Privacy policies

1. Responsible for the Treatment: LUISA LOPEZ JEWELRY. Incorporated under Colombian laws, domiciled in the city of MEDELLIN (Antioquia) and identified with the NIT. 43273349-2 2. General Description, LUISA LOPEZ JEWELRY, in accordance with the provisions of the Political Constitution of Colombia, Law 1581 of 2012, Regulatory Decree 1377 of 2013 and other complementary provisions, adopts the Personal Data Processing Policy, the which will be applied by LUISA LOPEZ JEWELRY regarding the collection, storage, use, circulation, deletion and the different activities that constitute the processing of personal data (hereinafter “The Controller”). 3. Scope of application. This manual will apply to the processing of personal data that LUISA LOPEZ JEWELRY collects, administers and handles from its employees, clients, allies, suppliers, employees of its contractors and/or other third parties with whom they have any type of relationship. in accordance with the provisions of Law 1581 of 2012 and Decree 1377 of 2013. 4. Definitions. To apply the provisions of this Policy, it is understood as: Authorization: Prior, express and informed consent of the owner to carry out the processing of personal data. Privacy notice: Verbal or written communication generated by LUISA LOPEZ JEWELRY or any third party designated by the latter for the purposes, addressed to the Owner for the processing of their personal data, through which they are informed about the existence of the treatment policies. of information that will be applicable, the way to access them and the purposes of the treatment that is intended to be given to personal data. Personal Data: Any information linked or that can be associated with one or several specific or determinable natural persons. For the purposes of LUISA LOPEZ JEWELRY, the following will be personal data, among others: name, surname, age, gender, marital status, email, correspondence address, identification number, date of birth, telephone number and profession. Sensitive data: Sensitive data is understood to be data that affects the privacy of the Owner or whose improper use may lead to discrimination, such as data that reveals racial or ethnic origin, political orientation, religious or philosophical convictions, membership in unions, social organizations, human rights organizations or that promote the interests of any political party or that guarantee the rights and guarantees of opposition political parties, as well as data related to health, sexual life, and biometric data. Data Processor: Natural or legal person, public or private, who, by themselves or in association with others, processes personal data on behalf of the data controller. Responsible for the Treatment: Natural or legal person, public or private, who alone or in association with others, decides on the database and/or the Processing of the data. Owner: Natural person whose personal data is the subject of Treatment; Processing: Any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion. 5. Principles. LUISA LOPEZ JEWELRY will define its personal data processing policy taking into account the following principles: Principle of purpose: The processing of personal data must obey a legitimate purpose in accordance with the Political Constitution of Colombia and the law, which must be informed. to the Owner; Principle of freedom: Treatment can only be carried out with the prior, express and informed consent of the Owner. Personal data may not be obtained or disclosed without prior authorization, or in the absence of a legal or judicial mandate that requires consent; Principle of truthfulness or quality: The information subject to processing must be truthful, complete, exact, updated, verifiable and understandable. The processing of partial, incomplete, fragmented or misleading data is prohibited. Principle of transparency: In the treatment, the right of the Owner to obtain, at any time and without restrictions, information about the existence of data that concerns him or her must be guaranteed; Principle of restricted access and circulation: Personal Data, except public information, may not be available on the Internet or other means of dissemination or mass communication, unless access is technically controllable to provide knowledge restricted only to the Owners or authorized third parties. according to the law; Security principle: The information subject to Treatment must be handled with the technical, human and administrative measures that are necessary to provide security to the records, avoiding their adulteration, loss, consultation, unauthorized or fraudulent use or access; Principle of confidentiality: All persons involved in the Processing of Personal Data are obliged to guarantee the confidentiality of the information, even after their relationship with any of the tasks included in the processing has ended, and may only supply or communicate personal data. when this corresponds to the development of activities expressly authorized in the Law. 6. Purpose of the processing and collection of personal data: This manual complies with the provisions of literal k) of article 17 of law 1581 of 2012. , and article 13 of regulatory decree 1377 of 2013, which regulates the duties of those responsible and in charge of processing personal data. The purpose for which LUISA LOPEZ JEWELRY collects, stores, uses, purifies, analyzes, treats, circulates, transmits or transfers directly or indirectly personal data of the Owner, such as but not limited to: name, surname, age, sex, marital status , email, identification number, correspondence address, date of birth and profession, is for: i) The proper development of its corporate purpose, including the use of data for the execution of the existing contractual relationship with its clients, contractors , suppliers, users, employees