About

INFORMATION PROCESSING AND PERSONAL DATA PROTECTION POLICY OF THE COLOMBO‑FRENCH EDUCATION ASSOCIATION AND/OR LYCÉE FRANÇAIS LOUIS PASTEUR

The COLOMBO‑FRENCH EDUCATION ASSOCIATION and/or LYCÉE FRANÇAIS LOUIS PASTEUR, identified with NIT 860.006.338‑1, domiciled at Calle 87 No. 7‑77 in Bogotá D.C., telephone 7965040 (hereinafter the “LYCÉE FRANÇAIS LOUIS PASTEUR”), by means of this Information Processing and Personal Data Protection Policy (hereinafter the “POLICY”), establishes the guidelines that govern the collection, storage, use, circulation, processing, management, transfer, transmission, updating, rectification, deletion and protection of the personal data received from third parties (students, parents, legal guardians, suppliers, employees, among others) through the various data collection channels of the LYCÉE FRANÇAIS LOUIS PASTEUR (hereinafter “Personal Data”).

This POLICY is issued pursuant to Articles 15 and 20 of the Political Constitution of Colombia, Statutory Law 1581 of 2012, Chapter 25, Part 2, Title 2, Book 2 of Decree 1074 of 2015, and other applicable regulations.

DEFINITIONS

Data Protection Authority: The Delegation for Personal Data Protection of the Superintendence of Industry and Commerce, which oversees compliance with the principles, rights, guarantees and procedures applicable to data processing.

Authorization: Prior, express and informed consent of the Data Subject to carry out the processing of personal data.

Privacy Notice: Verbal or written communication issued by the Controller to the Data Subject, informing about the existence of data processing policies applicable to him/her, how to access them and the purposes of the processing.

Database: Organized set of personal data subject to processing.

Personal Data: Information associated with or that can be linked to one or more identified or identifiable natural persons.

Private Data: Information relevant only to the Data Subject.

Public Data: Data that are neither semi‑private, private nor sensitive (e.g., marital status, profession, quality of merchant or public servant).

Sensitive Data: Data that affect the Data Subject’s intimacy or whose misuse may lead to discrimination, such as data revealing racial or ethnic origin, political opinions, religious beliefs, union membership, health, sexual life or biometric data.

Processor: Natural or legal person who processes personal data on behalf of the Controller.

Data Protection Officer: Person or area designated to assume the function of personal data protection and to handle requests from Data Subjects.

Claim: Request from the Data Subject or authorised persons to correct, update or delete data, or to revoke authorisation.

Controller: Natural or legal person who decides on the database and/or the processing of data.

Third Party: Natural or legal person, public or private, other than the Data Subject and the Controller.

Transfer: Sending of personal data by a Controller or Processor located in Colombia to another Controller located inside or outside the country.

Transmission: Processing of personal data that involves communicating them to a Processor so that it may carry out processing on behalf of the Controller inside or outside Colombia.

Processing: Any operation or set of operations on personal data such as collection, storage, use, circulation or deletion.

PRINCIPLES

As Controller, the LYCÉE FRANÇAIS LOUIS PASTEUR applies the following principles:

1. Legality – Processing of personal data is a regulated activity that must adhere to Law 1581 of 2012 and related regulations.
   2. Purpose – Data shall be processed for a legitimate purpose, previously informed to the Data Subject.
   3. Freedom – Processing requires the prior, express and informed consent of the Data Subject, except where legal or judicial exceptions apply.
   4. Veracity / Quality – Information must be complete, accurate, truthful, up to date, verifiable and understandable.
   5. Transparency – The Data Subject may obtain information about the existence of data concerning him/her at any time.
   6. Restricted Access and Circulation – Processing is limited to persons authorised by the Data Subject or by law.
   7. Security – Appropriate technical, human and administrative measures are applied to protect the data.
   8. Confidentiality – Every person involved in the processing must maintain the confidentiality of the information even after termination of their relationship with the entity.

RIGHTS OF DATA SUBJECTS

The LYCÉE FRANÇAIS LOUIS PASTEUR guarantees Data Subjects:

– Effective exercise of habeas data.
– Respect for privacy.
– Access to a copy of the authorisation granted.
– The right to know, update, rectify and delete their data.
– Revocation of consent where legally possible.
– Free access to their processed data.
– The right to lodge complaints with the Superintendence of Industry and Commerce.

PROCESSING AND PURPOSES

Personal Data may be subject to manual or automated operations (collection, storage, conservation, use, modification, updating, circulation, deletion) for the following purposes:

1. Common purposes: provide information about the School and promote its services; inform about new or modified services; send institutional或 advertising information by any means; conduct market, financial, statistical and risk studies; assess service quality; share data with insurers, legal advisers, accountants, software providers, tax authorities or subcontractors under confidentiality obligations; prevent fraud and money laundering (SAGRILAFT); any other purpose resulting from the relationship with the Data Subject.
2. Students: identity verification and admission processes; academic management and extracurricular activities; monitoring academic performance and behaviour; provision of health, food and transport services; informing parents/guardians of grades, school performance and health status.
3. Parents and Guardians: maintain up‑to‑date databases; know‑your‑customer procedures and data updates; manage the pedagogical and informational relationship; consult and report to credit information bureaus.
4. Employees and Teachers: fulfil legal and contractual obligations; selection, evaluation and hiring processes; affiliation to social security entities.
   5. Suppliers: manage contractual relationships; analyse supplier compliance capacity; fulfil obligations arising from contracts.
5. Visitors: ensure the safety of people, assets and facilities; manage data of speakers and attendees at events; manage users of sports, cultural and religious facilities.

DATA CONTROLLER

LYCÉE FRANÇAIS LOUIS PASTEUR
NIT 860.006.338‑1
Address: Calle 87 No. 7‑77, Bogotá D.C., Colombia
Telephone: +57 (1) 796 5040
Contact: Diana Díaz – Engineer (IT Department)

INFORMATION SECURITY

The School applies strict security and confidentiality protocols to prevent unauthorized access, alteration, disclosure or destruction of Personal Data. Processors must meet equivalent or higher security standards.

PROCEDURE TO EXERCISE RIGHTS

Data Subjects may send queries, requests or claims to ______@_____.co to know, update, rectify or delete information, or to revoke consent. The School will respond within ten (10) business days from receipt; if not possible, the applicant will be informed of the reason for the delay and the response date, which shall not exceed five (5) additional business days.

REVOCATION OF CONSENT AND/OR DELETION OF DATA

Data Subjects may request the revocation of their consent and/or the total or partial deletion of their data, in accordance with Law 1581 of 2012.

RETENTION OF PERSONAL DATA

Data of students, parents/guardians and employees will be kept while necessary or relevant to the purpose for which they were collected, then for an additional ten (10) years.

DISCLOSURE OF INFORMATION

By accepting this Policy, the Data Subject acknowledges that the School may provide information to authorities that request it in the exercise of their functions, subject to legal confidentiality obligations.

EFFECTIVE DATE

This Policy has been in force since April 2025.