This policy applies to all the officials, contractors, and third parties at the service of DIANA GARCIA ACCESORIOS SAS that have access to the information through the printed documents, computer equipment, technological infrastructure, and channels of communication of the company.

This policy is largely based on the provisions contained in articles 15 and 20 of the Colombian’s Political Constitution, the law 1266 of 2008, Law 1581 of 2012, act 1377of 2013, and act 886 of 2014.

DIANA GARCIA ACCESORIOS SAS can change its policy for personal data protection when it is considered appropriate; however, they are committed to maintaining previous versions of the present policy and ensuring the rights of the holders determined in the current legislation.

The information provided by the holders of DIANA GARCIA ACCESORIOS SAS is required to be recollected, used, circulated, saved, shared, conveyed, transferred, or given treatment for the following purposes:

The development of the administrative procedures of creation, recruitment, and management of the providers.

Procedures related to the payment to providers, and attention to procedures, inquiries, complaints, and claims.

For contacting natural personas by different platforms that operate as suppliers or employees to give information related to the commercial link contracted.

The development of the own procedures associated with the management of clients that includes activities related to the compliance with the contracted contractual relationship, granting of guarantees when appropriate, communication of information of commercial conditions and after-sales services, for the realization of business intelligence activities, the clients perspective, investigation and tendencies of the market concerning the personal information given by the titleholder, sending event invitations, sending publicity information of the products, goods, and services of the company, sending promotional information and gifts for advertising campaigns.
For the execution of orders, online purchases, and delivery of information about shipping guides.

For the emission of sales invoices of products, goods, and services.
For the execution of everything related under the contractual relationship, affiliation processes, payroll payment, clearance of social security contributions, payment of parafiscal, internal communication, and every activity and information that relates or links the employees and their families.

For the realization of the management and/or internal procedures of the company to make the selection processes.

To correspond to contraventions of legal nature.

Fulfillment of administrative, judicial, or legal mandates.

For the emission of the certificates related to the relationship between the owner of the data and the company.

To guarantee the safety of people, goods, and physical facilities.
To eventually contact, by telephone, email, or by other resources, to natural persons who have or have had relations, such as enumeration means without limitations, workers and their relatives, providers, clients, online contacts, candidates in selection processes, and other interested parties for the purposes mentioned above.

For the development of administrative processes proper to missionary activities, thus, when required, it can be hired for the services to be provided by third parties, in this cases, the information is translated will be transferred with the necessary security measures to safeguard the privacy of the owner and the correct provision of the service, and compliance with other legal and constitutional duties.

The owner of the information has the right to:

1. Know, upgrade, and rectify the personal data in association with those responsible for the treatment of those in charge of the treatment. This right can be exercised, among other partial, inaccurate, incomplete, fractioned, misleading data, or those whose treatment is extremely prohibited or has not been authorized.
2. Request authorization test that’s given by the responsible for the treatment unless when expressly excepted as a requirement for treatment, by the provisions in article 10 of the Law 1581 of 2012.
3. Be informed by the responsible for the treatment or the person in charge of the treatment before request, in regards to your use of your data.
4. Present to the Industry and Commerce Superintendence complaints of infractions to the provisions of this law and the other regulations that modify, add, or complement it.
5. Revoke the authorization or solicitation of the suppression of the data when the principles, rights, and constitutional and legal guarantees are not valued. The revoking or suppression will follow when the Industry and Commerce Superintendence has determined that in the treatment, the responsible or the person in charge has engaged in conduct contrary to the Law and the Constitution.
6. Access free of charge to your data that has been subject to treatment.
7.  Procedures to exercise the rights of the title holders

To exercise the right that the holders of the information must know, upgrade, rectify and suppress the data, and revoke the upgrade can send a communication to the email: rectify and suppress info@dianagarciaccesorios.com or present a written request to the delivery service directed to the Administrative Area of the company.

The company will respond to the requesting Holder within the terms established by Law 1581 of 2012 for the case of inquiries and complaints, respectively; for the effect, the request must contain all the necessary data and applications to the right of petition for guaranteeing the opportunity and an effective answer. Furthermore, it must contain a clear and precise description of the personal data for which the Holder seeks to exercise any right. Every request to be processed must be presented by the Holder of the data or from the legal representative; therefore, DIANA GARCIA ACCESORIOS SAS reserves the right to verify the identity of the petitioner by any means.

The consultation will be attended in a maximum term of (10) business days counted from the date of receipt. When it is not possible to attend the consultation of the mentioned term, it will be informed to the person concerned, expressing the reasons for the delay and displaying the date your consultation will be attended, which mustn’t surpass the following (5) business days in regards to the expiration of the first term.

The requests related to upgrades, corrections, amendments, or suppression of the data will be answered during the following (15) business days, counted from the day following the date of receipt. When it is not possible to attend the mentioned term, it will be informed to the person concerned before the expiration of the referred period the reasons for the delay and the date of attendance, which mustn’t exceed the following (8) business days to the termination of the first term. 

In the requests of amendments and upgrades of the personal data, the titleholder must indicate the corrections made and give the documentation that supports your request.

The suppression of the personal data must involve the total or partial elimination of the information requested by the titleholder in the registers, attachments, databases, or treatments made by DIANA GARCIA ACCESORIOS SAS. 

It is essential to consider that the cancelation right isn’t absolute, and the response can deny its exercise when:

The titleholder has a legal or contractual duty of remaining in the database.

The elimination of the data hinders judicial or administrative proceedings linked to fiscal obligations, the investigation, and prosecution of criminal offenses, or the upgrade of administrative sanctions.

The data is needed to make an action according to the public interest or to fulfill an obligation legally acquired by the titleholder.

The titles of the personal data can revoke the consent to the processing of your data at any time unless it isn’t disabled by a legal or contractual provision. It must be taken into account the existence of two modalities in where the consent may be revoked. The first may be about the totality of the consented purposes, this is that DIANA GARCIA ACCESORIOS SAS should stop dealing with the owner’s data entirely; the second one must occur about determined types of treatment, for example, for advertising purposes or market studies. With the second modality, this is the partial revocation of the consent, other ends of the treatment are kept safe than the responsible by the approval given can carry out with which the owner agrees.   

Every holder that supplies his information to establish pre-contractual, contractual, labor commitments, or any relation that permits the organization the normal development of its social object must provide voluntarily the requested data for the registration process as an interested part of the company.

Content of the privacy notice, which is the physical or electronic document that is made available to the owner of the information by which DIANA GARCIA ACCESORIOS SAS informs the existence of the policy for the protection of personal data, the form the access it and the treatment are given to its data.

The organization disposes of mechanisms of information like the email account and the web page of the Responsible whereby will be disseminated the present policy and the protocols defined to attend to the requests regarding the information provided.

This policy applies as of its issuance, and the databases subject to processing shall remain in force as long as it is necessary for the purposes established. As a general rule, the term of authorizations on the use of personal data is understood to be valid during the exercise of the corporate goal of DIANA GARCIA ACCESORIOS SAS.