and third parties; ii) Promote our services and products and those of our affiliates, subsidiaries, subsidiaries and third party commercial allies and their allies; iii) Deliver or send your personal data to related companies, affiliates, subsidiaries and third-party commercial allies and their allies that require the information for the purposes described here; iv) Achieve efficient communication related to our products, services, studies, offers, as well as those of our affiliates, subsidiaries, affiliates, third party commercial allies and their allies to facilitate general access to the information collected; v) Send, through any means of communication that is created or will be created, advertising and marketing information of its own, its affiliates, subsidiaries, third-party commercial allies or their allies, the implementation of a strategy. global marketing for promotion and advertising of our products, services, offers, promotions, invitations, discounts, prizes, loyalty programs, campaigns, raffles, among others; vi) Quality evaluation of products and services, and in general for updating data and other marketing and administration activities necessary for the full development of our corporate purpose, its affiliates, affiliates, subsidiaries, third party commercial allies or the allies of these; vii) Report on new products or services that are related to the development of the corporate purpose, its affiliates, affiliates, subsidiaries, third party commercial allies, or their allies, and viii) Carry out internal studies on consumer habits; The personal data provided by the Owner will be processed and used only for the purposes provided herein, and for a period counting from the moment the authorization was granted until the period determined for the validity of LUISA LOPEZ JEWELRY. Likewise, the information provided by The Owner may be shared with agencies, data processors, service providers, commercial allies, their allies, and third parties in general that provide services to LUISA LOPEZ JEWELRY or third parties on our behalf. LUISA LOPEZ JEWELRY does not request or process sensitive data. LUISA LOPEZ JEWELRY guarantees that the mechanisms through which it uses personal data are safe and confidential, since they have computer security mechanisms and the appropriate technological means to ensure that they are stored in such a way that unwanted access is prevented. by third parties. 7. Authorization. The collection, storage, use, purification, analysis, circulation, transmission or transfer, circulation or deletion of Personal Data by LUISA LOPEZ JEWELRY always requires the prior, express and informed consent of the Owner of those. In compliance with current legislation, LUISA LOPEZ JEWELRY has established the following mechanisms to obtain authorization or ratification by the Holders of Personal Data: 7.1 - The Authorization may consist of a physical, electronic or any other document that guarantees its subsequent consultation, or through an appropriate technical or technological mechanism through which it can be concluded that the Owner granted authorization to store their data in our database. For these purposes, the sending of emails and/or the filling out of forms on the website www.luisalopezjewelry.com and/or through technological mechanisms such as, but not limited to, an authorization click has been defined. This authorization will be issued by LUISA LOPEZ JEWELRY and made available to the Owner prior to the processing of their personal data. 7.2 - With this consented Authorization procedure, it is expressly guaranteed that the Owner of the personal data knows and accepts that LUISA LOPEZ JEWELRY will collect, store, use, purify, analyze, circulate, transmit, transfer, update or delete in the terms of the Law, the information for the purposes that you are informed of prior to granting the authorization, and for the purpose contained in this document. 7.3 - The authorization requested by LUISA LOPEZ JEWELRY will establish at least: (i) The complete identification of the person from whom Personal Data is collected; (ii) the Authorization referred to in section 7.2 above; iii) The purpose of the personal data tratment, and; (iv) The rights of access, correction, updating or deletion of the Personal Data provided by the Owner thereof. 7.4 - Attached as Annex 1 is the Authorization model for the collection and processing of personal data for the purpose of informing and allowing access to information of LUISA LOPEZ JEWELRY, its subsidiaries, affiliates, affiliates, third party commercial allies and allies. of these, related to services, offers, products, alliances, contests, studies and content. 7.5 - It will be the responsibility of LUISA LOPEZ JEWELRY to adopt the necessary measures to maintain records of when and how authorization was obtained from the Owners. 7.6 - The Holders of Personal Data may request at any time and without limitation of any kind, the deletion of their data and/or revoke the authorization granted for their processing. 