Hotel Salento Real

Legal notice and data protection

Hotel Salento Real informs all users of its website that by entering the portal they acknowledge and accept its use policies and commit to using it in strict accordance with current legislation and particularly not to use the information contained herein for unlawful purposes or that directly or indirectly affect the chain or its customers.

The information contained here is for institutional and informational use. It has been published in order to inform our Users about the hotel, experiences, promotions, destinations where we are present, loyalty plan, location map of all our hotels, access to social networks, and subscription to the weekly newsletter and other products and services that Hotel Salento Real offers through the Internet.

Reproduction, copying, distribution, broadcasting, and/or modification without prior authorization from Hotel Salento Real, of the content on this website (texts, photographs, videos, images, brands, slogans, trade names, logos, and/or designs) and other integrative elements of this website are prohibited.
Hotel Salento Real is not responsible for the availability or continuity of the services made available to the user through the portal, nor for the information not considered therein. All services and products described, offered or sold on this website www.hotelsalentoreal.com are subject to applicable regulations according to their nature and to the terms and conditions, including restrictions and conditions of use, established by the chain.

The conditions of access and use established here and the conflicts that may arise regarding their interpretation, use, scope, and termination are governed by Colombian law and in particular by any special rules that may be applicable to the subject matter, and will be submitted to the jurisdiction of Colombian judges.

In case of any question, suggestion or comment regarding the information disclosed here, or if you notice the existence of any error, insufficiency, lack of clarity or expiry of the terms of validity of such information, we provide the contact details of this website.

The Salento Real Hotel rejects exploitation, pornography, sex tourism and other forms of sexual abuse against minors, Law 1336 of 2009 and Law 679 of 2001.
It complies with Law 17 of 1981 and Resolution 1367 of 2000 against the commercialization and trafficking of wild fauna and flora species.

Rejects the marketing and illegal trafficking of regional and national cultural goods, Law 103 of 1991 and its decree 904 of 1941, Law 397 of 1997 and its decree 833 of 2002, Law 1185 of 2008.

Ensures the protection of the rights of the individual, group of individuals, community, or people who are violated through acts of racism or discrimination under Law 1752 of 2015.
Rejects child labor exploitation. Law 1098 of 2006 and Decree 2737 of 1987.

Ensures the protection of the rights of the person, group of people, community or people that are violated through acts of racism or discrimination Law 1752 of 2015.
Rejects child labor exploitation. Law 1098 of 2006 and decree 2737 of 1987.

SUSTAINABILITY POLICY

At Hotel Salento Real, we are committed to sustainability in its environmental, sociocultural, economic, and security dimensions. Our goal is to minimize negative impacts and promote responsible practices in our operations. Fulfilling the duties and rights of customers, employees, and suppliers.

1. Environmental Sustainability

2. Sociocultural Sustainability

3. Economic Sustainability

4. Legal Requirements and Security

This policy is mandatory and will be reviewed periodically for continuous improvement.

DATA PROTECTION

SCOPE OF APPLICATION AND LEGAL BASIS:

INTRODUCTION: The following Personal Data Processing Policy complies with the provisions of the Colombian Political Constitution, Law 1581 of 2012, Regulatory Decree 1377 of 2013, and other complementary provisions; which will be applied by HOTEL SALENTO REAL S.A.S. regarding the collection, deletion, use, circulation, and other activities that constitute the processing of personal data.

FIRST. DEFINITIONS: For the purposes of executing this policy and in accordance with legal regulations, the following definitions will be applied:

a) Authorization: Prior, explicit, and informed consent from the Holder to carry out the Processing of personal data.

b) Database: An organized set of personal data that is subject to processing.

c) Privacy notice: A physical or electronic document, or in any other format, created by the Data Controller and made available to the Data Holder for the processing of their personal data. The Privacy Notice informs the Data Holder about the existence of information processing policies that will apply to them, how to access them, and the purpose of the intended processing of personal data.

d) Public data: This is data classified as such according to the mandates of the law or the Political Constitution, and that which is not semi-private, private or sensitive. Public data includes, among others, data related to a person’s marital status, their profession or trade, their status as a merchant or public servant, and any data that can be obtained without any restrictions. By their nature, public data can be contained, among others, in public records, public documents, and official gazettes and bulletins.

e) Personal data: Any information related or that can be associated with one or more specific or identifiable individuals.

f) Private data: It refers to data that, due to its intimate or confidential nature, is only relevant to the owner.

g) Sensitive data: This refers to data that affects the privacy of the owner or whose misuse can lead to their discrimination, such as those revealing racial or ethnic origin, political orientation, religious or philosophical beliefs, union membership, membership in social or human rights organizations, or those promoting the interests of any political party or guaranteeing the rights and guarantees of opposition political parties, as well as data related to health, sexual life, and biometric data.

h) Data Processor: A natural or legal person, public or private, who alone or in association with others, processes personal data on behalf of the Data Controller.

i) Data Controller: An individual or legal entity, public or private, that alone or jointly with others, decides on the database and/or the processing of the data.

j) Data Subject: An individual whose personal data is being processed.

k) Treatment: Any operation or set of operations on personal data, such as collection, storage, use, circulation or deletion of the same.

