Legal

Privacy Policy

Data Retention and Deletion Policy

STABLE APP LLC, a limited liability company incorporated under the laws of Delaware, with Employer Identification Number EIN 50-18840, and STABLE COLOMBIA S.A.S., a commercial company with Tax Identification Number 901.701.366-7, are the entities in charge of and responsible for the processing of personal data governed by this Data Retention and Deletion Policy ("Retention and Deletion Policy").

In accordance with Law 1581 of 2012 and the GDPR, the Data Subject may, at any time, request from Stable, as the Data Controller, the deletion of their personal data and/or revoke the Authorization granted for its Processing, by submitting a claim.

Likewise, Data Subjects have the right, at any time, to request from Stable the deletion of their Personal Data when, in a written communication, they argue that:

  1. The data is not being Processed in accordance with the principles, duties, and obligations set forth in current legislation.
  2. The data is no longer necessary or relevant for the purpose for which it was collected and processed.
  3. The period required to fulfill the purposes for which the data was Processed has been exceeded.

Such deletion implies the total or partial removal of the personal information, as requested by the Data Subjects, from the records, files, Databases, or processing activities carried out by Stable.

It is important to note that the right of revocation is not absolute, and Stable, or the Data Processor, may deny its exercise when:

The Data Subject is hereby informed that ceasing to use or deleting the Stable Application does not imply revocation of the authorization for the Processing of their Personal Data.

  • The Data Subject has a legal or contractual duty to remain in the Database.
  • The deletion of Personal Data hinders judicial or administrative actions related to tax obligations, the investigation and prosecution of crimes, or the updating of administrative sanctions.
  • The Personal Data is necessary to protect the legally protected interests of the Data Subject, to perform an action in the public interest, or to comply with a legally acquired obligation of the Data Subject.

Retention of Suspicious Transaction Reports (STR) Records: In compliance with legal and regulatory obligations regarding the prevention and control of money laundering and terrorism financing, Stable will retain the records and supporting documents related to Suspicious Transaction Reports (STR) for a minimum period of ten (10) years, counted from the date of their generation, submission, or receipt, as applicable. Such retention will be carried out ensuring the integrity, confidentiality, availability, and security of the information, and will be accessible only to authorized personnel or competent authorities in accordance with the law.

To request the deletion of data and revoke the authorization for processing, when applicable, the Data Subject may submit requests and inquiries at any time. These requests may be submitted to Stable through the following channels:

The inquiry will be answered within a maximum of ten (10) business days from the date of receipt.

When it is not possible to respond within this term, Stable will inform the applicant, stating the reasons and indicating the date on which the inquiry will be addressed, no later than five (5) business days after the expiration of the initial term.