7.7 - For the data collected before the issuance of Decree 1377 of 2013, that is, on June 27, 2013, the following procedure will be followed: An email will be sent to all people with respect to whom LUISA LOPEZ JEWELRY has Personal Data informing them about the implementation of the LUISA LOPEZ JEWELRY Personal Data Processing Policy and the way to exercise your rights. This email will include the Privacy Notice referred to in Annex 2 of this Manual. Said notice will include at least: i) Name or company name and contact information of LUISA LOPEZ JEWELRY; ii) The Treatment to which the data will be subjected and the purpose thereof; iii) The rights that assist the Owner, and; iv) The access mechanisms by which the Owners can access the data registered in the LUISA LOPEZ JEWELRY database, in which the Personal Data Processing Policy of LUISA LOPEZ JEWELRY and the substantial changes that will be made known. occur at the same time. If within thirty (30) business days, counted from the date of sending the communication referred to in literal a) above, the Owner has not responded or has not contacted LUISA LOPEZ by any means. JEWELRY to request the deletion of your personal data, the Data Processing may continue. Attached as Annex 3 is the email format that must be sent to each of the Owners regarding whom LUISA LOPEZ JEWELRY has information before the entry into force of this policy. Likewise, and to guarantee that the Privacy Notice reaches all employees, suppliers, clients, users, and third parties who may have any type of relationship with LUISA LOPEZ JEWELRY, it will be published for a period of no less than eight (8) days. calendar on the website: www.luisalopezjewelry.com PARAGRAPH: It will be the obligation of LUISA LOPEZ JEWELRY and in particular the marketing area to keep records and have support of all authorizations issued by the Owner or, failing that, to send the communication to which literal c) of this article refers. All supports must be available at all times while the Personal Data Processing is carried out and for five (5) more years. For storage, LUISA LOPEZ JEWELRY may use computer, electronic or any other technology. 8. Rights of the Information Holders. The owner of the Personal Data will have the following rights: Know, update and rectify their Personal Data against LUISA LOPEZ JEWELRY. This right may be exercised, among others, against partial, inaccurate, incomplete, fragmented, misleading data, or those whose Processing is expressly prohibited or has not been authorized; Request, when appropriate, proof of the authorization granted to LUISA LOPEZ JEWELRY; Be informed by LUISA LOPEZ JEWELRY or the Data Processor, regarding the use that has been given to your Personal Data; Submit complaints to the Superintendency of Industry and Commerce for violations of the provisions of Law 1581 of 2012, after exhausting the complaints procedure established in the Personal Data Processing Policy; Revoke the authorization and/or request the deletion of Personal Data when the Processing does not respect constitutional and legal principles, rights and guarantees. Likewise, the revocation and/or suppression will proceed when the Superintendency of Industry and Commerce has determined that the Responsible Persons or Managers have engaged in conduct contrary to this law and the Constitution. Access free of charge to your Personal Data that has been processed. 9. Duties of LUISA LOPEZ JEWELRY: As Responsible for the Processing of Personal Data, LUISA LOPEZ JEWELRY, its contractors and its workers undertake to comply with the following duties: Guarantee to the Owner of the information, at all times, the full and effective exercise of the right of habeas data; Keep a copy of the communication and the respective authorization granted by the Owner; Duly inform the Owner about the purpose of the collection and the rights granted to him by virtue of the authorization granted; Keep the information under the security conditions necessary to prevent its adulteration, loss, unauthorized or fraudulent consultation, use or access; In case of sharing and/or updating the information with a Data Processor, guarantee that the authorization given by the Owner is sufficient and that the information itself is true, complete, exact, updated, verifiable and understandable; Rectify information when it is incorrect. Process queries and claims made by the Owner in the terms of this Manual and the LUISA LOPEZ JEWELRY Personal Data Processing Policy. Inform at the request of the Owner about the use given to their data; Inform the data protection authority when violations of security codes occur and there are risks in the administration of the Owners' information. Comply with the instructions and requirements issued by the Superintendence of Industry and Commerce. Comply with the other provisions contained in the Law and in the regulatory decrees. Register in the database the legend "claim in process" when applicable. Insert in the database the legend "information in judicial discussion" once notified by the competent authority about judicial processes related to the quality of personal data; Refrain from circulating information that is being controversial by the Owner and whose blocking has been ordered by the Superintendence of Industry and Commerce; Allow access to the information only to people who can access it through the Inform website; LUISA LOPEZ JEWELRY the new mechanisms that it implements so that the owners of the information make their rights effective, as well as any modification to the Personal Data Processing Policy In compliance with the express prohibition contained in article 12 of Decree 1377 of 2013, LUISA LOPEZ JEWELRY refrains from collecting personal data of children and adolescents in its databases. 