Privacy Policy - Data Protection at Finca Conejo Blanco

1.1 Booking Data

• Full name and identification document
• Phone number and email address
• Stay dates and number of guests
• Special preferences and requests
• Payment information (processed securely)

1.2 Contact Data

• Information shared via WhatsApp or forms
• Phone communications for confirmations
• Addresses for optional transportation services

1.3 Behavioral and Analytics Data

• Information about how you browse our website (pages visited, time spent)
• Device data (browser type, operating system, IP address)
• Information collected through cookies and similar technologies

2.1 Main Purposes

• Process and confirm reservations
• Communicate important stay details
• Provide support during and after your visit
• Improve our services and guest experience

3.1 Types of Cookies

• Essential Cookies: Necessary for basic website functionality
• Analytics Cookies: We use Google Analytics to understand how you use our site
• Functional Cookies: Remember your preferences and settings

3.2 Third-Party Tools

• Google Analytics: For traffic analysis and user behavior insights
• Cloudflare: For security, DDoS protection, and content delivery
• Vercel: Application hosting and server provider
• WhatsApp Business: For booking communications and support

3.3 Cookie Management

You can control cookies through your browser settings. When you disable analytics cookies, some Google Analytics data won't be collected, but the website will continue to function properly.

4.1 Security Measures

• Encryption of sensitive data in transmission
• Restricted access only to authorized personnel
• Secure servers with SSL certificates
• Regular and secure backups

5.1 Legal Compliance

This privacy policy complies with Law 1581 of 2012 (Colombian Law for Personal Data Protection) and its regulatory decree 1377 of 2013. We are responsible for processing your personal data in accordance with Colombian legislation.

5.2 Data Controller

Finca Conejo Blanco - Located in Guatapé, Antioquia, Colombia. We are responsible for collecting, processing, and protecting your personal data.

5.3 Legal Basis for Processing

• Contractual: Necessary to execute your reservation and accommodation contract
• Consent: For marketing communications and information about services
• Legitimate Interest: To improve our services and security

5.4 Data Retention Periods

• Booking Data: 3 years (as required by Colombian legal requirements)
• Contact Data: 1 year or until you withdraw consent
• Analytics Data: 14 months (as per Google Analytics settings)
• Payment Data: According to payment processor requirements

5.5 Sharing with Third Parties

We do not share your personal data with third parties without your consent, except when legally required. Service providers (Google Analytics, Cloudflare, Vercel) may process data in accordance with their own privacy policies.

5.6 Supervisory Authority

If you believe your rights have been violated, you can file a complaint with the Superintendencia de Industria y Comercio (SIC), the authority responsible for supervising compliance with data protection law in Colombia.

6.1 Data Protection Rights

• Access: Request a copy of your information
• Rectification: Correct incorrect data
• Deletion: Delete data when possible
• Objection: Object to certain uses of your data