Personal data processing policy

Effective from [publication date]

This is an English translation provided for reference. The Spanish version is the legally binding one.

At Fundación Simiente Consciente we look after the personal data of everyone who writes to us or takes part in our projects. This policy explains what data we collect, what we use it for and how you can exercise your rights, in accordance with Colombian Law 1581 of 2012 and Decree 1377 of 2013, now incorporated into Decree 1074 of 2015.

1. Data controller

2. What data we collect

• Contact form: name, email address, organization (optional), topic of interest and the message you write to us. The form opens your email app; we receive the data when you send that email.
• Projects and research: the data that participants give us in surveys, interviews or workshops. In each case we ask for a specific authorization that explains the purpose of that project.

3. What we use the data for

• Replying to your messages, requests and partnership proposals.
• Sending you information about our work, such as reports, when you ask for it.
• Managing partnerships, projects and donations.
• Carrying out research and evaluation. The results we publish are presented in aggregated or anonymized form, so that no individual can be identified.
• Meeting our legal and contractual obligations.

We do not sell or transfer personal data to third parties for commercial purposes.

4. Authorization

We process your data with your prior, express and informed authorization. On the website, you give it by ticking the authorization box on the contact form. You may revoke it at any time, except where there is a legal or contractual duty to keep the information.

5. Sensitive data and data of children and adolescents

Some projects may involve sensitive data, such as information about emotional well-being or health. Answering questions about sensitive data is always optional, and this data is handled with reinforced confidentiality measures.

When a project involves children or adolescents, we ask for the authorization of their legal representative, listen to their views according to their maturity and always respect their best interests.

6. Your rights

As the data subject, you have the right to:

• Know, update and correct your data.
• Request proof of the authorization you gave us.
• Be told how we have used your data.
• Revoke your authorization or ask us to delete your data, where there is no legal duty to keep it.
• Access your data free of charge.
• File complaints with the Superintendencia de Industria y Comercio (Colombia’s data protection authority), after first submitting your query or claim to the foundation.

7. How to exercise your rights

Write to us at contacto@simienteconsciente.org with your name, your request and a way for us to reply.

• Queries: we answer within a maximum of 10 business days. If that is not possible, we will explain why and reply within up to 5 additional business days.
• Claims (correction, update, deletion or non-compliance): we answer within a maximum of 15 business days, extendable by up to 8 more business days with prior notice. If the claim is incomplete, we will ask you for the missing information within the following 5 days.

8. Providers and transfers

We use technology providers to host the website and manage email. Some of them store information on servers outside Colombia. We only work with providers that offer adequate levels of protection and process the data solely to provide their service to us.

9. Security

We apply reasonable technical and administrative measures to protect data against loss, unauthorized access or misuse. Only the team members who need it for their work have access to it.

10. Validity and changes

This policy applies from the date shown at the top. We will keep data for as long as it is needed for the purposes described or as required by law. If we change this policy in a significant way, we will announce it on this website.