Choose a reading topic

Data Protection

If you have questions regarding the data treatment policy, return to the main page or the home page and in Contacts and Networks, you will find the Contact Form at your disposal to communicate directly with us.

Formulario Contacto

1. OBJECTIVE
Establish the principles and responsibilities to ensure the protection, confidentiality, integrity, and availability of personal data collected, stored, processed, and used by Avimex de Colombia S.A.S. This policy aims to comply with applicable legal and regulatory standards and foster trust and security of our users or customers regarding the handling of their personal information.

2. SCOPE
This procedure applies from the planning of the data treatment policy to the internal use of protected user data.

3. RESPONSIBLE
The planning is the responsibility of the technical director, while the follow-up is the responsibility of the quality assistant.

4. DEFINITIONS
AUTHORIZATION: It is the permission or consent given by the data subject for the specific treatment of their data, in accordance with the entity's functions.
CONSENT: A free, unequivocal, specific, and informed statement of the will of the data subject through which they accept the treatment of their personal data for a specified purpose.
PERSONAL DATA: Information related to an identified or identifiable person, such as names, addresses, phone numbers, email addresses, etc.
RIGHTS OF THE DATA SUBJECT: A set of rights that individuals have over their personal data, including the right of access, rectification, deletion, portability, limitation of processing, and objection to processing.
PROCESSING AGENT: The individual or organization, public authority, agency, or other body that processes personal data on behalf of the data controller.
HABEAS DATA: A fundamental right that allows any person to know, update, rectify, and/or cancel personal information collected about them in public or private databases, in accordance with applicable laws.
DATA CONTROLLER: The individual or organization, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of processing personal data.
DATA SECURITY: A set of technical and organizational measures designed to protect personal data from unauthorized access, disclosure, alteration, or accidental or unlawful destruction.
DATA TRANSFER: The transmission of personal data to a recipient in a third country or to an international organization.
DATA PROCESSING: Any operation or set of operations performed on personal data, whether automated or not, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, or any other form of processing.

5. LEGAL FRAMEWORK
LAW 1581 OF 2012 – PERSONAL DATA PROTECTION LAW: This law aims to develop the constitutional right of all individuals to know, update, and rectify the information collected about them in databases or files, and the other constitutional rights, freedoms, and guarantees.

ARTICLE 15. POLITICAL CONSTITUTION: All individuals have the right to personal and family privacy and to their good name, and the State must respect and enforce these rights. Similarly, they have the right to know, update, and rectify the information collected about them in databases and files of public and private entities. Data collection, processing, and circulation will respect freedom and other guarantees enshrined in the Constitution.

LAW 1266 OF 2008: Also known as the Habeas Data Law, it applies to all financial, credit, commercial, and service-related personal data recorded in a database. The application of Law 1266 of 2008 is aimed at regulating the use of such information and other types of data.

6. RELATED DOCUMENTS
001-AVX-P-Empresa-Calidad.docx: Company quality process document, which includes the company's generalities, quality policy and objectives, mission, vision, etc.
001-AVX-P-SistemaDocumental.docx: Document listing the company's information supports, archiving criteria formats, etc.
060-MKT-P-Seguimiento-Productos-Quejas.docx: Document outlining the activities and methods for following up on complaints and claims.

7. PROCEDURE
At Avimex de Colombia S.A.S, we are committed to protecting the privacy and rights of individuals whose personal data we collect and process in the course of our business operations. This data processing policy establishes the principles and procedures that guide our commitment to the responsible management of personal information, in compliance with applicable data protection laws.

Respect for privacy and the protection of personal data are fundamental values for us. Therefore, we are committed to ensuring that all personal data is handled in a legal, transparent, fair, and secure manner, in accordance with the principles and obligations set forth in this policy and the relevant data protection laws.

PRINCIPLES OF DATA PROCESSING
At Avimex de Colombia S.A.S, we adhere to the following fundamental principles for the processing of personal data.

LEGALITY, TRANSPARENCY, AND EQUITY: We process personal data legally, transparently, and fairly, in strict compliance with the applicable data protection laws.

LIMITED PURPOSE: We collect and process personal data only for specific, ethical, and legitimate purposes, and will not use them in ways that are incompatible with those purposes.

ACCURACY AND UPDATE: We strive to maintain the necessary personal data complete and up-to-date, implementing actions to correct any inaccuracies in the data as soon as possible.

INTEGRITY AND CONFIDENTIALITY: We implement appropriate organizational measures to protect the integrity and confidentiality of personal data against unauthorized access, disclosure, or alteration.

