To establish, define, and regulate the parameters for the handling and administration of the personal data of patients, beneficiaries, employees, suppliers, and other data stored in databases owned by Clínica Colombiana de Implantes Dentales S.A., whether in physical or automated form.
Clínica Colombiana de Implantes Dentales S.A., Tax ID No. 890.941.638-5, located at Trans. 34 N.72-160 main office, Medellín city, email: info@clinicacolombianadeimplantes.com
This policy is governed in compliance with Article 15 of the Political Constitution of Colombia, Law 1581 of 2012, and other regulatory decrees and standards that establish general provisions for the protection of personal data, which shall be applied harmoniously and comprehensively.
PRINCIPLES
Clínica Colombiana de Implantes Dentales shall apply systematically and comprehensively the principles established in Law 1581 of 2012 and Decrees 1377 of 2013 and 866 of 2015 for the processing and management of personal data stored within the entity.
a. Legality in Data Processing: Clínica Colombiana de Implantes Dentales shall comply with the laws and regulations established for the processing and management of personal data.
b. Purpose: Data processing must obey a legitimate purpose in accordance with the Constitution and the Law, which must be informed to the Data Subject.
c. Freedom: Data processing may only be carried out with the prior, express, and informed consent of the Data Subject.
d. Accuracy or Quality: Information subject to processing must be truthful, complete, accurate, updated, verifiable, and understandable.
e. Transparency: The Data Subject has the right to obtain information regarding the existence of data concerning them at any time.
f. Restricted Access and Circulation: Processing is subject to the limits derived from the nature of personal data and legal provisions.
g. Security Principle: Information subject to processing shall be managed with the necessary technical, human, and administrative measures to ensure security.
h. Confidentiality: All persons involved in the processing of personal data are obligated to guarantee the confidentiality of the information.
RIGHTS OF DATA SUBJECTS
The Data Subject shall have the following rights:
a. To know, update, and rectify their personal data.
b. To request proof of the authorization granted for data processing.
c. To be informed about the use given to their personal data.
d. To file complaints before the Superintendence of Industry and Commerce.
e. To revoke authorization and/or request the deletion of personal data.
f. To access their personal data free of charge.
AUTHORIZATION AND PROOF OF USE OF PERSONAL DATA
Without prejudice to the exceptions provided by law, Clínica Colombiana de Implantes Dentales shall require prior, free, express, and informed authorization from the Data Subject for the collection, storage, or deletion of personal data.
MECHANISMS TO GRANT AUTHORIZATION
Authorization may be contained in a physical or electronic document or in any other format that guarantees its subsequent consultation.
EVENTS IN WHICH AUTHORIZATION IS NOT REQUIRED
Authorization from the Data Subject shall not be required when dealing with:
a) Information required by a public or administrative entity in the exercise of its legal functions or by court order.
b) Public data.
c) Information processing authorized by law for historical, statistical, or scientific purposes.
REVOCATION OF AUTHORIZATION
Data Subjects may revoke consent for the processing of their personal data at any time, provided that no legal or contractual provision prevents it.
PRIVACY NOTICE
Clínica Colombiana de Implantes Dentales shall inform the Data Subject about the existence of its information processing policies and procedures.
MINIMUM CONTENT OF THE PRIVACY NOTICE
The privacy notice shall contain at least the following information:
a. Identity, address, and contact information of the Data Controller.
b. The type and purpose of data processing.
c. Mechanisms available for the Data Subject to access the data processing policy.
d. Information on how to consult the information processing policy.
CONSULTATIONS
Data Subjects may submit written requests to access their personal information.
CLAIMS
Data Subjects who consider that the information contained in the database should be corrected, updated, or deleted may file a claim with Clínica Colombiana de Implantes Dentales.
DATA UPDATE
At any time and free of charge, the Data Subject may request the correction, update, or deletion of their personal data.
DATA DELETION
The Data Subject may request the deletion of their personal data when it is not being processed according to the principles and obligations established by law.
AREA RESPONSIBLE FOR DATA PROTECTION
Clínica Colombiana de Implantes Dentales designates the Human Resources Department, Medical Records Committee, Quality Committee, and Systems Department as responsible for personal data protection.
INTERNATIONAL DATA TRANSFERS
By accepting this Personal Data Protection Manual, the Data Subject authorizes Clínica Colombiana de Implantes Dentales S.A. to transfer personal data nationally or internationally within the applicable legal framework.
EFFECTIVE DATE:
This manual is effective as of November 2016.
