Privacy Policy

1. Data Controller

This document formalizes the policies of Teral SAS regarding the handling of personal data for all users, employees, suppliers, and data subjects. Teral SAS, which represents the Teral brand and is headquartered in Colombia, with the email address daniela@teral.com.co, is responsible for this information. We guarantee the right to access, update, and correct the data stored in Teral SAS’s databases or files.

2. Scope

This policy applies to all databases and personal data contained therein for which Teral SAS is responsible, in accordance with Law 1581 of 2012 and other relevant regulations. For the purposes of this policy, the following terms have the meanings given by Law 1581 of 2012 and Decree 1377 of 2013:

• A) Authorization: Prior, express, and informed consent from the data subject for the processing of their personal data.
• B) Privacy Notice: Written or verbal communication from the Controller to the data subject, informing them about the data processing policies, methods of access, and the purposes of data processing.
• C) Database: An organized set of personal data subject to processing.
• D) Personal Data:Any information related to or that can be associated with a specific or identifiable person. Some personal data is considered “public data,” such as information in the Civil Registry. Teral SAS collects and processes various personal data in compliance with Law 1581 of 2012 and Decree 1377 of 2012.
• E) Sensitive Data:Data that affects the subject’s privacy or could lead to discrimination, including information about racial or ethnic origin, political orientation, religious or philosophical beliefs, union membership, health, sexual life, and biometric data.
• F) Processor: A person or entity, public or private, that processes personal data on behalf of the Data Controller.
• G) Data Controller: A person or entity, public or private, that decides on the database and/or the processing of the data.
• H) Data Subject: A person whose personal data is processed.
• I) Processing: Any operation or set of operations performed on personal data, such as collection, storage, use, circulation, or deletion.
• J) Transfer: When the Controller and/or Processor in Colombia sends personal data to a recipient, who is also a Data Controller, either inside or outside the country.
• K) Transmission: The processing of personal data that involves communication inside or outside Colombia to be processed by the Processor on behalf of the Data Controller.

3. Processing

Teral SAS collects, stores, and processes personal data, which will be handled confidentially and in accordance with the Constitution and applicable laws. The specific purposes for processing personal data include:

3.1 This policy applies to personal data provided to Teral SAS by any means, including orally, in writing, online, through the application, physically, and data collected from public databases.

3.2 The processing of personal data in the collection of medical cases involves sensitive data related to audiovisual material, clinical information, and sociodemographic details necessary for the operation of the application.

3.3 The processing of data of professional health users includes sociodemographic details such as names, contact information, profession, and work experience.

3.4The processing of personal data for commercial and marketing purposes includes basic contact information for communication about Teral SAS’s services.

3.5 The processing of employee data for recruitment and welfare involves personal information collected directly from employees.

3.6 The processing of personal data for customer service involves information collected to handle inquiries, complaints, and requests.

3.7 The processing of personal data for communication purposes includes images for social media and other promotional activities.

4. Purposes of Data Collection and Storage

Data collected by Teral SAS is used for the following purposes:

• A) Development, design, and programming of specialized software.
• B) Structuring and classification of medical case repositories.
• C) Communicating medical cases to create treatment and diagnostic precedents.
• D) Facilitating the exchange of information among health professionals using the application.
• E) Supporting telemedicine operations according to regulatory standards, with Teral serving as a communication tool.
• F) Monitoring clinical cases.
• G) Sending information about Teral SAS’s services.
• H) Managing contractual relationships with employees, collaborators, or contractors.
• I) Recruitment, including resume review and data verification.
• J) Welfare activities for employees.
• K) Handling user complaints.
• L) Managing accounting and financial activities.
• M) Promotion of events on social media.
• N) Transferring information to authorized third parties for the stated purposes.

Teral SAS may contact data subjects through various means and will not share information outside these purposes unless required for compliance. Statistical, historical, or marketing analyses may be performed, but personal data will not be shared without authorization.

5. Rights of the Data Subject

Data subjects have the following rights:

• a) Know, update, and correct their data.
• b) Request proof of authorization for data processing.
• c) Be informed about the use of their data.
• d) File complaints with the Superintendence of Industry and Commerce for violations of data protection laws.
• e) Revoke authorization and/or request data deletion if legal requirements are not met.
• f) Access their data free of charge.

6. Responsibilities of the Data Controller

Teral SAS, as the Data Controller, must:

• A) Ensure that data subjects can exercise their rights.
• B) Request and maintain records of authorization.
• C) Inform data subjects about the purposes of data collection and their rights.
• D) Store information securely to prevent unauthorized access.
• E) Ensure that information provided to the Processor is accurate and up-to-date.
• F) Rectify incorrect information and inform the Processor.
• G) Supply only authorized data to the Processor.
• H) Ensure that the Processor respects data security and privacy.
• I) Handle queries and complaints according to legal requirements.
• J) Implement internal policies and procedures for compliance.
• K) Notify when information is in dispute.
• L) Inform the data protection authority of security breaches.
• M) Comply with the instructions of the Superintendence of Industry and Commerce.

7. Authorization and Consent

The collection, storage, use, circulation, or deletion of personal data by Teral SAS requires the free, prior, express, and informed consent of the data subject.

7.1 Authorization may be granted in various formats, including physical documents, electronic messages, or through online mechanisms.

7.2 Teral SAS will maintain records of consent through current and future mechanisms.

8. Handling Requests, Queries, and Complaints

8.1Teral SAS’s Customer Service handles requests, queries, complaints, and/or claims related to data rights. Inquiries will be addressed within ten (10) business days. If not possible, the data subject will be informed of the delay and the new response date.

8.2 Requests can be made via email to daniela@teral.com.co.

9. Applicable Regulations

This Privacy Policy is governed by Law 1581 of 2012, Decree 1377 of 2013, and their modifications.

10. Validity

This policy is effective from May 2022 and will remain valid for 20 years. Teral SAS reserves the right to review and modify this policy, with updates published on its website/app.