Personal Data Protection Policy
Last updated: August 20261. Data controller
[RAZÓN SOCIAL PENDIENTE], identified with Colombian tax ID (NIT) [NIT PENDIENTE] ("Las Moyas"), domiciled in Bogotá D.C., Colombia, is the controller of the personal data collected through the Las Moyas Sanctuary website. Contact: [correo de contacto pendiente].
2. Legal framework
This policy is issued in compliance with Colombian Law 1581 of 2012, Decree 1377 of 2013 and other regulations governing personal data protection in Colombia, as well as the principles of legality, purpose, freedom, accuracy, transparency, restricted access, security and confidentiality.
3. Data we collect
Through the community form we collect: name and email address. Automatically, and for statistical purposes, we collect browsing data such as pages visited, approximate country and city, device type and referral source. This statistical data is not linked to a person's identity.
4. Purposes of processing
Personal data will be used to: (i) send news, event invitations and communications from the Las Moyas community; (ii) manage relationships with visitors and allies; (iii) produce site usage statistics; and (iv) comply with legal obligations.
5. Rights of the data subject
As data subject you have the right to: know, update and rectify your data; request proof of the authorization granted; be informed about the use of your data; file complaints before the Superintendence of Industry and Commerce (SIC); revoke authorization and/or request deletion of your data when no legal or contractual duty prevents it.
6. Exercising your rights
To exercise your rights, write to [correo de contacto pendiente] stating your name, the right you wish to exercise and the facts supporting your request. We will answer inquiries within a maximum of ten (10) business days and claims within a maximum of fifteen (15) business days, as required by law.
7. Security and retention
Las Moyas adopts reasonable technical, human and administrative measures to protect information and prevent its tampering, loss, unauthorized consultation, use or access. Data will be kept while the purpose of processing remains in force or while a legal obligation to keep it exists.
8. Transfers and processors
The site is hosted on third-party infrastructure (Cloudflare, Inc.), which may involve international data transmission under adequate protection standards. We do not sell or assign personal data to third parties for commercial purposes.
9. Validity
This policy is effective as of its publication and will remain in force while the site is in operation. Any substantial change will be communicated through this same channel.