Privacy Policy
POLICY ON THE PROCESSING AND PROTECTION OF PERSONAL DATA
i-Valle, with a commitment to conduct its business in compliance with the law 1480 of 2011 on consumer protection, the law 1581 of 2012, Regulatory Decree 1377 of 2013, Decree 886 of 2014, other norms that make up the Habeas Data regime in Colombia and of the highest applicable ethical standards; taking into account that for our commercial activity the use of your Personal Data is fundamental, We will carry out a proper handling of the personal data collected in our databases, in a fair and transparent manner in order to enable holders to exercise the right of habeas data.
Therefore, this Policy of Processing and Protection of Personal Data (henceforth the "Policy") its main purpose is to inform the Holders of the Personal Data of the scope and the purpose of the Processing to which this information will be submitted, where prior, express and informed consent is granted, as well as their rights as Holders of information and established procedures by i-Valle to make them effective.
OBJECTIVE: Establish the criteria for the collection, storage, use, exchange, updating, processing, reproduction, compilation, circulation, suppression, systematization and organization of personal data processed by i-Valle.
SCOPE: This policy applies to all personal information recorded in the databases of i-Valle, who acts as controller of personal data. In the databases of I-VALLE general information such as full name, identification number and type, gender and contact details is stored (e-mail, physical address, landline and mobile). In addition to these, and depending on the nature of the database, i-Valle may have specific data required for the processing to which the data will be subjected. The databases of employees and contractors include, in addition, information on work and academic history, sensitive data required by the nature of the employment relationship (photography, family group formation, biometric data). Sensitive information may be stored in databases with the prior consent of the holder, in compliance with the provisions of Articles 5 and 7 of the law 1581 of 2012.
OBLIGATIONS: This policy is mandatory and strictly enforced to i-Valle, who must:
a) Guarantee the Holder, at all times, the full and effective exercise of the right to habeas data.
b) To request and keep, under the conditions provided for in the afore mentioned law, a copy of the respective authorization granted by the Holder.
c) Duly inform the Owner of the purpose of the collection and the rights that assist him by virtue of the authorization granted.
d) Keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, unauthorized or fraudulent use or access.
e) Ensure that the information provided to the Data Controller is truthful, complete, accurate, up-to-date, verifiable and understandable.
f) To update the information, communicating in a timely manner to the Data Controller, all developments regarding the data previously provided to him and take the other necessary measures to ensure that the information provided to him is kept up to date.
g) Rectify the information where it is incorrect and communicate the relevant information to the Data Controller.
h) Provide the Data Controller, as the case may be, only data whose Processing is previously authorized in accordance with the provisions of the aforementioned law.
i) To require the Data Controller at all times to respect the Data Controller’s security and privacy conditions.
j) To process the queries and complaints formulated in the terms indicated in the aforementioned law.
k) Adopt an internal manual of policies and procedures to ensure proper compliance with the afore mentioned law and, in particular, for the care of queries and complaints.
l) Inform the Data Controller when certain information is under discussion by the Data Controller, once the complaint has been filed and the respective procedure has not been completed.
m) Inform at the request of the Owner about the use made of their data.
n) Inform the data protection authority when breaches of security codes occur and there are risks in the administration of the Data Subjects' information.
o) Comply with the instructions and requirements issued by the Superintendent of Industry and Commerce".
DATA CONTROLLER:
i-Valle, legally constituted business company, identified with the NIT 901285742-0, with principal domicile at carrera 67A No. 47-29, Ciudad 2000 of the city of Cali, Republic of Colombia. Website http://www.i-valle.com".
TREATMENT AND PURPOSE:
The processing that i-Valle will carry out with the personal information will be the collection, storage, use, exchange, updating, processing, reproduction, compilation, circulation, suppression, systematization and organization, all of them partially or totally in compliance with the following purposes:
To make the necessary arrangements for the development of the company’s corporate purpose with regard to the fulfillment of the object of the contract concluded with the Owner of the information.
Make invitations to events and offer new products and services.
Process procedures (applications, complaints, complaints).
Conduct satisfaction surveys on goods and services offered by i-Valle.
Provide contact information to the commercial force and/or distribution network, telemarketing, market research and any third party with which i-Valle has a contractual link for the development of such activities (market research and telemarketing, etc.) for the implementation of those activities.
Contact the Owner through telephone means to conduct surveys, studies and/or confirmation of personal data necessary for the execution of a contractual relationship.
