Complying with Law 1581 from 2012 and Regulatory Decree 1377 from 2013 that regulate the personal data protection in Colombia, PREMIUM CARE PLASTIC SURGERY S.A.S, and PREMIUM CARE HOSPITALITY S.A.S responsible for the personal data treatment and protection from its Affiliates, employees, suppliers, third parties, users and other interested parties, has collected, stored and used information with personal data, and for its corporate purpose wishes to continue such treatment in the future.
To this end, it informs all interested parties the adoption of the following policies on the collection, processing and use of personal data, which will be mandatory for PREMIUM CARE, as Responsible for the treatment, its employees, as well as those third parties that by obligation and / or PREMIUM CARE disposition assume the quality of treatment managers or have access to them.
This information is and will be used in the development of the corporate purpose of PREMIUM CARE, as a legal person that provides health services, as well as for administrative, commercial, promotion and contact purposes with the holders thereof.
The holders may exercise their rights to consult, know, update, rectify and delete their personal data by sending their request to the email [email protected].
This policy is designed to comply with the data protection regulations of both Colombia, as governed by Law 1581 of 2012 and Decree 1377 of 2013, and the USA, including HIPAA (Health Insurance Portability and Accountability Act) and relevant state laws, such as the California Consumer Privacy Act (CCPA), where applicable. Additionally, this policy complies with regulations set by The Campaign Registry (TCR) for marketing communications via SMS/MMS.
1. LEGAL BASIS FOR PROCESSING
Premium Care Plastic Surgery (PREMIUM CARE) is committed to protecting personal data and adheres to the following regulations:
- Colombian Data Protection Law: Law 1581 of 2012 and Decree 1377 of 2013, which regulate the use and protection of personal data in Colombia.
- USA Data Protection Law: HIPAA for medical data, GDPR for US-based users where applicable, and CCPA for California residents.
- TCR Requirements: For SMS/MMS marketing campaigns, ensuring explicit consent and providing opt-out mechanisms.
2. PRINCIPLES OF DATA PROCESSING
Data processing will be governed by the principles of legality, transparency, security, confidentiality, and limited retention, following both Colombian and US regulations.
3. RIGHTS OF DATA HOLDERS
- Access: Data holders can request access to their personal data at any time.
- Rectification: Users can request the correction of inaccurate personal data.
- Deletion: Data holders can request the deletion of their data, except when required by law to retain it.
- Opt-Out of Marketing: Users can opt out of marketing communications, including SMS, by replying “STOP” or using other provided opt-out mechanisms in compliance with TCR.
4. CROSS-BORDER DATA TRANSFER
Data may be transferred between the USA and Colombia. Premium Care ensures that all cross-border transfers comply with international data protection standards, including the use of encryption and contractual safeguards to protect data.
5. PERSONAL DATA PURPOSES AND SENSITIVE DATA HANDLING
The data will be processed for medical purposes, including scheduling appointments and conducting diagnostic procedures. Sensitive health data is protected under HIPAA in the USA and subject to confidentiality as regulated by Colombian law. Sensitive data processing requires explicit consent.
6. DATA SECURITY
PREMIUM CARE implements robust encryption, access controls, and regular audits to ensure the security of personal and medical data.
7. SMS/MMS MARKETING CONSENT (TCR COMPLIANCE)
PREMIUM CARE will only use SMS or MMS communications for marketing purposes if explicit consent has been obtained. Users may opt out by replying “STOP,” and their opt-out requests will be handled promptly in compliance with TCR regulations.
Important: We do not share or sell SMS opt-in, or phone numbers for the purpose of SMS.