Data processing policy
In compliance with Law 1581 of 2012, Decree 1377 of 2013 and the European Data Protection Regulation; Fundación Parque Jaime Duque respects the right of individuals to know, update and protect their personal data housed in the organization. Fundación Parque Jaime Duque respects the rights of information protection and data processing regulation.
Mandatory
All employees of the Jaime Duque Park Foundation know, respect and comply with the regulations of handling and protection of personal data, committing themselves not to provide information about the owners to third parties to the organization.
General
The purpose of this document is to establish the Personal Data Treatment Policy of Fundación Parque Jaime Duque identified with the Nit: 890802259-1 whose facilities are located at Kilometer 34 on the Autopista Norte in the municipality of Tocancipá, Cundinamarca.
Responsible
Non-profit entity of Special Regime, commercial establishment Parque Jaime Duque; domiciled in the municipality of Tocancipá - Cundinamarca identified with the Nit 890802259-1, in legal representation of Mrs. Maria Amparo Torres Quin identified with Citizenship Card number 39786553 issued in the city of Bogotá.
Name of the institution: Parque Jaime Duque Foundation
Address: Kilometer marker 34 Autopista Norte; Tocancipá- Cundinamarca.
Phone: 6200681
E-mail: [email protected]
Website: www.parquejaimeduque.com
Definitions
Authorization: Prior, express and informed consent of the Data Subject to carry out the Processing of personal data.
Database: Organized set of personal data that is subject to Processing.
Personal data: Any information linked or that can be associated to one or several determined or determinable natural persons.
Data Processor: Natural or legal person, public or private, which by itself or in association with others, performs the processing of personal data on behalf of the data controller.
Responsible for the treatment: Natural or legal person, public or private, who by himself or in association with others, decides on the database and/or the processing of data.
Headline: Natural person whose personal data is subject to processing.
Treatment: Any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion.
Principle of restricted access and circulation: The Processing is subject to the limits derived from the nature of the personal data, the provisions of this law and the Constitution. In this sense, the Processing may only be carried out by persons authorized by the Data Subject and/or by the persons provided for in this law.
Personal data, except for public information, may not be made available on the Internet or other means of mass dissemination or communication, unless access is technically controllable in order to provide restricted knowledge only to Data Holders or third parties authorized in accordance with this law.
Safety principle: The information subject to Processing by the Data Controller or Data Processor referred to in this law shall be handled with the technical, human and administrative measures necessary to provide security to the records avoiding their adulteration, loss, consultation, use or unauthorized or fraudulent access.
Principle of confidentiality: All persons involved in the processing of personal data that are not of a public nature are obliged to guarantee the confidentiality of the information, even after the end of their relationship with any of the tasks involved in the processing, and may only provide or communicate personal data when it corresponds to the development of the activities authorized in this law and under the terms of the same.
Principles for data processing
Principle of legality
The treatment referred to in this law is a regulated activity that must be subject to the provisions of the law and other provisions that develop it; so the information housed in the Fundación Parque Jaime Duque will be used in accordance with the active legislation and legal provisions respecting the rights of the owners.
Principle of finality
The Processing must obey a legitimate purpose in accordance with the Constitution and the Law, which must be informed to the Data Subject.
Principle of freedom
Processing may only be carried out with the prior, express and informed consent of the Data Subject. Personal data may not be obtained or disclosed without prior authorization, or in the absence of legal or judicial mandate that relieves the consent.
The holder must be informed in a clear and timely manner about the use of his/her data and its purposes within the organization.
Principle of truthfulness or quality
The information subject to Processing must be truthful, complete, accurate, updated, verifiable and understandable. The processing of partial, incomplete, fractioned or misleading data is prohibited.
Fundación Parque Jaime Duque must have means to protect the Data related to the owners, in the same way to provide the mechanisms to update, rectify or delete the data.
Principle of transparency
The right of the Data Subject to obtain from the Data Controller or the Data Processor, at any time and without restrictions, information about his registration in the databases of Fundación Parque Jaime Duque must be guaranteed.
Principle of restricted access and circulation
The information collected by Fundación Parque Jaime Duque will only be disclosed or sent after a request to the owner, persons authorized by the owner or judicial entities that require it.
Safety principle
Each of the collaborators, suppliers or allies must know and accept the measures established by Fundación Parque Jaime Duque for the protection of personal data, which seek to avoid the misuse, adulteration, loss, consultation and disclosure of the information stored in the databases.
Principle of confidentiality
Persons involved in data processing must maintain a principle of confidentiality of the information available to them, even if it has left the unit or the organization.
The Fundación Parque Jaime Duque guarantees that all projects to be carried out that contain headline information will be reviewed by the technology and systems area in order to safeguard the information and guarantee its proper use.
Content of the databases
The Jaime Duque Park Foundation's databases store information corresponding to contact data (name, identity document, age, telephone, payment record and opinion) of visitors and allies of the Jaime Duque Park; information corresponding to the management of external public of the entity.
In addition to this, depending on the nature and requirements of the database, there is information about employees, contractors, suppliers, materials and costs; which, depending on their needs, may require work history, academic background, photograph, family group composition, biometric data, medical records and, in special cases, parafiscal forms (certificates of ARL, health, pension and compensation funds).
Sensitive information will be stored in the databases under the authorization and prior knowledge of the holder, thus complying with Article 5 “Sensitive Data” of Law 1581 of 2012 and the European Regulation on the Processing of Personal Data.
Treatment
The information in the databases of the Jaime Duque Park Foundation is stored for communication and administrative purposes; it is collected, updated and systematized according to the needs of the entity, also supplied to the different work areas according to the requirements and needs of the information to be treated. The use of the database must have the stipulated procedures in order to protect the confidentiality and the good use of this.
