Personal data processing policy
PRIVACY POLICY
Controller – who is responsible for data processing?
Identity:
Address Carrera 11a # 95-58
CC: 1003567965
Phone: 3103040334
Email: mucura.co@gmail.com
Contact: Madeleine Barrera
Domain name: mucura.com.co
In compliance with the provisions of recent regulations aimed at protecting your personal data, we hereby comply with the provisions of Article 10 of Decree 1377 of 2013 as follows:
Múcura Jewelry , in compliance with the provisions of Law 1581 of 2012 regulated by Decree 1377 of 2013, informs you that the personal data accessed as a result of the provision of the service will be stored in a database to fulfill the purposes stated in this authorization and will be treated in accordance with the policies and procedures established for the treatment thereof.
Additionally, we inform you, in accordance with our personal data processing policies, that the mechanisms through which we use these are secure and confidential, preventing unwanted access by third parties and ensuring their confidentiality, backed by procedures aimed at the effective fulfillment of the rights enshrined in your favor, such as:
Know, update and rectify your personal data.
Revoke this authorization and/or request the deletion of the data.
Access your personal data free of charge.
Submit complaints and claims regarding the way in which your data is processed.
PERSONAL DATA PROCESSING POLICY
INTRODUCTION
This policy is issued in compliance with Law 1581 of 2012, Decree 1377 of 2013 and regulations that modify or add to the personal data protection regime and seeks to ensure that MÚCURA JEWELRY , in its capacity as responsible and in charge of managing the
personal information, carry out the Processing of the same in strict compliance with the applicable regulations, guaranteeing the rights that the Holders of the information have.
DEFINITIONS
-Personal data: Any information linked to or that can be associated with one or more specific or identifiable natural persons.
-Private data: Data that, due to its intimate or reserved nature, is only relevant to the Owner.
-Semi-private data: Semi-private data is data that is not of an intimate, reserved, or public nature and whose knowledge or disclosure may be of interest.
not only to its Owner but to a certain sector or group of people or to society in general, such as financial and credit data for commercial activity.
-Public data: This is the data classified as such according to the mandates of the Law or the Political Constitution and all those that are not semi-private.
or private, in accordance with Law 1266 of 2008. Public data includes, among others, data contained in public documents, duly executed court rulings that are not subject to reservation, and data relating to the marital status of persons.
-Authorization: Prior, express and informed consent of the Owner to carry out the Processing of personal data.
-Database: Organized set of personal data that is subject to processing.
Data Processor: Natural or legal person, public or private, who by itself or in association with others, carries out the processing of personal data on behalf of the Data Controller.
-Data Controller: Natural or legal person, public or private, who by itself or in association with others, decides on the database and/or the processing of the data.
-Owner: Natural person whose personal data is subject to processing.
-Treatment: Any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion.
- Sensitive data: Data that affects the privacy of the Owner or whose improper use may lead to discrimination, such as data that reveals racial or ethnic origin, political orientation, religious or philosophical beliefs, membership in unions, social organizations, human rights organizations or that promote the interests of any political party or that guarantee the rights and guarantees of opposition political parties, as well as data relating to health, sexual life and biometric data.
AIM
The objective of this policy is to define and establish clear and mandatory guidelines applicable to the processing of personal data collected, processed and/or stored by MÚCURA JEWELRY , by virtue of the development of its corporate purpose, in its capacity as controller and data processor.
All the precepts contained in this policy are established with the purpose of guaranteeing each and every one of the rights of the owners of the information and in this way avoiding that their rights and/or guarantees are violated.
SCOPE OF APPLICATION
These policies will be applicable to the processing of personal data carried out by MÚCURA JEWELRY , in all places where it has a presence and to any database created by the company for the development of its commercial activity.
All organizational processes of MÚCURA JEWELRY that involve the processing of personal data must be subject to the provisions of this Policy.
POLICIES
INFORMATION OF THE PERSON RESPONSIBLE AND IN CHARGE OF THE PROCESSING OF PERSONAL INFORMATION.
The company responsible for and in charge of processing personal data is:
-Company name: MÚCURA JEWELRY
-Address: Bogotá
-Address: Carrera 11a # 95-58
email: mucura.co@gmail.com
Phone: 3103040334
PROCESSING TO WHICH PERSONAL DATA WILL BE SUBJECTED AND ITS PURPOSE.
