Privacy policy

Policy for the Processing of Personal Data

Addressed to Users and Buyers of https://yessicaleano.com

Before browsing the Website and/or using YLA’s digital sales channels, please ensure you have read and accepted our Policy for the Processing of Personal Data, in your capacity as a User and/or Buyer.

YESSICA LEAÑO (hereinafter referred to as “YLA”), is a natural person, identified with Colombian citizenship ID No. 1018416041 issued in Bogotá, with a commercial domicile in Bogotá. Acting as the owner and administrator of the Website, YLA is committed to protecting the Personal Data it collects and processes as the Data Controller. Therefore, this document establishes the Policy for the Processing of Personal Data, addressed to Users and/or Buyers who browse and/or purchase products or Art Articles (as defined in the Terms and Conditions of the Website, hereinafter referred to as the “Policy”), in accordance with the provisions of Law No. 1581 of 2012, Decree 1074, Decree No. 1377 of 2013, and other current and applicable regulations regarding Personal Data protection in Colombia.

Additionally, where applicable, YLA will undertake efforts to comply with regional and/or global standards. This includes compliance with regulations such as the EU General Data Protection Regulation (GDPR), if you as a User or Buyer have rights related to your Personal Data under such frameworks.

This Policy includes, among other things: Full identification of the Data Controller for the Processing of Personal Data; the purposes for which the Personal Data of Users and/or Buyers of the Website https://yessicaleano.com/ will be processed; the rights of the Data Subjects (Users and/or Buyers) whose Personal Data is processed and the procedures to exercise those rights; the channels available for addressing inquiries, complaints, and claims from the Data Subjects; and the effective date of this Policy.

The above aims not only to comply with applicable regulations and the obligations of a Data Controller but also to ensure that Data Subjects are provided with relevant, timely, and detailed information regarding the use of their Personal Data, in alignment with the principle of accountability.

The contents of this Policy will apply to the Processing of Personal Data of Users and/or Buyers of YLA’s Website.

If you do not agree and therefore do not accept the Terms and Conditions and/or our Policy, which are mandatory and binding documents, you must refrain from using and browsing the Website.

By authorizing the Processing of your Personal Data on YLA’s Website, whether through unequivocal actions or by marking checkboxes for this purpose, you declare that: (1) You have the capacity and sufficient authority to grant such Authorization; and (2) you have carefully read this document and the content of the corresponding authorization and agree to all the terms stipulated herein.

We also recommend reviewing Shopify’s privacy policies and those of any other third parties involved in ensuring the proper operation and transactional processes of the Website, such as the available payment gateway.

1. PRINCIPLES FOR THE PROCESSING OF PERSONAL DATA

  • Principle of Legality in Data Processing: The Processing of Personal Data is governed by local law as a general rule, along with related provisions.
  • Principle of Purpose: The Processing must have a legitimate purpose in accordance with the Constitution and the law, and this purpose will be communicated to the Data Subject.
  • Principle of Freedom: Processing will only be carried out with the prior, express, and informed consent of the Data Subject.
  • Principle of Veracity or Quality: The information subject to Processing must be truthful, complete, accurate, up-to-date, verifiable, and understandable.
  • Principle of Transparency: The Data Subject has the right to obtain information about the existence of data related to them at any time and without restrictions.
  • Principle of Restricted Access and Circulation: Processing is limited by the nature of the Personal Data, the law, and the Constitution. Only persons authorized by the Data Subject or by law may conduct the Processing.
  • Principle of Security: Information subject to Processing will be handled with technical, human, and administrative measures to ensure its security and prevent alterations, losses, unauthorized consultations, misuse, or fraudulent access.
  • Principle of Confidentiality: Individuals involved in the Processing of Personal Data, other than publicly available data, will ensure confidentiality even after their relationship with Processing activities has ended.
  • Principle of Necessity and Reasonableness: The Personal Data recorded must be strictly necessary to fulfill the intended purposes, prohibiting the registration or disclosure of data that is not closely related to the database's objective.
  • Principle of Demonstrated Accountability: Controllers of Personal Data must adopt appropriate and effective measures to comply with the obligations established by local law.

