Processing Policy
Data Processing Policy
Puerto Bahía informs all its customers, suppliers, contractors, third parties, and employees (including those who apply to be so) (hereinafter the “Stakeholders”) of the Data Processing Policy under Regulatory Decree 1377 of June 27, 2013:
This Data Processing Policy establishes the terms and conditions under which Sociedad Portuaria Puerto Bahía (hereinafter “Puerto Bahía”), with registered office in Barú Calle 7 Cra 5-57 Sector “La Pulga” Cartagena/Bolívar, phone number: (5) (608) 6640104, shall process personal data of its stakeholders.
1. Processing and purpose
Puerto Bahía, as part of its commercial, operating and administrative activities at the port facility, processes personal data regarding information it gathers from its customers, suppliers, third parties, and employees (including those who apply to be so). Such Processing is carried out to complete the following activities:
To design and carry out marketing, customer loyalty and other activities related to commercial strategies.
To store and manage the registry database of suppliers, customers or third parties.
To conduct security studies in order to establish effective security practices that optimize performance of the supply chain and mitigate the risk of loss, theft, drug trafficking, and smuggling where dangerous items or terrorist instruments could be introduced into the international supply chain.
To administer and manage the database of workers to enforce trade, labor, accounting and tax provisions, and carry out professional development and human management activities, including personnel recruitment processes.
To send communications, news, and other reports of Puerto Bahía.
To know the customer’s degree of satisfaction or apply other surveys to business partners of Puerto Bahía.
To create users in application.
To conduct recruitment processes and manage CVs.
To transfer or transmit personal data to third parties, in the framework of personal data protection, in order to carry out specific activities that will be informed to the Holder in a timely fashion.
Other purposes derived from the above or arising, upon informing the Holder, in the normal course of business of Puerto Bahía.
2. Rights of the Holder
As holder of your personal data, you, your successors or attorney are entitled to:
Freely access data provided to Puerto Bahía that has been subject to processing.
Know, update and rectify your information with respect to partial, inaccurate, incomplete, fractioned, and misleading data or data whose processing is forbidden or has not been authorized.
Request proof of the authorization granted.
File complaints with the Superintendency of Industry and Commerce (SIC by its Spanish acronym) for infringements of the provisions in current regulations.
Revoke authorization and/or request removal of data when processing does not respect constitutional and legal principles, rights, and guarantees. This will be applicable when the authority has determined that Puerto Bahía has engaged in conduct contrary to the Constitution and current regulations.
Refrain from answering questions on sensitive data. Answers on sensitive data or data of children and adolescents will be deemed optional.
Submit all requests, questions, petitions, and claims on the use of information supplied to Puerto Bahía to the e-mail servicioalcliente@puertobahia.com.co or the office address, as you deem appropriate.
3. Responsible Processes
Processes responsible for responding to requests, questions and claims regarding which data holders may exercise their rights to know, update, rectify and remove data and revoke authorization are:
Commercial Management:
Customer data, data of commercial contacts and potential customers.
Documentation - Operations Management
Data collected in the registration of customers or third parties for port operation.
Purchasing and Contract Management
Data collected in the registration of suppliers or contractors for port operation.
Financial Management
Financial data of stakeholders.
Human Management
Data of job applicants and workers of the organization.
Protection Management
Data for studying security and individuals’ access to the port facility.
SST Management
Data of workers related to compliance with the SST management system.
IT Management
Personal data of system and application users.
Legal Management
Data of customers, suppliers, contractors, employees, and other stakeholders in legal matters.
Internal Audit Management
Validation of data provided by customers, suppliers, contractors, employees, and other stakeholders.
4. Procedures
In order for data holders to exercise the rights to know, update, rectify and remove information and revoke authorization, the Customer Service area will ensure that rights requested are complied with and responded to in the times prescribed by the law.
Holders or those authorized or legitimated as such may ask questions about Personal Data that lie in the Databases managed by Puerto Bahía at the e-mail servicioalcliente@puertobahia.com.co
4.1. Knowing personal data
The Holder or those authorized or legitimated as such may ask questions about personal information that lies in the databases of Puerto Bahía. For this, they shall submit at the time of request the respective documents certifying legitimation to exercise the right.
Puerto Bahía will respond within 10 business days of the date of receipt by sending written communication to the address specified in the request form or by e-mail.
Where not possible to respond to the request within such term, Puerto Bahía will inform the interested party of the reason for the delay and the date on which the request will be responded to, which in any case may not exceed five (5) business days from expiration of the first term
(Law 1581 of 2012 – Article 14. inquiries).
Requests may be made through the website http://www.puertobahia.com.co/, by e-mail at servicioalcliente@puertobahia.com.co or formally at the reception of Puerto Bahía.
4.2. Updating and/or rectifying data
Puerto Bahía will update the database and include modifications of personal data provided by the Holder (duly authorized) when so required or Puerto Bahía becomes aware of new or current information.
The Holder or those authorized or legitimated as such may update or rectify personal information that lies in the databases of Puerto Bahía. For this, they shall submit at the time of request the respective documents certifying legitimation to exercise the right.
Requests may be made through the website http://www.puertobahia.com.co/, by e-mail at servicioalcliente@puertobahia.com.co or formally at the reception of Puerto Bahía.
4.3. Removing data and/or revoking authorization
The Holder or those authorized or legitimated as such may request removal of data and/or revocation of the authorization lying in the databases of Puerto Bahía. For this, they shall submit at the time of request the respective documents certifying legitimation to exercise the right.
This may be made through the website http://www.puertobahia.com.co/, by e-mail at servicioalcliente@puertobahia.com.co or formally at the reception of Puerto Bahía.
The request for data removal and/or authorization revocation will apply when it is noticed that constitutional and legal principles, rights and guarantees have not been respected and when the Superintendency of Industry and Commerce has determined that, in Processing, the Person Responsible has engaged in conduct contrary to this law and the Constitution.
The request for data removal and/or authorization revocation will not apply when the holder has a legal or contractual duty to stay in the database.
Data will be retained when so required for fulfilling a legal or contractual obligation.
5. Term
The effective date of this Policy is May 24, 2016.
Any substantial change in Processing policies will be informed to the Holders by e-mail or any other means available.