Prior, express and informed consent of the Holder to carry out the Processing of personal data.


Set of personal data that is processed.

Substantial Changes

They are changes related to the purpose of the databases, the data processor, the channels of attention to the holder, the classification or types of personal data stored in each database, the implemented information security measures, the information processing policy and the transfer and international transmission of personal data.

Biometric Data

They are those personal data, whether physiological, physical or behavioral that enable the identification of a person.

Personal data

Any information linked to or likely to be associated to one or several determined or determinable natural persons.

Public data

It is the data that is not semi-private, private or sensitive. Public data are considered, among others, data relating to the marital status of persons, their profession or trade and their status as a trader or public servant. Due to their nature, public data may be contained, among others, in public records, public documents, gazettes and official gazettes and duly enforceable court judgments that are not subject to confidentiality.

Sensitive data

Sensitive data are those that affect the privacy of the Holder or whose improper use may generate discrimination, such as those revealing racial or ethnic origin, political orientation, religious or philosophical convictions, membership of trade unions, social and human rights organizations or that promote the interests of any political party or that guarantee the rights and guarantees of opposition political parties, as well as data relating to health, sex life, and biometric data.

Private data

They are those belonging solely and exclusively to the person to whom the information pertains.

Semi-private data

They are those that are private in nature and are of interest only the Holder and a certain group of people.

Data processor

Natural or legal person, public or private, who by themselves or in partnership with others, carries out the Processing of personal data on behalf of the Data Controller.

Security incident

It refers to the violation of security codes or the loss, theft and/or unauthorized access to information from a database managed by the Data Controller or its Processor.


According to the provisions of article 34 of the Civil Code, minors are children or adolescents, understanding by boy or girl persons between 0 and 12 years of age, and by adolescent persons between 12 and 18 years of age.

National Database Registry - RNBD

It is the public directory of the databases subject to Processing that operate in the country.


Its objective is the protection of a fundamental right, to correct, update, delete or delete your personal data or the revocation of the authorization I have granted.

Rectification or update of data

The University of los Andes has the obligation to rectify and update, at the request of the holder, the information that turns out to be incomplete or inaccurate.


Natural or legal person, public or private, who by themselves or in partnership with others, carries out the Processing of personal data on behalf of the Data Controller.


The holders of personal data may revoke consent to the processing of their personal data at any time, provided that this is not prevented by a legal or contractual provision.

Total revocation

It can be on the totality of the consented purposes.

Partial revocation

It may occur over certain types of processing.


It implies the total or partial elimination of personal information in accordance with what is requested by the holder in the records, files, databases or processing carried out by the University of los Andes.


Natural person whose personal data are processed.


Any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion.


The transfer of data takes place when the Controller and/ or Processor of personal data, located in Colombia, sends the information or personal data to a recipient, who in turn is a Data Controller and is located inside or outside the country.


Processing of personal data that implies their disclosure inside or outside the territory of the Republic of Colombia when it has as its object the Processing by the Processor on behalf of the Controller. contact us