This policy is defined in accordance with the entry into force of Statutory Law 1581 of 2012 which aims to dictate the general provisions for the protection of personal data and develop the constitutional right that all people have to know, update and rectify the information that has been collected about them in databases or files as well as the right to information. Therefore, AMELIA AND WHITE welcomes such provisions taking into account that for the development of its corporate purpose, it is continuously collecting and carrying out various treatments to databases of customers, shareholders, suppliers, business partners and employees

By virtue of the foregoing, within the legal and corporate duty of AMELIA AND WHITE. to protect the right to privacy of people, as well as the power to know, update or request the information about them that is filed in databases, AMELIA AND WHITE designed this policy for handling personal information and bases of data in which the treatment of Personal Information is described and explained to which you have access through our website, email, physical information, text messages, voice message, App, telephone calls, face to face, physical or electronic means, current or in the future, such as other communications sent as well as through third parties that participate in our commercial or legal relationship with all our clients, employees, suppliers, shareholders, strategic allies and related parties.

General Objective Definitions

1. Authorization: prior, express and informed consent issued by the owner of any personal data so that the company carries out the processing of their personal data.
2. Owner: natural person whose data is processed by the company.
3. Database: set of personal data.
4. Personal data: information that is linked to a person. It is any piece of information linked to one or several specific or determinable persons or that can be associated with a natural or legal person. Personal data can be public, semi-private or private.
5. Processing: any operation or set of operations on personal data, which may include its collection, storage, use, circulation or deletion.
6. Data controller: natural or legal person, public or private, which by itself or in association with others, performs some processing of personal data on behalf of the data controller.
7. Responsible for the treatment: natural or legal person, public or private, that by itself or in association with others, decides on the database and/or the treatment of the data.
8. Public data: Is that data qualified as such according to the mandates of the law or the Political Constitution. The data contained in public documents, enforceable judicial decisions that are not subject to reservation and those related to the marital status of people are public, among others.
9. Semi-private data: Semi-private data is data that is not of an intimate, reserved, or public nature and whose knowledge or disclosure may be of interest not only to its owner but to a certain sector or group of people or to society in general. general, such as the financial and credit data of commercial activity.
10. Private data: Is the data that, due to its intimate or reserved nature, is only relevant to the owner.
11. Sensitive data: those related to racial or ethnic origin, membership in trade unions, social or human rights organizations, political, religious, sexual life, biometric or health data convictions. Information may not be granted by the Owner of these data.
12. Privacy notice: physical, electronic document generated by the Data Controller that is made available to the owner with information regarding the existence of the information processing policies that will be applicable, the how to access them and the characteristics of the Treatment that is intended to be given to personal data.

Any process that involves the treatment by any area of ​​the company of personal data of both customers, suppliers, employees and in general any third party with which AMELIA AND WHITE maintains commercial and labor relations must take into account and inform you of expressly and previously, by any means by which a record of its compliance can be kept, the rights that assist that owner of the data, which are stated below:

1. Right to know, update, rectify, consult your personal data at any time against AMELIA AND WHITE. Regarding the data that it considers partial, inaccurate, incomplete, fractioned and those that mislead.
2. Right to request proof of authorization granted to AMELIA AND WHITE at any time.
3. Right to be informed by AMELIA AND WHITE. upon request of the owner of the data, regarding the use that has been given to them.
4. Right to present before the Superintendence of Industry and Commerce the complaints that you consider pertinent to assert your right to Habeas Data against the company.
5. Right to revoke the authorization and/or request the deletion of any data when you consider that AMELIA AND WHITE. has not respected their constitutional rights and guarantees.
6. Right to free access to the personal data that you voluntarily decide to share with AMELIA AND WHITE, for which the company, in aid of the IT and Technology Management, is responsible for preserving and archiving the formats in a secure and reliable manner. of authorization of each of the holders of personal data duly granted.

1. When the information is requested from the company by a public or administrative entity that is acting in the exercise of its legal functions or by court order.
2. In the case of data of a public nature because they are not protected by the scope of application of the standard.
3. Duly proven medical or health emergency events.
4. In those events where the information is authorized by law to comply with historical, statistical and scientific purposes.
5. In the case of data related to the civil registry of people because this information is not considered to be data of a private nature.

1. To the owners of the data, their heirs or representatives at any time and through any means when they request it from AMELIA AND WHITE.
2. To the judicial or administrative entities in exercise of functions that raise some requirement to the company so that the information is delivered.
3. To third parties that are authorized by any law of the Republic of Colombia
4. To third parties to whom the Data Owner expressly authorizes to deliver the information and whose authorization is delivered to AMELIA AND WHITE.

