Hotel Vista Hermosa Salento

The Hotel Vista Hermosa Salento (hereinafter, "The Hotel"), fully committed to the constitutional right of Habeas Data, privacy and information security, makes this Personal Data Processing Policy available to its guests, suppliers, staff and users of this website. This document strictly complies with the provisions of Law 1581 of 2012, Decree 1377 of 2013 and other related rules of the legal system of the Republic of Colombia.

1. Data Controller

The Controller of your personal data is Hotel Vista Hermosa Salento, with its main address in the municipality of Salento, Quindío, Colombia. You can contact our Data Protection Officer through the institutional channels specified in the final section of this document.

2. Personal Data Collected

The Hotel collects data directly (at the reception desk / Check-in), indirectly (booking platforms and OTA travel agencies) and digitally (website). Depending on your relationship with The Hotel, the data collected includes:

• Identification Data and General Information: First and last names, identity document number (Colombian ID card, Foreigner ID card or Passport), nationality, date of birth, marital status and gender.
• Contact Data: Home address, mailing address, mobile phone number, landline and email address.
• Financial and Transactional Data: Credit/debit card information (number, expiry date and security code through encrypted gateways), purchase history, billing details and bank accounts for refunds.
• Data of Minors: Name, age and identity document of minors staying with their parents or authorized legal guardians, under a strict protocol protecting the best interests of the child.
• Sensitive and Biometric Data: Photographic images or video recordings obtained through our closed-circuit television (CCTV) system for video surveillance and security purposes. Also, health data voluntarily reported by the guest regarding dietary restrictions, serious allergies or physical mobility needs.

3. Purposes of Data Processing

The processing of personal data by The Hotel is subject to the principle of legitimate purpose, with the prior consent of the data subject, focused on the following activities:

A. In relation to Guests and Bookings:

• Process, modify, verify and confirm hotel bookings and complementary services.
• Carry out check-in and check-out registration in accordance with the regulatory requirements of local immigration and tourism authorities (Hotel Registration Card).
• Manage charges, electronic invoicing, internal account audits and mandatory tax reports.
• Offer personalized service according to the travel preferences and health requirements reported by the customer.
• Guarantee the safety and physical integrity of guests, workers and assets of the hotel premises through video surveillance.

B. In relation to Marketing and Loyalty Purposes:

• Send newsletters, promotional offers, loyalty programs and greetings.
• Evaluate service quality through satisfaction surveys, statistical studies and consumer trend analysis.

4. International Transfer and Transmission of Data

For the proper provision of international hotel services and the technological support of the web platform, The Hotel may transmit or transfer data to allied third parties or service providers (booking engines, hotel management PMS platforms and cloud storage servers) located in Colombia or abroad. The Hotel guarantees that these third parties comply with adequate levels of data protection aligned with the international standards required by the Superintendence of Industry and Commerce (SIC).

5. Rights of Data Subjects (Habeas Data)

In accordance with Article 8 of Law 1581 of 2012, you, as the owner of the personal data, have the following inalienable rights:

1. To know, update and rectify your personal data held by The Hotel in cases where the data is partial, inaccurate, incomplete, fragmented or misleading.
2. To request proof of the authorization granted to The Hotel, except when expressly exempted as a legal requirement.
3. To be informed by The Hotel, upon request, regarding the use that has been made of your personal data.
4. To file complaints with the Superintendence of Industry and Commerce (SIC) for violations of the data protection law, once the prior claim procedure with The Hotel has been exhausted.
5. To revoke the authorization and/or request deletion of the data when the processing does not respect constitutional and legal principles, rights and guarantees.
6. To access free of charge your personal data that has been processed.

6. Procedure for Exercising HABEAS DATA Rights

Data subjects or their successors may submit queries or claims to The Hotel to exercise their rights as follows:

A. Queries: Queries aimed at knowing what data is stored about you will be answered within a maximum of ten (10) business days from the date of receipt. If it is not possible to resolve it within that period, the interested party will be informed and an additional period of no more than five (5) business days will be granted.

B. Claims (Correction, update or deletion): The claim must be made in a written request detailing the facts, the specific request and the supporting documents. If the claim is incomplete, the interested party will be asked within the following five (5) days to correct it. After two (2) months without a response from the applicant, it will be considered withdrawn. The maximum period to resolve the claim is fifteen (15) business days.

7. Cookies and Tracking Technologies Policy

Our website uses "cookies" and similar technologies to personalize your browsing, measure the effectiveness of advertising campaigns and analyze web traffic. You can configure your internet browser to reject or delete cookies at any time; however, this could affect the availability and proper functioning of certain automated online booking processes.

8. Validity and Modifications

This Personal Data Processing Policy is effective from its publication, and its databases will be kept for as long as necessary to fulfil the legal contractual, accounting and tourism purposes. The Hotel reserves the right to modify this policy at any time. Any substantial change will be notified in due time through our website before it takes effect.

9. Dedicated Support Channels

To resolve any request or exercise your constitutional rights to information protection, you may formally contact:

• Area in charge: Personal Data Compliance Office / General Management.
• Support email: privacidad@hotelvistahermosasalento.com
• Physical address: Rural area, Salento, Quindío, Colombia.