Login

Language

Cart

Your cart is empty

Privacy Policy

 

BIBIANA HERNANDEZ, simplified regime, residing in Colombia (hereinafter "BIBIANA HERNANDEZ"), whose website is https://bibianahernandez.com/, is responsible for the Processing of Personal Data.

Through this Notice, BIBIANA HERNANDEZ makes its Policies known, and in a physical document kept at BIBIANA HERNANDEZ's facilities; likewise, it informs the Data Subjects that their data will be processed for the following purposes:

  1. As an element of analysis to establish, maintain and execute a contractual or commercial relationship, whatever its nature,
  2. As an element of analysis to conduct market studies or commercial or statistical research,
  3. As an element to improve communication with Site users interested in purchasing products and/or contracting services offered by BIBIANA HERNANDEZ.
  4. To make collections through entities designated for smart payments or payment processors where credit or debit card information will be sent,
  5. To carry out tax, accounting, and fiscal management.
  6. To track purchases made by users,
  7. As a tool for offering own or third-party products or services,
  8. As a tool for initiating any pre-judicial or judicial collection,
  9. For the information to be shared, circulated and used by other entities for any of the purposes provided herein.
  10. To disclose, transfer and/or transmit personal data within and outside the country to BIBIANA HERNANDEZ's parent companies, subsidiaries or subordinated companies or to third parties as a result of a contract, law or legitimate link that so requires or to implement cloud computing services or any other that allows the protection of personal data.
  11. To guarantee the data subject, at all times, the full and effective exercise of the right to habeas data, the rights included in Law 1581 of 2012 and all applicable regulations on the matter.
  12. Development of security protocols, database updates, and reinforcement of protection measures.
  13. Attention to requests, complaints, and claims.
  14. Send commercial and/or advertising information through the various communication channels authorized by the data subjects.
  15. To know, store and process all information provided by the data subjects in one or more databases, in the format deemed most convenient and secure.

Additionally, BIBIANA HERNANDEZ collects Personal Data for certain secondary purposes, which contribute to providing Site users with better service, in particular purposes such as:

  1. Marketing
  2. Advertising (Newsletters and commercial communications),
  3. Commercial prospecting,
  4. Statistics for traffic analysis and Site usage,
  5. Preparation of profiles for determining tastes and preferences, and
  6. Submission of promotional information according to your interests.

BIBIANA HERNANDEZ will process your Personal Data for as long as necessary to fulfill the aforementioned purposes, and/or as long as necessary to comply with legal or contractual obligations.

All personal information collected by BIBIANA HERNANDEZ will be processed exclusively for the purpose for which it was provided.

In the event that BIBIANA HERNANDEZ, in the exercise of its own activities, uses, transmits or internationally transfers Protected Information, it will guarantee compliance with the applicable principles established in this Policy.

 

 

Rights of Data Subjects

  • Access, know, rectify and update your personal data with BIBIANA HERNANDEZ, in its capacity as data controller.
  • By any valid means, request proof of the authorization granted to BIBIANA HERNANDEZ, in its capacity as data controller.
  • To receive information from BIBIANA HERNANDEZ upon request, regarding the use made of their personal data.
  • To go before legally constituted authorities, especially the Superintendence of Industry and Commerce, and file complaints for violations of the provisions of current regulations in applicable norms, after having processed a consultation or requirement with the data controller.
  • To modify and revoke the authorization and/or request the deletion of data when the Processing does not respect current constitutional and legal principles, rights and guarantees.
  • To know and freely access your personal data that has been subject to Processing.
  • File complaints with the Superintendency of Industry and Commerce for infringements of the provisions of Law 1581 of 2012 and other rules that modify, add to or complement it.

Enabled Channels

All inquiries, requests, complaints and claims regarding Personal Data will be submitted through the following channels:

Responsible Area: Data Protection.

Email: sales@bibianahernandez.com

WhatsApp +57 3167748495

Website: https://bibianahernandez.com Data subjects are informed that they can consult BIBIANA HERNANDEZ's Data Processing Policies, which contain the policies for the processing of collected information, as well as the consultation and claims procedures that will allow them to exercise their rights to access, consult, rectify, update, and delete data.

 


DATA PROCESSING POLICY


 

This Personal Data Processing Policy (hereinafter the "Policy") aims to implement the provisions contained in Law 1581 of 2012 and Decree 1074 of 2015, and other related regulations, exclusively with regard to databases, files, and information containing personal data subject to processing, and explains how BIBIANA HERNANDEZ collects, stores, uses, circulates, and processes information that you provide us through different means, as well as the purposes for which such personal information is used, in order to protect it through mechanisms and tools that guarantee the authenticity, confidentiality, and integrity of the information.

Regulatory Framework of the Policy

BIBIANA HERNANDEZ complies with the Colombian legal framework for the processing of personal data, especially:

  • Political Constitution of Colombia, article 15.
  • Law 1266 of 2008, which dictates general provisions on habeas data and regulates the handling of
  • information contained in personal databases, especially financial, credit, commercial, service, and
  • information from third countries, and dictates other provisions.
  • Statutory Law 1581 of 2012, now Decree 1074 of 2015 and other regulatory decrees that define the
  • scope of application of the rights to privacy, good name, and informational self-determination.
  • Ruling C-1011 of 2008 – Definition of the nature of data recorded in the Public Registries of the
  • Chambers of Commerce, as public data.
  • Ruling C – 748 of 2011 – Constitutionality of the Draft Statutory Law on Personal Data Protection.
  • And the instructions issued by the Superintendence of Industry and Commerce in exercise of the function established in article 21 of Law 1581.

