Privacy Policy 

ASTEROID LLC, with legal address at 2999 NE 191st St. Ste 608, Miami, FL 33180, tax identification number 384197487 (hereinafter referred to as "Asteroid Assistance"), is an international travel assistance organization that provides, among other services, medical, legal, and personal emergency assistance during travel. For the purposes of this Policy, Asteroid Assistance acts as the data controller of the personal information collected through its digital channels and during the provision of travel assistance services. 

To ensure the best possible travel assistance service, Asteroid Assistance may collect, store, and/or process personal information of its clients (hereinafter, "Personal Information") as long as it is essential and necessary for the delivery of such services. As the entity responsible for the proper use and handling of such data, Asteroid Assistance applies adequate technical and administrative security measures to maintain the required level of data protection and provide clients with trust and safety in the management of their data. 

Asteroid Assistance guarantees the privacy and confidentiality of the Personal Information provided through its websites, email, sales channels, or any other communication method, in accordance with applicable data protection laws. With a strong commitment to respecting client expectations, Asteroid Assistance upholds this Privacy Policy in relation to the collection, use, storage, protection, and disclosure of personal data. 

What Personal Information Do We Collect? 

Asteroid Assistance collects and stores personal information provided by clients for the purpose of contacting and/or identifying them via the various enabled communication channels. 

Additionally, Asteroid Assistance collects and stores Personal Information when clients: (i) purchase travel assistance services; (ii) browse the Asteroid Assistance Website and/or register as a user in the MY POLICY platform; (iii) use online services; (iv) participate in promotions, contests, raffles, and marketing campaigns; (v) contact us by email; (vi) use our mobile application; (vii) request assistance services by phone or through other available channels. 

Collected personal data may include, but is not limited to: full name, mailing address, nationality, phone number, taxpayer identification number, email, emergency contact, travel dates, and destination. 

Asteroid Assistance only collects data voluntarily provided by the client and does not store any data that is not given freely. 

The client may opt not to provide certain data, unless it is necessary for service delivery. Asteroid Assistance may record phone calls to conduct quality control, ensure service accuracy, and fulfill requested assistance. Such recordings will be retained only as long as reasonably necessary. 

By using our services, the client consents to the sharing of their Personal Information with third-party service providers (e.g., doctors, hospitals, legal advisors, airlines) solely for the purpose of fulfilling the contracted assistance services. All third-party providers must handle the information with confidentiality and in compliance with applicable data protection regulations. 

What Do We Do With Collected Personal Information? 

Asteroid Assistance stores Personal Information to ensure proper assistance delivery. By submitting their data, the client expressly consents to: 

a) Asteroid Assistance storing any Personal Information obtained during or as a result of assistance services, in registries declared to the relevant data protection authority. 

b) Asteroid Assistance transferring such data to: (i) third-party providers involved in delivering the contracted service; (ii) third parties with confidentiality agreements that support assistance delivery; (iii) companies within the ASTEROID LLC Group or its affiliates if necessary to fulfill the original purpose. 

c) Asteroid Assistance contacting clients to: (i) improve promotional and business initiatives, and personalize content and services; (ii) send information by email about new services, promotions, or company updates; (iii) notify clients about contests and campaigns organized by Asteroid Assistance. 

d) Asteroid Assistance sharing Personal Information with business partners offering joint products or services. Such entities are bound by confidentiality agreements that prohibit unauthorized disclosure or use. 

Accessing, Updating or Correcting Your Personal Information 

Personal information will be stored, and clients—as data owners—have the right to access, rectify, delete, or suppress their data. For any request, clients may contact Asteroid Assistance via our service lines or email info@asteroidassistance.com. 

Personal data is protected using appropriate security standards to prevent alteration, loss, unauthorized access, or misuse. 

Opt-Out Policy 

When clients register on MY ASTEROID or purchase an assistance plan, they may opt to receive promotional materials. Clients can unsubscribe at any time using email preferences settings. 

External Links 

The Asteroid Assistance website may contain links to third-party websites. We are not responsible for their privacy practices or content. Users are encouraged to review the privacy policies of those websites. 

By reading this Privacy Policy, you accept and authorize Asteroid Assistance to process your data in accordance with this Policy and applicable law. If you do not communicate disagreement, it will be interpreted as your consent to these terms. 

Definitions: 
 a. Habeas Data Rights: A set of legal rights that allow you, as the data subject, to ensure that your personal information is collected and processed in accordance with applicable laws and aligned with the purposes we have communicated. These rights include, among others, the ability to access, update, and request the deletion of your data from our systems, unless a legal or contractual obligation prevents us from doing so. 

b. Authorization: Your clear and explicit consent for Asteroid Assistance to process your personal data in accordance with the principles and purposes outlined in this policy. 

c. Data Subject: Refers to you, as the individual who grants us permission to process your personal data. This always involves identifiable personal information. 

d. Processing: Any activity involving your personal data, including the collection, storage, use, circulation, or deletion of personal information. 

e. Database: A structured set of personal data maintained and processed for specific purposes. 

