1. Introduction

In compliance with Law 1581 of 2012, Decree 1377 of 2013, and other applicable regulations, Lumièe Clinic adopts this Personal Data Processing Policy in order to guarantee the constitutional right of all individuals to know, update, and rectify the information that has been collected about them.

2. Data Controller

Controller: Lumièe Clinic

Activity: Provision of aesthetic medicine services

Address: Cartagena, Colombia

Email: [email protected]

3. Legal Framework

Political Constitution of Colombia, Article 15.

Law 1581 of 2012.

Decree 1377 of 2013.

Decree 1074 of 2015.

4. Definitions

Personal Data: Information related to an identified or identifiable natural person.

Sensitive Data: Information related to health or other intimate data.

Data Subject: The individual whose data is being processed.

Processing: Collection, storage, use, or deletion of data.

Authorization: Prior, express, and informed consent.

5. Principles

Legality, purpose limitation, freedom, accuracy, transparency, security, and confidentiality.

6. Data Processed

Identification data, contact information, clinical and health data, financial data, and clinical images.

7. Purposes

Provision of medical services, management of medical records, appointment scheduling, billing, legal compliance, and authorized communications.

8. Data Subject Rights

To know, update, rectify, revoke authorization, request deletion, and file complaints before the Superintendence of Industry and Commerce (SIC).

9. Procedure

Inquiries: Maximum of 10 business days.

Claims: Maximum of 15 business days.

10. Security

Lumièe Clinic adopts technical and administrative measures to protect personal data.

11. Validity

This policy is effective as of its publication.