Privacy and Personal Data Processing Policy
In compliance with Law 1581 of 2012, Decree 1377 of 2013 and other related Colombian regulations governing the protection of personal data, Dr. Luis Devoz – Plastic Surgery (hereinafter, “the Controller”) informs data subjects of this Privacy and Data Processing Policy, applicable to the website www.drluisdevoz.com and to all associated channels of contact.
1. Identification of the data controller
Controller: Dr. Luis Devoz – Plastic Surgery
LUISDEVOZ CIRUGIA PLASTICA
NIT 900947546-9
Address: Calle 127 #14-54, Consultorio 706, Gradecco Business Plaza, Bogotá D.C., Colombia
Email: gerencia@luisdevozcirugia.com
Colombia phone: +57 322 3324156
USA phone: +1 305 3239170
Website: www.drluisdevoz.com
2. Legal framework and scope
This policy is governed by article 15 of the Political Constitution of Colombia (the fundamental right of Habeas Data), Law 1581 of 2012, Decree 1377 of 2013 and the instructions of the Superintendency of Industry and Commerce (SIC). It applies to any natural person whose personal data is collected, stored, used, circulated or deleted by the Controller through the website and other means of contact.
3. Personal data we collect
Depending on the channel of interaction, the Controller may collect the following categories of data:
Identification and contact data: full name, email address, phone number.
Enquiry data: the procedure of interest and the message sent through the contact form or WhatsApp.
Sensitive health data: clinical information the subject voluntarily provides during consultations, assessments or communications (medical history, health conditions, expectations of the procedure). This data is considered sensitive and receives reinforced protection.
Browsing data: IP address, device and browser type, pages visited and information collected through cookies and similar technologies (see section 9).
4. Purposes of processing
Personal data is processed for the following purposes:
Responding to requests for information, quotes and the scheduling of assessment appointments.
Contacting the subject by phone, email or WhatsApp to answer their request.
Providing and following up on the medical and aesthetic services requested.
Sending information about procedures, offers and news, where the subject has authorised it.
Meeting legal, contractual, accounting and tax obligations.
Analysing use of the website to improve the user experience and the quality of the service.
5. Processing of sensitive and health data
Health data is sensitive data. The subject is not obliged to authorise its processing; however, since the provision of medical services requires it, supplying this information is understood as express, voluntary authorisation for the purposes described in this policy. The Controller undertakes to:
Limit access to this data to strictly necessary personnel.
Not make other activities conditional on providing sensitive data beyond what the service requires.
Apply reinforced security measures and maintain the corresponding professional confidentiality.
6. Authorisation by the data subject
By completing and submitting the contact form, communicating through WhatsApp or supplying their data through any other channel, the subject gives the Controller prior, express and informed authorisation to process their personal data in accordance with the purposes of this policy. Ticking the “I accept the terms and conditions” box on the form constitutes evidence of that authorisation.
7. Rights of the data subject
Under article 8 of Law 1581 of 2012, the data subject has the right to:
Access, update and rectify their personal data.
Request proof of the authorisation given for processing.
Be informed of the use made of their personal data.
File complaints with the Superintendency of Industry and Commerce for breaches of the law.
Withdraw authorisation and/or request deletion of the data where there is no legal or contractual duty to keep it.
Access their personal data undergoing processing free of charge.
8. Procedure for enquiries and complaints
The subject or their successors may exercise their rights by sending a request to gerencia@luisdevozcirugia.com, stating their full name, contact details, a description of the request and any supporting documentation.
Enquiries: answered within a maximum of ten (10) business days, extendable by a further five (5) business days.
Complaints: answered within a maximum of fifteen (15) business days, extendable by a further eight (8) business days, counted from the day after receipt.
9. Cookies and tracking technologies
The website uses cookies and similar technologies for its correct operation, to analyse traffic and for advertising purposes. These may include third-party tools such as Google Analytics, Google Tag Manager and the Meta (Facebook) pixel. The subject can configure or disable cookies from their browser settings; disabling some cookies may affect the site's functionality.
10. Transfer and transmission of data
The Controller may transmit or transfer personal data to technology providers, analytics and advertising platforms, or partners supporting the provision of the service, including processors located outside Colombia. These operations are carried out under adequate security and confidentiality standards and solely for the purposes described in this policy.
11. Information security
The Controller adopts reasonable technical, human and administrative measures to protect personal data against unauthorised access, loss, alteration or misuse, including the use of security certificates (SSL) on the website and access controls to the information.
12. Validity and retention of data
Personal data will be kept for as long as necessary to fulfil the purposes of processing and the applicable legal obligations. The database will remain active for as long as a relationship with the subject or a legal duty of retention exists. Once those purposes have been met, the data will be deleted or anonymised.
13. Minors
The website is not directed at minors. The processing of minors' data will be carried out only in exceptional cases, with the authorisation of their legal representative and respecting the best interests of the child.
14. Changes to the policy
The Controller may amend this Privacy Policy at any time. Amendments will be published on this same page, stating the date of the last update. Subjects are advised to review this document periodically.
15. Contact
For any question relating to the processing of your personal data, you may contact:
Dr. Luis Devoz – Plastic Surgery
Calle 127 #14-54, Consultorio 706, Gradecco Business Plaza, Bogotá D.C., Colombia
Email: gerencia@luisdevozcirugia.com
Phone: +57 322 3324156