Echeverri BarsaEcheverri Barsa
The right to Data Protection is intended to allow all people to know, update and rectify the information that has been collected about them in files or databases. This constitutional right is included in articles 15 and 20 of the Political Constitution; in Statutory Law 1581 of 2012, by which general provisions are issued for the Personal Data Protection Law (LEPD); in decree 1074 of 2015, and chapter 25 section 3 Article 2.2.2.25.3.2. of decree 1074 of 2015, by which 1581 of 2012 is partially regulated.
When the Holder of the data gives his consent so that these form part of a database of an institution, public or private, legal or natural, this is done through the person responsible for the treatment of these data and acquires a series of obligations such as : that of treating said data with security and caution, ensuring its integrity and appearing as a body to whom the Holder can go to monitor the information and control it, being able to exercise the rights of queries and claims.
Although the responsibility for data processing lies with the person responsible for processing, their powers materialize in the functions that correspond to their service personnel. The personnel of the institution responsible for the treatment with access, direct or indirect, to databases that contain personal data must know the data protection regulations, the Company’s data protection policy and the Manual of Policies and Procedures of habeas data; and they must comply with the data security obligations corresponding to their functions and position.
To ensure compliance with its security obligations, INVERSIONES ECHEVERRY BARSA SAS appoints LINA MARIA HURTADO SANCHEZ responsible for security, in charge of developing, coordinating, controlling and verifying compliance with the security measures contained in the Manual of Policies and Habeas Data procedures.
This policy will be applicable to all personal data registered in databases that are subject to treatment by the data controller and is addressed to all data users, who are both own staff and external staff of INVERSIONES ECHEVERRY BARSA SAS.
All users identified in this security document are required to comply with the security measures established for data processing and are subject to the duty of confidentiality, even after their employment or professional relationship with the organization responsible for processing has ended. The duty of confidentiality, included in article 4, literal h) of the Data Protection Law (LEPD), is formalized through the signing of a confidentiality agreement signed between the user and the data controller.
PLEASE REFER TO THE PDF DOCUMENT FOR LAW AND DECREES TABLE
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
4.1. Sensitive data.
Sensitive data are those that affect the privacy of the Holder or whose improper use may generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership in trade unions, social organizations, human rights or that promotes the interests of any political party or that guarantees the rights and guarantees of opposition political parties as well as data related to health, sexual life and biometric data. According to article 6 of the Statutory Law on the Protection of Personal Data (LEPD), the processing of sensitive data is prohibited, except when:
– The Holder has given his explicit authorization to said treatment, except in cases where the granting of said authorization is not required by law.
– The treatment is necessary to safeguard the vital interest of the Holder and the latter is physically or legally incapacitated. In these events, the legal representatives must grant their authorization.
– The treatment is carried out in the course of legitimate activities and with due guarantees by a foundation, NGO, association or any other non-profit organization, whose purpose is political, philosophical, religious or trade union, provided that they refer exclusively to its members or to people who maintain regular contact by reason of its purpose. In these events, the data may not be provided to third parties without the authorization of the Holder.
– The treatment refers to data that is necessary for the recognition, exercise or defense of a right in a judicial process.
– The treatment has a historical, statistical or scientific purpose. In this event, the measures leading to the suppression of the identity of the Holders must be adopted.
4.2. Rights of children and adolescents
The processing of personal data of children and adolescents is prohibited, except in the case of data of a public nature, and when such processing meets the following requirements:
– That responds to and respects the best interests of children and adolescents.
– To ensure respect for their fundamental rights.
Once the above requirements have been fulfilled, the legal representative of the child or adolescent will grant authorization prior to the exercise of the minor’s right to be heard, an opinion that will be valued taking into account the maturity, autonomy and ability to understand the matter.
It is the task of the State and educational entities of all kinds to provide information and train legal representatives and guardians on the possible risks that children and adolescents face regarding the improper treatment of their personal data, and provide knowledge about of the responsible and safe use by children and adolescents of their personal data, their right to privacy and protection of their personal information and that of others.
All managers and managers involved in the processing of personal data of children and adolescents must ensure their proper use, complying at all times with the principles and obligations contained in the LEPD and Decree 1074 of 2015. In In any case, the treatment will ensure respect for the prevailing rights of children and adolescents. The rights of access, correction, deletion, revocation or claim for infringement on the data of children and adolescents will be exercised by the people who are empowered to represent them.
4.3 Rights of the Holders.
In accordance with article 8 of the LEPD and chapter 25 section 4 of decree 1074 of 2015, the Owners of the data may exercise a series of rights in relation to the processing of their personal data. These rights may be exercised by the following persons.
By the Holder, who must sufficiently prove his identity by the different means made available by the person in charge.
– By their heirs, who must prove such quality.
– By the representative and/or proxy of the Holder, prior accreditation of the representation or power of attorney.
– By stipulation in favor of another and for another.