SECOND. PRINCIPLES APPLICABLE TO THE TREATMENT OF PERSONAL DATA: The treatment of personal data in HOTEL SALENTO REAL S.A.S. will be governed by the following principles:

a) Principle of Purpose: The Processing of collected personal data must obey a legitimate purpose, which must be informed to the Owner.

b) Principle of freedom: The Treatment can only be carried out with the prior, express and informed consent of the Holder. Personal data may not be obtained or disclosed without prior authorization, or in the absence of a legal or judicial mandate that relieves consent.

c) Principle of truthfulness or quality: The information subject to processing must be truthful, complete, accurate, up-to-date, verifiable, and understandable. Partial, incomplete, fragmented, or misleading data will not be processed.

d) Principle of Transparency: In the Treatment, the right of HOTEL SALENTO REAL S.A.S. must be guaranteed at any time and without restrictions, information about the existence of data that concerns it.

e) Principle of restricted access and circulation: The Processing is subject to the limits that derive from the nature of the personal data, the provisions of this law and the Constitution. Personal data, except for public information, and as provided in the authorization granted by the data holder, cannot be available on the Internet or other mass dissemination or communication media, unless access is technically controllable to provide restricted knowledge only to the Owners or authorized third parties.

f) Principle of security: The information subject to Processing by HOTEL SALENTO REAL S.A.S. must be protected through the use of any necessary technical, human, and administrative measures to provide security to the records, preventing their tampering, loss, consultation, unauthorized or fraudulent use or access.

g) Principle of confidentiality: All individuals involved in the processing of personal data are required to ensure the confidentiality of the information, even after their relationship with any of the tasks involved in the processing has ended. In the event that sensitive personal data is collected, the owner has the right to refuse to authorize its processing.

THIRD. DUTIES OF HOTEL SALENTO REAL S.A.S:

All those obligated to comply with this policy must bear in mind that HOTEL SALENTO REAL S.A.S. is obliged to fulfill the duties imposed by law in this regard. Therefore, the following obligations must be fulfilled:
A. Duties when acting as responsible: (1) Request and maintain, under the conditions set out in this policy, a copy of the respective authorization granted by the owner. (2) Clearly and sufficiently inform the owner about the purpose of the collection and the rights they have by virtue of the authorization granted. (3) Inform the owner at their request about the use of their personal data (4) Handle inquiries and complaints made in the terms set out in this policy (5) Ensure that the principles of truthfulness, quality, security, and confidentiality are maintained as established in the following policy (6) Preserve information under the necessary security conditions to prevent its alteration, loss, consultation, unauthorized or fraudulent use or access. (7) Update the information when necessary. (8) Rectify personal data when appropriate.

B. Duties when acting as the Processor of personal data. If you process data on behalf of another entity or organization (Controller), you must fulfill the following duties: (1) Ensure that the Controller is authorized to provide the personal data that you will process as the Processor. (2) Guarantee the holder, at all times, the full and effective exercise of the right of Habeas Data. (3) Preserve the information under the necessary security conditions to prevent its adulteration, loss, consultation, unauthorized or fraudulent use or access. (4) Promptly update, correct or delete data. (5) Update the information reported by the Controllers within five working days from receiving it. (6) Process the inquiries and complaints made by the holders in the terms set out in this policy. (6) Record in the database the label “claim in process” in the way that is established in this policy. (7) Insert into the database the label “information under judicial discussion” once notified by the competent authority about legal proceedings related to the quality of personal data. (8) Refrain from circulating information that is being disputed by the holder and whose blockage has been ordered by the Superintendency of Industry and Commerce. (9) Allow access to the information only to people authorized by the holder or empowered by law for this purpose. (10) Report to the Superintendency of Industry and Commerce when there are violations of security codes and there are risks in managing the information of the holders. (11) Comply with the instructions and requirements issued by the Superintendency of Industry and Commerce.