DEFINITIONS

  • Authorization: Prior, express, and informed consent from the Data Subject for the Processing of their Personal Data. In this case, the Authorization is granted by the User and/or Buyer of YLA’s Website and is obtained by YESSICA LEAÑO, in her capacity as Data Controller.
  • Database(s): An organized set of Personal Data that is subject to Processing.
  • Cookies or Navigation Data: Cookies are small pieces of information that a web server provides to the user’s browser for various purposes, such as identifying the language in which information should be presented on a subsequent visit, navigation preferences, personalization, security, or fraud prevention, among others.
  • Personal Data: Any information linked or that can be associated with one or more identified or identifiable natural persons.
  • Personal Data of Children and Adolescents (NNA Personal Data): These are the Personal Data of minors, whose Processing must be authorized by their Legal Representative, without prejudice to the child or adolescent's right to be heard. Processing of such data is prohibited except when the data is of a public nature and when Processing responds to the best interests of the minor and ensures respect for their fundamental rights. For the specific case of YLA’s Website, no Processing of minors' Personal Data is conducted.
  • Sensitive Data: These are data that affect the Data Subject’s intimacy or whose misuse could result in discrimination, such as data related to racial or ethnic origin, political orientation, religious or philosophical beliefs, union membership, or data concerning health, sexual life, or biometric data.
  • Data Processor: A natural or legal person, public or private, that, alone or in association with others, conducts the Processing of Personal Data on behalf of the Data Controller.
  • Policy for the Processing of Personal Data: This document, through which YESSICA LEAÑO, as the Data Controller, informs Data Subjects of at least the information referenced in Article 13 of Law 1581 of 2012.
  • Data Controller: A natural or legal person, public or private, that, alone or in association with others, decides on the database and/or the Processing of Personal Data. In this case, it is YESSICA LEAÑO.
  • Transfer: Occurs when the Data Controller and/or Data Processor, located in Colombia, sends the information or Personal Data to a recipient, who in turn is a Data Controller, located within or outside the country.
  • Transmission: Processing of Personal Data that involves communication of the data within or outside the territory of the Republic of Colombia, intended for Processing by the Data Processor on behalf of the Data Controller.
  • Processing: Any operation or set of operations performed on Personal Data, such as but not limited to collection, storage, use, circulation, or deletion.
  • Data Subject: A natural person who owns the Personal Data collected by the Data Controller or Data Processor, if applicable. The Data Subject can identify themselves with the personal information they provide and exercise their legal rights concerning its Processing. In this case, the User and/or Buyer.
  • Users: Any person, natural or legal, who browses YLA’s Website to learn about the artist’s art and/or design services and artworks, without establishing any type of commercial relationship.
  • Buyers: Any person, natural or legal, who browses YLA’s Website to learn about the artist’s art and/or design services and artworks, or to select and purchase the offered products or Art Articles.

2. DATA OF THE DATA CONTROLLER

  • Address: Bogotá, Colombia

3. ABOUT THIS POLICY

This Policy outlines the mechanisms established by YLA to ensure and protect the fundamental right of habeas data, specifically for Users and/or Buyers of the Website, by properly complying with Law No. 1581 of 2012 and adopting best practices in Personal Data Protection and Privacy in the context of e-commerce.

Scope of Application

This Policy applies to all Processing of Personal Data carried out by YLA as the Data Controller, as well as by any third-party Processors authorized by YLA, if applicable, regarding the Personal Data of Website Users and/or Buyers. The Policy has been established and will be applied in accordance with Colombian data protection regulations, including Law No. 1581 of 2012, Decree No. 1377 of 2013, and any additional or amended regulations.

Application of the Policy by Third-Party Processors

When required and with the Data Subject's Authorization, third-party Processors authorized by YLA may conduct the Processing of Personal Data on behalf of Yessica Leaño. These third-party Processors are obligated to strictly adhere to this Policy and must implement all technical and administrative measures to ensure an equivalent or higher standard of protection for the Personal Data being Processed. YLA will take necessary and reasonable measures to ensure the protection of Personal Data processed on its behalf.

This may include vendors and service providers collecting information on behalf of YLA, such as:

Companies supporting the Website and services, like Shopify or payment processors, which collect payment information (e.g., bank account details, credit or debit card information, billing address) to process Buyers' payments, fulfill orders, and provide requested products, thus fulfilling the commercial relationship established under the Terms and Conditions of the Website.

When visiting our Website, opening or clicking on emails we send, or interacting with our Services or ads, we, or third parties we work with, may automatically collect certain information through online tracking technologies such as pixels, web beacons, software development kits, third-party libraries, and cookies.

