PERSONAL
DATA PROCESSING POLICY
Parra Rodriguez Abogados, with tax
identification number (TIN) 900.616.317 - 9 (hereinafter the "Firm"
or the "Responsible Party") will apply the terms and conditions of
this Policy for the Processing of Personal Data (hereinafter, the
"Policy"). In compliance with the provisions of Law 1581 of 2012 and
Decree 1377 of 2013.
In the Policy, the mechanisms by means of which the Firm guarantees an adequate management of Personal Data collected in the Firm´s Databases are described, to allow the Holders the exercise of the right of Habeas Data.
1. Definitions
In this Policy, the capitalized terms and
expressions have the following meanings unless the context requires otherwise:
Appointed Party means the natural or legal
person that Processes Personal Data on behalf of the Firm.
Authorized Persons means the persons that
will be able to exercise the rights on behalf of the Holder and which are
enunciated in article 8 of this Policy.
Authorization means the prior, express and
informed consent given by Holder to the Firm for the Processing of the Holder’s
Personal Data.
Database means the physical or electronic
organized set of Personal Data that is subject to Processing.
Holder means the owner of the Personal Data
that will be processed by the Firm.
Personal Data means the information that can be associated to one or several natural persons which can be determined or is determinable. This includes biometric data.
www.prslaws.com / Carrera 9 No. 74 08 Oficina 504 / Bogotá D.C., 110221, Colombia / tel.: + 57 (1) 3764200 fax: + 57 (1) 3761707 / NIT: 900616317-9
Parra Rodríguez Abogados S.A.S.
Processing means any operation performed on
the Personal Data, such as: collection, storage, use, circulation and deletion.
Public Data means the information that can be
associated with the civil status of a person, its profession, its condition of
merchant or of public servant.
Responsible Party or Firm means the natural
or legal person that decides on the Databases and/or Personal Data.
Sensitive Data means the information that
affects the intimacy of the Holder and whose undue use could generate their
discrimination. Sensitive Data includes the information that reveals: (i) racial
or ethnic origin, the political orientation, religious or philosophical
convictions, belonging to unions, social organizations, human rights
organizations or those that promote the interests of any political party or
that guarantees the rights and opposition of political parties; (iii) health-related data; to the
sex life; and (iv) biometric data.
SIC means the Superintendence of Industry and Commerce.
Transference means the delivery of Personal
Data from a Responsible Party to a receiver, so that the recipient Processes it
as a Responsible Party.
Transmission means the delivery of Personal
Data to the Appointed Party for its Processing under the control and
responsibility of the Responsible Party.
Transmission Contract means the contract
between the Firm and the Appointed Party for the Processing of Personal Data
which is under their control and responsibility. In said contract, the Appointed
Party will Process the Personal Data in accordance with the terms and
conditions of this Policy.
2. Obligations of the Firm for the Processing of Personal Data:
3. Purpose of Personal Data Processing:
4. Type of Personal Data collected by the Responsible Party:
5. Processing of Sensitive Data:
5.1. The Firm will only deal with Sensitive Data when it will be necessary for the fulfilment of its legal or contractual obligations with the Holder.
5.2. In the Treatment of Sensitive Data, the Firm or Appointed Party shall:
6. The Authorization for Processing shall:
6.1. If the Personal Data supplied to the Firm belongs to third parties, the Firm understands that the person who delivers the Personal Data is authorized by the Holder.
6.2. While using the Firm´s website, the
Holder declares that they have read, understood and accepted the terms of this
Policy.
7. The Holder has rights to:
7.1. The request for suppression and/or the
revocation of the Authorization shall not proceed when the Holder has a legal
or contractual duty to remain in the Database of the Responsible Party.
7.2. The Holder shall have the right to consult his Personal Data free of charge:
(i) at least once
each calendar month; and
(ii) whenever there are substantial modifications of the Policy that motivate new consultations.
7.3. For inquiries whose periodicity is greater than that indicated in section 7.2 above, the Responsible Party may charge the Holder the costs of shipping, reproduction and, where appropriate, certification of documents.