Obligations

The directors, officials, contractors, suppliers and third parties who work for or have a direct relationship with BIBIANA HERNANDEZ must strictly comply with, in addition to the legal and regulatory provisions governing the matter, the processes, procedures and instructions that develop the policy for the protection and processing of personal data of BIBIANA HERNANDEZ, compiled in the “Management Information System.” BIBIANA HERNANDEZ will carry out all actions aimed at disseminating and complementing this policy.

Contact details of the controller - Area responsible for handling inquiries, requests and complaints.

BIBIANA HERNANDEZ, a private entity, with its main domicile in Colombia (hereinafter, the "Data Controller"). For the purposes of this Policy, the area responsible for handling requests, inquiries, complaints and claims is the Compliance Officer and can be contacted via email: sales@bibianahernandez.com or WhatsApp +57 3167748495

BIBIANA HERNANDEZ restricts the processing of sensitive personal data and data of minors to what is strictly necessary and requests prior and express consent from the data subjects (legal representatives, attorneys-in-fact, heirs) informing them of the exclusive purpose of its processing.

BIBIANA HERNANDEZ incorporates respect for personal data protection in all its actions and will request, from the moment of data entry, where applicable, authorization for the use of the information it receives, for the specific purposes of its mission.

Likewise, BIBIANA HERNANDEZ will inform the data subject clearly and expressly in privacy notices about the data collected and the purpose of the collection and processing it will give them.

Data Processing and Purpose

The Data Controller, with prior authorization from the data subjects (if required), may obtain information from natural persons (employees, customers, and suppliers, etc.), who may choose to provide us with personal information when accessing and/or browsing the website https://bibianahernandez.com/, or in connection with a contractual, commercial or service relationship with the Data Controller. The types of personal data we collect are public, semi-private, private, financial data, and sensitive data or data of minors that are not public will not be collected, unless these are required in accordance with current regulations to comply with our legal obligations and/or there is authorization from their parents or legal representatives, if this is required in accordance with the nature of the personal data.

The Processing of Personal Data may be carried out through physical, automated or digital means in accordance with the type and form of information collection.

The personal data provided to the Data Controller will be collected, stored, used, analyzed, circulated, updated and reported for the following purposes, as established in the respective authorization. The Company may also process Personal Data, among others, for the following purposes: (i) as an element of analysis to establish and maintain an employment, contractual or commercial relationship, whatever its nature, (ii) as an element of analysis to conduct market studies or commercial or statistical research, (iii) as a tool for offering its own or third-party products or services, (iv) for carrying out any procedure before a public authority or a private person or entity, to which the information is relevant, (v) for all information related to credit, financial, commercial, service behavior and data of the same nature from third countries to be consulted, supplied, reported, processed or disclosed, (vii) for the fulfillment of any other legal obligation of the Data Controller, including, but not limited to, SARLAFT obligations and document retention, and (viii) for the information to be transmitted to third parties located within or outside the Republic of Colombia, for any of the purposes provided herein. (ix) To exercise its right to sufficiently know the Data Subject with whom it intends to establish relationships, provide services, and assess the present or future risk of such relationships and services. (x) To carry out the relevant procedures for the development of the pre-contractual, contractual and post-contractual stages with the Company, regarding any of the products or services offered by it, whether or not acquired, or regarding any underlying business relationship it has with it, as well as to comply with Colombian or foreign law and the orders of judicial or administrative authorities; (xi) To carry out marketing, sales and promotional activities, telemarketing, customer service, brand activation activities, prizes and promotions, directly or through third parties derived from commercial alliances or any link; (xii) To implement relationship strategies with clients, suppliers, shareholders and other third parties with whom the Company has contractual or legal relationships; (xiii) To send invitations to events, improve products and services or offer new products, and all those activities associated with the commercial relationship or existing link with the Company, or one that may arise; (xiv) To manage procedures (requests, complaints, claims), conduct satisfaction surveys regarding the goods and services offered by the Company, or related companies and its commercial partners; (xv) To disclose, transfer and/or transmit Personal Data within and outside the country to the parent companies, subsidiaries or subordinated companies of BIBIANA HERNANDEZ or to third parties as a result of a contract, law or legitimate link that so requires or to implement cloud computing services.

Rights of Data Subjects

The data subject has the following rights with respect to the Data Controller:

  • To know, update and rectify your personal data
  • To request proof of the authorization granted
  • To be informed by the Data Controller, upon request, regarding the use made of their personal data
  • To file complaints with the Superintendence of Industry and Commerce for infringements of the provisions of Law 1581 of 2012 and Decree 1074 of 2015, once the consultation or claim procedure has been exhausted before the Data Controller
  • To revoke the authorization and/or request the deletion of the data when the processing does not respect constitutional and legal principles, rights and guarantees
  • To freely access your personal data that have been subject to processing

Procedure for exercising habeas data rights

Data subjects may exercise their rights to know, update, rectify, revoke authorization, and request deletion of data by sending a communication to the address and area indicated in this Policy. This communication must contain at least the following:

  • The name, address of the data subject, and contact method for receiving the response, such as phone, email, residential address.
  • The documents proving the identity or representation of their representative.
  • A clear and precise description of the personal data for which the data subject seeks to exercise any of the rights.
  • If applicable, other elements or documents that facilitate the location of the personal data.

Once the communication is received by the Data Controller, a response will be provided within the terms established in the applicable regulation.

Modification and/or update of the policy

Any substantial change in the processing policies will be communicated in a timely manner to the data subjects through the usual contact means and/or by email sent to the contact addresses registered with the Data Controller.

Policy Validity

These policies are effective from June 5, 2020, the date on which they were approved and published in the offices of the Data Controller.