1

Authorization

Prior, express, and informed consent of the Data Subject for the processing of their Personal Data.

2

Privacy Notice

A verbal or written communication generated by the Data Controller, addressed to the Data Subject for the processing of their Personal Data, by means of which they are informed about the existence of the Information Processing Policies that will be applicable to them, how to access them, and the purposes for which the Personal Data is intended to be processed

3

Database

An organized set of Personal Data that will be subject to processing.

4

Sensitive Data

This refers to data that affects the privacy of the Data Subject or whose misuse could lead to discrimination, such as data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, union membership, social or human rights organizations, or that promotes the interests of any political party or guarantees the rights and freedoms of opposition political parties, as well as data relating to health, sex life, and biometric data.

5

Data Processor

A natural or legal person, public or private, which alone or jointly with others, processes Personal Data on behalf of the Data Controller. In the event that the Data Controller does not act as the Data Processor, the Data Processor shall be expressly identified.

6

Claim

A request by the data subject, or a person or persons authorized by them or by law, to correct, update or delete their personal data or to revoke their authorization in the cases established by law

7

Data Processing

Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

8

Transfer:

A transfer of personal data takes place when the controller or processor, established in Colombia, transfers the personal data to a recipient, who is also a controller and is established either inside or outside the country

9

Transfer:

The processing of personal data which involves the communication of such data within or outside the territory of the Republic of Colombia when it is intended for processing by the processor on behalf of the controller