Skip to content
Ríos & AventurasNorcasia · Caldas
Legal

Personal Data Processing Policy

Last updated: August 2026

1. Purpose

This policy governs how Hotel Ríos y Aventuras collects, uses, stores, and protects the personal data of its guests, prospective customers, and website visitors, in compliance with Colombian Law 1581 of 2012, Decree 1377 of 2013, and any regulations that amend, add to, or implement them.

2. Data controller

Hotel Ríos y Aventuras, located in Norcasia, Caldas, Colombia. Contact channel for matters related to personal data processing: WhatsApp +57 320 720 4984.

3. Definitions

  • Personal data: any information linked to, or that can be associated with, one or more identified or identifiable natural persons.
  • Data subject: the natural person whose personal data is processed (for example, you as a guest or site visitor).
  • Processing: any operation performed on personal data, such as its collection, storage, use, or deletion.
  • Authorization: the data subject's prior, express, and informed consent to the processing of their personal data.

4. Applicable principles

The processing of personal data at the Hotel is governed by the principles of legality, purpose, freedom, accuracy/quality, transparency, restricted access and circulation, security, and confidentiality, as established in Article 4 of Law 1581 of 2012.

5. Purpose of processing

Personal data collected by the Hotel is processed to:

  • Manage bookings, information requests, and guest support.
  • Communicate with the data subject via WhatsApp, phone, or email.
  • Comply with legal, accounting, or hotel registry obligations.

6. Rights of data subjects

As the subject of your personal data, you have the right to:

  • Know, update, and rectify your personal data.
  • Request proof of the authorization given to the Hotel.
  • Be informed about how your data has been used.
  • File complaints with Colombia's Superintendence of Industry and Commerce (SIC) for violations of the law.
  • Revoke your authorization and/or request the deletion of your data.
  • Access your personal data free of charge.

7. Procedure for inquiries and complaints

You may submit inquiries and complaints about your personal data by writing to us via WhatsApp or through the site's contact form, indicating your full name, the data your inquiry or complaint relates to, and the reason for your request.

  • Inquiries: will be handled within a maximum of ten (10) business days from the date of receipt. If it is not possible to resolve it within that period, the data subject will be informed of the reason for the delay, with an extension of no more than five (5) additional business days.
  • Complaints: will be handled within a maximum of fifteen (15) business days from the day following receipt. If it is not possible to resolve it within that period, the data subject will be informed of the reason for the delay, with an extension of no more than eight (8) additional business days.

8. Validity

This policy is effective as of its publication date and will remain in force for as long as the Hotel retains personal data of its data subjects for the purposes described herein.