Any information obtained from third parties will be treated in accordance with this Privacy Policy and the terms of third-party websites and links.

Scope and Content of the Policy

This Policy establishes the terms and purposes for the collection, storage, use, circulation, deletion, and any other type of Processing of Personal Data. It also specifies the security conditions under which Personal Data will be Processed, as well as pre-established procedures for Data Subjects to exercise their rights to access, update, and rectify their Personal Data in compliance with applicable regulations.

4. ABOUT THE PERSONAL DATA TO BE PROCESSED

Personal Data of Users and/or Buyers navigating or purchasing products and/or Art Articles available on the Website

YLA may collect and Process - without limitation and in accordance with the Authorizations obtained - the following Personal Data from its Buyers and Users, as applicable depending on their relationship with the Data Controller, as defined for Users or Buyers:

  • Full name
  • ID or Identification Document
  • Mobile or contact phone number
  • Email address
  • Residential address
  • Bank account details (this Data will only be requested for the corresponding payment or transactional step of the purchase and will be directly handled by the payment gateway or intermediary chosen to provide a transactional space on the Website).
  • Financial instrument data (this Data will only be requested for the corresponding payment or transactional step of the purchase and will be directly handled by the payment gateway or intermediary chosen to provide a transactional space on the Website).
  • Customer preferences and profiling data during Website navigation.
  • Customer service information, including data you choose to include in communications with us, such as sending a message through available channels on the Website.
  • Some service features may require you to directly provide certain information about yourself. You may choose not to provide this information; however, this may prevent you from using or accessing these features (both in Shopify's backend operations and in terms of delivery and transactional functionality on YLA’s Website)

5. ABOUT THE PURPOSES OF PROCESSING

General Purposes for the Processing of Personal Data

YLA and any authorized third-party Processors, if applicable, will process Personal Data for the following purposes:

Purposes applicable to both Users and Buyers:

  • Operate and manage the Website, carrying out activities related to this online space.
  • Segment Users, Buyers, or website visitors to offer better deals and proposals tailored to them.
  • Ensure compliance with any legal obligation and/or administrative or judicial requirements, and respond to or act in judicial proceedings when necessary.
  • Manage YLA’s internal affairs, including but not limited to accounting, financial reporting, tax calculation, filing, and payment, compliance reports, internal or external audits, and fulfillment of commercial or tax obligations or activities performed by YLA.
  • Include Personal Data in one or more databases managed by YLA or third-party Processors, if applicable, for the purposes stated herein. These databases may also include and integrate Personal Data transmitted and/or transferred by third-party Processors.
  • Transfer and/or transmit Personal Data domestically and/or internationally, including to third countries that may lack adequate protection levels as defined by the Superintendence of Industry and Commerce.
  • Inform about significant changes to this Privacy Policy.
  • Respond to inquiries, complaints, or claims made by Personal Data Holders through any of the channels YLA provides on its Website for this purpose.

Purposes specific to Users:

  • Send notifications and information deemed useful to Users who have specifically requested or consented to receive such communication, including information about products and services, unless they have indicated otherwise.
  • Monitor and audit YLA’s databases to update data and allow Users to decide whether to opt out, ensuring the retention of personal data from Users willing to remain potential Buyers.
  • Communicate marketing campaigns, promotions, events, and track website navigability.

Purposes specific to Buyers:

  • Establish and fulfill obligations derived from commercial or legal relationships established with Buyers, as applicable.
  • Process and deliver orders, send notifications regarding the status of purchases, and provide useful information to Buyers who have specifically requested it, including product and service updates, unless they have objected to such communication.
  • Implement controls and security measures to prevent fraud in commercial or legal relationships within the platform’s operation, as aligned with YLA’s third-party service providers.
  • Conduct mass communications for marketing, promotions, events, and customer service.

Contact details will be used per the Authorization provided. YLA will communicate with Users and/or Buyers when necessary via email, text message (SMS, MMS), direct mail, or phone.

To change the preferred channels for receiving communications from YLA, Buyers or Users must send an email to:  yla.artwork@gmail.com.

