• APPLICABILITY OF THE CONDITIONS:

The following Personal Data Protection and Processing Policy will apply to all Databases and Biometric information that are used by AWEIMA considered as responsible for the processing of Personal Data.

• RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA

Aweima

Address: Carrera 22 Calle 67 B, Av. Ambala, Ibagué, Tolima

Mobile: 318-5303349

Email: hello@aweima.com

Website:  www.aweima.co

• DEFINITIONS

1. a) Authorization: Prior, express and informed consent of the Owner to carry out the Processing of Personal Data.
2. b) Database: The organized set of Personal Data subject to processing.
3. c) Personal Data: Any information linked or that can be associated with one or more determined or determinable natural persons.
4. d) Data Processor: Natural or legal person, public or private, that by itself or in association with others, performs the Processing of Personal Data on behalf of the Data Controller.
5. e) Responsible for the Treatment: Natural or legal person, public or private, that by itself or in association with others, decides on the Database and/or the treatment of the data.
6. f) Owner of the data: Physical or natural person to whom a personal data corresponds and is subject to treatment.
7. g) Treatment: Any operation or group of operations such as the collection, storage, use, circulation or deletion of personal data.
8. h) Privacy Notice: Verbal or written communication generated by the person in charge, addressed to the Owner for the processing of their personal data, through which they are informed about the existence of the information processing policies that will be applied, and the purpose of the treatment. of personal data. to be carried out.
9. i) Public Data: Refers to data that is not semi-private, private or sensitive. Data related to the marital status of natural persons, their profession or trade, and their status as merchants or public servants are considered public data. Due to its nature, public data may be contained, among others, in public documents, gazettes and official bulletins and duly executed judicial decisions that are not subject to confidentiality.
10. j) Sensitive Data: Refers to any information that, if compromised, could negatively affect the privacy of its owner. Data whose improper use may generate discrimination, such as those that reveal racial or ethnic origin, public orientation, religious or philosophical convictions, trade union membership, social or human rights organizations, or those that promote the interests of any political party or guarantee rights and opposition. guarantees from political parties, as well as health data, sexual life and biometric data.
11. k) Transfer: The transfer of data occurs when the person in charge and/or in charge of the processing of Personal Data, based in Colombia, sends the information to a recipient, who in turn is responsible for the use or treatment and is within or out of the country.
12. l) Transmission: Part of the processing of Personal Data that implies the communication of information inside or outside the territory of the Republic of Colombia when it is intended to carry out a treatment by the Treatment Manager on behalf of the Treatment Manager.
13. m) Biometric System: Automatic method of identification and verification of the individual using precise physical and behavioral traits.
14. n) Biometrics: Study for the unequivocal recognition of people based on one or more intrinsic behavioral or physical traits.

• GUIDING PRINCIPLES OF THE PROCESSING OF PERSONAL DATA 

1. a) Legal Principles of the Processing of Personal Data: The processing of personal data is a regulated activity that must be subject to the law and other provisions that develop it.
2. b) Principle of Purpose: The treatment must obey a legitimate purpose in accordance with the Constitution and the Law, which must be informed to the Holder.
3. c) Principle of freedom: The treatment can only be exercised with the prior, express and informed consent of the Holder. Personal data may not be obtained or disclosed without prior authorization, or in the absence of consent by legal or judicial mandate.
4. d) Principle of veracity or quality: The information subject to treatment must be truthful, complete, exact, updated, verifiable and understandable. The processing of partial, incomplete, divided or misleading data is prohibited.
5. e) Principle of Transparency: In the treatment, the right of the Holder to obtain from the Treatment Manager or the Treatment Manager, at any time and without restrictions, information on the existence of data that concerns him.
6. f) Access and restricted circulation Principle: The treatment is subject to the limits derived from the nature of the personal data, the provisions of the Law and the Constitution. In this sense, the treatment can only be carried out by persons authorized by the Owner and/or by the persons provided for in Law 1581 of 2012.
7. g) Personal Data, except for public information, may not be available on the Internet or other means of dissemination or mass communication, unless access is technically controllable in order to provide restricted knowledge only to the Holders or third parties authorized in accordance with the law.
8. h) Principle of Security: The information subject to treatment by the person in charge of the Treatment referred to in Law 1581 of 2012, must be managed with the technical, human and administrative measures that are necessary to provide security to the records, avoiding its adulteration. , loss, consultation, use or unauthorized fraudulent access.
9. i) Principle of Confidentiality: The people involved in the processing of personal data that are not public, are intended to guarantee the confidentiality of the information even after the end of their relationship with any of the tasks included in the treatment, being able to only carry out the supply or exchange of personal data, when it corresponds to the development of the activities authorized in Law 1581 of 2012 and in its terms.

• TREATMENT AND PURPOSES FOR WHICH AWEIMA WILL PROCESS PERSONAL DATA

AWEIMA as responsible for the processing of Personal Data, exclusively for the execution and development of the contract in which it acts as a contractor to support the administration and maintenance of the biometric control system of food rations delivery, collection, storage, uses, fingerprinting fingerprints and other personal data corresponding to children or adolescents, prior authorization signed by their guardian or legal representative.

It should be noted that the fingerprint is taken and used exclusively for the purposes described here.

