Privacy Policies

1. OBJECTIVEEstablish the criteria on the use, treatment, processing, exchange, transfer and transmission of personal data collected, processed and/or registered in our databases in development of the corporate purpose of Laboratorio San Jorge. Establish the rights to know, update and rectify the information that has been collected.
2. SCOPEThis policy will be applicable to personal data registered in any Laboratorio San Jorge database, with respect to the collection, storage, use, circulation, deletion and any activities that constitute processing of personal data.
3. DEFINITIONSAuthorization: Prior informed consent of the owner to carry out the processing of personal data.

   Privacy notice: Document generated by the entity responsible, which is made available to the owner, for the processing of his or her data through its website laboratoriesanjorge.com.

   Database: Organized set of personal data that is subject to processing, regardless of whether they are structured or not.

   Personal data: Any information linked to or that can be associated with one or more specific natural persons. Personal data may be public, semi-private or private, in accordance with the given condition.

   Private data: It is data that, due to its intimate or reserved nature, is only relevant to the owner, as is the case with biometric data and medical history, among others.

   Public data: It is the data classified as such according to the mandates of the law or the Political Constitution and all data that isn’t semi-private or private. The data contained in public documents, court rulings and those relating to the marital status of people are public, among others.

   Semi-private data: It is the data that is not intimate, reserved, or public in nature and whose knowledge or disclosure may be of interest not only to the owner, but also to a certain sector or group of people, or to society in general, such as data related to compliance of the obligations recorded in the credit risk centers.

   Sensitive data: Data that affect the privacy of the owner or whose improper use can generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, as well as data related to health and privacy. sex life.

   Data Processor: Natural or legal person, public or private, who, by themselves or in association with others, processes personal data on behalf of the data controller.

   Data controller: Natural or legal person, public or private, who alone or in association with others decides on the database and/or the processing of data.

   Owner: Natural person whose personal data is the subject of processing.

   Processing: Any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion.

4. GENERALITIESIn compliance with the provisions of Statutory Law 1581 of 2012 and its Regulatory Decree 1377 of 2013, Laboratorio San Jorge adopts this policy for the processing of personal data, which will be let known to all owners of the data collected or that in the future are obtained in

   the exercise of contractual and commercial activities inherent to the corporate purpose with clients and suppliers and labor with employees and partners. In this way, Laboratorio San Jorge states that it guarantees the rights of privacy, intimacy, good name, in the processing of personal data, and consequently all its actions will be governed by the principles of legality, purpose, freedom, truthfulness or quality, transparency, restricted access and circulation, security and confidentiality. All people who, in the development of different contractual, commercial, labor activities, among others, whether permanent or occasional, provide Laboratorio San Jorge with any type of information or personal data, will be able to know it, update it and rectify it.

LEGAL FRAMEWORK

• Political Constitution of Colombia of 1991, article 15
• Law 1266 of 2008: establishes the general provisions of Habeas data and regulates the management of information contained in personal databases.
• Regulatory Decree 1727 of 2009: determines the way in which the operators of data banks of financial, credit, commercial, services and information from third countries must present the information of the owners of the information .
• Law 1581 of 2012: establishes general provisions for the protection of personal
• Regulatory Decree 2952 of 2010: regulates articles 12 and 13 of Law 1266 of
• Regulatory Decree 1377 of 2013: partially regulates Law 1581 of
• Regulatory Decree 886 of 2014: regulates article 25 of Law 1581 of 2012, relating to the National Registry of Databases.
• Regulatory Decree 1074 of 2015: by which the Single Regulatory Decree of the Commerce, Industry and Tourism Sector is issued.

Rulings of the Constitutional Court C-1011 of 2008, and C-748 of 2011

PRINCIPLES FOR THE PROCESSING OF PERSONAL DATA

For the purposes of guaranteeing the protection of personal data, Laboratorio San Jorge will harmoniously and comprehensively apply the following principles, in light of which the processing, transfer and transmission of personal data must be carried out:

Principles related to the collection of personal data

1. Principle of freedom: Unless otherwise legally stated, data collection can only be carried out with the prior express and informed authorization of the owner. Personal data may not be obtained or disclosed without the prior consent of the owner, or in the absence of a legal or judicial mandate that requires consent. The owner of the data must be informed clearly, sufficiently and in advance about the purpose of the information provided and therefore, data cannot be collected without a clear specification about its purpose. Deceptive or fraudulent means may not be used to collect and process personal data.
2. Principle of limitation of collection: Only personal data that is strictly necessary for the fulfillment of the purposes of the treatment should be collected, in such a way that the registration and disclosure of data that are not closely related to the purpose of the treatment is prohibited. Accordingly, everything reasonably possible should be done to limit the processing of personal data to the minimum necessary. That is, the data must be: (i) adequate, (ii) relevant and (iii) in accordance with the purposes for which it was intended.

Principles related to the use of personal data

1. Principle of purpose: The processing of personal data collected must be used for a legitimate purpose, which must be known to the owner.
2. Principle of temporality: Personal data will be kept only for the reasonable time necessary to fulfill the purpose of the treatment and the legal requirements or instructions of the surveillance and control authorities or other competent authorities. The data will be kept when it is necessary to comply with a legal or contractual obligation. Once the purpose(s) have been fulfilled, the data will be deleted.
3. Principle of non-discrimination: It is prohibited to carry out any act of discrimination based on the information collected in databases or files.