6. RIGHTS OF PERSONAL DATA HOLDERS

Rights of the Holders

By accepting this Policy, Personal Data Holders expressly and freely acknowledge that they have been informed about their rights under applicable laws, which include:

  • Knowing, updating, and rectifying their Personal Data with the Data Controller or Processor.
  • Requesting proof of Authorization granted to the Data Controller unless explicitly exempted as a requirement for Processing.
  • Being informed, upon request, about the use given to their Personal Data.
  • Filing complaints with competent authorities regarding violations of applicable Personal Data protection laws.
  • Revoking Authorization and/or requesting the deletion of their information and Personal Data per legal terms and this Policy.
  • Accessing their information and Personal Data processed by YLA, upon request, in accordance with applicable regulations.

General Procedure for Exercising Rights

  • Authorized Persons to Exercise Rights

The following individuals are authorized to exercise the rights of Personal Data Holders:

  • The Holder or their successors, upon proving their identity or through electronic means enabling identification.
  • A representative or attorney of the Holder, upon proof of representation or legal power.
  • Third parties with legal stipulations to act in favor or on behalf of the Holder.
  • Legal guardians for the rights of children or adolescents.
  • Channels for Inquiries, Requests, and Complaints
            Email: yla.artwork@gmail.com
  • Minimum Information for Inquiries, Requests, or Complaints.

Any inquiry, request, or complaint must include the following minimum information:

  • The name and contact address of the Holder, or any other means to receive a response.
  • Documents proving the identity of the Holder or their representative.
  • A clear and precise description of the Personal Data involved in exercising their rights.
  • Additional elements or documents to help locate the relevant Personal Data, if applicable.

Procedure for Handling Inquiries

YLA will ensure the right to inquiry by providing Holders with all information contained in the individual record or linked to the Holder’s identification.

Inquiries must be submitted through the designated channels.

Regardless of the channel used, inquiries will be addressed within a maximum of ten (10) business days from the date of receipt. If the inquiry cannot be addressed within this period, the Holder will be informed before the 10-day deadline, with reasons for the delay and a date for resolution within no more than five (5) additional business days.

Procedure for Handling Requests and Complaints

Holders and authorized individuals may freely exercise their rights to rectify, update, or delete their Personal Data by submitting a request to YLA.

If Holders identify alleged non-compliance with any obligations under Law 1581 of 2012, Decree 1377 of 2013, or other applicable norms, they may file a complaint with the Data Controller. Such complaints will follow these guidelines:

  • Requests and complaints must be submitted through the designated channels by authorized individuals.
  • They must contain the minimum information required under Article 15 of Law No. 1581 of 2012 and Article 9 of Decree No. 1377 of 2013, as well as the details stated in this document. Additional information should include a description of the facts, relevant documentation, and contact information.
  • If a complaint is incomplete, the Holder will be requested within five (5) days of receipt to provide additional information. If no response is received within two (2) months, the complaint will be deemed withdrawn.
  • If a complaint is misdirected, YLA will forward it to the appropriate party within two (2) business days and inform the complainant.
  • The maximum time for addressing a complaint is fifteen (15) business days from the day following its receipt. If it cannot be addressed within this timeframe, YLA will notify the complainant of the delay and provide a new resolution date within no more than eight (8) additional business days.

The request for deletion of information, revocation of Authorization, or limitation of the use and disclosure of Personal Data will not proceed when:

  • The Holder has a legal or contractual obligation to remain in the database, as determined by applicable laws.
  • The deletion of data would obstruct judicial or administrative actions related to tax obligations, the investigation and prosecution of crimes, or the enforcement of administrative sanctions.
  • The data is necessary to protect the legally safeguarded interests of the Holder.
  • The data is required to perform an action in the public interest or to comply with a legally binding obligation of the Holder.

The Holder may request the deletion and/or partial or total revocation of Authorization for their Personal Data, as explained below:

  • Partial Deletion or Revocation: A request for partial deletion and/or revocation of Personal Data may apply to specific types of Processing (e.g., for advertising or market research purposes), while allowing other purposes of Processing with which the Holder agrees to remain intact. For this reason, the Holder must specify which type of Processing they do not agree with, so the partial deletion and/or revocation of Personal Data can proceed accordingly.
  • Total Deletion or Revocation: Total deletion and/or revocation of Authorization implies that the Processing of the Holder’s Personal Data must cease entirely, notwithstanding the various purposes for which the Holder may have granted Authorization. There are cases where consent, due to its essential nature in the relationship between the Holder and the Data Controller (for compliance with a contract or a legal provision), cannot be revoked.

