Terms of use

    MANUAL OF PERSONAL DATA PROTECTION POLICY

    1. Introduction

    It is in the interest of the District Institute of Tourism (hereinafter the TDI) to protect the personal information of the Holder obtained through the different mechanisms for the care of the citizens provided by the TDI, for which it adopts policies for the processing of personal data in accordance with the provisions of the legislation in force (Statutory Law 1581 of 2012, Decree 1377 of 2013 and Circular 094 of 2013 of the Mayor of Bogotá D.C.) and others that complement, repeal or replace those previously appointed. RTD may change its personal data processing policies and they shall be in force once they have been published on the RTD Web Portal. The Holder may review the privacy notice provided on the RTD Web Portal in order to be informed of such modifications and each new access of the Holder to the page will be considered a tacit acceptance of the new policies and conditions published there. The RTD guarantees the protection of the fundamental and constitutional rights of all persons, especially those such as the Habeas Data, privacy, privacy, good name and image, to this end, all actions shall be governed by principles of good faith, legality, computer self-determination, freedom and transparency. Any person who, in the exercise of a right or any activity, including training, consulting, cultural, academic, commercial and labour, whether permanent or occasional, comes to provide any kind of information or personal data to the RTD and in which the RTD acts as the controller or responsible for the treatment, may know, update and correct it.

    2. OBJECTIVE

    The aim of this document is to make the policies for the security and protection of personal data of RTD known.

    3. LEGAL FRAMEWORK

    The legislation that it applies as a legal framework for the generation of this document is as follows: • Article 15 of the Colombian Constitution, which states: "All persons have the right to their personal and family privacy and to their good name, and the State must respect and respect them. They also have the right to know, update and correct information collected on them in databases and in archives of public and private entities." • Statutory Act 1266 of 2008, "By which the general provisions of habeas data are issued and by which the general provisions for the protection of personal data are laid down." • Decree 1727 of 2009, "determining the way in which financial, credit, commercial, service and third-country information bank operators are required to submit the information of the information holders." • Resolution 76434 of 2012 of the Superintendency of Industry and Commerce, "repealing the content of Title V of the Single Circular of the Superintendency of Industry and Commerce, on Accreditation, and providing instructions on the protection of personal data, in particular on compliance with Law 1266 of 2008 on financial, credit, commercial, service and other information reports from third countries" • Decree 1377 of 2013, "By which the Statutory Law 1581 of 2012 is partially regulated" • Law 1712 of 2014, "By which the National Law of the Republic of the Republic of the Republic of State and other provisions of the State of the Republic of the Republic of the Republic of the Republic of the Republic of the Republic of the Republic of State of the Republic of the Republic of the Republic of the Republic of the Republic of State and of the Republic of the Republic of the Republic of the Republic of the Republic of the Republic of the Republic of the Republic of the Republic of the Republic of Spain". "

    4. DEFINITIONS

    The following are some definitions that facilitate the reading of this document. Privacy Notice: Oral or written communication generated by the person responsible for the processing of his or her personal data, informing him or her of the existence of the information processing policies that will apply to him or her, how to access them and the purposes of the processing that is intended to give to the personal data. Database: Organized set of personal data to be processed. Personal data: Any information linked or that may be associated with one or more natural persons determined or determinable. Public data: This data is not semi-private, private or sensitive. Public data are considered, inter alia, data relating to the civil status of persons, their profession or trade and their quality as a trader or public servant. By their nature, public data may be contained, inter alia, in public records, public documents, gazettes and official bulletins and duly executed court decisions that are not subject to reservation. Semi-private data: It is semi-private data that is not of an intimate, reserved, or public nature and whose knowledge or dissemination may be of interest not only to its holder but to a certain sector or group of persons or to society in general, such as the financial and credit data of commercial or service activity referred to in Title IV of Law 1266 of 2008. Private data. It is the data that by its intimate or reserved nature is only relevant to the holder. Public information: It is any information that an obliged person generates, obtains, acquires, or controls as such; classified public information: It is that information which, being in the possession or custody of an bound person as such, belongs to the own, private or semi-private sphere of a natural or legal person so that his or her access may be denied or excepted, provided that it is the legitimate and necessary circumstances and the particular or private rights enshrined in article 18 of this Act. Public information reserved: It is that information which, being in the possession or custody of a person who is bound as such, is except for access to citizenship for damage to public interests and subject to all the requirements set out in article 19 of this Act; sensitive information: Those who affect the privacy of the holder or whose misuse may generate discrimination, such as those who reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership of trade unions, social, human rights organizations or that promote the interests of any political party or that guarantee the rights and guarantees of political parties of the opposition to sexual and health, as well as data relating to the biometric data. In charge of processing: a natural or legal person, public or private, who, by himself or in association with others, conducts the processing of personal data on behalf of the controller. Habeas Data: The constitutional right of all persons to know, update and correct information about them in databases or archives, and the other constitutional rights, freedoms and guarantees referred to in article 15 of the Constitution. Responsible for processing: a natural or legal person, public or private, who by himself or in association with others, decides on the basis of data and / or data processing. Holder: a natural person whose personal data are processed. Treatment: Any operation or set of operations on personal data, such as collection, storage, use, circulation or suppression. Transfer: The transfer of data takes place when the person responsible for and / or in charge of the processing of personal data, located in Colombia, sends the information or personal data to a recipient, who is in turn responsible for the processing and is inside or outside the country. Transmission: Processing of personal data involving the communication of personal data within or outside the territory of the Republic of Colombia when it is intended to carry out a processing by the person responsible for the account of the person responsible.