AMELIA AND WHITE. acknowledges that personal data is the property of the owners thereof and that only such persons may decide on them. In this sense, it will make exclusive use for those purposes for which it is empowered in the terms of the law and for the sake of the foregoing, it is allowed to inform the duties that it assumes in its capacity as data controller:

1. The company must guarantee at all times to the owner of the information, the full and effective exercise of the right to habeas data and petition, that is, the possibility of knowing the information that exists about him or rests in the bank of data, request updating or correction of data and process queries, all of which will be carried out through the query or claim mechanisms provided for in this policy.
2. The company must keep the personal data records stored with due security to prevent their deterioration, loss, alteration, unauthorized or fraudulent use and periodically and timely update and rectify the data, each time the holders of they report news or requests.

AMELIA AND WHITE. in the development of its corporate purpose and its relations with third parties, understood by these clients, employees, suppliers, creditors, strategic allies, subsidiaries, subordinates, among others; constantly collects data to carry out various purposes and uses within which can be framed:

• Administrative, commercial, promotional, informational, marketing and sales purposes.
• Offer all kinds of commercial services; as well as carrying out promotion, marketing, advertising campaigns.
• Search for closer knowledge with all its customers, suppliers, employees and related third parties.

In connection with the foregoing, AMELIA AND WHITE. will be able to execute the following actions:

1. Obtain, store, compile, exchange, update, collect, process, reproduce and/or dispose of the data or partial or total information of those owners who grant the due authorization in the terms required by law and in the formats that for each case it deems convenient.
2. Classify, order, separate the information provided by the owner of the data.
3. Carry out investigations, compare, verify and validate the data obtained in due form with credit risk bureaus with which they have commercial relations.
4. Extend the information it obtains under the terms of the habeas data law, to the companies with which it contracts the services of capture, storage and management of its databases prior to the due authorizations that it obtains in this regard. li>
5. Transfer partial or total data or information to its subsidiaries, businesses, companies and/or affiliated entities and strategic allies.

In order to carry out the aforementioned purposes, AMELIA AND WHITE. requires freely, prior, express and duly informed of the authorization by the owners of the data and for this it has arranged suitable mechanisms guaranteeing for each case that it is possible to verify the granting of said authorization.It may be recorded in any medium, whether it is a physical document, electronic or in any format that guarantees its subsequent consultation through technical, technological tools and computer security developments

The authorization is a declaration that informs the owner of the data of the following information:

• Who is responsible or responsible for collecting the information.
• Data collected.
• Purposes of the treatment
• Procedure for exercising rights to access, correct, update or delete data.
• Information on the collection of sensitive data.

In accordance with the provisions of Statutory Law 1581 of 2012 and Regulatory Decree 1377 of 2013, AMELIA AND WHITE. ensures that the treatment of the personal data of children and adolescents will be carried out respecting their rights, which is why, in the commercial and marketing activities carried out by AMELIA AND WHITE. must have the prior, express and informed authorization of the father or mother or the legal representative of the girl, boy or adolescent.

Every holder of personal data has the right to make inquiries and submit requests to the company regarding the handling and treatment given to their information.

AMELIA AND WHITE will respond to claims within a maximum term of fifteen (15) business days from the date of receipt of the claim. When it is not possible to address the claim within said term, the interested party will be informed of the reasons for the delay and the date on which his claim will be addressed, which in no case may exceed eight (8) business days following the expiration of the first term.

In the event that the written claim is incomplete, the interested party will be required within five (5) days following receipt of the claim to correct the faults. After two (2) months from the date of the request, without the applicant submitting the required information, it will be understood that he has withdrawn the claim. In the event that AMELIA AND WHITE is not competent to resolve the claim, it will transfer it to the appropriate party within a maximum term of two (2) business days and will inform the interested party of the situation.

Once the complete claim is received, a legend will be included in the database that says "claim in process" and the reason for it, in a term not exceeding two (2) business days. Said legend will remain until the claim is addressed

1. B) Consultations

The Policy for the handling of personal information by AMELIA AND WHITE. and the basic rights that the owners of the data have in relation to it may be consulted through the following means: byameliaandwhite@gmail.com

Any query that a holder has about their information or personal data or when they consider it necessary to establish a request for information or consider that their rights have been violated in relation to the use and handling of their information; You can do it through the following email: byameliaandwhite@gmail.com

If within the ten (10) days indicated, it is not possible for the company to attend the query, the corresponding area must inform the interested party, the reasons for the delay and indicate the date on which it will be attended, which in no case may it exceed five (5) business days following the expiration of the first term.

AMELIA AND WHITE Has the quality of data controller, through this policy.

The Manual may be updated periodically and without prior notice. If any changes are made to the Manual, a new update date will be published, and this will reflect when the changes were made.