Therefore, when filing a revocation request, the Holder must specify whether the revocation they intend to carry out is partial or total.

7. DURATION OF PERSONAL DATA PROCESSING

YLA will retain the Personal Data of Users and Buyers for the entire duration of their contractual relationships and for up to ten (10) additional years following the termination of the legal or contractual relationship. This period may vary according to applicable regulations that require YLA to retain personal information for a specific amount of time, whether longer or shorter.

8. AUTHORIZATION

The collection, storage, use, circulation, and overall Processing of Personal Data contained in YLA's databases require the free, prior, explicit, and informed consent of the Holders. As the Data Controller, YLA has implemented the necessary mechanisms to obtain Authorization from the Holders before collecting their Personal Data, ensuring that the granting of such Authorization can always be verified and proven. The Personal Data of the Holders will remain in YLA's databases for as long as they are used for the authorized purposes unless the Holder requests its total or partial deletion.

Authorization may be provided through physical or electronic documents, data messages, websites, verbally or over the phone, or any other format that guarantees its subsequent verification. It may also be granted through an unequivocal action by the Holder that reasonably indicates consent. Alternatively, Authorization may be obtained via a technical or technological mechanism ensuring that, without the Holder's consent, the data could not have been collected or stored in the database.

By granting Authorization through any of the aforementioned mechanisms, the Holder of the Personal Data consents to YLA processing, obtaining, compiling, exchanging, updating, collecting, storing, reproducing, consulting, and supplementing their Personal Data, either partially or fully. The Holder also authorizes the Transfer and/or Transmission of their Personal Data to third-party countries, even those with a level of data protection that is not equal to or greater than Colombia’s, for the purposes outlined above.

The Holder of the Personal Data affirms that they have the necessary authority to grant this Authorization.

Any authorized third-party Processor receiving the transmitted information from YLA is required to comply with this Privacy Policy.

At any time, the Holder may fully or partially revoke the Authorization granted or opt out of receiving commercial communications by expressly requesting this through any of the channels YLA has provided.

9. TRANSFER AND TRANSMISSION OF PERSONAL DATA

National and International Transfer of Personal Data

By accepting this Privacy Policy—and thereby authorizing YLA to process your Personal Data—Holders expressly and unequivocally authorize the Transfer of their Personal Data to third parties, both nationally and internationally, including to countries that may not provide adequate levels of protection. In such cases, YLA will obtain the necessary Authorization from the Holders. YLA will establish International Data Transfer Agreements with third parties outside the national territory, which will set forth the minimum conditions required to ensure adequate protection of the data when it flows between YLA, as the Data Controller, and a third-party Processor.

In all cases, YLA commits to contractually regulating the flows of Personal Data contained in its databases, which it manages and owns as the Data Controller. This commitment will be upheld under the highest standards of protection and in compliance with applicable local regulations.

National and International Transmission of Personal Data

When YLA or an authorized third-party Processor transmits Personal Data to another Processor, including transmissions outside Colombia, a Transmission Agreement will be executed between the parties. This agreement will specify the scope of the data processing, the activities the Processor will carry out on behalf of YLA, and the Processor’s obligations towards the Holder and the Controller. The Processor will handle the Personal Data under YLA’s oversight and responsibility. Through this agreement, the Processor will be required to process the data in compliance with Colombian personal data protection regulations and in accordance with this Privacy Policy. In any case, the Processor’s activities will be limited to the purposes established by YLA.

Information flows under Transfers and/or Transmissions may include, but are not limited to, the following processes involving the Shopify backend on which YLA’s website operates:

With suppliers or third parties providing services on behalf of YLA (e.g., IT management, payment processing, data analysis, customer support, cloud storage, fulfillment, and shipping).

With business and marketing partners to display advertisements. These partners will use your information in accordance with their respective privacy policies.

When the Holder indicates, requests, or otherwise authorizes disclosure of certain information to third parties, such as for product deliveries or through social media widgets or login integrations with consent.

With affiliates or within YLA’s corporate group, based on our legitimate interest in successfully managing the business.

For business transactions such as mergers or bankruptcy, to comply with applicable legal obligations (including responding to subpoenas, search warrants, or similar requests), to enforce applicable terms of service, and to protect or defend our services, rights, users, and others.

