Personal Data Processing Policy

Fundación Frailejones · In force since 1 June 2025

This is a courtesy translation. The legally binding version is the Spanish original, issued under Colombian law.

FUNDACIÓN FRAILEJONES, a non-profit organisation domiciled in the municipality of Pijao, department of Quindío, at the address registered with the Chamber of Commerce, acting as Data Controller, adopts this Policy in compliance with Article 15 of the Colombian Constitution, Law 1266 of 2008, Law 1581 of 2012, Decree 1074 of 2015 and related regulations.

Purpose

To establish the principles, terms, conditions and procedures under which FUNDACIÓN FRAILEJONES processes personal data, as well as the rights of data subjects and the mechanisms that guarantee them.

Scope

It applies to all data subjects whose data is processed by the Foundation, including beneficiaries, applicants, students, teachers, allies, donors, suppliers, volunteers, employees and contractors.

Purposes of processing

To run educational, scientific, social and community programmes.
To manage enrolment, selection and follow-up of beneficiaries.
To manage contractual, employment and commercial relationships.
To manage donations and institutional alliances.
To comply with legal, accounting and tax obligations.
To submit reports to public or private entities when required.
To carry out institutional communications related to its social purpose.

Children and adolescents

The Foundation processes minors' data only with the prior, express and informed authorisation of their legal representatives, guaranteeing the best interests of the child.

Sensitive data

Sensitive data is processed only when strictly necessary and with the express authorisation of the data subject, who is informed that providing it is optional.

Rights of data subjects

To know, update and rectify their data.
To request proof of the authorisation granted.
To request deletion or revocation where applicable.
To access their information free of charge.
To file complaints with the Superintendence of Industry and Commerce (SIC).

Enquiries and claims

Enquiries are answered within ten (10) business days; claims within fifteen (15) business days of complete receipt. Requests should be sent to frailejonesong@gmail.com.

Security and incidents

The Foundation implements technical, human and administrative measures to guarantee the confidentiality, integrity and availability of information. In the event of a security incident, it documents the event, adopts corrective measures, notifies the SIC when mandatory and informs affected data subjects where appropriate.

Validity

This Policy has been in force since 1 June 2025. FUNDACIÓN FRAILEJONES may amend it at any time, duly informing data subjects.