top of page

Personal Data Treatment policy hackU S.A.S.

Fecha de última actualización:

HACKU S.A.S. is a company created with the purpose of reinventing the traditional education system, where the whole system is created by, for and in priority benefit of the user. For the fulfillment of this purpose they have created a digital platform where they proceed to offer their entire portfolio of educational content to the user. Therefore, it is essential to make and establish the rules of the game between the user and hackU in the use of the platform. 

In accordance with the above, have generated this Privacy Policy and Processing of Personal Data in order to safeguard and protect the information of the owners of the data collected or obtained in the future in the interactions or operations.


Establish the criteria for the collection, storage, use, circulation and suppression of personal data processed by hackU states that it guarantees the rights of privacy, intimacy and good name in the processing of personal data and, consequently, all its actions will be governed by the principles of legality, purpose, freedom, truthfulness or quality, transparency, restricted access and circulation, security and confidentiality. 

All persons who in the exercise of commercial or labor activities provide any type of information or personal data, may know, update and rectify it.



This policy applies to all personal information of anyone who enters the platform or leaves information in any form or in any of our web pages.



Prior, express and informed consent of the Data Subject to carry out the Processing of personal data.

Data base

Organized set of personal data that is subject to processing.


Personal data

Any information linked or that can be associated to one or several determined or determinable natural persons.   


Private data

It is the data that, due to its intimate or reserved nature, is only relevant to the user who owns it.   


Public data

Public data includes, among others, data relating to the marital status of individuals, their profession or trade, and their status as merchants or public servants. This data may be obtained and offered without any reservation whatsoever and regardless of whether it refers to general, private or personal information.  


Semi-private data

Semi-private data is data that is not of an intimate, reserved or public nature and whose knowledge or disclosure may be of interest not only to its owner but also to a certain sector or group of people or to politics in general, such as financial and credit data of commercial activity. 


Sensitive Data

Sensitive data are understood as those that affect the privacy of the Data Subject or whose improper use may generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership in trade unions, social organizations, human rights or that promote the interests of any political party, among others.


Data Processor

Natural or legal person, public or private, which by itself or in association with others performs the processing of personal data on behalf of the data controller.



It is the platform through which users interact. 

Responsible for the treatment 

It is the natural or legal person, public or private, who decides on the purpose of the databases and/or their processing.



Natural person whose personal data is subject to processing. 


Any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion. 



They are those persons, natural or legal, who use the platform or provide the data for the purposes set forth herein. 

In order to guarantee the protection of personal data, will apply the following principles in a harmonious and comprehensive manner, in light of which the processing, transfer and transmission of personal data must be carried out:

Principle of legality in the processing of data

Data processing is a regulated activity, which shall be subject to the legal provisions in force and applicable to the subject.


Principle of finality

The personal data processing activity carried out by or to which it has access will obey a legitimate purpose in accordance with the Political Constitution of Colombia, which must be informed to the respective owner of the personal data.


Principle of freedom

Personal data may only be processed with the prior, express and informed consent of the Data Subject. Personal data may not be obtained or disclosed without prior authorization, or in the absence of legal, statutory or judicial mandate that relieves the consent. 


Principle of truthfulness or quality

The information subject to Processing of personal data must be truthful, complete, accurate, updated, verifiable and understandable. The processing of partial, incomplete, fractioned or misleading data is prohibited.


Principle of transparency

In the processing of personal data, will guarantee the Data Subject the right to obtain at any time and without restrictions information about the existence of any type of information or personal data that is of interest or ownership.

Principle of restricted access and circulation

The processing of personal data is subject to the limits deriving from the nature of the data, the provisions of the law and the Constitution. Consequently, the processing may only be carried out by persons authorized by the owner and/or by the persons provided for by law.


Safety principle

The information subject to processing by shall be handled with the technical, human and administrative measures necessary to ensure the security of the records, avoiding their adulteration, loss, consultation, use or unauthorized or fraudulent access.

Principle of confidentiality

All persons who in administer, manage, update or have access to information of any kind that is in databases are obliged to ensure the confidentiality of the information, so they undertake to keep and maintain strictly confidential and not disclose to third parties all information that they come to know in the execution and exercise of their functions, except in the case of activities expressly authorized by the data protection law. This obligation persists and will be maintained even after the end of their relationship with any of the tasks that comprise the Processing.

Information collected

hackU only collects personal data provided directly by the USER for the purpose of registration, and for the purpose of:


  • Send you commercial information about offers, promotions and other data that motivate you to use THE PLATFORM. 

  • Send you all the content related to the product or service purchased on the platform.

  • Classify and position information to users. 

  • Analyze the main needs of the users, carry out diagnostics and analyze all the information data related to them. To do so, it may provide this information to other companies to facilitate the fulfillment of such diagnosis. - Sending information, advertising, marketing, among others. 

  • Any related activity.


The personal data stored for the registration of the USER will be kept for archiving purposes, record of the contractual relationship, execution of outstanding balances and sending commercial information related to the service offered on THE PLATFORM.

Because of this, HACKU may preserve the following USER information: 


  • Identifying information: For example, name, address, landline or cell phone number, NIT, citizenship card, aliens card, passport or identity card, mailing address, etc. electronic address. 

  • Banking and payment information: e.g. credit card information, account number, etc.

