English
Personal Data Policy
Talent Star Mark · R2-Q2
Controller and contact
STAR MARK AGENCY S.A.S., NIT 902.108.655-1, Medellín, Antioquia, Colombia. contacto@starmarkagencia.com · +57 311 337 6000. The company’s Legal Representation handles data protection requests. Use the subject “Personal data — Talent Star Mark”, state your request and provide a reply channel. Identity or representative authority will be checked proportionately.
Purposes and necessary data
We process the data needed to handle enquiries and applications submitted through enabled channels: identity, contact details, general location, category, availability, experience and relevant materials. The purpose is to respond, verify the request and privately assess the application where appropriate. Assessment is limited to the permissions granted and does not expand earlier authorisations. A new purpose requires appropriate information and a legal basis.
Commercial enquiries and browsing
To answer enquiries from brands, production companies and event organisers, prepare proposals and manage agreed projects, we process names, company details, contact information, briefs and necessary communications. Contract, billing or payment details are requested when relevant to a project. An enquiry does not authorise unrelated advertising. Language, experience and profile-selection preferences are stored in the browser and can be removed using its controls. When opening WhatsApp or email, the person reviews and decides whether to send the message through that service, which also has its own terms.
Image, voice and sensitive data
Identifiable photographs, voice and videos are personal data. Provide only relevant materials for which you can substantiate rights. Providing sensitive or children’s data is optional. We do not request intimate information, health data or biometric recognition. General permissions exclude AI training, voice cloning and digital replicas. Internal assessment, private presentation to identified clients, profile publication and use of photographs, videos or voice have different scopes. Each purpose requires an express, identifiable decision covering the relevant materials, recipients, channels and duration. Accepting the terms or submitting an application does not grant these additional permissions.
Security and custody of submitted materials
Access to materials requires an authorised purpose and safeguards appropriate to their nature. Antivirus on the hosting service does not by itself establish that an individual file has passed a satisfactory scan. Materials whose safety has not been verified must not be used or delivered. If secure intake cannot be ensured, the channel must be suspended or the submission rejected.
Processing necessary for security verification is restricted to that purpose. Materials will not be sent to public scanning services without first establishing the necessary legal basis and safeguards.
Safeguards for minors
Minors participate through their legal representatives, with verifiable authorisation, confirmed representative authority, age-appropriate information and consideration of their views and best interests. These safeguards must be verified before accepting an application; a general form does not replace them. Contact the institutional channel first without attaching the child’s documents or materials. Publication and commercial use require specific individual permissions; family consent does not replace applicable work permits.
Access and recipients
Access must be limited to authorised staff who need it for their duties. Representation and authorisation evidence is confidential and must not be published. Providers acting as processors are subject to instructions, confidentiality and security. Before sharing materials with a client or making an international transfer or transmission, we will identify its purpose, recipients and applicable safeguards. Do not provide unnecessary school details, routines, home addresses, identity numbers or public links containing private data.
Retention
Applications under assessment are reviewed every 90 days. An active status requires a continuing assessment purpose and a documented need; it does not justify indefinite retention. Once that purpose ends, the file is closed or processed as appropriate for a relationship actually agreed. An administrative or technical review does not by itself restart the retention period.
Rejected or archived applications are deleted after 90 days from the last substantive update where no basis for retention exists. This business retention period does not prevent an earlier valid deletion or revocation request. Exceptions for contracts, ongoing relationships, claims or legal duties must identify the basis, necessary data and the period or event ending retention, with periodic review.
During active talent relationships, data is retained while necessary to manage the relationship and authorised uses. An ongoing contract is not an indefinite licence to use a profile, image or voice. When the relationship ends or a use is revoked, access and materials are reviewed and the relevant uses are discontinued; restricted evidence is retained only on a specific basis.
Business enquiries, client and supplier contacts and project communications are retained while being handled, negotiated, performed and closed. Data no longer needed is then deleted or irreversibly anonymised, subject to specific duties or claims. Contracts, accounting, tax, payment and employment records are retained for the statutory periods applicable to each document and transaction; the 90-day period for discarded applications does not automatically apply to them.
Evidence of authorisation, revocation and rights requests, and any access and security logs generated, is retained only as needed for accountability, protection or the defence of rights. The company’s Legal Representation will document the basis, period or closure event and review for each class of record. Keeping evidence does not authorise retaining every original asset or reusing it. Quarantined files remain subject to the same purpose limits and review; an unavailable scan does not permit unlimited retention.
Databases remain in operation while the legitimate purposes and corresponding retention duties continue. They are reviewed periodically to delete or irreversibly anonymise unnecessary data, restrict access to retained records and document the decision. Functional data stored in the browser follows the controls described in this policy. Backups follow the provider’s actual cycle, without assuming 30 days; deletion requests are considered in their management and any restoration must reconcile revocations and deletions before data is used again.
Rights and procedure
You may access your data free of charge, learn how it is used, request evidence of authorisation, update or correct it, and request revocation or deletion where applicable. Send requests to contacto@starmarkagencia.com, for the attention of the company’s Legal Representation. Identify the data subject and your authority if acting for them; state the facts, request, reply channel and any supporting documents you wish to rely on. Verification will be proportionate: do not send passwords or unnecessary documents. Exercising your rights does not require accepting additional uses of your data.
Enquiries are answered within a maximum of 10 business days from receipt. If a response cannot be provided within that period, the specific reasons for the delay and the expected response date will be notified before the deadline expires. The extension may not exceed 5 business days after the initial deadline.
Complaints are answered within a maximum of 15 business days counted from the day following receipt. If resolution is not possible within that period, the specific reasons and expected response date will be notified before the deadline expires; the extension may not exceed 8 business days after the initial deadline. Extensions are not automatic: the reason and date are sent through the stated reply channel and a record of the notice is retained.
If a complaint is incomplete, the missing information will be requested within five days of receipt. This is the deadline for sending the request, not a five-day correction period imposed on the applicant. If two months pass after that request without the requested information being supplied, the complaint will be treated as withdrawn. If the recipient is not competent to resolve the complaint, it will be forwarded to the appropriate party within two business days and the interested person will be informed.
Within two business days of receiving a complete complaint, the relevant database will record “complaint in progress” and its reason until a decision is made. The reply will address the request and explain the measures taken or the legal grounds for a limitation, including the data and basis for any retention that must continue. After completing the enquiry or complaint procedure before the controller or processor, you may complain to Colombia’s Superintendence of Industry and Commerce. The form on this page only prepares an email; you may also write directly to the institutional channel.
Device and changes
The website uses browser storage for preferences, selections and, where forms support them, drafts. A local draft does not establish receipt by the agency; check the confirmation provided by the channel used. Remove stored data before sharing a device. Material changes will be communicated before implementation and will not extend permission through silence.
Effective date
This policy takes effect upon its actual publication, without retroactively extending permissions already granted.