10. Responsible Area and Procedure for the exercise of the rights of the Owner: The Owner, his representative or assignee may present at any time and free of charge, queries, requests and/or claims to LUISA LOPEZ JEWELRY to know, update, rectify, request the deletion of your personal data and/or revoke the authorization. For this reason, it is the responsibility of the entire team of direct and indirect workers of LUISA LOPEZ JEWELRY, without exception, to comply with the Information Treatment Policy, and especially with due attention to the requests, complaints and claims that the Owner present before the company for this concept. To exercise their rights, the Owner or whoever acts in their name and representation, may present their requests, complaints and/or claims to LUISA LOPEZ JEWELRY by the following means: i) By email to: info@luisalopezjewelry.com ii) Telephone : 3006340768 iii) Written communication by electronic means through the LUISA LOPEZ JEWELRY website. The area responsible for the management and treatment of the databases, as the case may be, will always be the person responsible for the customer service department who will be in charge of responding to the requests, complaints and claims formulated by the Owner in the exercise of their rights. A query, request, complaint or claim (PQR), received in writing, email, by electronic means, by telephone or verbally, will be processed according to the following procedure: CONSULTATION: When the main claim is a consultation, that is, it is consult the personal information of the Owner that resides in the LUISA LOPEZ JEWELRY database, the procedure will be as established here: The query will be formulated by filling out the PQR LUISA LOPEZ JEWELRY forms contained on the website or by email. :info@luisalopezjewelry.com Once the query is received, a response must be given to the Owner, whatever it may be, within the following ten (10) business days from the date of receipt thereof. If it is not possible to attend to the query within said term, the Owner will be informed, expressing the reasons for the delay and indicating the date on which the query will be attended to, which may not exceed five (5) business days following the expiration of the first term. CLAIM: When the main claim is a claim, that is, when the Owner considers that the information contained in the LUISA LOPEZ JEWELRY database should be corrected, updated or deleted, or when he notices non-compliance with any of the duties. contained in Law 1581 of 2012 by LUISA LOPEZ JEWELRY, the procedure will be as established here: - The claim will be formulated through a request addressed to the Responsible or Person in Charge of the Information, with the identification number of the Owner, the description of the facts that give rise to the claim, the address and the documents considered necessary. - If the claim is incomplete, the Owner or whoever acts in his place will be required within five (5) business days following receipt of the claim in order to correct the errors. - If after two (2) months from the date of the correction request, the Owner or whoever acts in his place does not present the required information, it will be understood that he has withdrawn the claim. - Once a claim is received that meets the requirements, it must be included in the databases within a period of no more than two (2) business days, identifying it with a legend that says "claim in process" and the reason. of the same. Said legend must be maintained until the claim is decided. - If after two (2) months from the date of the correction request, the Owner or whoever acts in his place does not present the required information, it will be understood that he has withdrawn the claim. - The maximum term to address the claim will be fifteen (15) business days counted from the day after receipt. When it is not possible to address the claim within this term, the interested party will be informed of the reasons for the delay and the date on which their claim will be addressed, which may not exceed eight (8) business days following the expiration of the term. - In the event that LUISA LOPEZ JEWELRY receives a claim and is not competent to resolve it, it will be transferred, to the extent possible, to the appropriate party within a maximum period of two (2) business days and will inform the interested party of the situation. - When the request is made by a person other than the owner and it is not proven that the request is acting on behalf of the owner, it will be considered not submitted. 11. Rectification, updating and deletion of Personal Data: In accordance with the provisions of point 10 above, LUISA LOPEZ JEWELRY will rectify, update or delete, at the request of the Owner, any type of information, according to the procedure and terms indicated in the article. former. In the case of rectification and/or updating, the proposed corrections must be duly substantiated. Paragraph: The Owner of the information will at all times have the right to request the total or partial deletion of their Personal Data and to do so the procedure established in point 10 above will be followed. LUISA LOPEZ JEWELRY may only deny deletion when: i) The Owner has the legal and/or contractual duty to remain in the database; ii) The deletion of the data hinders ongoing judicial or administrative proceedings, and; iii) In the other cases contemplated in article 10 of Law 1581 of 2012, when appropriate. 12. Information security measures. LUISA LOPEZ JEWELRY will adopt the technical, human and administrative measures that are necessary to provide security to the records, avoiding their adulteration, loss, consultation, use or unauthorized or fraudulent access; These measures will respond to the minimum requirements made by current legislation. 13. Designation. LUISA LOPEZ JEWELRY designates the customer service department or whoever takes its place, to fulfill the function of protecting Personal Data, as well as to process the requests of the Owners, for the exercise of the rights of access, consultation, rectification, updating, deletion and revocation referred to in Law 1581 of 2012, Decree 1377 of 2013 and the LUISA LOPEZ JEWELRY Personal Data Processing Policy. 14. Validity. This Policy for the Processing of Personal Data LUISA LOPEZ JEWELRY will be in force for a term equal to that statutorily established for the duration of the company or its extensions. Likewise, we remind you that you have the right to know, update, rectify and request the deletion of your personal data at any time, for which we ask you to communicate your decision to the aforementioned email account or through the website www. luisalopezjewelry.com