GENERAL PROVISIONS:
1. DATA CONTROLLER.
Paulina Franco Ortiz (hereinafter, the “OWNER of NEW FOR YOU”) identified with citizenship card No. 1037671831 with address at Calle 5 Sur #32-283, Medellín, Antioquia, cell phone 3122018561 and email somosnfy@gmail.com.
2. OBJECTIVE.
For the purposes of the aforementioned policy, the owner of NEW FOR YOU acts as the controller of personal data by virtue of the collection carried out directly from the data subjects, for this reason, the policy has as its main objective the definition and subsequent determination of the issues related to the procedures, principles and security policies according to which the proper treatment of the personal data that is collected and processed will be guaranteed.
3. REGULATIONS.
The policy was developed in accordance with the provisions of current regulations on the matter, thus, this document complies with the provisions of Articles 15 and 20 of the Political Constitution of Colombia, Law 1581 of 2012, Regulatory Decree 1377 of 2013 and other applicable regulations on Personal Data Protection.
4. PRINCIPLES.
The policy incorporates general principles regarding the processing of personal data, which have a broad application and encompass all its content. These principles are taken from Article 4 of Law 1581 of 2012.
5. DUTIES OF THE DATA CONTROLLER.
The owner of NEW FOR YOU will have the following duties in their capacity as data controller:
i. Guarantee the data subject the full and effective exercise of their rights in relation to their personal data.
ii. Correct the information when it is incorrect and communicate the relevant information.
iii. Inform the data subjects about the purpose of the data collection and their respective rights.
iv. Ensure that the information is truthful, complete, accurate and up-to-date.
v. Store the information under secure digital conditions.
vi. Process inquiries and complaints in accordance with the terms established by law.
vii. Use the personal data of the holders only for those purposes for which it is duly authorized, respecting the current regulations on personal data.
6. TRANSFER OF PERSONAL DATA TO A THIRD PARTY.
The owner of NEW FOR YOU may entrust the processing of personal data held by a third party, so that the latter may carry out communication, promotion, marketing, programs, and special projects that allow, among other things, the fulfillment of the following purpose: entering into or maintaining contractual relationships with the data subjects. This will be done respecting the purposes that the data subject has directly authorized or that are authorized by law.
The person in charge of processing any of the databases provided or shared by the Owner of NEW FOR YOU, must comply with the following duties:
i. Guarantee to the data subject, at all times, the full and effective exercise of the right of habeas data.
ii. Carry out the timely updating, rectification or deletion of data in accordance with the terms established by law.
iii. Keep the information under the necessary security conditions to prevent its alteration, loss, consultation, use or unauthorized or fraudulent access.
iv. Adopt an internal policy of procedures to ensure proper compliance with regulations relating to the processing of personal data.
7. INFORMATION PROCESSING.
i. Collection channels: The data subject may authorize the owner of NEW FOR YOU to process their personal data through different means such as: electronic documents, data messages, websites.
ii. Collection mechanisms: Personal data is collected through a virtual mechanism using technological means such as websites and social media accounts.
8. AUTHORIZATION FOR USE OF PERSONAL DATA.
NEW FOR YOU, acting as the data controller of personal data and transactional information related to sales, obtains clear, express, prior, informed, and uncoerced authorization from data subjects through electronic forms, data collection formats, and/or other means available or that may become available for this purpose. For this purpose, data subjects will be asked for their authorization, and they will be informed of the purpose for which their personal data will be processed. This does not apply in cases expressly authorized by law, which are regulated in Article 10 of Law 1581 of 2012.
9. TREATMENTS AND PURPOSE.
The purposes for which the data will be processed are as follows:
i. Establishment of communication channels with the data subject, through email, telephone calls, sending text messages, WhatsApp, instant messaging tools, or any communication channel known or yet to be known, provided that it is authorized by the data subject.
ii. Offer services and commercial campaigns.
iii. Participate in benefits and/or loyalty programs.
iv. Contact to conduct market research and satisfaction surveys; v) Manage the procedures for requests, complaints and claims.
v. Share with allied and associated companies for the offering of products and services.
10. RIGHTS OF THE HOLDERS.
The data subject shall have the right to:
i. Access free of charge the provided data that has been processed.
ii. To know, update and rectify your information in the face of partial, inaccurate, incomplete, fragmented, misleading data, or data whose processing is prohibited or has not been authorized.
iii. Request proof of the authorization granted.
iv. To file complaints with the Superintendency of Industry and Commerce (SIC) for violations of the provisions of current regulations.
v. Revoke the authorization and/or request the deletion of the data, provided that there is no legal or contractual obligation that prevents its removal.
11. SUPPORT CHANNELS.
Requests, complaints and claims related to the processing of personal data can be submitted through the following channel: email somosnfy@gmail.com.
12. PROCEDURE FOR SUBMITTING AN INQUIRY.
When the data subject seeks to know, access the information, or request a copy of the authorization, their request will be resolved within ten (10) business days following the date of receipt. If it is not possible to address the request within the aforementioned period, the data subject will be informed of this situation, the reasons for the delay, and the date on which the request will be resolved, which in no case will exceed five (5) business days following the expiration of the initial period.
13. PROCEDURE FOR FILING A COMPLAINT.
When the data subject seeks to rectify, update, or delete any of their personal data, or revoke their authorization, their request will be resolved within fifteen (15) business days following the date of receipt. If it is not possible to address the request within the aforementioned timeframe, the data subject will be informed of this situation, the reasons for the delay, and the date on which the request will be resolved, which in no case will exceed eight (8) business days following the expiration of the initial timeframe.
To file and process your claim, please provide the following information:
i. Full name (first and last name).
ii. Type and number of identity document.
iii. Contact details: physical address, email address and contact telephone number.
iv. Reason(s) or fact(s) that gave rise to the claim, with a brief description of the right that you wish to exercise.
Once the terms indicated by Law 1581 of 2012 and the other regulations that govern or complement it have been met, the holder who is denied, totally or partially, the exercise of the rights of access, update, rectification, deletion and revocation may put his case in the knowledge of the Superintendency of Industry and Commerce - Delegation for the Protection of Personal Data.
14. TRANSFER OF DATA BY THIRD PARTIES (NATIONAL AND INTERNATIONAL).
The Owner of NEW FOR YOU may transmit or transfer, partially or totally, personal data and transactional sales information to third parties in the country or abroad in order to fulfill its economic activity, for which it requests authorization from its owner and implements the necessary actions for compliance with the regulatory precepts established in Colombian national legislation, through the signing of agreements for the transfer and processing of personal data.
15. VALIDITY.
This Personal Data Processing Policy is effective from the date of its publication.
The personal data provided will be retained until its deletion is requested by the data subject and provided there is no legal obligation to retain it. Any aspect of this matter not covered in this Policy will be governed by the General Data Protection Regulation in force in the Republic of Colombia.