In the exercise of its corporate purpose, the company MÚCURA JEWELRY, carries out directly, that is, it holds the status of responsible and in charge of the Processing of personal data of its shareholders, suppliers, clients and users of its products.
Likewise, in compliance with applicable legislation, the company MÚCURA JEWELRY ., may require transmitting or transferring said data to the indicated platforms and/or to the security systems implemented by it.
In accordance with the principles of purpose and freedom, the collection of personal data by MÚCURA JEWELRY will be limited to those data
Personal data that are relevant and appropriate for the purpose for which they are collected or required, in accordance with current regulations. Except in cases expressly provided for by law, personal data may not be collected without the Data Subject's authorization. Personal data are collected, stored, organized, used, circulated, transmitted, transferred, updated, rectified, deleted, eliminated and managed according to the purpose or purposes of each type of Processing, as indicated in the third section of this Policy.
Processing of personal data of clients.
Customers' personal information will be treated in a completely confidential manner and will only be used for the development of the previously established business relationship.
The personal data of clients will be stored digitally and physically in a folder identified with the name of each one of them, where only the information strictly necessary for the analysis, granting and administration of business credit, location data, commercial and/or financial references and other data that allow creating and maintaining a solid and lasting business relationship will be stored.
Processing of suppliers' personal data.
The company MÚCURA JEWELRY ., will only collect the data that is strictly necessary for the selection, evaluation and development of the contract that is signed with the respective provider. This agreement must include a provision where both parties agree to provide adequate and authorized treatment to the personal data that they mutually exchange.
The company MÚCURA JEWELRY will collect from its suppliers the personal data of its employees, which are necessary, which for security reasons must be analyzed and evaluated, taking into account the characteristics of the services contracted with the supplier. The personal data of employees of the suppliers collected by the company MÚCURA JEWELRY will have as its sole purpose, to verify the suitability of the supplier's employees, for the development of the object of the previously signed contract.
Therefore, once such a situation has been verified, the information will be returned to the supplier, except when it is necessary to have
the aforementioned personal data.
All employees of the company MÚCURA JEWELRY , who have access to supplier information, must treat it in accordance with the provisions of this document.
Processing of Personal Data of Shareholders.
The personal data of persons who become shareholders of MÚCURA JEWELRY . , will be considered reserved and confidential information, since it is registered in the commercial books and is confidential by legal provision. Therefore, access to such personal information will be carried out in accordance with the rules contained in the Commercial Code that regulate the matter.
Processing of personal data of girls, boys and/or adolescents.
The processing of personal data of children and/or adolescents that are of a public nature will comply with the following parameters and requirements:
-That responds to and respects the best interests of children and adolescents.
-Ensure respect for their fundamental rights.
-Assessment of the opinion of the minor when he or she has the maturity, autonomy and capacity to understand the matter.
Once the above requirements have been met, the legal representative of the child or adolescent may grant authorization for the Treatment, after exercising the minor's right to be heard, an opinion that must be assessed taking into account the maturity, autonomy and capacity to
understand the matter
Processing of sensitive data:
The company MÚCURA JEWELRY will strictly observe the legal limitations on the processing of sensitive data, and will therefore ensure that:
The Owner has given explicit authorization to such processing, except in cases where the granting of such authorization is not required by law.
The Processing is necessary to safeguard the vital interest of the Data Subject and the Data Subject is physically or legally incapacitated. In such events, the legal representatives must grant their authorization.
The Treatment is carried out in the course of legitimate activities and with the appropriate guarantees by a foundation, NGO, association or any other non-profit organization, whose purpose is political, philosophical, religious or union, provided that they refer exclusively to their
members or to persons who maintain regular contact due to its purpose. In these events, the data may not be provided to third parties without the authorization of the Owner.
The Processing refers to data that is necessary for the recognition, exercise or defense of a right in a judicial process.
The Processing has a historical, statistical or scientific purpose. In this event, measures must be taken to erase the identity of the Data Subjects.
PURPOSES OF PROCESSING.
The purposes of the processing of personal data carried out by MÚCURA JEWELRY . , are the following:
2. Sending information related to promotions or new collections for MÚCURA JEWELRY customers. Sending information related to the contractual relationship.
3. Registration of statistical information of MÚCURA JEWELRY clients Registration of information of suppliers and contractors.
