Personal data processing policy

1. Who is responsible for your data

Fundación Alas Empoderadas is a nonprofit organization registered under NIT (Colombia's tax identification number) 902.026.684-2, registered with the Bogotá Chamber of Commerce and based in Bogotá, D.C., Colombia. It is the data controller for the personal data it collects in the course of its work.

• Address: Tv. 13 No. 52 A - 22, Apto. 301, Bogotá, D.C., Colombia
• Phone: +57 300 675 5405
• Email for anything related to personal data: alasempoderadas2026@gmail.com

2. Legal framework

This policy complies with article 15 of the Political Constitution of Colombia, Statutory Law 1581 of 2012, and Chapter 25, Title 2, Part 2, Book 2 of Decree 1074 of 2015, which compiles Decree 1377 of 2013, together with any rules that amend or supplement them.

3. Key terms

• Data subject: the person the data refers to.
• Personal data: any information that identifies a person or makes it possible to identify them.
• Sensitive data: data that affects a person's privacy or whose misuse could lead to discrimination, such as health or biometric data.
• Processing: any operation on personal data, such as collecting, storing, using, sharing or deleting it.
• Controller: whoever decides on the database and the processing. In this case, the Foundation.
• Processor: whoever processes data on behalf of the controller.
• Authorization: the data subject's prior, express and informed consent to the processing of their data.

4. What data we process and why

People who write to us. When you write to us by email or through the contact form, we process your name, your email address, your type of interest and your message. We use them to reply and to follow up on what you propose: a donation, volunteering, a partnership or a press request.

Donors. If you donate, we process the data you share with us, such as your name, your email address and the receipt for your gift. We use it to record the gift, thank you and meet our accounting and legal obligations. Bre-B donations are processed by your bank: the Foundation never receives or stores passwords, verification codes or card details.

Newsletter. Once the newsletter is available and you subscribe, we will use your email address only to send you news, open calls and updates from the Foundation. You can unsubscribe at any time.

Program participants and their families. We process identification, contact and educational data to support them, follow up, document our processes and prepare reports. Photos and videos are taken and used in our communications only with express authorization.

Volunteers, partners and suppliers. We process contact details and the data needed for our relationship with each person or organization.

Website visitors. We use essential cookies to make the site work. Analytics cookies, which help us understand how the site is used, are only turned on if you accept them.

The Foundation does not sell or rent personal data.

5. Sensitive data

Some data is sensitive, for example the image of a person's face in photos and videos, or health information. Answering questions about sensitive data is voluntary: no one is required to do so. We only process sensitive data with the data subject's explicit authorization, after telling them what the data is and what it will be used for.

6. Girls, boys and adolescents

When we process data of girls, boys or adolescents, we respect their best interests and fundamental rights. We ask for authorization from their mother, father or legal representative, and we listen to their opinion according to their age and maturity.

In our public communications we do not publish their name, age, school, neighborhood or any information that would make it possible to locate them. When we share their words, we identify them only by their vocation, for example "Dancer, Alas participant".

7. Your rights

As a data subject, you have the right to:

• Know, update and correct your data.
• Request proof of the authorization you gave us.
• Be informed, upon request, of how we use your data.
• File complaints with the Superintendence of Industry and Commerce (SIC) for violations of the law.
• Revoke your authorization or ask us to delete your data, when there is no legal or contractual duty to keep it.
• Access your data free of charge.

8. How to exercise your rights

Write to alasempoderadas2026@gmail.com with the subject "Personal data". The Foundation's Office of the Director handles inquiries and claims. Include your name, your ID document, what you are requesting and how you would like to receive the answer. If you act on behalf of someone else, attach the document that authorizes you.

Inquiries. If you want to know what data we hold about you or how we use it, we will reply within 10 business days at most. If we cannot do so within that time, we will tell you why and reply within 5 additional business days at most.

Claims. If you want to correct, update or delete your data, or you believe we are not complying with the law, we will reply within 15 business days at most. If we cannot do so within that time, we will tell you why and reply within 8 additional business days at most.

• If your claim is missing information, we will let you know within the following 5 days so you can complete it. If 2 months pass without you sending it, we will consider the claim withdrawn.
• While we resolve your claim, we will mark your data as "claim in progress".

Before going to the Superintendence of Industry and Commerce, you must submit your inquiry or claim to the Foundation.

9. How we ask for your authorization

We ask for your authorization before processing your data:

• in the website forms, with a box you must check;
• in the signed program forms, including those signed by the mothers, fathers or legal representatives of girls, boys and adolescents;
• by any other means that allows it to be checked later.

You can revoke it whenever you want by writing to us.

10. Security

We protect data with reasonable measures to prevent it from being lost, accessed or used without authorization. Only the Foundation's people who need the data for their work can access it.

11. Service providers and data transmission

We rely on technology providers, such as our email service and the website hosting, which process data on our behalf as processors. Some of them store information on servers outside Colombia. We only work with providers that offer security and confidentiality guarantees, and only for the purposes of this policy.

12. Cookies

The site uses essential cookies to work and, only if you accept them, analytics cookies to understand how it is used. You can change your choice at any time by clearing this site's cookies and site data in your browser: the cookie notice will appear again.

13. Validity

This policy is in force from its publication on this website. The databases will remain in force for as long as the Foundation carries out its corporate purpose. We keep data for as long as needed to fulfill the purposes of this policy and the applicable legal, accounting and tax obligations.

If we change this policy, we will publish the new version on this page with its update date.