Personal data processing policy

_Last updated: November 6, 2026_

1. Data controller

The data controller is Tatiana Rodríguez, a natural person, Colombian citizen ID (cédula) 1093918235.

Address: Cra 23 # 31-96, Bucaramanga, Santander, Colombia
Phone: +57 316 084 5842
Email: tatianaservicioslegales@gmail.com

Henry Mariño (henryiadatamarino@gmail.com) acts as data processor for requests in the digital marketing, data and AI area.

ROMA — Rodríguez Mariño Consulting brings together Tatiana Rodríguez's legal practice and Henry Mariño's digital marketing, data and AI practice.

2. Legal framework

This policy is governed by Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and other Colombian data protection rules.

3. Data we collect

Data you give us through the form, WhatsApp or email: name, area of interest, message, WhatsApp number and/or email.
Technical browsing data (pages visited, device, traffic source) only if you accept analytics in the cookie banner.

We do not request sensitive data in the form. If you share sensitive information or information about minors while discussing your case, we will use it only to handle your request, with due confidentiality and respecting the best interests of children and adolescents. You are not required to answer questions about sensitive data.

4. Purposes

Answer your request and schedule the first conversation.
Prepare and send service proposals and, if you hire us, perform and manage the professional relationship.
Keep an internal record of requests to follow up on them.
Measure site usage in aggregate to improve it, only with your consent.
Comply with legal obligations.

We do not sell or share your data. We will only send you marketing communications if you expressly authorize it.

5. Processors and transfers

To run the site we use providers that process data on our behalf:

Henry Mariño: handles requests in the digital marketing, data and AI area on behalf of the controller.
Directus (content management and request log) and Twenty (CRM): self-hosted by us on an OVH virtual private server (VPS).
Google Tag Manager (Google LLC): manages the site's measurement tags. It sets no cookies of its own; it enables the other Google tools according to your choice in the banner.
Google Analytics 4 (Google LLC, analytics): its cookies are only enabled if you accept the "Analytics" category.
Google Ads (Google LLC, advertising): measures whether our ads lead to enquiries; its cookies are only enabled if you accept the "Advertising" category.
WhatsApp (Meta): if you message us on WhatsApp, the conversation is also governed by the WhatsApp and Meta terms and privacy policy.

Google's tools involve an international transfer of data to the United States. Cookies and identifiers in each category are used only with your consent to that category; before that, Google only receives the cookieless signals described in section 9.

We require security and confidentiality conditions consistent with Colombian law.

6. Your rights

As the data subject you may:

Access, update and correct your data.
Request proof of the authorization you gave us.
Be informed about how we use your data.
Revoke your authorization and request deletion of your data, unless there is a legal or contractual duty to keep it.
Access your data free of charge.
File complaints with the Superintendence of Industry and Commerce (SIC) after completing the inquiry or claim process with us.

7. How to exercise your rights

Email tatianaservicioslegales@gmail.com (you can also write to henryiadatamarino@gmail.com for requests about marketing, data and AI) with your name, your request and a contact method. We answer inquiries within ten (10) business days and claims within fifteen (15) business days, extendable under articles 14 and 15 of Law 1581 of 2012. If a claim is incomplete, we will ask you to complete it within five (5) business days.

8. Retention and security

We keep your data for as long as needed for the purposes above and to meet legal obligations. We apply reasonable technical and organizational measures to protect it against unauthorized access, loss or alteration.

9. Cookies and analytics

The site works without measurement or advertising cookies. In the banner you can accept or reject two categories separately:

Analytics (Google Analytics 4): cookies that measure in aggregate which pages are visited and which actions are taken on the site.
Advertising (Google Ads): cookies that measure whether our ads lead to enquiries and allow relevant ads to be shown.

We use Google's consent mode (Consent Mode v2). Until you accept a category, Google does not store or read cookies or identifiers for that category in your browser; it may still receive cookieless signals (for example, that a page was loaded, the browser type and your consent choice) to estimate aggregate statistics through modelling. Those signals do not allow us to identify you.

We only store your choice in your browser's local storage (key "roma_consent"). You can change or revoke it at any time from "Cookie preferences" in the footer; when you reject a category we delete its cookies for this site.

10. Effective date and changes

This policy is effective from November 6, 2026. If we change it substantially, we will announce it on this site. The Spanish version prevails in case of discrepancy.