5. Communication, consolidation, organization, updating, control, accreditation, assurance, statistics, reporting, maintenance, interaction, and management of the actions, information and activities in which suppliers, contractors and their employees are related or linked with
MÚCURA JEWELRY
RIGHTS THAT ASSIST YOU AS DATA OWNER.
In accordance with the provisions of Article 8 of Law 1581 of 2012 and Decree 1377 of 2013, the Owner of the personal data has the following rights:
a) To know, update and rectify your personal data in front of MÚCURA JEWELRY , in its capacity as controller and processor of the Processing. This right may be exercised in the case of partial, inaccurate, incomplete, fragmented data that may lead to error, or data whose processing is expressly prohibited or has not been authorized.
b) Request proof of the authorization granted to MÚCURA JEWELRY , in its capacity as controller and processor of the Processing, except when it is expressly excepted as a requirement for the Processing, in accordance with the provisions of article 10 of Law 1581 of 2012 (or in the regulations that regulate, add to, complement, modify or repeal it), or when the continuity of the processing has been presented as provided for in section 4 of article 10 of Decree 1377 of 2013.
c) Be informed by MÚCURA JEWELRY . , upon request, regarding the use that has been given to your personal data.
d) Submit complaints to the Superintendency of Industry and Commerce for violations of the provisions of Law 1581 of 2012, once you have exhausted the consultation or claim process with MÚCURA JEWELRY .
e) Revoke the authorization and/or request the deletion of the data when the Processing does not respect the constitutional and legal principles, rights and guarantees. The revocation and/or deletion will proceed when the Superintendence of Industry and Commerce has determined that in the Processing the person responsible or in charge has engaged in conduct contrary to the law and the Constitution.
f) Access free of charge to your personal data that have been subject to processing.
DUTIES OF MÚCURA JEWELRY., AS CONTROLLER OF THE DATA PROCESSING
The duties of those responsible for the Treatment are those established in article seventeen (17) of Law 1581 of 2012:
a) Guarantee the Holder, at all times, the full and effective exercise of the right to habeas data.
b) Request and retain, under the conditions provided for in this law, a copy of the respective authorization granted by the Owner.
c) Duly inform the Owner about the purpose of the collection and the rights granted to him by virtue of the authorization granted.
d) Keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, unauthorized or fraudulent use or access.
e) Ensure that the information provided to the Data Processor is true, complete, accurate, up-to-date, verifiable and understandable.
f) Update the information, communicating in a timely manner to the Data Processor all new developments regarding the data previously provided and adopting the other measures necessary to ensure that the information provided to the Data Processor remains up to date.
g) Rectify the information when it is incorrect and communicate the relevant information to the Data Processor.
h) Provide the Data Processor, as the case may be, only with data whose processing has been previously authorized in accordance with the provisions of this law.
i) Demand that the Data Processor at all times respect the security and privacy conditions of the Owner's information.
j) Process queries and complaints made under the terms set out in this law.
k) Adopt an internal manual of policies and procedures to ensure proper compliance with this law and in particular, for the attention
of queries and complaints.
l) Inform the Data Processor when certain information is being disputed by the Owner, once the claim has been submitted and the respective process has not been completed.
m) Inform the Owner, upon request, about the use given to his/her data.
n) Inform the data protection authority when security codes are breached and there are risks in the management of the information of the Holders.
o) Comply with the instructions and requirements issued by the Superintendency of Industry and Commerce.
AREA RESPONSIBLE FOR HANDLING REQUESTS, CONSULTATIONS AND COMPLAINTS.
The administrative area of MÚCURA JEWELRY . will be responsible for handling requests, queries, claims, complaints or for exercising the rights of the owner of the personal information.
PROCEDURE FOR EXERCISING THE RIGHTS OF THE DATA OWNER
- Procedure for access and consultation.
The Data Owner or his/her successors in title may consult the information contained in the databases held by MÚCURA JEWELRY . , for which they must make the corresponding request in writing and file it with the Area in charge of MÚCURA JEWELRY . , Monday through Friday from 7:00 a.m. to 5:00 p.m. , at Carrera 11a No. 95-58 in the city of Bogotá. In order to prevent unauthorized third parties from accessing the personal information of the Data Owner, it will be necessary to first establish the identification of the Owner. When the request is made by a person other than the Owner and it is not proven that the person acts on behalf of the latter, it will be considered not submitted.
