Privacy policy: Comprehensive protection of your data

Commitment to protecting your personal data

At ALMO Clinic we value and respect your privacy. This policy describes how we collect, use, store and protect your personal data in accordance with Law 1581 of 2012 (Personal Data Protection Law) and other applicable regulations in Colombia.

Responsible information

Data controller: ALMO CLINIC
Address: Avenida Carrera 19 # 108-45 Cons, 402 - Edificio OTUA Bogotá
Phone: 6015641468
Email: contacto@almoclinic.com Last update date: July 22, 2025

Applicable legal framework

We strictly comply with Colombian legislation to protect your personal and medical information:

• Law 1581 of 2012 (Personal Data Protection)
• Decree 1377 of 2013
• Law 23 of 1981 (Medical ethics)
• Resolution 1995 of 1999 (Medical records)

Special protection for international patients

For patients from the United States and other countries, we apply additional transparency principles:

• Clear prior information about data processing
• Informed consent with translation when necessary
• Right to know international data transfers
• Specific protocols for cross-border medical follow-up

What information do we collect?

We collect only the information necessary to provide you with quality medical care and comply with our legal obligations

Identification data

• Full name and identification document
• Date of birth and gender
• Nationality and marital status
• Photographs for medical documentation
• Biometric data when necessary

Contact information

• Home address
• Phone numbers (mobile and landline)
• Primary and alternative email address
• Social media (when provided)
• Emergency contact data

Medical information

• Complete medical history
• Allergies and current medications
• Procedures performed
• Medical photographs (before/after)
• Test results and evolution

How do we use your information?

Your information is used exclusively for legitimate medical purposes and compliance with legal obligations

Medical service provision

We use your information to:

• Specialized medical diagnosis
• Treatment planning and execution
• Postoperative follow-up
• Evaluation of results and complications
• Continuity of medical care

Patient communication

To maintain effective communication:

• Appointment scheduling and reminders
• Pre and postoperative instructions
• Test results
• Emergency communications
• Patient satisfaction follow-up

Administrative management

For necessary administrative processes:

• Billing and payment management
• Medical insurance management
• Reports to health authorities
• Medical quality audits
• Compliance with tax obligations

Legal grounds for processing

We process your personal data based on solid legal grounds recognized by Colombian regulations

Informed consent

• Express authorization: Written consent for personal data processing
• Sensitive data: Specific authorization for medical information
• Revocability: Right to revoke consent according to regulations
• Clear information: Understandable explanation of data processing
• Specific purposes: Consent for determined uses

Legal obligations

• Medical regulations: Compliance with health regulations
• Medical records: Conservation according to Resolution 1995 of 1999
• Mandatory reports: Communication to health authorities
• Tax obligations: Maintenance of accounting records
• Pharmacovigilance: Report of adverse events

Your rights as data subject

Colombian legislation grants you fundamental rights over your personal data that we respect and facilitate

Right of access

You can request information about:

• What personal data we process
• Processing purposes
• Third parties with whom we share information
• Data retention time

Right of rectification

You have the right to:

• Correct inaccurate or erroneous data
• Update outdated information
• Complete incomplete data
• Modify data that has changed

Right of deletion

You can request deletion when:

• Data is no longer necessary
• You revoke your consent
• Processing is unlawful
• Legal obligation of deletion is fulfilled

Right of objection

You can object to processing for:

• Particular situation that affects you
• Direct marketing purposes
• Processing based on legitimate interest
• Automated decisions

How to exercise your rights?