f. Personal Data: Any information that identifies or can be used to identify an individual. Personal data may be categorized as public, private, semi-private, or sensitive. 

g. Public Personal Data: Data that is of general public interest and is typically found in public records, official documents, bulletins, or court decisions that are not confidential. Examples include your name, government-issued ID, or profession. 

h. Private Personal Data: Information relevant solely to you as the data subject, considered personal and confidential in nature. 

i. Semi-Private Personal Data: Private information that may be relevant to certain groups under specific circumstances. One example is financial or credit history data. 

j. Sensitive Personal Data: Information that affects your privacy and, if misused, could lead to discrimination. This includes, but is not limited to, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, affiliation with human rights or social organizations, political party involvement, as well as data concerning health, sexual orientation, and biometric identifiers (such as fingerprints, photos, DNA, etc.). 

k. Special Data: Refers to the processing of information related to children and adolescents, as well as the handling of sensitive data. 

l. Data Controller: The individual or entity that determines, among other aspects, the purposes and means of the data processing. 

m. Data Processor: The individual or entity that processes data on behalf of the Data Controller. 

n. Data Transmission: The processing of personal data involving communication by the processor on behalf of or in the name of the Data Controller. 

o. Data Transfer: The transfer of personal data carried out by the Data Controller or Processor to another entity, either domestically (within Colombia) or internationally. 

p. Website: Refers to the official website of Asteroid Assistance. 

q. Application (App): Refers to the mobile application operated by Asteroid Assistance. 

Principles of Data Processing 

When Asteroid Assistance processes your data, it always does so in accordance with the following principles: 

a. Principle of Legality: The processing of personal data is a regulated activity and must comply with applicable data protection laws and any supplementary or related regulations. 

b. Principle of Purpose Limitation: Data must be processed for a legitimate purpose, consistent with constitutional and legal standards, and this purpose must be clearly communicated to the data subject. 

c. Principle of Consent: Data processing can only be carried out with the prior, express, and informed consent of the data subject. Personal data cannot be obtained or disclosed without authorization, unless permitted by legal or judicial mandate. 

d. Principle of Accuracy: The information processed must be truthful, complete, accurate, up-to-date, verifiable, and understandable. The processing of partial, outdated, or misleading data is strictly prohibited. 

e. Principle of Transparency: The data subject has the right to obtain, at any time and without restrictions, information from Asteroid Assistance or its data processors about the existence and use of their personal data. 

f. Principle of Limited Access and Circulation: The processing of data is subject to limits derived from the nature of the data and legal and constitutional provisions. Only authorized individuals or those legally entitled to do so may access or process the data. 

g. Principle of Security: All personal data processed by Asteroid Assistance or its processors must be handled using appropriate technical, human, and administrative safeguards to ensure data integrity and prevent unauthorized access, alteration, or loss. 

h. Principle of Confidentiality: All individuals involved in the processing of non-public personal data are required to maintain the confidentiality of the information, even after the conclusion of their professional relationship. Disclosure or communication of personal data is permitted only when authorized by law or necessary for the provision of services under this policy. 

Collected Data and Purpose of Processing 
 The personal data you voluntarily provide to Asteroid Assistance may fall into the following categories: 

a. Identification Data: Such as full name, address, phone number, email address, national ID, place and date of birth, age, nationality, photograph, country of residence, signature, gender, marital status, and other similar information. 

b. Third-Party Data: Includes the names and surnames of family members and/or emergency contacts, their age, phone number, email address, mobile number, and relationship to you, among other details. 

c. Employment Data: Includes salary, type of compensation, affiliations with the social security system, job title, work address, phone number, fax, employment history, employment certificates, and similar employment-related information. 

d. Educational Data: Includes academic history, degrees earned, study certificates, graduation dates, and other educational background details. 

e. Banking Data: Includes bank account numbers, billing information, financial statements, tax identification number (NIT), unique tax registration (RUT), credit card data, and other financial identifiers. 

f. Health Data: Includes health status, test results, laboratory analyses, studies, medical diagnoses, prescribed medications, treatments, and other health-related information. 

h. If you are a partner or shareholder, we may use your data for the following purposes: 
 (i) execution of the company’s corporate purpose; 
 (ii) maintaining regular communication regarding organizational activities, decisions, and changes; 
 (iii) fulfilling contractual and fiduciary obligations; 
 (iv) maintaining financial and accounting records; 
 (v) reporting to regulatory and supervisory authorities; 
 (vi) issuing invitations and coordinating general meetings and/or shareholder assemblies; 
 (vii) other administrative, historical, and statistical purposes. 

i. If you are a researcher or external collaborator, we may use your data for the following purposes: 
 (i) development of joint projects; 
 (ii) coordination of activities and events; 
 (iii) execution of contractual and collaborative relationships; 
 (iv) management of payments and fees; 
 (v) creation of reports and documentation related to research or collaborations; 
 (vi) other administrative, historical, and statistical purposes. 