The query will be answered within a maximum period of ten (10) business days from the date of receipt. When it is not possible to answer the query within this period, the interested party will be informed, stating the reasons for the delay and indicating the date on which the query will be answered, which in no case may exceed five (5) business days following the expiration of the first period.
Procedure to request an update, correction, deletion, revocation of authorization or to file claims
The Owner, or his/her successors in title, who consider that the information contained in the MÚCURA JEWELRY databases should be corrected, updated or deleted, or when they notice the alleged breach of any of the duties contained in this law, may file a claim with MÚCURA JEWELRY , which will be processed under the following rules, in accordance with article 15 of law 1581 of 2012:
a) The claim will be made by means of a request filed with the Administrative Area of MÚCURA JEWELRY , Monday through Friday from 7:00 am to 5:00 pm , at Carrera 11a No. 95-58 in the city of Bogotá.
b) To prevent unauthorized third parties from accessing the personal information of the Data Subject, it will be necessary to first establish the identification of the Data Subject. When the request is made by a person other than the Data Subject and it is not proven that the person acts on behalf of the Data Subject,
will be deemed not to have been submitted.
c) The application must contain the following information:
(i) The identification of the Holder.
(ii) Contact information (physical and/or electronic address and contact telephone numbers).
(iii) Documents proving the identity of the Holder, or the representation of his representative.
(iv) A clear and precise description of the personal data in respect of which the Data Subject seeks to exercise any of the rights.
(v) The description of the facts giving rise to the claim.
(vi) The documents that you wish to assert.
(vii) Signature, identification number and fingerprint.
(viii) Filing in original.
d) If the claim is incomplete, MÚCURA JEWELRY will require the interested party within five (5) days following receipt of the claim to correct the deficiencies. After two (2) months from the date of the request, without the applicant submitting the required information, the interested party will be required to correct the deficiencies.
will understand that you have withdrawn the claim.
e) If the Area that receives the claim is not competent to resolve it, it will be transferred to the appropriate authority within a maximum period of two (2) business days.
and will inform the interested party of the situation.
f) Once the complete claim has been received, a legend stating “claim in process” and the reason for the claim will be included in the database within a period of no more than two (2) business days. This legend must be maintained until the claim is decided.
g) The maximum term to address the claim will be fifteen (15) business days counted from the day following the date of receipt. When there is no
If it is possible to address the claim within this period, the interested party will be informed of the reasons for the delay and the date on which their claim will be addressed,
which in no case may exceed eight (8) business days following the expiration of the first term. Data Deletion
The Owner has the right, at any time, to request MÚCURA JEWELRY . , to delete (eliminate) his/her personal data when:
a) Consider that they are not being treated in accordance with the principles, duties and obligations provided for in Law 1581 of 2012.
b) They are no longer necessary or relevant for the purpose for which they were collected.
c) The period necessary for the fulfillment of the purposes for which they were collected has been exceeded.
d) This deletion implies the total or partial elimination of personal information as requested by the Owner in the records, files,
databases or treatments carried out by MÚCURA JEWELRY.
e) It is important to note that the right of cancellation is not absolute and the person responsible may deny the exercise of the right when:
(i) The request for deletion of information will not proceed when the Owner has a legal or contractual obligation to remain in the database.
(ii) The deletion of data hinders judicial or administrative actions linked to tax obligations, the investigation and prosecution of crimes or the updating of administrative sanctions.
(iii) The data is necessary to protect the legally protected interests of the Owner, to carry out an action based on the public interest, or
to comply with a legal obligation acquired by the Owner.
Revocation of Authorization.
The Owner of the personal data may revoke consent to the Processing of his/her personal data at any time, provided that this is not prevented by a legal provision.
INFORMATION SECURITY.
In accordance with the security principle, MÚCURA JEWELRY . , has adopted reasonable technical, administrative and human measures to protect the information of the Owners and prevent adulteration, loss, consultation, unauthorized or fraudulent use or access. Access to personal data is restricted to its Owners. MÚCURA JEWELRY . , will not allow access to this information by third parties under conditions other than those announced, except for an express request from the Data Owner or persons authorized in accordance with national regulations. Notwithstanding the foregoing, MÚCURA JEWELRY , will not be responsible for any action tending to infringe the security measures established for the protection of Personal Data.
VALIDITY OF THE POLICY.
The Policy is effective as of March 12, 2020.
As a general rule, the term of authorizations on the use of personal data is understood as the end of the commercial relationship or the link to the service and during the exercise of the company's corporate purpose.