– The rights of children or adolescents will be exercised by the people who are empowered to represent them.
The rights of the Holder are the following:
Right of access or consultation: This is the right of the Holder to be informed by the data controller, upon request, regarding the origin, use and purpose that they have given to their personal data.
Rights of complaints and claims The Law distinguishes four types of claims:
Correction claim: the Holder’s right to update, rectify or modify those partial, inaccurate, incomplete, fractional, misleading data, or those whose treatment is expressly prohibited or has not been authorized.
Suppression claim: the Holder’s right to have data that is inappropriate, excessive or that does not respect the principles, rights and constitutional and legal guarantees be deleted.
Claim of revocation: the right of the Owner to cancel the authorization previously given for the processing of their personal data.
Claim of infringement: the right of the Holder to request that the breach of the regulations on Data Protection be corrected.
Right to request proof of the authorization granted to the data controller: except when expressly excepted as a requirement for processing in accordance with the provisions of article 10 of the LEPD.
Right to submit to the Superintendence of Industry and Commerce complaints for infractions: the Holder or successor in title may only raise this complaint once they have exhausted the process of consultation or claim before the person responsible for the treatment or in charge of the treatment.
In accordance with article 9 of the LEPD, the prior and informed authorization of the Holder is required for the processing of personal data. By accepting this policy, any Owner who provides information regarding their personal data is consenting to the processing of their data by INVERSIONES ECHEVERRY BARSA SAS, under the terms and conditions contained therein.
The authorization of the Holder will not be necessary in the case of:
– Information required by a public or administrative entity in the exercise of its legal functions or by court order.
– Data of a public nature.
– Cases of medical or health emergency.
– Treatment of information authorized by law for historical, statistical or scientific purposes.
– Data related to the Civil Registry of people.
The person responsible for the treatment of the databases object of this policy is INVERSIONES ECHEVERRY BARSA SAS, whose contact details are:
Email: Protecciondedatos@echeverribarsa.com
Phone: 3166913606
INVERSIONES ECHEVERRY BARSA SAS, in the development of its activities, carries out the processing of personal data related to natural persons that are contained and are processed in databases intended for legitimate purposes, complying with the Constitution and the Law.
In accordance with the provisions of Law 1581 of 2012 and in accordance with the authorizations issued by the owners of the information, INVERSIONES ECHEVERRY BARSA SAS will carry out operations or a set of operations that include data collection, storage, use, circulation and/or deletion, delivery of data to third parties as managers or responsible; this in accordance with the agreement reached between the parties. This data processing will be carried out exclusively for the purposes authorized and provided for in this Policy and in the specific authorizations granted by the owner. In the same way, Personal Data Processing will be carried out when there is a legal or contractual obligation for it, always under the guidelines of the Information Security policies of INVERSIONES ECHEVERRY BARSA SAS, in all cases personal data may be treated with the purpose of advancing the control processes and internal and external audits and evaluations carried out by the control bodies.
Likewise, and in execution of the corporate purpose of INVERSIONES ECHEVERRY BARSA SAS, personal data will be processed in accordance with the interest group and in proportion to the purpose or purposes of each treatment, as described below:
The following table presents the different databases and the purposes assigned to each of them
The navigation system and the software necessary for the operation of this website collect some personal data, the transmission of which is implicit in the use of Internet communication protocols.
By its very nature, the information collected could allow the identification of users through its association with third-party data, even if it is not obtained for that purpose. This category of data includes the IP address or domain name of the equipment used by the user to access the web page, the URL address, the date and time and other parameters related to the user’s operating system.
These data are used for the exclusive purpose of obtaining anonymous statistical information on the use of the website or to control its correct technical operation, and are canceled immediately after being verified.
This website does not use cookies or web bugs to collect personal data from the user, but its use is limited to providing the user with access to the website. The use of session cookies, not permanently memorized in the user’s computer and that disappear when the browser is closed, are only limited to collecting technical information to identify the session in order to facilitate safe and efficient access to the website.
They will also be used to improve your experiences, understand how our services are used and personalize them.
For example, we use cookies to provide our Services and other services based on the uses of our website. We may also use cookies to understand what are the most popular articles in our help center in order to show you relevant content related to our Services. Additionally, we may use cookies to remember choices you have made, such as language preferences, to provide you with a more secure experience and to otherwise customize our Services to your interests.
If you do not want to allow the use of cookies, you can reject them or delete existing ones by configuring your browser, and disabling the browser’s Java Script code in the security settings.
LINA MARIA HURTADO SANCHEZ, will be in charge of handling requests, queries and claims before which the owner of the data can exercise their rights, at the following email: Protecciondedatos@echeverribarsa.com.
10.1. Right of access or consultation
According to chapter 25 section 4 article 2.2.2.25.4.2. 21 of Decree 1074 of 2015, the Holder may consult their personal data free of charge in two cases:
– At least once every calendar month.
– Every time there are substantial changes to the information processing policies that motivate new queries.