Contact the Owner via electronic means - SMS or chat to send news related to loyalty campaigns or service improvement.
Contact the Holder by e-mail for the sending of extracts, statements of account or invoices in relation to the obligations arising from the contract concluded between the parties.
To fulfill the obligations undertaken by i-Valle with the Holder of Information, with regard to the payment of wages, social benefits and other benefits enshrined in the employment contract or as provided by law (in the case of employees of the organization).
Offer corporate welfare programs and plan business activities, for the holder and their beneficiaries (children, spouse, permanent partner).
Provide the services offered by i-Valle and accepted in the signed contract.
Provide the information to third parties with whom i-Valle has a contractual relationship and it is necessary to deliver it to him for the fulfillment of the contracted object.
The information may be delivered, transmitted or transferred to public entities, business partners, contractors, affiliates, subsidiaries, solely for the purpose of fulfilling the purposes of the corresponding database. In any case, the delivery, transmission or transfer shall be made after the conclusion of the commitments necessary to safeguard the confidentiality of the information. Personal information, including sensitive information, may be transferred, transmitted or delivered to third countries, regardless of the level of security of the rules governing the handling of personal information. In the performance of legal duties, i-Valle may provide personal information to judicial or administrative entities.
i-Valle will ensure the correct use of personal data of minors, ensuring that the applicable legal requirements are met and that any processing is previously authorized and justified in the best interests of minors.
RIGHTS OF THE HOLDERS: As provided for in Article 8 of the law 1581 of 2012, holders shall be entitled to:
(i) Free access to the data provided that have been processed.
(ii) Know, update and rectify your information against partial, inaccurate, incomplete, fractionated, misleading, or those whose processing is prohibited or has not been authorized.
(iii) Request proof of authorization granted.
(iv) Submit to the Superintendency of Industry and Commerce (SIC) complaints for violations of the provisions of current regulations.
(v) Revoke the authorization and/or request the deletion of the data, provided that there is no legal or contractual duty that prevents the elimination of them.
(vi) Refrain from answering questions about sensitive data. Replies concerning sensitive data or data on children and adolescents shall be optional.
These rights may be exercised through the channels or means provided by i-Valle for attention to the public, e-mail pqrs@i-valle.com and the national customer service offices, whose information I can consult on www.fitorec.com, available from Monday to Friday from 8:00 a.m. to 6:00 p.m., to meet the requirements related to the processing of my personal data and the exercise of the rights mentioned in this authorization.
For all of the above, I have given my consent to i-Valle to process my personal information in accordance with the Personal Data Processing Policy provided by the company in physical or electronic medium and that I made known before collecting my personal data.
I manifest that this authorization was requested and presented to me before submitting my data and that I subscribe to it freely and voluntarily once read in full.
ATTENTION TO PETITIONS, INQUIRIES AND COMPLAINTS The area of petitions, complaints and claims (pqrs@i-valle.com) is the unit responsible for processing requests from holders to enforce their rights.
PROCEDURE FOR THE EXERCISE OF THE RIGHT TO HABEAS DATA
In compliance with the rules on the protection of personal data, i-Valle the procedure and minimum requirements for the exercise of their rights:
For the filing and attention of your request we ask you to provide the following information:
Full name and surnames
Contact details (physical and/or electronic address and contact numbers), means of receiving a response to your request, reason(s)/fact(s) giving rise to the claim with a brief description of the right you wish to exercise (know, update, rectify, request proof of the authorization granted, revoke, delete, access to information) Signature (if applicable) and identification number.
The maximum term provided by law to resolve your claim is fifteen (15) working days, counted from the day following the date of your receipt. Where it is not possible to satisfy the claim within that period, i-Valle will inform the data subject of the reasons for the delay and the date on which his claim will be dealt with, which in no case may exceed eight (8) working days following the expiry of the first term.
Once the terms indicated by the Law 1581 of 2012 have been fulfilled and any other rules regulating or supplementing it, the Owner to whom the exercise of the rights of access, updating, rectification, erasure and revocation is refused, in whole or in part, may bring his case to the attention of the Superintendency of Industry and Commerce — Delegation for the Protection of Personal Data—.
VALIDITY: This Policy for the Processing of Personal Data applies from July 22, 2019.
The databases in which the personal data will be recorded shall be valid for as long as the information is maintained and used for the purposes described in this policy. Once this(these) purpose(s) is fulfilled and provided that, there is no legal or contractual duty to keep your information, your data will be deleted from our databases.