FUNDACIÓN FRAILEJONES
Effective Date: June 1, 2025
FUNDACIÓN FRAILEJONES, a non-profit organization identified with Tax ID (NIT) 901764507-9, domiciled in the municipality of Pijao, Department of Quindío, Republic of Colombia, acting as the Data Controller, adopts this Personal Data Processing Policy in compliance with Article 15 of the Political Constitution of Colombia, Law 1266 of 2008, Law 1581 of 2012, Decree 1074 of 2015, and other applicable regulations.
PURPOSE
To establish the principles, terms, conditions, and procedures under which FUNDACIÓN FRAILEJONES processes personal data, as well as the rights of data subjects and the mechanisms to guarantee them.
LEGAL FRAMEWORK
- Political Constitution of Colombia, Article 15
- Law 1266 of 2008
- Law 1581 of 2012
- Decree 1074 of 2015
- Related regulations
Financial information will be processed in accordance with Law 1266 of 2008.
General personal information will be processed in accordance with Law 1581 of 2012.
SCOPE
This Policy applies to all data subjects whose personal data is processed by the Foundation, including beneficiaries, applicants, students, teachers, partners, donors, suppliers, volunteers, employees, and contractors.
PURPOSES OF DATA PROCESSING
The Foundation will process personal data for the following purposes:
- To execute educational, scientific, social, and community programs.
- To manage registration, selection, and monitoring processes of beneficiaries.
- To administer contractual, employment, and commercial relationships.
- To manage donations and institutional partnerships.
- To comply with legal, accounting, and tax obligations.
- To submit reports to public or private entities when required.
- To carry out institutional communications related to its corporate purpose.
PRINCIPLES
Personal data processing will be governed by the principles of legality, purpose limitation, freedom, accuracy or quality, transparency, restricted access and circulation, security, confidentiality, temporality, and individuality.
DATA OF CHILDREN AND ADOLESCENTS
The Foundation will process personal data of minors only with prior, express, and informed authorization from their legal representatives, guaranteeing the best interests of the child and the protection of their fundamental rights.
SENSITIVE DATA
Sensitive data will only be processed when strictly necessary for the development of the Foundation’s activities and with the express authorization of the data subject, informing them that providing such data is optional.
RIGHTS OF DATA SUBJECTS
Data subjects have the right to:
- Know, update, and rectify their personal data.
- Request proof of the authorization granted.
- Request the deletion of data or revocation of authorization when applicable.
- Access their personal information free of charge.
- File complaints with the Superintendence of Industry and Commerce (SIC).
PROCEDURE FOR INQUIRIES AND CLAIMS
Inquiries will be addressed within ten (10) business days following receipt.
Claims will be addressed within fifteen (15) business days following complete receipt of the request.
Requests must be sent to the Foundation’s official email address: frailejonesong@gmail.com
PRIVACY OFFICER
The Foundation will designate an internal responsible person in charge of:
- Addressing inquiries and claims.
- Ensuring regulatory compliance.
- Coordinating responses before the Superintendence of Industry and Commerce.
- Supervising security measures.
- Promoting internal training on data protection.
SECURITY MEASURES
The Foundation implements reasonable and appropriate technical, human, and administrative measures to guarantee the confidentiality, integrity, and availability of personal information, preventing its alteration, loss, unauthorized consultation, use, or fraudulent access.
PROCEDURE IN CASE OF SECURITY INCIDENTS
In the event of a security incident affecting personal data:
- The event will be documented.
- Corrective measures will be adopted immediately.
- The Superintendence of Industry and Commerce will be notified when required.
- Affected data subjects will be informed when applicable.
VALIDITY
This Policy becomes effective as of June 1, 2025.
FUNDACIÓN FRAILEJONES may modify this Policy at any time, duly informing data subjects through its institutional communication channels.