Personal Data Processing Policy

This is an English translation provided for convenience. The Spanish version is the official text and prevails in case of any difference.

Data controller

The data controller is Dr. Natalia Ordóñez Puentes, domiciled in Bogotá, Colombia.

For matters related to the processing of personal data, data subjects may contact us by email at pacientescirugiapediatrica@gmail.com, by phone at +57 3219673295, or at Carrera 16 84 A 09 CS 701, Centro Médico Almirante Colón.

Data collected and purpose

Through this website and the enabled contact channels, including WhatsApp, we may collect basic personal data such as the name of the patient and of their father, mother or legal representative, phone number, email address, and the information strictly necessary to request, coordinate, confirm, change or cancel a medical appointment.

Due to the nature of the professional activity, it may occasionally be necessary to process information related to the patient's health. This information is considered sensitive data and will be processed only when necessary to provide medical services, with the corresponding confidentiality and security measures and in accordance with applicable law. Health data is considered sensitive under Colombian Law 1581 of 2012.

Personal data obtained through these channels may be used exclusively to:

• manage medical appointment requests;
• contact the patient or their legal representative to confirm, change or cancel an appointment;
• respond to requests related to the provision of medical services;
• comply with legal, regulatory, professional and record-keeping obligations applicable to health care.

WhatsApp is used mainly as an administrative channel for appointment management and not as a means for medical emergencies. We recommend not sending clinical information through this channel unless it is necessary to manage the appointment.

Data of children and adolescents

Because these are pediatric surgery services, part of the information processed may belong to children and adolescents.

This data will be processed at all times respecting the best interests of the child and their fundamental rights, in accordance with Colombian personal data protection law. When authorization is required, it will be granted by the corresponding father, mother, legal representative or guardian.

When applicable, the child's or adolescent's right to be heard will be taken into account, considering their maturity, autonomy and ability to understand the processing of their information. These conditions follow the special rules for processing data of minors.

Data of minors will be used only for the purposes necessary to manage their medical care and the obligations related to the provision of the service.

Rights of data subjects

Under Law 1581 of 2012 and other applicable rules, data subjects or, where applicable, their legal representatives may:

• access, update and correct their personal data;
• request information about how their data has been used;
• request proof of the authorization granted, when required;
• submit inquiries or complaints about the processing of their data;
• request deletion of the data or revoke authorization when legally appropriate;
• file complaints with the Superintendencia de Industria y Comercio if they believe their right to personal data protection has been violated.

The exercise of these rights is subject to applicable legal exceptions and obligations, including those related to the retention of medical records. Law 1581 recognizes, among others, the rights to access, update and correct information and to request proof of authorization.

Contact channels

Inquiries, requests or complaints related to the processing of personal data may be submitted through:

Email: pacientescirugiapediatrica@gmail.com
Phone / WhatsApp: +57 3219673295

The request must allow identification of the data subject or their representative and clearly describe the request.

Inquiries and complaints will be handled within the time limits set by current Colombian personal data protection law.

Effective date

This Personal Data Processing Policy is effective as of September 24, 2026.

The policy may be updated when necessary due to legal, regulatory, technological or care procedure changes. Any substantial change will be announced on this website.