Política de Tratamiento de Datos Personales

Name: Maff Trade S.A.S

Addres: Cali - Valle del Cauca

Direction: Calle 16ª # 121ª- 214

Telephone: +(2)4064078

Web page: maffhealth.com
 

This manual was prepared considering the provisions contained in articles 15 and 20 of the Political Constitution, Law 1581 of 2012 "By which general provisions for the protection of personal data are issued" and the Draft Decree "By which Law 1581 of 2012 is partially regulated". This manual applies to the processing of personal data collected and handled by MAFF HEALTH

For the purposes of the application of the rules contained in this manual and in accordance with the provisions of article 3 of Law 1581 of 2012.

It is understood:

• Authorization: Prior, express, and informed consent of the owner to carry out the processing of personal data.

• Privacy notice: Physical, electronic document or in any other format generated by the person in charge that is made available to the owner for the processing of their personal data. In the Privacy Notice, the owner is informed of the information related to the existence of the information processing policies that will be applicable, the way to access them and the characteristics of the treatment that is intended to be given to personal data.

• Database: Organized set of personal data that is subject to treatment.

• Personal data: Any information linked or that can be associated with one or more specific or determinable natural persons.

• Private data: It is the data that by its intimate or reserved nature is only relevant to the owner.

• Sensitive data: Sensitive data is understood to be those that affect the privacy of the owner or whose improper use may generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership of trade unions, social organizations, human rights or that promote the interests of any political party or that guarantee the rights and guarantees of opposition political parties,  as well as data relating to health, sex life and biometric data.

• Data Processor: A natural or legal person, public or private, who by himself or in partnership with others, carries out the processing of personal data on behalf of the person responsible for the treatment.

• Responsible for the Treatment: Natural or legal person, public or private, who by himself or in partnership with others, decides on the database and / or the processing of the data.

• Owner: Natural person whose personal data are subject to processing.

• Processing: Any operation or set of operations on personal data, such as the collection, storage, use, circulation, or deletion of these.

In accordance with the provisions of article 8 of Law 1581 of 2012, the owner of personal data has the following rights:

• Know, update and rectify his/her personal data in front of MAFF HEALTH, in its capacity as responsible for the treatment.

• Request proof of the authorization granted to MAFF HEALTH, in its capacity as responsible for the processing.

• Be informed by MAFF HEALTH, upon request, regarding the use he/she has given to his/her personal data.

• Submit to the Superintendence of Industry and Commerce complaints for violations of the provisions of Law 1581 of 2012, once you have exhausted the consultation or claim procedure before the person responsible for the Treatment.

• Revoke the authorization and / or request the deletion of the data when the treatment does not respect the principles, rights and constitutional and legal guarantees.

• Access free of charge to his/her personal data that has been subject to Treatment.

• It is recorded that he/she has the right to access at any time the data provided, to request its correction or deletion in the terms established in Law 1581 of 2012, by writing to MAFF TRADE S.A.S. , to the address Calle 16ª # 121ª- 214 Palo Alto Edificio. Empresarial Oficina 510, Cali – Valle del Cauca, Colombia or to the email [email protected] and indicated the reasons why it requests any of the procedures, in order that MAFF TRADE S.A.S., can review them and pronounce on them.

MAFF HEALTH will keep in mind, at all times, that personal data are the property of the people to whom they refer and that only they can decide on them. In this sense, it will make use of them only for those purposes for which it is duly empowered and respecting in any case Law 1581 of 2012 on the protection of personal data.

In accordance with the provisions of article 17 of Law 1581 of 2012, MAFF HEALTH undertakes to permanently comply with the following duties in relation to the processing of personal data:

• Guarantee the holder, at all times, the full and effective exercise of the right of Habeas data.
• Keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, use or unauthorized or fraudulent access.
• Carry out in a timely manner, this is in the terms provided for in articles 14 and 15 of Law 1581 of 2012, the updating, rectification, or deletion of the data.
• Process the queries and claims formulated by the Holders in the terms indicated in article 14 of Law 1581 of 2012.
• Insert in the database the legend "information under judicial discussion" once notified by the competent authority about judicial processes related to the quality or details of personal data.
• Refrain from circulating information that is being disputed by the Holder and whose blocking has been ordered by the Superintendence of Industry and Commerce.
• Allow access to information only to those who can access it.
• Inform the Superintendence of Industry and Commerce when there are violations of the security codes and there are risks in the administration of the information of the holders.
• Comply with the instructions and requirements issued by the Superintendence of Industry and Commerce.

