance: Necessary to provide SAP consulting services, training and technical support.
• Legitimate Interest: To improve our services, ensure information security and conduct direct marketing related to SAP technologies.
• Legal Compliance: For tax reports and obligations with regulatory authorities.

4. Purposes of Processing

The data collected is used exclusively for:

• Specialized Consulting: Management of SAP projects (S/4HANA, BTP, Fiori, integrations).
• Client Management: Processing of service requests and success stories.
• Training and Education: Registration in Logali's Virtual Classroom and badge/certification management.
• Global Communications: Sending technical and commercial newsletters about the SAP ecosystem.

5. Data Subject Rights (Global)

Regardless of your country of origin, Logali Consulting guarantees all users the following rights:

• Access: Know what data we have about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure (Right to be Forgotten): Request deletion of your data when no longer necessary.
• Objection: Object to processing for marketing purposes.
• Portability: Receive your data in a structured and readable format.
• Restriction: Request temporary suspension of processing in specific cases.

6. International Data Transfer

As a consulting company with international reach, your data may be processed on servers located in different countries (for example, through cloud infrastructure providers such as Netlify or Odoo services).

In the case of transfers from the European Economic Area (EEA) to countries without an adequate level of protection, we use Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Information Security

We implement technical and organizational measures to protect data against unauthorized access, loss or alteration. This includes:

• Security protocols in our SAP systems
• Data encryption in transit and at rest
• Strict role-based access controls
• Periodic security audits
• Regular backups

8. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes described, while the business relationship lasts or during the legal limitation periods (generally between 5 and 10 years depending on the financial jurisdiction).

Once the retention period has ended, the data will be securely deleted or anonymized for statistical purposes.

9. Contact and Complaints

To exercise your rights or resolve questions about this policy, you can contact our privacy office:

• Main Channel: Send email to [email protected]
• Response Time: Maximum 15 business days (or as stipulated by the local law most favorable to the data subject)

10. Specific Regional Considerations

For European Union Residents (GDPR)

You have the right to file a complaint with a local Supervisory Authority if you believe that the processing of your personal data violates the GDPR.

For California Residents (CCPA)

We do not sell your personal information to third parties. California residents have additional rights under the California Consumer Privacy Act (CCPA).

For Colombia Residents (Law 1581)

This policy fully complies with the duties of the Data Controller stipulated by the Superintendence of Industry and Commerce (SIC). You can file inquiries or complaints with the SIC if you believe your rights have been violated.

11. Modifications to this Policy

We reserve the right to update this privacy policy to reflect changes in our data processing practices or modifications to applicable laws. Any changes will be communicated through our website and, when necessary, through direct notification.

12. Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve user experience, analyze traffic and personalize content. You can configure your browser to reject cookies, although this may affect some site functionalities.