What actions has wolkvox implemented to comply with Law 1581 of 2012 on personal data protection?
Table of Contents
Description
wolkvox has implemented a robust framework for personal data protection, aligned with Law 1581 of 2012 and Decree 1377 of 2013 of Colombia, as well as with international security standards. Although not regulated by the Superintendencia Financiera (Financial Superintendence), the company has an Information Security Management System (ISMS) certified under ISO/IEC 27001, which establishes clear policies for the secure and responsible handling of personal data.
wolkvox relies on Google Cloud Platform (GCP), its cloud service provider, which guarantees a security and compliance strategy for personal data handling across all jurisdictions where it operates. This ensures that customer information is managed with the highest standards of privacy and protection.
Features
Compliance with Law 1581 of 2012 and Decree 1377 of 2013
- Data Protection Policies: wolkvox has developed specific policies for the handling of personal data, based on the principles of purpose, transparency, consent, and security established in Colombian regulations.
- Internal Awareness: Constant training is provided to personnel on the importance of protecting personal data and complying with the law.
- Communication to Stakeholders: Privacy and data handling policies are clearly communicated to customers, collaborators, and partners, ensuring transparency in information management.
Information Security Management System (ISMS)
- ISO/IEC 27001 Certification: The wolkvox ISMS is certified, which guarantees that personal data is managed with technical, organizational, and physical controls to prevent unauthorized access or information leaks.
- Cloud Data Protection: By using Google Cloud Platform (GCP), wolkvox ensures that data is stored and processed in an environment that complies with global privacy and security standards.
- More information at: Google Cloud Privacy.
Customer Responsibilities
- Veracity of Information: Customers are responsible for ensuring that the data uploaded to the platform is truthful and up-to-date.
- Data Subject Authorization: They must obtain the explicit consent of the data subjects for its handling, as established in Law 1581 of 2012.
- Information Analysis: Customers must evaluate the type of data they will manage on wolkvox (e.g., personal, sensitive, or financial data) to ensure its adequate protection.
Use of Data on the wolkvox Platform
- Contactability Management: Personal data uploaded by customers is used exclusively for managing interactions on the configured channels (e.g., voice, email, chat).
- Secure Storage: The results of interactions between agents and end-customers are stored securely and confidentially, with restricted access to authorized personnel.
- Guaranteed Confidentiality: wolkvox commits to ensuring that information is not accessible by unauthorized persons and to complying with the established privacy policies.
Additional Resources
- Security and Privacy Policies: [Link to policies]
- Personal Data Handling Policies: [Link to policies]