Data controller
BluHartmann is the company responsible for the personal data covered by this policy. We work out of our offices in Bogotá, Colombia and Lisbon, Portugal.
This policy covers this website only. It does not cover the third-party platforms where the brand has a presence, which are governed by their own policies.
What data we process
Almost none. This site does not ask for your email or register accounts, and it only sends data to a server of ours if you voluntarily take part in the cycling campaign route vote (see the section on that vote). Everything else you can read without leaving us a single personal detail.
The 2027 Cycling Competition page shows its registration form as a PREVIEW: every field is disabled, it has nowhere to send anything, and it collects and transmits no data. The day registration actually opens, this policy is updated before the form is.
Cookies
This site sets no analytics, advertising or tracking cookies, and it embeds no third-party players or widgets. There are therefore no third-party cookies to declare and no consent banner to show.
Like any web server, the hosting that serves these pages may record technical connection data (IP address and user agent) in its server logs, for security and diagnostics. Those logs are handled by the hosting provider under its own policies.
2027 Cycling Competition route vote
If you take part in the cycling campaign route vote, we store the option you voted for or the text of your proposal, together with an irreversible technical fingerprint derived from your connection. Your IP address is not stored in the clear, and that fingerprint cannot be reversed to recover it.
When you submit a vote, your browser receives a single technical cookie named voto-ruta, whose only purpose is to prevent duplicate votes. It lasts about a year and is not used for analytics or tracking. Browsing the site sets no cookies: this one is only issued when you vote.
The purpose of this data is the consultative tally of the vote — the organisation makes the final call on the course — and the results are not published: only the organisation consults them.
Purpose and legal basis
The purpose of this site is to inform visitors about what the company does.
The legal basis for the technical logs described above is our legitimate interest in running and protecting a corporate website. When you message us through a social profile, the legal basis is your own consent in starting that conversation, and whatever you share stays on the platform you chose.
Your rights as a data subject
You have the right to know, update and correct the information we hold about you, to ask for it to be deleted, to withdraw any authorization you have given, and to lodge a complaint with the competent data protection authority.
Article 8 of Colombian Law 1581 of 2012 grants those rights. If you are writing from the European Union, articles 15 to 22 of the General Data Protection Regulation also grant you rights of access, portability, restriction and objection.
How to exercise your rights
You can exercise any of those rights by writing to us through the official channels published on this site. Today those are our verified Instagram, LinkedIn and YouTube profiles, linked at the foot of this page and in the footer of every other one.
Tell us which right you want to exercise and which data it concerns, so that we can act on it. If we publish a further contact channel, it will appear on this site and this section will cover it too.
Retention and international transfers
We keep no personal data, because we collect none. The technical logs kept by the hosting provider are retained for as long as that provider determines.
Conversations you start on third-party platforms (Instagram, LinkedIn or YouTube) are governed by the policies of those platforms, which run servers outside Colombia and the European Union. Messaging us there may therefore involve an international transfer of your data, carried out by those platforms and not by us.
Changes to this policy
Any change is published on this same page and reflected in the update date that opens the document.
We send no notice of changes, because there is nobody to send it to: there is no mailing list and there are no subscribers.