The SEVENTH-DAY ADVENTIST CHURCH OF COLOMBIA and the GENERAL CONFERENCE OF SEVENTH DAY ADVENTIST CHURCH, hereinafter referred to as IASD, informs its stakeholders of the Privacy Policy that has been adopted in compliance with the current legal regime established in Statutory Law 1581 of 2012.

IASD processes personal data of its stakeholders in execution of its main activity consisting of building the Adventist church with the objective that its members achieve spiritual maturity and promote the unity of the Christian faith and knowledge of God; without prejudice to the relationship with other stakeholders in this regard.

Purposes of Processing

The personal data held by IASD, in its capacity as Data Controller and/or Processor as applicable, will be processed in compliance with the principles and regulations established in Colombian law and the best practices applicable to the personal data protection regime. Consequently, they will be processed according to the following general purposes:

• Manage the relationship with church members who practice the Adventist faith, in their capacity as IASD members according to the statutes that govern the relationship.
• Manage and coordinate the relationship among the four levels of the organization, from the individual member to the global organization, involving the Local Churches, the Local Association, the Union, and the General Conference.
• Promote the spiritual and integral growth of members and other individuals of the community with whom they relate in order to develop their purpose.
• Develop its purpose through social works and/or services for the community, through projects in the areas of education, health, virtual and/or traditional public media, recreation, printing, food, without prejudice to other works that may be developed in the future.
• Collaborate with the educational process of Adventist education centers, such as schools and universities.
• Communicate and execute the guidelines of IASD adopted from the central level.
• Contribute to the integral development of Colombian society and, in particular, of vulnerable populations, in compliance with preexisting laws that regulate each case.
• Fulfill the obligations and/or commitments arising from contractual or non-contractual relationships with its stakeholders.
• Communicate to its stakeholders information about its spiritual activities, events, workshops, camps, and other social activities, whether through virtual and/or traditional channels.
• Provide its stakeholders with spiritual, educational, and preventive services framed within the Adventist faith as part of Christianity.
• Manage the security of people, assets, and information under the organization's custody.
• Make public communications through traditional and/or virtual media.

In each process of the organization, and according to the personal data collected and processing to be carried out, the respective privacy notice will inform, in advance, the particular purposes; the name or corporate name and contact information of the Data Controller or Processor, if processing will be carried out by a processor, in which case such processor will be under the direction of IASD; the rights of the data subject and the mechanisms provided by this organization to make the Privacy Policy known. Likewise, in compliance with current regulations, it is informed that personal data may be processed directly and/or through third parties, acting as data processors, in data centers located within or outside Colombia, in territories such as the United States, Europe, Latin America, or other territories.

Rights of the Data Subject

Any person who is part of one of the stakeholder groups, in their capacity as data subject or legitimately authorized, in relation to the processing of their personal data, has the right to:

• Exercise their Habeas Data right consisting of knowing, updating, and rectifying their personal information. They may also object and cancel their data and personal information where applicable.
• Evidence the existence of the consent given, unless there is legal authorization for processing or it is performed under a contract.
• Exercise the actions recognized by law in matters of personal data protection and habeas data.

Exercise of Habeas Data

For the exercise of Habeas Data, the data subject or a person demonstrating a legitimate interest according to the applicable regulations may do so through the following email: privacidad@iasd.org.co, or by sending a communication to HABEAS DATA IASD at the following physical address: Carrera 84 No. 33AA – 169 in Medellín, Colombia. Whoever exercises the habeas data must provide precise contact information in order to process, attend to, and respond to their request and perform the obligations for the exercise of their rights.privacy.paragraph.6.1

Upon receiving the request for the exercise of Habeas Data, IASD will respond within the terms of the law.

This Privacy Policy has been approved by the Legal Representative of IASD on September 27, 2018.