1. Send written request to contacto@almoclinic.com or present it physically at Avenida Carrera 19 # 108-45 Cons, 402 - Edificio OTUA Bogotá
2. Include copy of your identification document and clearly describe the right to exercise
3. You will receive response within maximum 15 business days according to current regulations

Exercise my rights

Implemented security measures

We protect your information through multiple layers of technical, physical and administrative security

Technical measures

• Data encryption in transit and at rest
• Secure servers with SSL/TLS certificates
• Access control through multi-factor authentication
• Automatic backups and data redundancy
• Continuous security monitoring

Physical measures

• Restricted access to filing areas
• Video surveillance systems
• Perimeter security alarms
• Biometric access control
• Secure custody of physical documents

Administrative measures

• Continuous staff training
• Internal security policies
• Periodic compliance audits
• Incident response protocols
• Confidentiality agreements

Data retention and deletion

We retain your information only for the time necessary to fulfill medical purposes and legal obligations

Medical records

Period: 20 years according to Resolution 1995 of 1999 Justification: Continuity of medical care and legal obligations Subsequent: Secure deletion or anonymization for research

Financial data

Period: 5 years according to tax obligations Justification: Compliance with accounting and tax regulations Subsequent: Secure document destruction

Medical photographs

Period: While medically relevant Justification: Evolution follow-up and result documentation Subsequent: Deletion with patient consent

Contact data

Period: While maintaining active medical relationship Justification: Necessary medical communication Subsequent: Deletion after 2 years of inactivity

Sharing information with third parties

We share your information only when necessary for your medical care or legal compliance, always under strict protection measures

Authorized third parties

We share limited information with:

• Clinical laboratories: For diagnostic test processing
• Imaging centers: For specialized radiological studies
• Medical specialists: For consultations and referrals
• Insurance companies: For authorization and reimbursements
• Pharmacies: For medication dispensing
• Health authorities: For mandatory reports

Protection guarantees

All third parties must comply with:

• Confidentiality contracts: Binding protection agreements
• Specific purposes: Use limited to medical purposes
• Security measures: Equivalent protection standards
• Regular audits: Compliance supervision
• Time limitation: Access for determined time
• Minimization principle: Only strictly necessary data

Special provisions for medical tourism

For international patients, we apply additional protections recognizing the particularities of medical tourism

Complete prior information

• Detailed explanation of data processing
• Document translation when necessary
• Clarification about legal differences between countries
• Information about international transfers

Specialized informed consent

• Forms adapted to international patients
• Additional time for understanding and decision
• Advice on rights according to Colombian regulations
• Documentation in patient’s language when possible

Cross-border medical follow-up

• Protocols for remote follow-up
• Coordination with doctors in country of origin
• Secure transfer of medical information
• Availability for virtual consultations

Protection against discrimination

• Equal treatment regardless of nationality
• Equivalent protection of personal data
• Equitable access to protection mechanisms
• Respect for cultural differences in treatment

International data transfers

When necessary to transfer data outside Colombia, we apply maximum protection guarantees

Exceptional transfer cases

• Medical follow-up with specialists in patient’s country oforigin
• Coordination with international health systems
• Medical emergencies requiring care abroad
• Compliance with international court orders

Applied safeguards

• Specific consent: Explicit authorization for each transfer
• Protection adequacy: Verification of equivalent levels
• International contracts: Standard contractual clauses
• Time limitation: Transfers for determined time
• Continuous monitoring: Compliance supervision

Control authorities and resources

Know the competent authorities and available resources to protect your rights

Superintendence of Industry and Commerce (SIC)

Competence: Personal data protection Website: www.sic.gov.co Phone: (57-1) 587-0000 Function: Investigation and sanctions for data law violations

Ministry of Health and Social Protection

Competence: Health surveillance Website: www.minsalud.gov.co Phone: (57-1) 330-5000 Function: Supervision of medical and ethical aspects

National Medical Ethics Tribunal

Competence: Professional medical ethics Website: www.tribunaletica.org Function: Investigation of ethical aspects of medical practice

Changes to this policy

We keep this policy updated to reflect changes in our practices and applicable legislation

Update process

• Periodic review: Annual policy evaluation
• Regulatory changes: Updates for new regulations
• Best practices: Incorporation of international standards
• Change notification: Prior communication of substantial modifications

How will we notify you?

• Publication on this web page with update date
• Email notification for substantial changes
• Communication during next medical consultation
• 30-day period for review before implementation

We recommend you periodically review this privacy policy

Last update date: July 22, 2025

Do you have questions about the handling of your data?

Our team is available to resolve any concerns about the treatment of your personal information

Contact about privacy