Privacy Policy

Authorization:
Prior, express, and informed consent granted by the Data Subject authorizing the Data Controller to process their personal data.

Privacy Notice:
Verbal or written communication issued by the Data Controller informing the Data Subject about the existence of personal data processing policies, how to access them, and the purposes of such processing.

Database:
An organized set of personal data subject to processing, regardless of the medium in which it is stored, whether physical, electronic, or digital.

Personal Data:
Any information related to or that can be associated with one or more identified or identifiable natural persons.

Public Data:
Data that is neither semi-private, private, nor sensitive. Public data includes, among others, information related to civil status, profession or occupation, and the status of being a merchant or public official, as well as data contained in public records.

Private Data:
Data that, due to its intimate or reserved nature, is relevant only to the Data Subject and whose processing requires their authorization.

Semi-Private Data:
Data that is not intimate, reserved, or public in nature, and whose knowledge or disclosure may be of interest to the Data Subject as well as to a specific sector or group of persons.

Sensitive Data:
Data that affects the privacy of the Data Subject or whose misuse may generate discrimination, such as data revealing racial or ethnic origin, political orientation, religious or philosophical beliefs, union membership, health information, sexual life, or biometric data. The provision of such data is optional.

Data Processor:
A natural or legal person, public or private, that processes personal data on behalf of the Data Controller and in accordance with their instructions.

Data Controller:
A natural or legal person, public or private, that decides on the database and/or the processing of personal data.

Data Subject:
A natural person whose personal data is subject to processing.

Processing:
Any operation or set of operations performed on personal data, such as collection, storage, use, circulation, transmission, transfer, or deletion.

Personal Data Transmission:
Processing of personal data involving the communication of such data, within or outside the national territory, so that a Data Processor may process the data on behalf of the Data Controller.

Personal Data Transfer:
The sending of personal data by the Data Controller or Data Processor to a third party acting as a Data Controller, who may be located within or outside the national territory.

Habeas Data:
The fundamental right of every person to know, update, rectify, and delete information collected about them in databases or files, as well as to revoke the authorization granted for its processing, in accordance with the law.