  • Needs and requirements based on your current situation.

hackU Obligation

In accordance with current regulations on personal, private and sensitive data, HACKU will use such information solely and exclusively to fulfill the functions and obligations described above, as well as those arising from our contractual obligations. 

HACKU in turn will use such information for statistical purposes, marketing, contact with the USER, sending documentation, advertising or notifications, transfer to allies or third parties for support in carrying out the diagnosis, among others, unless the user expressly or verbally states to remove, correct or delete your information from the database.

Obligations of the holder

It will be the user or the business who, at the time of performing any type of act or legal business through THE PLATFORM. The OWNER may expressly or tacitly state, through the use of the

The consent to the policy for the handling of such information. It will be required, however, that such consent is free, prior, express and informed consent of the owner of the personal data for the treatment of these, except in cases expressly authorized by law. 

The owner may express his/her authorization in the following ways: (i) in writing and (ii) when formalizing his/her entry in THE PLATFORM. The authorization may be provided by the holder, who must sufficiently prove his identity; by the assignees of the holder, who must prove such capacity; the representative and/or attorney-in-fact of the holder, upon proof of representation or power of attorney.


Lack of authorization from the owner

The user's or merchant's authorization shall not be required for the use or delivery of the data provided in the following cases:


  • When such information is required by a public or administrative entity in the exercise of its constitutional or legal functions. When there is a court order to that effect. 

  • In the event of medical and/or sanitary emergencies. 

  • Processing of information authorized by law for historical, statistical or statistical purposes. scientists. 

  • Data related to the Civil Registry of persons. 

  • Others established by law.

Purpose of the processing of personal data
  • Coordinate and develop the activities of assistance and identification of the needs of our USERS, holders of personal data. Including the elaboration of statistics. 

  • Necessary to make corrective actions to provide better technical assistance and response time. 

  • Evaluate and analyze the proper functioning of our websites by doing, for example, statistical studies on the frequency and visiting hours of our USERS. 

  • Adopt measures that allow HACKU to execute strategies aimed at developing better tools within THE PLATFORM. 

  • Respond to all requests and requests made by USERS and have the elements to contact them. 

  • Archive and record of the contractual relationship. 

  • Sending information or data to third parties that allow us to accompany and advise them in a more efficient way. 

  • to businesses. 

  • Send commercial offers related to what is offered on THE PLATFORM.

  • Delivery of content in accordance with the product or service purchased within the platform.


Rights of the data subject with respect to his or her data

All USERS OR TRADERS are holders of the personal data, as well as their heirs or attorneys-in-fact, who may exercise the following rights:


  • Know, update, rectify and request the deletion of data held by the company. 

  • Be informed of the uses that are being made of your data. 

  • File the respective complaints and claims before the policy or before the Superintendence of Industry and Commerce, to be informed of the filing, time for its response and to receive a clear, complete and understandable answer for the user. 

  • To revoke the authorization provided to the company for the use of data.

  • Others established by law.

Authorization for the use of personal data of users and merchants 

By subscribing to THE PLATFORM. The USER authorizes HACKU to collect, store, use and transfer his/her personal data, under the conditions set forth above. HACKU is responsible for the treatment and correction of your data in those cases where it is required by the USER. HACKU will not be responsible for the personal data collected directly by the USER in the exercise of its purpose. 

All personal data that is not public data will be treated by hackU as confidential, even if the contractual relationship has ended. 

Data processorand channels of attention  usersor businesses

The USER, directly or through duly authorized persons, may consult their personal data at any time and especially whenever there are changes in the INFORMATION PROCESSING POLICIES. To do so, a written request must be addressed to hackU's operations area, which will be in charge of data processing and may be contacted through the following channels: 


Cellular: 3116256757 

Physical address: Calle 15 # 35-133 INT 401, Medellín. 

Claims and inquiries

The holder or its assignees who consider that the information contained in a database should be corrected, updated or deleted, or when they notice the alleged breach of any of the duties or wish to consult something relevant to the management of their information, may file a claim and / or consultation with HACKU which will be managed as follows: 

1. The claim and/or consultation shall be formulated by means of a request addressed to the Data Controller, with the identification of the Data Subject, the description of the facts that give rise to the claim, the address, and accompanied by the documents to be asserted. If the claim is incomplete, the interested party will be required within five (5) days after receipt of the claim to correct the faults. After two (2) months from the date of the requirement, without the applicant submitting the required information, it will be understood that the claim has been abandoned. 

Complaints and/or queries may be made by e-mail to: 

Additionally, these requests may be made through the "contact us" section of our website. 

2. Once the claim and/or complete consultation is received, a legend will be included in the database within two (2) working days stating "claim and/or consultation in process" and the reason for it. Said legend shall be maintained until the claim and/or consultation is decided. 

3. The maximum term to address the claim and / or consultation will be fifteen (15) working days from the day following the date of receipt. When it is not possible to address the claim within that period, the interested party will be informed of the reasons for the delay and the date on which the claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the first term. 

4. In the case of a claim, a complaint may only be filed before the Superintendence of Industry and Commerce once the consultation or claim process has been exhausted before the Data Controller or Data Processor.


Physical notifications

If you wish to submit your complaint by physical means, it should be addressed to this address. The procedure to be treated will follow the procedure described above. Calle 15 # 35-133 INT 401 in the city of Medellin, Antioquia, Colombia.


This policy is effective as of May 30, 2023.

bottom of page