RIGHT OF ACCESS. The power of disposition or decision that the owner has on the information that concerns him/her, necessarily entails the right to access and know if his personal information is being processed, as well as the scope, conditions and generalities of said treatment. In this way, MAFF HEALTH  must guarantee the holder his right of access in three ways:

• RIGHT OF ACCESS. The power of disposition or decision that the owner has on the information that concerns him/her, necessarily entails the right to access and know if his personal information is being processed, as well as the scope, conditions and generalities of said treatment. In this way, MAFF HEALTH  must guarantee the holder his right of access in three ways:

• The second, that the owner can have access to their personal data that are in the possession of the person in charge.

• The third implies the right to know the essential circumstances of the treatment, which translates into the duty of MAFF HEALTH to inform the owner about the type of personal data processed and each and every one of the purposes that justify the treatment.

PARAGRAPH: MAFF HEALTH will guarantee the right of access when, after accreditation of the identity of the owner of his/her representative, the detail of the personal data is made available to him/her free of charge through electronic means that allow the direct access of the owner to them. Such access must be offered without a time limit and must allow the holder the possibility of knowing and updating them online.

CONSULTATIONS:  In accordance with the provisions of article 14 of Law 1581 of 2012, the holders or their successors in title may consult the personal information of the owner who rests in any database. Consequently, MAFF HEALTH will guarantee the right of consultation, providing the holders, all the information contained in the individual register or that is linked to the identification of the holder. For the attention of requests for consultation of personal data MAFF HEALTH guarantees:

• Enable means of electronic communication or others that it deems pertinent.

• Establish forms, systems and other simplified methods, which must be informed in the privacy notice.

• Use the customer service or claims services that you have in operation.

• In any case, regardless of the mechanism implemented for the attention of consultation requests, they will be attended within a maximum period of twenty (20) business days counted from the date of their receipt. When it is not possible to attend the consultation within said term, the interested party will be informed before the expiration of the ten (10) days, expressing the reasons for the delay and indicating the date on which their query will be attended, which in no case may exceed ten (10) business days following the expiration of the first term.

CLAIMS. In accordance with the provisions of article 15 of Law 1581 of 2012, the owner or his/her successors in title who consider that the information contained in a database should be subject to correction, updating or deletion, or when they notice the alleged breach of any of the duties contained in Law 1581 of 2012,  may file a claim with the person responsible for the treatment, which will be processed under the following rules:

• The claim may be submitted by the owner, taking into account the information indicated in article 15 of Law 1581 of 2012, in the format or formats proposed for this purpose by the person responsible. If the claim received does not have complete information that allows it to be processed, that is, with the identification of the owner, the description of the facts that give rise to the claim, the address, and accompanying the documents that  want to be asserted, the interested party will be required within ten (10) days of its receipt to correct the failures. After two (2) months from the date of the request without the applicant submitting the required information, it will be understood that he/her has withdrawn the claim. If for any reason a claim is received that in reality should not be directed against MAFF HEALTH, it will transfer, to the extent of its possibilities, to the corresponding person within a maximum period of ten (10) business days and will inform the interested party of the situation.
• Once the complete claim has been received, a legend that says, "claim in process" and the reason for this will be included in the database maintained by the person in charge, in a term not exceeding ten (10) business days. This legend must be maintained until the claim is decided.
• The maximum term to attend the claim will be twenty (20) business days counted from the day following the date of its receipt. When it is not possible to attend it within said term, the interested party will be informed before the expiration of the period of the reasons for the delay and the date on which their claim will be addressed, which in no case may exceed ten (10) business days following the expiration of the first term.