• RIGHTS OF PERSONAL DATA HOLDERS 

RIGHTS OF THE HOLDERS OF PERSONAL DATA

The natural persons whose Personal Data is being processed by AWEIMA have the following rights, which they can exercise at any time:

1. a) Know and update your personal data to the person in charge of the treatment and in charge of the treatment or to those responsible. This right may be exercised, among others, against partial, inaccurate, incomplete, divided, misleading data, or those whose treatment is expressly prohibited or has not been authorized.
2. b) Request proof of the authorization granted to the person responsible for the Processing of your personal data.
3. c) To be informed by the person in charge of the treatment or Responsible for the Treatment upon request, regarding the use that has been given to your personal data.
4. d) Submit complaints to the Superintendence of Industry and Commerce for violations of the provisions of the legislation that protects and regulates the Processing of Personal Data.
5. e) Revoke the authorization and/or request the deletion of the data, only when the Treatment does not respect the constitutional and legal principles, rights and guarantees.
6. f) Free access to your processed personal data. In the case of minor owners, their rights will be exercised through their legal representatives.

• AREA RESPONSIBLE FOR HANDLING REQUESTS, QUERIES AND CLAIMS REGARDING PERSONAL DATA PROCESSED BY AWEIMA

The AWEIMA Customer Service area has been designated as the area responsible for handling requests, queries, claims and complaints. It is the area where the Holder may exercise the rights to know, update or delete information, and revoke the authorization. This area is located at the address: Carrera 22 Calle 67 B, Av. Ambala, Ibagué, Tolima. Likewise, you can be contacted through the following email: hello@aweima.co

1. PROCEDURE FOR THE HOLDER TO EXERCISE THEIR RIGHTS 

The Owner of the information processed by AWEIMA in compliance with its current regulations, has the right to access their Personal Data and the details of the treatment to which it is submitted. As well as the right to rectify them, and update them if they are not accurate, or request their deletion when it is considered that they are not necessary for the purpose for which they were obtained.

The Holder may request the above, through the Customer Service area or through the following channels:

1. Communication containing your complaint, claim or request addressed to AWEIMA, Customer Area, Carrera 22 Calle 67 B, Av. Ambala, Ibagué, Tolima.
2. Request containing your complaint, claim or request sent to the email: hello@aweima.co
3. Request sent by phone +57 (318) 5303349

The Interested Party can use these channels. In the case of minors, the legal representative will be the person authorized for such purposes.

Procedure:

The Data Owner or his representative in the case of minors may consult their personal data at any time. For this purpose, she can submit a request indicating the information she wishes to know through any of the aforementioned mechanisms.

8. INQUIRIES :

1. The Holder, his successors or his legal representative must prove their identity. When the request is made by a person other than the Holder, and it is not proven that he is acting on her behalf, it will be considered as not submitted.
2. The request or query must contain at least the full name and address of the Holder or representative, or any other means to receive the response, as well as a clear and precise description of the personal data with respect to which the Holder seeks to exercise the right of consultation. and/or request.
3. If the query or request made by the Holder is incomplete, AWEIMA will require the interested party within five (5) days following receipt of the query, request or claim to correct the failures. After two (2) months from the date of the request, without the applicant submitting the required information, it will be understood that he has withdrawn his inquiry.
4. In compliance with the provisions of article 14 of Law 1581 of 2012, requests or inquiries will be addressed to AWEIMA within a maximum period of ten (10) business days from the date of receipt of the shipment. When it is not possible to respond to the request or query within said term, the applicant will be informed of this fact, stating the reasons for the delay and indicating the date on which the query will be addressed, which in any case may exceed five (5 ) business days following the expiration date of the first installment.

9. Complaints and Claims :

In accordance with the provisions of article 15 of Law 1581 of 2012, when the Holder or his successors consider that the information processed by AWEIMA must be corrected, updated or deleted, or when it must be revoked, due to the alleged warning Failure to comply with any of the duties contained in the Law, may submit a request to AWEIMA, which will be processed under the following rules:

1. The Owner of the Data, their successors or legal representative must prove their identity. When a person other than the Holder makes the request, and it is not proven that he is acting on her behalf, it will be considered as not submitted.
2. The complaint or claim must be submitted through the channels enabled and indicated in this document by AWEIMA and contain, at least, the following information:

• Name and address of the Holder or any other means to receive the response.
• The documents that prove the identity of the applicant, and where appropriate, that of their representative with the respective authorization.
• The clear and precise description of the personal data in respect of which the Holder makes the claim.

1. If the application submitted is incomplete, AWEIMA must require the interested party within five (5) days of receipt to correct the failures. After two months from the date of the application, without the applicant submitting the required information, it will be understood that he has withdrawn his application.
2. In the event that the person receiving the claim is not competent to resolve it, they will transfer it to the legal area of ​​AWEIMA, within a maximum term of two (2) business days, and will inform the interested party about the situation.
3. Once the request is received, a note that says “Claim in process” and the reason for it will be included in the Database, within a term of no more than two (2) business days. Said note must be kept until the request is resolved.
4. The maximum term to address the complaint or claim will be fifteen (15) business days from the day following the date of receipt. If it is not possible to attend to it within said term, the interested party will be informed of the reasons for the delay and the date on which their claim will be resolved, which in any case may exceed eight (8) business days following the expiration date. first term date.

• VALIDITY

This Personal Data Protection and Processing Policy has been in force since January 1, 2023.