Personal Data Processing Policiy -

Personal Data Processing Policy

GUANABANA TOURS S.A.S., identified with Tax ID (NIT) 901.266.387-7 and National Tourism Registry (RNT) 47842, in compliance with Law 1581 of 2012 and Regulatory Decree 1377 of 2013, and in its capacity as the Data Controller of Personal Data, adopts this Personal Data Processing Policy, which applies to all information collected from our users, travelers, clients, suppliers, and any data subject who provides us with their information.

1. Data Controller

Company Name: GUANABANA TOURS S.A.S.
Tax ID (NIT): 901.266.387-5
National Tourism Registry (RNT): 47842
Address: Calle 40G Sur #30-42, Envigado, Ant.
Contact Phone: +57 312 8337021
Email for Data Protection Inquiries: administracion@guanabanatours.com
Website: https://guanabanatours.com/

2. Purposes of Personal Data Processing
The personal data you provide us will be used for the following purposes:

Primary Purposes (Necessary for the contractual relationship):

To manage, process, confirm, and invoice the reservation of tourist plans, travel packages, airline tickets, accommodation, land transportation, and other requested services.
To perform check-in and provide the contracted tourist services.
To communicate with you to inform you about the status of your reservation, send travel documentation (e-tickets, vouchers), and confirm service details.
To manage payments, refunds, and apply cancellation policies.
To handle your requests, complaints, claims, and requirements.
To comply with legal and regulatory obligations applicable to the tourism sector, such as the registration of travelers with providers and competent authorities.
To manage safety and health during the trip (e.g., knowing relevant medical information such as allergies or special conditions).

Secondary Purposes (Which require your express authorization):

To use images, photographs, or videos in which you may appear, taken during trips and tours, for advertising purposes and in our marketing materials, including social media, the website, and brochures. Said authorization will be managed beforehand, explicitly, and separately through an image release form (“waiver”).

3. Rights of Data Subjects
As the owner of your personal data, you have the right to:

Access, know, update, and rectify your personal data.
Request proof of the authorization granted.
Be informed about the use that has been made of your data.
File complaints before the Superintendency of Industry and Commerce (SIC) for violations of the law.
Revoke the authorization and/or request the deletion of your data when the processing does not respect constitutional and legal principles, rights, and guarantees. This revocation will not proceed when the data subject has a legal or contractual duty to remain in the database.
Refrain from answering questions about sensitive data or data of minors.

4. Procedure to Exercise Your Rights
To exercise any of the aforementioned rights, you or your legal representative may submit a request through the following means:

Email: administracion@guanabanatours.com
Physical Address: Calle 40G Sur #30-42, Envigado, Ant.

The request must contain, at a minimum:

Full name and identification of the data subject.
Clear description of the data concerning which you seek to exercise the right.
Clear description of the request (e.g., update, rectify, delete data).
Address for notifications.
Documents certifying your identity and, if applicable, the legal representation.

Once your complete request is received, we will respond within a maximum term of ten (10) business days. If the request is incomplete, we will request the missing information within five (5) business days. If you do not provide it within a period of two (2) months, it will be understood that you have withdrawn the request.

5. Data We Collect and Processing of Sensitive Data
We may collect, among others: full name, identification number, contact details (phone, address, email), date of birth, payment data (credit card), travel data (passport, relevant medical information for the trip, such as food allergies or limited mobility conditions, dietary preferences).

Sensitive data (health, religion, ethnic origin, etc.) will only be collected when strictly necessary for the provision of the tourist service (e.g., a medical condition requiring special assistance) and prior to the express authorization of the data subject.

6. Data Subject Authorization
By providing your personal data through our contact forms, website, email, phone, or in person, and by clicking the “Accept” or “Submit” button associated with the data processing policy, you expressly, knowingly, priorly, and voluntarily authorize the processing of your data in accordance with the primary purposes described in this policy. Authorization for the use of your image (photographs and videos) will be obtained separately and explicitly through a specific physical or digital document for this purpose.

7. Data Transfer and Transmission
Your personal data may be shared with:

Tourist service providers: Airlines, hotels, land tour operators, insurance companies, etc., located inside or outside Colombia, solely to fulfill the provision of the contracted service.
Competent authorities: When required by law, such as for immigration, security, or health purposes.
Technology service providers: Companies that provide us with hosting, payment platforms, etc., under contracts that guarantee the confidentiality of your data.

By contracting our services, you expressly accept this national and international transfer/transmission of data.

8. Retention of Databases
Your personal data will be kept for as long as necessary to fulfill the purposes for which they were collected, and additionally, for the time required by applicable legal and commercial regulations (for example, tax law that requires keeping invoices for 10 years). Authorizations for the use of your image will be kept for as long as necessary for the advertising and marketing purposes for which they were granted.

9. Data Security
GUANABANA TOURS S.A.S. implements the necessary technical, human, and administrative measures to protect personal data and prevent its alteration, loss, consultation, unauthorized or fraudulent use or access.

10. Modifications to the Processing Policy
Any substantial change to this policy will be communicated through our website [https://guanabanatours.com/] and/or to the email address you have provided us, with no less than ten (10) business days’ notice before its effective date.

Last Updated Date: Nov 8, 2025.