C. Duties when processing through a Manager (1) Provide the Manager with only the personal data that has been previously authorized for processing. For purposes of national or international data transmission, a personal data transmission contract must be signed or contractual clauses agreed upon as established in article 25 of decree 1377 of 2013. (2) Ensure that the information provided to the Manager is true, complete, accurate, up-to-date, verifiable, and understandable. (3) Communicate in a timely manner all updates regarding the data previously provided to the Manager and adopt other necessary measures to keep the information provided up-to-date. (4) Inform the Manager in a timely manner of the corrections made to personal data so that they can make the appropriate adjustments. (5) Demand that the Manager respects the security and privacy conditions of the data owner’s information at all times. (6) Inform the Manager when certain information is under dispute by the data owner, once the claim has been made and the respective procedure has not been finalized.

D. Duties regarding the Superintendency of Industry and Commerce (1) Inform them of potential violations of security codes and the existence of risks in the administration of the holder’s information. (2) Comply with the instructions and requirements issued by the Superintendency of Industry and Commerce.

FOURTH. PURPOSE FOR WHICH THE COLLECTION OF PERSONAL DATA AND ITS TREATMENT ARE CARRIED OUT: HOTEL SALENTO REAL S.A.S. may use personal data for:

a) Execute the existing contractual relationship with its customers, suppliers and workers, including the payment of contractual obligations.

b) Provide the services and/or products required by its users.

c) Inform about new products or services and/or changes to them; d) Evaluate the quality of the service.

d) Develop the process of selection, evaluation, and employment linkage.

e) Send to the physical mail, email, cell phone or mobile device, via text messages (SMS and/or MMS) or through any other analogous and/or digital means of communication created or to be created, commercial, advertising or promotional information about the products and/or services, events and/or promotions of a commercial or non-commercial nature, with the aim of promoting, inviting, directing, executing, informing and generally carrying out campaigns, promotions or competitions of a commercial or advertising nature, advanced by HOTEL SALENTO REAL S.A.S. and/or by third parties.

f) Support internal or external audit processes;

g) Register the information of employees (active and inactive) in the databases of HOTEL SALENTO REAL S.A.S.

h) Those indicated in the authorization granted by the data holder or described in the respective privacy notice, as applicable.

i) To supply, share, send or deliver your personal data to subsidiary companies, affiliates or subordinate companies of HOTEL SALENTO REAL S.A.S. located in Colombia, in the event that these companies require the information for the purposes indicated here. In relation to the data (1) collected directly at security checkpoints, (2) taken from the documents provided by people to security staff and (3) obtained from video recordings made inside or outside the facilities of HOTEL SALENTO REAL S.A.S., these will be used for the security of people, assets and facilities of HOTEL SALENTO REAL S.A.S. and may be used as evidence in any type of process. If personal data is provided, this information will only be used for the purposes indicated here, and therefore, HOTEL SALENTO REAL S.A.S. will not proceed to sell, license, transmit, or disclose it, unless: (a) there is express authorization to do so; (b) it is necessary to allow contractors or agents to provide the services entrusted; (c) it is necessary in order to provide our services and/or products; (d) the information is related to a merger, consolidation, acquisition, divestment, or other corporate restructuring process; (e) it is required or permitted by law. HOTEL SALENTO REAL S.A.S. may subcontract third parties for the processing of certain functions or information. When effectively subcontracting third parties for the processing of personal information or providing personal information to third party service providers, HOTEL SALENTO REAL S.A.S. warns these third parties about the need to protect this personal information with appropriate security measures, prohibits the use of the information for their own purposes, and asks not to disclose personal information to others.

FIFTH. RIGHTS OF THE HOLDERS OF PERSONAL DATA SUBJECT TO PROCESSING BY HOTEL SALENTO REAL S.A.S.: The holders of personal data by themselves or through their representative and/or attorney or their assignee may exercise the following rights, regarding the personal data that is subject to processing by HOTEL SALENTO REAL S.A.S.:

a) Right of access: Under which you may access personal data that is under the control of HOTEL SALENTO REAL S.A.S., for the purpose of consulting them for free at least once every calendar month, and whenever there are substantial modifications to the Information Treatment Policies that motivate new consultations.

b) Right to update, rectify and delete: Under which you may request the update, rectification and/or deletion of personal data being processed, in such a way that the purposes of the processing are satisfied.

c) Right to request proof of authorization: except in events where, according to current legal norms, authorization is not required to carry out the processing.

d) Right to be informed about the use of personal data.

e) Right to file complaints with the Superintendency of Industry and Commerce: for violations of the current regulations on personal data processing.

f) Right to demand compliance with orders issued by the Superintendence of Industry and Commerce. For the exercise of the aforementioned rights, both the holder and the person representing them must prove their identity and, if applicable, the capacity in which they represent the holder. The rights of minors will be exercised through individuals who are authorized to represent them.