    5. PRINCIPLES

    In the development, interpretation and application of the Statutory Act 1581 of 2012, which makes general provisions for the protection of personal data and the rules that complement it, modify or add it, the following guiding principles shall be applied in a harmonious and comprehensive manner: In the processing of personal data, the existing and applicable provisions governing the processing of personal data and other related fundamental rights recognized by the Republic of Colombia shall be applied. Purpose principle: The processing of personal data to which it has access and is collected and collected by RTD shall be subject and shall serve a legitimate purpose within the powers assigned by law, which shall be informed to the respective holder of the personal data. The Holder may be informed of the use given to his personal data upon request. Veracity or quality principle: Information subject to the processing of personal data must be accurate, complete, accurate, up-to-date, verifiable and understandable. The processing of partial, incomplete, fractional or misleading data is prohibited. Transparency principle: In the processing of personal data, the right of the holder to obtain from the RTD, at any time and without restrictions, information about the existence of any type of personal information or data that is of interest to or ownership should be guaranteed. The principle of restricted access and circulation: Personal data, other than public information, may not be available on the Internet or other means of mass disclosure or communication, unless access is technically controllable to provide limited knowledge only to authorized holders or third parties. Safety principle: Personal data and information subject to processing by RTD shall be protected in so far as the technical resources and standards adopted by RTD so permit, through the adoption of technological protection measures, protocols, and any administrative measures necessary to provide security to electronic records and repositories by avoiding their adulteration, modification, loss, consultation, and in general against any unauthorized or fraudulent use or access. Principle of confidentiality: All persons who administer, manage, update or have access to information of any kind in the databases or databases undertake to keep and maintain strictly confidential and not disclose to third parties all personal, commercial, accounting, technical or other information provided in the performance and exercise of their functions. This obligation persists and is maintained even after the completion of its relationship with one of the tasks involved in the processing, and can only provide or communicate personal data where they correspond to the activities authorized under and in terms of Statutory Law 1581 of 2012.

    6. LATIONSHIP POLICY

    In order to comply with Statutory Law 1581 of 2012, which is partially regulated by Decree No. 1377 of 2013, RTD establishes policies for the processing of personal data that allow the exercise of the rights of information holders. This document will be provided in the RTD Web Portal, in the link "Transparency and access to public information "

    7. INFORMATION OF THE RESPONSIBLE AND ON THE TREATMENT OF PERSONAL INFORMATION IN RTD

    The following is the basic information of the responsible and responsible for the processing of the personal information provided to the RTD:

    - Responsible and responsible for the processing of personal data: District Tourism Institute

    - NIT: 900.140.515-6

    - Domicilio: Bogotá D.C., Colombia.

    - Address: Avenida Carrera 24 No. 40-66.

    The only channel enabled for the care of requests, consultations and claims through which you can base your request for consultation and / or claim in order to exercise your right to know, update, correct and delete the data is the reception of the RTD, located on Avenida Carrera 24 No. 40-66 where your identity will be confirmed. In the other channels enabled for the care of requests, consultations and claims only the policy of personal data protection will be made public. The RTD shall respond to the consultation and / or request by the provided means selected by the Information Holder to receive the response. To obtain information about the consultation and complaint procedure in order to exercise its right to know, update, correct and delete the data, RTD will enable face, telephone and virtual communication channels

    8. TREATMENT TO WHICH THE PERSONAL DATA AND FINALITY OF MISM ARE TO BE SOME

    The incumbent recognizes that the provision of personal information to RTD is done on a voluntary basis and in response to the request for specific requirements by the RTD to process, file a complaint or claim, or to access the interactive mechanisms. The Titular accepts that through the registration of information by the different channels of care for the citizen provided by the RTD, it collects personal data, which will not be given to third parties without their knowledge. The automated collection and processing of personal data, as a result of the navigation and / or registration through these channels, has the following purposes: (a) The proper management and administration of the services offered by the RTD, in which the Holder decides to register and use, (b) The quantitative and qualitative study of visits and the use of services by citizens, (c) the transmission by traditional and electronic means of information related to RTD and any other project of the Institute. (d) The permits granted by the user are extended to use, for the qualification of a place or appeal as available in the digital channels of RTD.

    9. Personal data of children and children

    RTD may or may have received data from children and adolescents who access its services.

    The provision of personal data for children and adolescents is optional, both for them and for those acting on their behalf.

    10. RECOLLECTION OF INFORMATION

    When you access or use the digital channels of RTD, you collect information from and about you to offer you a better city experience. Some of that information is automatically collected. Other information is collected from different sources, such as affiliated entities, business partners and other sources from independent third parties. The information collected may include the following:

    - Contact information, including name, telephone number, e-mail address, country and city of origin

    - User name and password

    - Photos, opinions, publications in forums and social media, and videos that you may have provided us

    - Geolocation information

    - device information

    - Information about your travel plans and preferences

    In addition to the categories set out above, we can collect information about your location if you previously set up your device's privacy settings to send that information or if you uploaded photos tagged with location information. We can use your location information directly and / or share your location with third parties. We collect and share information about your location to provide you with relevant content, to analyze your use of our services, to improve our services and to provide contextualized recommendations. You can change your device's privacy settings whenever you want to disable the function to collect and share information about your location and / or function to label your photos with location information. However, disable the location sharing function can affect certain functions we offer. If you have any questions about your device's privacy settings, we suggest you contact your Device manufacturer or your mobile service provider to help you.