j. If you participate in events or training sessions organized by us, we may use your data for: 
 (i) coordination and logistics of the event or training session; 
 (ii) managing registrations and confirmations; 
 (iii) sending related informational or educational materials; 
 (iv) generating certificates or participation confirmations; 
 (v) conducting satisfaction surveys; 
 (vi) compiling attendance and evaluation reports; 
 (vii) other administrative, historical, and contact-related purposes. 

k. If you are a user of our forums or social media platforms, we may use your data for: 
 (i) managing your participation and moderating comments; 
 (ii) responding to inquiries, comments, or concerns on the platforms; 
 (iii) developing community engagement initiatives; 
 (iv) conducting analysis and statistics on user trends and behavior; 
 (v) other administrative and contact-related purposes. 

l. If you are a media collaborator or influencer, we may use your data for: 
 (i) developing joint communication or marketing strategies; 
 (ii) coordinating interviews, events, or special appearances; 
 (iii) sending press materials, releases, or other relevant information; 
 (iv) managing agreed-upon payments or compensations; 
 (v) other administrative, historical, and contact-related purposes. 
 You acknowledge and accept that you are not required to authorize the processing of sensitive personal data. 

In accordance with the purposes described above, the scope of data processing carried out by Asteroid Assistance includes: 

i. Collecting, storing, and processing all information provided by data subjects in one or more databases, in the format deemed most appropriate. 

ii. Verifying, corroborating, validating, investigating, or comparing the information provided by data subjects with any legitimately held information. 

iii. Accessing, consulting, comparing, and evaluating all data subject information stored in the databases of any legally established credit, financial, judicial, or security risk bureau, whether public or private, national or international. 

Sensitive Data 
In the course of our operations, we may require sensitive data, such as your health-related information. This data will be handled in accordance with the legal principles established by law, maintaining the confidentiality required by privacy rights and, in particular, preventing any discriminatory use. As the data subject, you are not obligated to provide this type of information. However, please note that certain procedures and services may require the processing of such data. 

Processing of Personal Data from Minors 

Asteroid Assistance does not process personal data from minors without the prior consent of their parents or legal guardians. The processing of such data will be conducted in compliance with data protection regulations, always respecting the fundamental rights of the minor. 

Exchange, Transfer, and Transmission of Information 

Asteroid Assistance may share collected personal information with subsidiaries, affiliates of ASTEROID LLC, or third parties—whether individuals or legal entities—located abroad that we entrust with processing such data. International transfers may be made to any country, regardless of the data protection schemes or standards adopted there. 

Information Security 

The data collected is stored on our proprietary servers located in Argentina. Currently, your personal data is protected by reasonable IT security measures that align with industry standards and safeguard the system against third-party attacks. 

Data Subject Rights 

As a data subject, you have the right to access, update, rectify, and delete your personal data. 

If you have questions, inquiries, or complaints related to the processing of your data, we encourage you to submit a request via our customer service phone lines or by email at: info@asteroidassistance.com 

Procedures for Exercising Your Rights 

a. Inquiries: You may request access to your personal data free of charge once per calendar month and each time the Data Privacy Policy is significantly updated. To do so, you must submit a request to the aforementioned channels, including the following information: (i) your name and address (or the name and address of your legal representative) or another method to receive the response; (ii) documents that prove your identity or that of your authorized representative; and (iii) a description and purpose of the request. Asteroid Assistance must respond to your inquiry within ten (10) business days of receiving the request. If unable to do so within this timeframe, we will inform you of the delay and provide a new deadline, which will not exceed five (5) additional business days. 

b. Claims: You may submit a claim if you believe there has been non-compliance with this Privacy Policy or applicable law, or if you wish to correct, update, or delete your personal data. The claim must be submitted via the aforementioned channels and must include: (i) your name and address (or of your legal representative), or another method to receive the response; (ii) documents that prove your identity or authority to act on behalf of the data subject; (iii) a detailed description and purpose of the claim; and (iv) any supporting documents or elements. If the claim is incomplete, Asteroid Assistance will request the missing information within five (5) business days of receipt. If the required information is not provided within two (2) months, the claim will be considered withdrawn. If complete, the claim will be resolved within fifteen (15) business days of receipt. Should additional time be required, we will inform you and provide a new response deadline, not to exceed eight (8) additional business days. If Asteroid Assistance is not the competent party to resolve your claim, we will refer it to the appropriate entity within two (2) business days and notify you accordingly. 

Use of Cookies and Similar Technologies 

Asteroid Assistance may use cookies and similar technologies on its websites to deliver and optimize services and collect usage data. “Cookies” are small information files sent by the website and stored in the user’s browser so the site can reference previous activity. If you prefer not to receive cookies, you can configure your browser to reject them or alert you when a site attempts to send cookies. However, please note that some features of the Asteroid Assistance websites may not function properly if cookies are disabled. 

Contact Us 

ASTEROID LLC, with its legal address at 2999 NE 191st St. Ste 608. Miami, FL. 33180, is the company responsible for collecting, using, and disclosing your Personal Information under this Privacy Policy. 

If you have any questions regarding this Privacy Policy, please contact us at: info@asteroidassistance.com 

 

 

 

 

General Considerations