Following the provisions of articles 15 and 20 of the National Constitution in accordance with Statutory Law 1581 of 2012, Regulatory Decree 1377 of 2013, Circular 94 of August 22, 2013 and other rules and decrees that are related to and regulate the matter, the Amazon2030 Foundation. Org (hereinafter the Foundation or the Organization), fully guarantees the protection and exercise of the fundamental right of Habeas Data of the owners of the personal information provided to it, ensuring it under the guarantee of the constitutional rights to good name, intimacy and privacy.
Therefore, this organization will apply this personal data processing and protection policy to all databases, files and other media that contain personal data and that are subject to processing by the Amazon2030.org Foundation, under the following conditions: considerations:
DEFINITIONS:
Privacy notice: Verbal or written communication generated by the person responsible, addressed to the owner for the processing of their personal data, through which they are informed about the existence of the information processing policies that will be applicable to them, the way to access to them and the purposes of the treatment that is intended to be given to personal data.
Authorization: Prior, express and informed consent of the owner to carry out the processing of personal data.
Database: Organized set of personal data that is subject to Treatment.
Sensitive data: Sensitive data is understood to be data that affects the privacy of the Owner or whose improper use may lead to discrimination, such as data that reveals racial or ethnic origin, political orientation, religious or philosophical convictions, membership in unions, social organizations, human rights organizations or that promote the interests of any political party or that guarantee the rights and guarantees of opposition political parties, as well as data related to health, sexual life, and biometric data.
Personal data: Any information linked or that can be associated with one or more specific or determinable natural persons.
Public data: It is data that is not semi-private, private or sensitive. Public data are considered, among others, data relating to the marital status of people, their profession or trade and their status as a merchant or public servant. Due to its nature, public data may be contained, among others, in public records, public documents, official gazettes and bulletins, and duly executed judicial rulings that are not subject to confidentiality.
Data Processor: Natural or legal person, public or private, who, by themselves or in association with others, processes personal data on behalf of the data controller.
Responsible for the Treatment: Natural or legal person, public or private, who alone or in association with others, decides on the database and/or the Processing of the data.
Owner: Natural person whose personal data is the subject of Treatment
Transfer: The transfer of data takes place when the Controller and/or Processor of personal data, located in Colombia, sends the information or personal data to a recipient, who in turn is Responsible for the Treatment and is located inside or outside from the country.
Transmission: Processing of personal data that involves the communication of the same within or outside the territory of the Republic of Colombia when its purpose is to carry out a Processing by the Processor on behalf of the Controller.
Processing: Any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion.
BEGINNING
For the purposes of the treatment and protection of your personal data, this Foundation will take into account the principles enshrined in article 4 of Law 1581 of 2012, which are transcribed below:
Principle of legality in matters of data processing: The processing referred to in this law is a regulated activity that must be subject to what is established in it and in the other provisions that develop it.
Principle of purpose: The treatment must obey a legitimate purpose in accordance with the Constitution and the Law, which must be informed to the Owner.
Principle of freedom: Treatment can only be carried out with the prior, express and informed consent of the Owner. Personal data may not be obtained or disclosed without prior authorization, or in the absence of a legal or judicial mandate that requires consent.
Principle of truthfulness or quality: The information subject to processing must be truthful, complete, exact, updated, verifiable and understandable. The processing of partial, incomplete, fragmented or misleading data is prohibited.
Transpa principle