7.4. The Holder shall be responsible for the
veracity, authenticity, validity and accuracy of the information provided and
undertakes to notify the Firm of the changes to that information.
8. The Authorized Persons are:
9. Procedure for the performance of Holder´s rights:
9.1. Procedure for consulting Personal Data:
9.1.1. The Holder or the Authorized Person must send a written communication to the Firm that must have at least the following information:
9.1.2. The communication and its attachments
must be sent to: Parra Rodríguez Abogados S.A.S.
Carrera 9 No. 74 - 08, office 504, Bogotá D.C., 110221, Colombia Directed to: Mr. John Farieta.Or to the e-mail datospersonales@pralaws.com
9.1.3. The Firm will respond to the request within a maximum period of 10 business days counted from the date of receipt of the communication.
9.1.4. When it is not possible to respond the request within 10 business days, the Firm will send a communication to the interested party stating the reasons for the delay and the date on which the request will be answered.
9.1.5. The Firm may not exceed 15 business days from the receipt of the request to respond to it.
9.1.6. The Firm will send the answer in the same way as the request was submitted or, if applicable, by any other means agreed with the interested party.
9.2. Procedure for claims, updates, corrections and/or eliminations of Personal Data:
9.2.1. The Holder or the Authorized Person must send a written communication to the Firm in which at least the following information is available:
9.2.2. The
communication and its attachments must be sent to: Parra Rodríguez Abogados
S.A.S.
Carrera 9 No. 74 - 08, office 504, Bogotá
D.C., 110221, Colombia Directed to: Mr. John Farieta.
Or to the e-mail datospersonales@pralaws.com
9.2.3. Within 2 working days following the reception of the claim the Firm must include a legend in the Database stating "claim in process". This legend must be maintained until the claim is decided.
9.2.4. In case the person who receives the claim is not competent to resolve it, the Firm will transfer to claim to the corresponding person within a maximum period of 2 working days and the interested party will be informed of the situation.
9.2.5. If the information provided in the claim is erroneous and/or insufficient, the Firm will request, within 5 business days after the reception of the claim, the information and/or documents necessary to process it.
9.2.6. If, after 2 months from the request, the applicant has not provided the information and / or the required documents, the claim will be considered abandoned.
9.2.7. From the date of reception of the claim, with the complete information, the Firm will have 15 business days to address the claim.
9.2.8. If, even though the information of the claim is complete, it is not possible to attend to it within the term established in the previous point, the Firm must inform the interested party of the reasons for the delay and the date on which the claim will be handled.
9.2.9. The deadline to address the claim may not exceed 23 business days from the reception of the claim with full information.
9.2.10. The response to the claim shall be delivered in the same way as the one submitted or by any other means agreed with the interested party.
10. Transfer and Transmissions of Personal Data:
10.1. The Firm may transfer Holder´s Personal Data to comply with its legal and/or commercial obligations.
10.2. The recipients of the Personal Data are obliged to maintain their confidentiality and to comply with the Policy and the applicable law.
10.3. The
Firm may Transmit and Transfer international Personal Data provided that the
recipient is a country that provides an adequate level of data protection.
11. Duration of Processing:
11.1. The Processing will last as long as reasonable and necessary for the fulfilment of its purpose.
11.2. The Firm may continue to process the Personal Data despite the termination of the contractual relationship with the Holder, when it will aid to comply with the Firm´s legal, administrative and accounting obligations.
11.3. The Firm will proceed to the suppression of Personal Data when there is no longer a legal or contractual obligation that justifies the Processing of Personal Data.
12. Notices
If you wish to contact us in relation to this Policy or to the way we are Processing of your Personal Data, you may do so at our offices located at Carrera 9 No. 74 - 08, office 504, Bogotá D.C., 110221, Colombia, Tel: (+571) 3764200 or at the e-mail address datospersonales@pralaws.com
13. Date
of publication
This Policy became effective on 22 September
2016 and was amended on 25 May 2018.