For consultations whose periodicity is greater than one per calendar month, INVERSIONES ECHEVERRY BARSA SAS, may only charge the Holder the costs of sending, reproducing and, where appropriate, document certification. The reproduction costs may not be greater than the recovery costs of the corresponding material. For this purpose, the person in charge must demonstrate to the Superintendence of Industry and Commerce, when it so requires, the support of said expenses.
The Owner of the data can exercise the right of access or consultation of their data by writing to INVERSIONES ECHEVERRY BARSA SAS, sent by email: Protecciondedatos@echeverribarsa.com, indicating in the subject “exercise of the right of access or consultation , the request must contain the following data:
– Name and surname of the principal.
– Photocopy of the Citizenship Card of the Holder and, where appropriate, of the person who represents him, as well as the document accrediting such representation.
– Request specifying the request for access or consultation.
– Address for notifications, date and signature of the applicant.
– Documents accrediting the request made, when applicable.
The Holder may choose one of the following ways to query the database to receive the requested information:
– On screen display.
– In writing, with a copy or photocopy sent by certified mail or not.
– Email or other electronic means.
– Another system appropriate to the configuration of the database or the nature of the treatment.
Once the request is received, INVERSIONES ECHEVERRY BARSA SAS will resolve the request for consultation within a maximum period of ten (10) business days from the date of receipt of the request. When it is not possible to attend the query within said term, the interested party will be informed, stating the reasons for the delay and indicating the date on which their query will be attended, which in no case may exceed five (5) business days following the expiration of the first term.
These deadlines are set in article 14 of the LEPD. Once the consultation procedure has been exhausted, the Holder or successor in title may file a complaint with the Superintendency of Industry and Commerce.
10.2. Rights of complaints and claims
The Owner of the data can exercise the rights of claim over their data by writing to INVERSIONES ECHEVERRY BARSA SAS, by email Protecciondedatos@echeverribarsa.com, indicating in the subject “exercise of complaints and / or claims”, the request must contain the following information:
– Name and surname of the principal.
– Photocopy of the Citizenship Card of the Holder and, where appropriate, of the person who represents him, as well as the document accrediting such representation.
– Description of the facts and request specifying the request for correction, deletion, revocation or inflation.
– Address for notifications, date and signature of the applicant.
– Documents accrediting the request formulated that they want to assert, when appropriate.
If the claim is incomplete, the interested party will be required within five (5) days after receipt of the claim to correct the faults. After two (2) months from the date of the request, without the applicant submitting the required information, it will be understood that the claim has been withdrawn.
Once the complete claim is received, a legend will be included in the database that says “claim in process” and the reason for it, in a term not exceeding two (2) business days. Said legend must be kept until the claim is decided.
INVERSIONES ECHEVERRY BARSA SAS, will resolve the query request within a maximum period of fifteen (15) business days from the date of receipt. When it is not possible to address the claim within said term, the interested party will be informed of the reasons for the delay and the date on which their claim will be addressed, which in no case may exceed five (5) business days following the expiration of the first finished.
Once the claim process has been exhausted, the Holder or assignee may file a complaint with the Superintendence of Industry and Commerce.
INVERSIONES ECHEVERRY BARSA SAS, in order to comply with the security principle enshrined in article 4 literal g) of the LEPD, has implemented the necessary technical, human and administrative measures to guarantee the security of the records, avoiding their adulteration, loss, consultation unauthorized or fraudulent use or access.
On the other hand, INVERSIONES ECHEVERRY BARSA SAS, through the signing of the corresponding transmission contracts, has required those in charge of the treatment with whom it works to implement the necessary security measures to guarantee the security and confidentiality of the information in the treatment. of personal data.
The databases that are the responsibility of INVERSIONES ECHEVERRY BARSA SAS will be processed for as long as is reasonable and necessary for the purpose for which the data is collected. Once the purpose or purposes of the treatment have been fulfilled, and without prejudice to legal regulations that provide otherwise. INVERSIONES ECHEVERRY BARSA SAS, will proceed to delete the personal data in its possession unless there is a legal or contractual obligation that requires its conservation.
For all these reasons, said database has been created without a defined validity period.
This instrument enters into force on 09-01-2022
Colombian Coffee
Colombian Coffee is defined as one of a clean cup, with medium/high acidity and body, and a full and pronounced aroma.
Coffee Designations
There are 4 registered coffee designations in Colombia, according to its production origins.
The Coffee Growing Area
It is much more than just Quindío, Caldas and Risaralda, it´s formed by 20 Departments listed as Coffee Growers.
Echeverri Barsa, trades, transforms and produces High Quality Gourmet Coffee. We offer Excelso Coffee for both Export and Domestic Market.
Transv. 7 #19-07 – Barrio San Jerónimo
Cartago, Valle del Cauca – 762021
Colombia
(+57) (602) 217 8560 – 217 8556
Cel 315 553 0368