10. SECURITY AND CONFIDENTIALITY OF PERSONAL DATA

The protection, security, and confidentiality of the Personal Data of our website Users and Buyers are of paramount importance. YLA employs information security policies, procedures, and standards designed to protect and preserve the integrity, confidentiality, and availability of Personal Data. These measures apply regardless of the medium or format in which the data is stored, its temporary or permanent location, or the means of transmission.

To achieve this, YLA implements necessary technical, human, and administrative measures to secure records and prevent unauthorized or fraudulent alteration, loss, consultation, use, or access. The Database Administrator will ensure the security of the data and monitor proper compliance with this Privacy Policy.

11. COOKIES

Both YLA and Shopify may use cookies to improve the user experience of Buyers. Cookies are small text files stored in your browser when you visit a website. Cookies help us remember your preferences, such as language, location, and security settings, and also help us track website traffic to improve performance. These activities align with the purposes for which you have authorized YLA to process your personal data.

You can choose not to accept cookies by configuring your browser to reject them. However, this may affect your ability to use certain features of our website.

12. SENSITIVE PERSONAL DATA

For the development of its corporate purpose and the provision of its services, YLA may need to process Sensitive Personal Data. In accordance with Article 6 of Law No. 1581 of 2012, YLA will only process Sensitive Personal Data when it has obtained the Holder's proper Authorization. In any case, the Holder is informed that, due to the nature of Sensitive Personal Data, they are not obliged to authorize its processing.

By granting their Authorization, the Holder agrees to the processing of their Sensitive Personal Data for the purposes described in this Policy.

In managing Sensitive Personal Data, YLA will take the necessary measures to protect its security and confidentiality, as outlined in the section on security and confidentiality.

13. PERSONAL DATA OF CHILDREN AND ADOLESCENTS

YLA does not collect or process Personal Data of individuals under 18 years of age. If it becomes necessary to process such data, YLA will request proper Authorization from the legal representatives of the minors and will handle their Personal Data in accordance with the principle of the best interest of the child. If YLA discovers that it is inadvertently collecting or processing data from minors, it will immediately delete this information from its databases.

YLA shall not be held liable in cases where minors impersonate their parents and/or legal representatives by using their personal information—such as identification numbers or debit/credit card details—for purchases and transactions.

14. EFFECTIVE DATE, VERSION, AND MODIFICATIONS TO THE PRIVACY POLICY

YLA reserves the right to modify this Privacy Policy at any time without prior notice. Any changes will be duly informed and published on the Website and/or via email.

The latest update to this Privacy Policy was made on November 14, 2024, and has been effective since that date.

 

******

Authorization for Platform Users (Express, prior, and informed consent must be collected):

By clicking to accept, I expressly, priorly, and informedly authorize YESSICA LEAÑO (hereinafter “YLA”), an individual identified with citizenship ID No. 1018416041, domiciled in Bogotá, Colombia, and owner of the website (https://yessicaleano.com/), acting as the Data Controller, to collect, process, transfer, and transmit my personal data if necessary, in accordance with the general purposes and those specific to my role as a User as described here: Terms of Service and the provisions of YLA's Personal Data Processing Policy available at: Privacy Policy. I acknowledge that, in the case of the collection of sensitive information, I have the right to answer or decline to answer questions posed to me and to provide or withhold the requested data. As a Holder, I understand that I have the right to know, update, and rectify my personal data, as well as to access and revoke the Authorization granted under Law 1581 of 2012, along with all rights detailed in the Personal Data Processing Policy.

Authorization for Platform Buyers (Express, prior, and informed consent must be collected):

By clicking to accept, I expressly, priorly, and informedly authorize YESSICA LEAÑO (hereinafter “YLA”), an individual identified with citizenship ID No. 1018416041, domiciled in Bogotá, Colombia, and owner of the website (https://yessicaleano.com/), acting as the Data Controller, to collect, process, transfer, and transmit my personal data if necessary, in accordance with the general purposes and those specific to my role as a Buyer as described here: Terms of Service and the provisions of YLA's Personal Data Processing Policy available at: Privacy Policy.

I acknowledge that, in the case of the collection of sensitive information, I have the right to answer or decline to answer questions posed to me and to provide or withhold the requested data. As a Holder, I understand that I have the right to know, update, and rectify my personal data, as well as to access and revoke the Authorization granted under Law 1581 of 2012, along with all rights detailed in the Personal Data Processing Policy.