These principles guide us in ensuring that the processing of personal data is carried out ethically and responsibly.

COLLECTION AND USE OF PERSONAL DATA
At Avimex de Colombia S.A.S, we recognize the importance of collecting and using personal data responsibly and transparently. Therefore, we detail our practices related to the collection and use of personal data:

INFORMED CONSENT: We will obtain explicit and voluntary consent from users before collecting, processing, or using their personal data, unless the law permits us to do so without their consent.

DATA MINIMIZATION: We will limit the collection of personal data to the minimum necessary to fulfill the established purposes. We will not collect or use personal data that are irrelevant or unnecessary for such purposes.

DATA SECURITY: We implement appropriate technical and organizational measures to protect personal data against unauthorized access. We ensure that personal data will be stored securely and used only by authorized personnel and for authorized purposes.

IMPROVING OUR SERVICES AND PRODUCTS: Through the collection of information, we will have solid bases and valuable information for conducting internal and statistical studies to improve our services and products.

RIGHTS OF THE DATA SUBJECTS.
At Avimex de Colombia S.A.S, we recognize and respect the rights of users regarding their personal data. The following are the rights that data subjects have regarding the processing of their personal data:

ACCESS TO PERSONAL DATA: Users have the right to request and obtain access to their personal data being processed by Avimex de Colombia S.A.S.

RECTIFY PERSONAL DATA: Users have the right to request the correction of any inaccurate or incomplete personal data we hold about them. We will process these correction requests in a timely manner and ensure that personal data is accurate and up-to-date.

DELETE PERSONAL DATA: Users have the right to request the deletion of their personal data from our systems and records. We will process these deletion requests promptly unless we are legally obligated to retain the data or have a legitimate interest justifying the retention.

OBJECT TO DATA PROCESSING: Users have the right to object to the processing of their personal data in certain circumstances, such as for direct marketing purposes or when the processing is based on legitimate interests.

KNOW INFORMATION: Users have the right, upon request, to receive information about the processing and use of their personal data by the data controller of the company.

REVOKE CONSENT: Users have the right to revoke their consent for data processing, which can be exercised when the Superintendence of Industry and Commerce determines that the data controller or processor has engaged in unlawful conduct.

DUTIES OF THE DATA SUBJECTS
Data subjects have the responsibility to provide accurate and up-to-date information, as well as to keep it current; they must use Avimex de Colombia S.A.S.'s products or services legally and ethically. They must also exercise their data protection rights as established by law, thus facilitating the proper management of their personal data and promoting mutual collaboration in compliance with privacy and data protection regulations.

REVIEWS AND UPDATES
At Avimex de Colombia S.A.S, we are committed to conducting periodic reviews of this data processing policy when significant changes occur in our data processing practices, in data protection laws and regulations, or in the company's operational context. The company assigns responsible parties to coordinate and carry out the reviews, assessing the effectiveness and compliance with this policy, as well as any changes in the operational environment that may affect our data processing practices. After completing a review, we will update this policy as necessary and maintain a clear record of all revisions, including the review date, the changes made, and the reasons for the changes, to demonstrate our compliance with the legal review obligations.

APPROVAL AND EFFECTIVENESS
This data processing policy has been approved and enters into effect on January 8, 2024. All involved parties are expected to comply with and follow it in all activities related to personal data processing at Avimex de Colombia S.A.S. This policy will be reviewed and updated periodically as necessary, in accordance with the provisions of Law 1581 of 2012 and its regulatory decrees, as well as any other applicable laws or regulations related to data protection.

AUTHORIZATION FOR USE OF PERSONAL DATA
Avimex de Colombia S.A.S, as the data controller, obtains the personal data of the data subject and the required authorization for processing these data transparently and informatively, thus complying with Law 1581 of 2012.

CONSENT REQUEST MESSAGE

In order to comply with the data processing policy, consent is requested for the use of personal data through a message presented on the Avimex de Colombia S.A.S. website. Additionally, it complies with specific data usage requirements set by companies such as Google. The message used by Avimex will be presented as follows:

puramas.co requests your consent to use your personal data for the following purposes:

Your personal data will be processed, and information from your device (cookies, unique identifiers, and other device data) may be stored, accessed, and shared with providers approved by the TCF or specifically used by this site or application.

Some providers may process your personal data based on legitimate interest, to which you may object by managing your options below. At the bottom of this page, you will find a link to manage or withdraw your consent.

□ Yes

□ No

□ Manage options