In case information is requested by judicial and administrative entities, the entity will provide it in accordance with legal requirements.
Purpose
The information collected is intended to contribute to the different accounting, labor, communication, legal and service procedures that ensure the proper functioning of the entity.
The purpose of the databases is to facilitate and establish relationships with the internal and external audiences of the entity mentioned above.
Information security
The Jaime Duque Park Foundation promotes the responsible use of the different policies and protocols established to protect the information collected, incorporated and used in the different procedures that allow the optimal development of the entity.
The Communications Department is in charge of verifying, supplying and using the databases as stipulated by the entity; in addition, through a server and computer security, it internally classifies users for access and use of the information (main user, administrator, operator user); in the face of external procedures, an analysis of IP addresses is performed according to the threats to the data.
Some of the databases will be kept restricted to employees due to the information contained therein; those who have access to the information must maintain confidentiality and must only make use of the databases as required by the entity and as required by law.
Rights of owners
- To know, update and rectify their personal data with respect to those responsible for the processing or those in charge of the processing. This right may be exercised, among others, against partial, inaccurate, incomplete, fractioned, misleading data, or data whose processing is expressly prohibited or has not been authorized.
- Request proof of the authorization granted to the data controller, except when expressly exempted as a requirement for the processing, in accordance with the provisions of Article 10 of this law.
- To be informed by the Data Controller or the Data Processor, upon request, regarding the use that has been made of their personal data.
- To inform about the use that Fundación Parque Jaime Duque Duque has made of your personal data.
- To file before the Superintendence of Industry and Commerce complaints for violations of the provisions of this law and other regulations that modify, add or complement it.
- To revoke the authorization and/or request the deletion of the data when the principles, rights and constitutional and legal guarantees are not respected in the processing. The revocation and/or deletion will proceed when the Superintendence of Industry and Commerce has determined that the data controller or processor has engaged in conduct contrary to this law and the Constitution.
- Access free of charge to your personal data that have been subject to Processing.
Duties of data controllers (entity)
- Guarantee the Data Subject, at all times, the full and effective exercise of the right of habeas data.
- Request and keep, under the conditions provided for in this law, a copy of the respective authorization granted by the Holder.
- Duly inform the Data Subject about the purpose of the collection and the rights he/she has by virtue of the authorization granted.
- Keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, unauthorized or fraudulent use or access.
- Ensure that the information provided to the Data Processor is truthful, complete, accurate, updated, verifiable and understandable.
- Update the information, communicating in a timely manner to the Data Processor, all developments regarding the data previously provided and take other necessary measures to ensure that the information provided to it is kept up to date.
- Rectify the information when it is incorrect and communicate the pertinent to the Data Processor.
- To provide to the Data Processor, as the case may be, only data whose Processing is previously authorized in accordance with the provisions of this law.
- To require the Data Processor at all times to respect the security and privacy conditions of the Data Subject's information.
- To process the consultations and claims formulated under the terms set forth in this law.
- Adopt an internal manual of policies and procedures to ensure adequate compliance with this law and, in particular, for the handling of inquiries and complaints.
- Inform the Data Processor when certain information is under discussion by the Data Subject, once the claim has been filed and the respective process has not been completed.
- Inform upon request of the Data Subject about the use given to his/her data.
- Inform the data protection authority when there are violations to the security codes and there are risks in the administration of the information of the Data Holders.
- Comply with the instructions and requirements issued by the Superintendence of Industry and Commerce.
Disclosure of information
Obtaining, modifying or using the databases must always be done under the parameters established and given by the organization; in the case of requests for information, access must be made in writing at the facilities of the Fundación Parque Jaime Duque; a document specifying the use that will be given to the content. The response time will be 10 working days to the request.
Procedure for requesting or claiming information
The Jaime Duque Park Foundation identified with the Nit 890802259-1 before the specifications established in the Law 1581 of 2012, the Decree 1377 of 2013 and the European Data Processing Regulation corresponding to the general provisions for the protection of personal data and information communicates:
The means and channels available to the organization are:
Phone: 6200681
E-mail: [email protected]
Address: Kilometer marker 34 Autopista Norte, Tocancipá - Cundinamarca.
Inquiries and complaints will have a response to the holder of a maximum of 10 working days in which contact will be maintained with the user, corroborating the information and the elements necessary to finalize each of the procedures.
Person or area responsible for the information
Before the specifications established in Law 1581 of 2012 and Decree 1377 of 2013 any complaint, claim or request for the databases of the New Horizons Foundation should be made to:
Company name: Parque Jaime Duque Foundation
Dependency: Communications Department
Address: Kilometer 34 Autopista Norte, Tocancipá - Cundinamarca
Phone: 6200681
Website: www.parquejaimeduque.com
Information security policies
Fundación Parque Jaime Duque respects the conditions established by law regarding the protection of personal data so in each of the activities that include the use of information of holders; ensuring the proper use and storage of information.
The following notification is generated for this purpose:
Fundación Parque Jaime Duque collects, updates, systematizes and uses information corresponding to employees, suppliers and visitors for internal and external organizational purposes; thus maintaining an optimal functioning of the organization. In view of this, the organization requests the use of the information provided for administrative and communicative purposes; therefore, by participating in this activity, you have been informed and accept the collection, registration and updating of the information or data you have provided.
Adjustments to the data processing policy
The Data Processing Policy of Fundación Parque Jaime Duque may be modified so the organization will communicate this to users through e-mails and publication of the date of adjustment, modification or update of the same.
Date of update: January 15, 2024