This document constitutes the Information Processing and Personal Data Protection Policy (hereinafter, the "Policy") of Grupo Netvoice Ltda., in accordance with the provisions of the Political Constitution of Colombia, Law 1581 of 2012, Decree 1377 of 2013 and other applicable regulations. in force in the country regarding the constitutional right to Habeas Data.
Guaranteeing privacy, transparency and security in the handling of personal information of our users, employees, suppliers and citizens who interact with our channels is an unavoidable corporate pillar at NetVoice.
1. Key Definitions
According to Colombian legislation, the following terms are defined:
- Owner: Natural person whose personal data is subject to processing.
- Personal Data: Any information linked to or that can be associated with one or more specific or determinable natural persons.
- Processor: Natural or legal person who, by itself or in association with others, processes personal data on behalf of the person responsible. NetVoice usually acts as Data Processor with respect to the calls and customer information of its B2B/B2G clients.
- Controller: Natural or legal person who decides on the database and/or the processing of the data.
2. Guiding Principles of Treatment
NetVoice will apply the following principles in the collection, use and storage of personal data:
- Principle of Legality: Treatment is a regulated activity and must be subject to the provisions of the law.
- Principle of Purpose: The treatment must obey a legitimate purpose in accordance with the Constitution and the law, which must be informed to the Owner.
- Principle of Freedom: Treatment can only be carried out with the prior, express and informed consent of the Owner.
- Security Principle: The information subject to processing by the person responsible will be handled with the essential technical measures to provide security and prevent its alteration or unauthorized access.
3. Rights of Data Subjects
Holders of personal data processed by NetVoice enjoy the following rights enshrined in Law 1581 of 2012:
- Access and Consultation: Know the personal data stored in our databases for free at any time.
- Updating and Rectification: Request the correction of inaccurate, partial, incomplete, fragmented or misleading data.
- Deletion or Cancellation: Request the definitive deletion of your personal data when it is considered that the treatment does not respect constitutional principles, rights and guarantees.
- Revocation of Authorization: Revoke at any time the consent previously granted for the processing of your personal data, as long as there is no legal or contractual duty that requires maintaining the information.
4. Procedure for Exercising Rights (Petitions and Claims Channel)
Data Owners or their representatives may file queries or claims as follows:
A. Enabled channels:
- Specialized email: Send a formal request to the email account privacidad@netvoice.co with the subject "Habeas Data - [Full Name]".
B. Minimum application requirements:
- Full name, type and identification document number of the Holder.
- Detailed description of the request (query, update, rectification or deletion).
- Means of contact for response (physical address or email).
- Document that proves the identity of the applicant or his status as representative of the Owner (if he is not acting directly).
C. Response Terms (Established by Law):
- Queries: Requests for information consultation will be resolved within a maximum term of ten (10) business days from the date of receipt. If it is not possible to respond within this period, the Owner will be informed of the reasons for the delay and a response will be given within a period of no more than five (5) additional business days.
- Claims or Complaints: Requests for rectification, updating or deletion of data will be resolved within a maximum period of fifteen (15) business days. If the claim is incomplete, the interested party will be required within five (5) days of receipt to correct the deficiencies. After two (2) months without a response from the applicant, the claim will be deemed to have been withdrawn.
5. Validity of the Databases
The personal databases under the responsibility of NetVoice will remain valid for the time necessary to fulfill the purposes of the treatment informed in the authorization, and/or as long as the contractual, commercial or labor relations that gave rise to the treatment subsist, adding the legal terms required by the tax, civil or judicial control authorities in Colombia.