Manual of policies and procedures on personal data taring | TEVA-MAN-DAT-001-2025
This Manual of Policies and Procedures on the Processing of Personal Data TEVA CORPORATIONThe non-profit corporation based in Medellín, Antioquia, aims to establish the guidelines, principles and procedures that guarantee the proper processing and protection of personal data in accordance with Law 1581 of 2012, Decree 1377 of 2013 and other current regulations on data protection in Colombia.
1. IDENTIFICATION OF THE DATA CONTROLLER
• Name: TEVA CORPORATION
• Legal nature: Non-profit corporation
• Address: Cra 75 #92-129, Medellín, Antioquia
• Email: contacto@tevacorpco
2. AIM
Establish policies and procedures that guarantee compliance with the right to the protection of personal data of all natural persons whose data is collected, stored or processed by TEVA CORPORATION.
3. SCOPE
This manual applies to all databases and files containing personal information of customers, suppliers, contractors, employees, volunteers, and other natural persons who have a direct or indirect relationship with TEVA CORPORATION.
4. GUIDING PRINCIPLES
• Principle of legality: The processing will be subject to the provisions of the law.
• Principle of purpose: The processing will be based on a legitimate purpose reported to the data subject.
• Principle of freedom: The processing will only be carried out with the prior and explicit consent of the data subject.
• Principle of truthfulness or quality: The information must be truthful, complete, accurate and up-to-date.
• Principle of transparency: The right of the owner to obtain information about their data will be guaranteed.
• Principle of restricted access and circulation: Data will only be processed by authorized personnel.
• Security principle: Technical, human and administrative measures will be adopted to protect information.
• Principle of confidentiality: All persons involved in the processing are obliged to keep a reservation.
5. RIGHTS OF INFORMATION HOLDERS
Owners of personal information have the right to:
a) Know, update and rectify your personal data.
b) Request proof of the authorization granted for the treatment.
c) Be informed about the use given to your data.
d) File complaints with the Superintendency of Industry and Commerce.
e) Revoke the authorization and/or request the deletion of your data.
f) Access your personal data free of charge.
6. DUTIES OF TEVA CORPORATION AS DATA CONTROLLER
TEVA CORPORATION undertakes to:
• Guarantee the rights of the holders.
• Keep information under secure conditions.
• Process queries and complaints.
• Update and rectify information when necessary.
• Maintain confidentiality regarding personal data.
7. PROCEDURE FOR INQUIRIES AND COMPLAINTS
Data subjects may exercise their rights by sending a written request to the email address contacto@tevacorpco, addressed to the data controller. Inquiries will be answered within a maximum of ten (10) business days and complaints within a maximum of fifteen (15) business days, in accordance with the law.
8. SECURITY MEASURES
TEVA CORPORATION It will adopt reasonable technical, human and administrative measures to protect personal information against unauthorized access, loss, alteration or misuse. Access to the databases will be limited exclusively to authorized personnel.
9. AUTHORIZATION OF THE HOLDER
The processing of personal data will require prior and informed authorization from the owner, which may be obtained by physical, electronic or verbal means as the case may be.
10. VALIDITY AND UPDATING OF THE MANUAL
This Manual comes into force as of September 1, 2025 and will remain in force until it is modified or replaced by a new one. Any changes will be published on the official channels of TEVA CORPORATION.