 

Principles related to information quality

1. Principle of truthfulness or quality: The information subject to treatment must be truthful, complete, exact, updated, verifiable and understandable. The processing of partial, incomplete, fragmented or misleading data will not be carried out.

 

Principles related to the protection, access and circulation of personal data

1. Principle of transparency: In the treatment, the right of the owner to obtain information about the existence of data that concerns him or her from Laboratorio San Jorge at any time and without restrictions, must be guaranteed;
2. Principle of restricted access and circulation: Treatment is subject to the limits derived from the nature of the personal data, the provisions of this law and the Constitution. Personal data, except public information, and the provisions of the authorization granted by the data owner, may not be available on the Internet or other means of dissemination or mass communication, unless access is technically controllable to provide restricted knowledge only to the owners or authorized third parties;
3. Principle of security: The information subject to processing by Laboratorio San Jorge must be protected through the use of technical, human and administrative measures that are necessary to provide security to the records, avoiding their adulteration, loss, consultation, use or unauthorized or fraudulent access;
4. Principle of confidentiality: All persons involved in the processing of personal data are obliged to guarantee the confidentiality of the information, even after their relationship with any of the tasks included in the processing has ended. In the event that sensitive personal data is collected, the owner may refuse to authorize its treatment.

General information such as full name, ID number, gender and contact information (email, physical address, landline and mobile phone) are stored in the Laboratorio San Jorge databases. In addition to these, and depending on the nature of the database, Laboratorio San Jorge may have specific data required for the processing to which the data will be subjected. The databases of employees and contractors also include information on work and academic history, sensitive data required by the nature of the employment relationship (photography, family group formation, biometric data). Sensitive information may be stored in the databases with prior authorization from its owner, in compliance with the provisions of articles 5 and 7 of law 1581 of 2012.

PURPOSE

The purpose of the information collected by Laboratorio San Jorge is to allow the adequate development of its corporate purpose as a collection, transportation and hazardous waste treatment company. In addition, Laboratorio San Jorge stores the information necessary to comply with legal duties, mainly in accounting, corporate, and labor matters. Information about clients, suppliers, partners and employees, current or past, is stored in order to facilitate, promote, allow or maintain employment, civil and commercial relationships and to inform about new products and/or services.

• To know, update and rectify your personal data. This right may be exercised, among others, in the case of partial, inaccurate, incomplete, fragmented, misleading data, or data whose processing is expressly prohibited or has not been authorized.
• Request proof of the authorization granted to Laboratorio San Jorge, except when it is expressly excepted as a requirement for treatment, in which case it would not be necessary.
• Be informed by Laboratorio San Jorge, upon request, regarding the use that has been given to your personal data.
• Submit complaints to the Superintendency of Industry and Commerce for violations of the provisions of Law 1581 of 2012 and other regulations that modify, add or complement it.
• Revoke the authorization and/or request the deletion of personal data when the processing does not respect constitutional and legal principles, rights and guarantees. The revocation and/or deletion will proceed when the Superintendency of Industry and Commerce has determined that, in the processing, the person responsible or in charge has engaged in conduct contrary to Law 1581 of 2012 and the Constitution.
• Access your personal data that has been processed, free of

To exercise your rights you may request it by written communication to the email mercadeo@laboratoriosanjorge.com.

DUTIES OF LABORATORIO SAN JORGE AS ENTITY RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA

• Guarantee at all times the full and effective exercise of the right of habeas data to the
• Request and keep, under the conditions provided in this law, a copy of the respective authorization granted by the owner.
• Duly inform the owner about the purpose of the collection and the rights granted to him by virtue of the authorization granted.
• Maintain the information under the security conditions necessary to prevent its adulteration, loss, consultation, use or unauthorized or fraudulent access.
• Guarantee that the information provided to the processor is true, complete, accurate, updated, verifiable and understandable.
• Update the data processor with any information, communicating all the news regarding the data that you have previously provided in a timely manner, and adopt any other necessary measures so that the information provided to it remains updated.
• Rectify the information when it is incorrect and communicate the pertinent information to the
• Provide the processor, as the case may be, only data previously authorized in accordance with the provisions of this law.
• Demand that the manager respect the security and privacy conditions of the owner’s information at all times.
• Process queries and claims formulated in the terms indicated in this
• Adopt an internal manual of policies and procedures to guarantee adequate compliance with this law and, especially, to respond to queries and complaints.
• Inform the manager when certain information is under discussion by the owner, once the claim has been submitted and the respective process has not been completed.
• Inform at the request of the owner about the use given to their
• Inform the data protection authority when violations of security codes occur and when there are risks to the administration of the owners’ information.
• Comply with the instructions and requirements issued by the Superintendency of Industry and Commerce.

PEOPLE TO WHOM THE INFORMATION MAY BE PROVIDED

The information that meets the conditions established in the Law may be provided to the following people:

• To the owners, their successors (when those are missing) or their legal representatives.
• To public or administrative entities in the exercise of their legal functions or by court order.
• To third parties authorized by the owner or by law.

CARE AND PROCEDURE TO EXERCISE THE RIGHTS OF THE OWNER

Laboratorio San Jorge, as responsible for the processing of your data, promises to respect the confidentiality of your personal data and to guarantee the exercise of your right to habeas data. For this, Laboratorio San Jorge has assigned a person in charge of receiving, processing and resolving your claims, for matters related to your personal data collected.

The contact details are:

Name of area in charge: Administrative Area Email: mercadeo@laboratoriosanjorge.com