SIXTH. REQUEST FOR AUTHORIZATION FROM THE PERSONAL DATA OWNER: In advance and/or at the moment of collecting the personal data, HOTEL SALENTO REAL S.A.S. will ask the data owner for their authorization to collect and process it, indicating the purpose for which the data is requested, using automated, written or oral technical means, which allow keeping evidence of the authorization and/or of the unequivocal conduct described in article 7 of Decree 1377 of 2013. Such authorization will be requested for as long as is reasonable and necessary to meet the needs that gave rise to the data request and, in any case, in compliance with the legal provisions governing the matter.

SEVENTH. PRIVACY NOTICE: In the event that HOTEL SALENTO REAL S.A.S. cannot make this information treatment policy available to the personal data holder, it will publish the privacy notice attached to this document, the text of which will be kept for later consultation by the personal data holder and/or the Superintendence of Industry and Commerce.

EIGHTH. TEMPORARY LIMITATIONS ON THE PROCESSING OF PERSONAL DATA. HOTEL SALENTO REAL S.A.S. may only collect, store, use, or circulate personal data for as long as is reasonable and necessary, in accordance with the purposes that justified the processing, taking into account the applicable provisions to the matter at hand and the administrative, accounting, tax, legal and historical aspects of the information. Once the purpose or purposes of the processing are fulfilled and without prejudice to legal rules to the contrary, it will proceed to delete the personal data in its possession. Notwithstanding the above, personal data must be retained when required for compliance with a legal or contractual obligation.

NINTH. RESPONSIBLE AREA AND PROCEDURE FOR THE EXERCISE OF RIGHTS OF THE PERSONAL DATA HOLDERS COMPANY. HOTEL SALENTO REAL S.A.S. will be responsible for addressing requests, complaints, and claims made by the data subject in exercise of the rights contemplated in this policy. For such purposes, the personal data subject or whoever exercises their representation may send their request, complaint or claim from Monday to Friday from 8:00 a.m. to 5:00 p.m. to the email address marketing@hotelsalentoreal.com, call the HOTEL SALENTO REAL S.A.S. telephone line 316 629 6142 in Salento Quindío, or submit it at the following address in the municipality of Salento Quindío, Calle 3 # 4 – 31. The request, complaint or claim must contain the identification of the Holder, the description of the facts giving rise to the claim, the address, and accompany the documents they wish to assert. If the claim is incomplete, the interested party will be requested within five (5) days following the receipt of the claim to remedy the flaws. After two (2) months from the date of the request, without the applicant providing the required information, it will be understood that they have abandoned the claim. In case the recipient of the claim is not competent to resolve it, they will forward it to the corresponding party within a maximum period of two (2) working days and will inform the interested party of the situation. Once the complete claim has been received, a legend will be included in the database saying “claim in process” and the reason for it, within a term not exceeding two (2) working days. Said legend must be maintained until the claim is decided. The maximum term to address the claim will be fifteen (15) working days counted from the day following the date of its receipt. When it is not possible to address the claim within that term, the interested party will be informed of the reasons for the delay and the date when their claim will be addressed, which in no case may exceed eight (8) working days following the expiration of the first term.

TENTH. DATA COLLECTED BEFORE THE ISSUANCE OF DECREE 1377 OF 2013: In accordance with the provisions of numeral 3 of article 10 of Regulatory Decree 1377 of 2013, HOTEL SALENTO REAL S.A.S. will proceed to publish a notice on its official website http://www.hotelsalentoreal.com/ addressed to the holders of personal data for the purpose of making known the present policy of information treatment and the way to exercise their rights as holders of personal data hosted in the databases of HOTEL SALENTO REAL S.A.S..

ELEVENTH. SECURITY MEASURES: In accordance with the security principle established in Law 1581 of 2012, HOTEL SALENTO REAL S.A.S. will adopt the necessary technical, human and administrative measures to ensure the security of the records, preventing their alteration, loss, consultation, unauthorized or fraudulent use or access. The staff who process personal data will implement the established protocols in order to guarantee the security of the information.

TWELFTH. ENTRY INTO EFFECT: The current Personal Data Policy was created on March 23, 2017 and comes into effect from that day. Any change regarding this policy will be informed through the electronic address: http://www.hotelsalentoreal.com/

HOTEL SALENTO REAL S.A.S. reserves the right to modify this Policy at any time. However, if its content is substantially altered, we will communicate this situation through the contact details that the Holders have provided us.

HOTEL SALENTO REAL S.A.S. must document the process for the handling of personal data (obtaining, authorization, and claims) in accordance with the applicable regulations.