Cookie and Similar Technologies Policy
Last updated: July 2026 · Version 2026.08
At https://ogi.crm, OGI Global uses cookies and similar technologies under Colombian Law 1581/2012 and MTIC Resolution 2893/2020. Read together with our Personal Data Processing Policy.
1. Controller
Controller: OGI Global. Tax ID: [Completar NIT ante registro mercantil]. Contact: privacidad@ogi.crm.
Cookie use involving personal data is also governed by Colombian habeas data law.
2. Legal framework
Applicable rules:
- Colombian Constitution, Article 15 (habeas data)
- Statutory Law 1581 of 2012
- Decree 1074 of 2015
- Resolution 2893 of 2020 (MTIC — cookies and e-government sites)
- SIC External Circular 002 of 2015
3. What are cookies and similar technologies
Files or identifiers (HTTP cookies, localStorage, sessionStorage, pixels, scripts) stored by the browser or device.
Resolution 2893/2020 recognizes these may involve personal data processing under Law 1581/2012.
4. Cookie categories
Classification by purpose and consent:
- Strictly necessary: Exempt from prior consent (Res. 2893/2020, item 3). Essential for security and operation.
- Preferences / functional: Require prior, express and informed consent (Law 1581/2012; Res. 2893/2020, items 2 and 4).
- Analytics / measurement: Require prior consent. Disabled by default (Res. 2893/2020, item 3).
5. Detailed inventory
Currently defined technologies. Third-party analytics are not activated without express consent.
| Identifier | Type | Category | Purpose | Data processed | Duration | Manager |
|---|---|---|---|---|---|---|
| ogi-cookie-consent | localStorage (first-party) | Strictly necessary | Stores the version and cookie categories accepted or rejected by the data subject. | Consent preferences (no directly identifying data). | 12 months or until revoked | OGI Global |
| sb-*-auth-token | HTTP cookie (third party — Supabase) | Strictly necessary | Secure authentication for authorized staff in the internal CRM module. | Session identifiers and access tokens (staff users only). | Session / per provider policy | Supabase Inc. |
| ogi-theme | localStorage (first-party) | Preferences / functional | Remembers the light or dark theme selected by the user. | Visual preference value (light/dark). | Persistent until revoked or manually cleared | OGI Global |
| ogi-chat-auto-shown / ogi-chat-completed | sessionStorage (first-party) | Preferences / functional | Controls chat widget display within the browser session. | UI state flags (no personal data of the data subject). | Browser session | OGI Global |
| TBD (e.g. _ga) | Cookie / script (third parties, future) | Analytics / measurement | Aggregated statistical measurement of site usage. Not activated without express consent. | Aggregated or pseudonymized browsing data, if authorized by the data subject. | Per tool (24 months max recommended) | Por definir |
6. Consent mechanism
On first visit a notice offers: Accept all, Necessary only and Configure.
By default only strictly necessary cookies are active (Res. 2893/2020, item 3).
Consent is stored in localStorage (ogi-cookie-consent) with policy version and date.
7. Revocation and preference changes
Revoke or change your choice anytime via Configure cookies in the footer.
Revocation does not affect lawfulness of processing based on consent before revocation.
Rejecting preferences clears locally stored theme preference.
8. Third-party cookies and transfers
Some cookies are managed by third parties (e.g. Supabase for CRM session). Processing outside Colombia may occur.
Third-party analytics or marketing cookies activate only with express authorization.
9. Browser settings
You may block or delete cookies in your browser. Blocking necessary cookies may affect CRM access for authorized staff.
10. Relationship with form personal data
Form submission requires express acceptance of the Personal Data Processing Policy, independent of cookie consent.
11. Updates
We will update this policy when technologies change, increment the version and request new consent when required.