Legal
Data Processing Authorisation and Policy (Habeas Data)
This document contains the authorisation and the personal data treatment policy of Corpshore Colombia, in development of the right of habeas data recognised in the Constitution and regulated by Ley 1581 de 2012 and Decreto 1377 de 2013. It complements the Privacy Policy.
Draft pending review by Colombian legal counsel before final publication. It does not constitute legal advice.
1. Purpose
This document informs the subject about the treatment of their personal data and records the authorisation they grant for that treatment.
The authorisation is understood to be granted when the subject accepts this policy, ticks the consent box on a form or voluntarily continues with a process that involves providing their data.
2. Data controller
The controller is Corpshore Colombia, the Colombian subsidiary of Corpshore Solutions Corporation, operating from Bogotá, Medellín, Cali and Barranquilla. The channel for personal data matters is info@corpshore.solutions.
3. Purposes for which treatment is authorised
The subject authorises Corpshore Colombia to collect, store, use, circulate and delete their personal data in order to attend to contact, quote and proposal requests, manage selection processes, provide and administer the contracted services, comply with legal, accounting and tax obligations, and send communications when authorisation exists for it.
The detailed purposes are described in the Privacy Policy, which forms an integral part of this authorisation.
4. Data subject to authorisation
The authorisation covers identification and contact data, the professional and academic data provided in selection processes, and the technical browsing data treated through cookies in accordance with the Cookie Policy.
The provision of sensitive data through the site is not requested. When a specific process requires treating sensitive data, a separate explicit authorisation will be requested.
5. Authorisation for sensitive data
When the treatment of sensitive data is necessary, the subject will be informed that they are not obliged to authorise it, told which sensitive data will be treated and for what purpose, and it will only proceed with their explicit authorisation.
The subject may refuse to provide sensitive data without this affecting the handling of their requests when the data is not essential for the purpose.
6. Optional nature of responses
The provision of data is voluntary. Some data is necessary to handle a request or to advance a process, and its absence may prevent Corpshore Colombia from attending to the request.
Questions about sensitive data or about the data of minors are always optional.
7. Rights of the subject
The subject has the right to know, update and rectify their data, to request proof of the authorisation, to be informed about the use of their data, to file complaints with the Superintendencia de Industria y Comercio, to revoke the authorisation and to request the deletion of the data when there is no legal or contractual duty to keep it, and to access their data free of charge.
The exercise of these rights is free and may be carried out at any time.
8. Procedure to exercise the rights
To exercise their rights, the subject may write to info@corpshore.solutions, stating their name, their request and the contact details for us to reply.
Enquiries are handled within a maximum term of ten business days, extendable by five additional business days when it is not possible to handle them within the first term. Claims are processed within a maximum term of fifteen business days, extendable by eight additional business days, in accordance with the law.
9. Responsible area
The area responsible for handling requests, enquiries and claims relating to the treatment of personal data is the Corpshore data protection function, through the email info@corpshore.solutions.
10. Validity of the authorisation and the database
The authorisation remains valid as long as it is not revoked by the subject and as long as the relationship or purpose that gave rise to the treatment subsists.
The databases will be kept for the time necessary to fulfil the purposes and the applicable legal obligations. When they are no longer necessary and there is no legal duty to keep them, the data will be deleted or anonymised.
11. Transfers and transmissions
The subject authorises that their data may be transferred or transmitted to the other entities of the Corpshore group and to processors, including abroad, for the authorised purposes, complying with the guarantees required by Ley 1581 de 2012 for international transfers and transmissions.
12. Expression of the authorisation
The subject's authorisation may be recorded in a physical or electronic document, or in any other format that allows its subsequent consultation, as well as through unequivocal conduct that reasonably allows the conclusion that the authorisation was granted.
Corpshore Colombia keeps proof of the authorisation, with the date, the means and the version of the text accepted.
13. Supervisory authority
The Superintendencia de Industria y Comercio is the competent authority for the protection of personal data in Colombia. The subject may turn to it once the enquiry or claim procedure before Corpshore Colombia has been exhausted.
14. Acceptance
By granting this authorisation, the subject declares that they have been informed of the purposes of the treatment, of their rights and of the optional nature of responses about sensitive data, and that the authorisation is free, prior, express and informed.