Manual of privacy and personal data processing policies Tay Beach Hotel
To Tay Beach Hotel The conservation, protection, integrity and confidentiality of your clients’ personal data is very important. For this we have designed a policy of storage and treatment of the information that our clients provide through the various marketing channels of our products and services (such as websites, call centers, check-in), and we are committed to the protection and proper management of them, according to the legal regime of personal data protection applicable in each territory where we operate.
Chapter I General Provisions
Article 1. Definitions. For the purposes of applying the rules contained in this manual and in accordance with the provisions of article 3 of Law 1581 of 2012, it is understood as:
Authorization: Prior, express and informed consent of the owner to carry out the processing of personal data.
Privacy Notice: Verbal or written communication generated by the person in charge addressed to the owner for the treatment of their personal data, through which they are informed about the existence of the information processing policies that will be applicable, the way to access them and the purposes of the treatment that is intended to be given to personal data.
Database: organized set of personal data that is the object of treatment.
PERSONAL DATA: Any information linked or that may be associated with one or more determined or determinable natural persons.
Private data: It is the data that, due to its intimate or reserved nature, is only relevant to the owner.
Sensitive data: Sensitive data is understood as those that affect the privacy of the owner or whose improper use can generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, belonging to unions, social organizations, human rights or that promotes interests of any political party or that guarantee the rights and guarantees of opposition political parties, as well as data related to health, sex life and biometric data.
Treatment Manager: Natural or legal person, public or private, who by himself or in association with others, performs the treatment of personal data on behalf of the person responsible for the treatment.
Responsible for the treatment: Natural or legal person, public or private, who by himself or in association with others, decides on the basis of data and/or the processing of the data.
Owner: natural person whose personal data is subject to treatment.
TREATMENT: Any operation or set of operations on personal data, such as the collection, storage, use, circulation or suppression of the same.
Article 2. Object. This document has the purpose of regulating the procedures for the collection, handling and processing of personal data that it carries out. Tay Beach Hotel, in order to guarantee and protect the fundamental right of habeas data from its guests, visitors, customers, users and suppliers within the framework of what is established by law. All of the above in compliance with the provisions of literal (k) of article 17 of Law 1581 of 2012, which regulates the duties that assist those responsible for the processing of personal data, within which is that of adopting an internal manual of policies and procedures To guarantee adequate compliance with the law and in particular, for the attention of consultations and claims.
Article 3. Scope of application. This manual will be applicable to the personal data recorded and to be recorded in the different databases handled by Tay Beach Hotel, that is, to the databases of our guests, visitors, customers and suppliers, who provide us with your data for commercial purposes.
The information you collect Tay Beach Hotel, can include, in whole or in part according to the needs of each product and/or service, among others the following data:
names and surnames.
type and identification number.
nationality and country of residence.
date of birth and gender.
marital status and/or kinship in relation to minors O disabled applicants for our services.
Landlines and contact cell phones (personal and/or work).
Postal and electronic addresses (personal and/or labor).
profession or trade.
company in which he works and positions.
origin and destination.
Reason for your trip
Credit card(s) information (number, bank entity, expiration date).
This data can be stored and/or processed on servers located in computer centers, and physically stored hermetically inside the hotel, which is authorized by our guests, visitors, customers, users and suppliers by accepting this Privacy Policy.
Article 4. Veracity of the information. Our guests, visitors, customers, users and suppliers must provide truthful information about your personal data for the purpose of making the provision of services possible by Tay Beach Hotel and under whose condition they agree to deliver the required information.
Tay Beach Hotel It presumes the veracity of the information provided and does not verify, nor assumes the obligation to verify, the identity of the guests, visitors, customers, users and suppliers, nor the veracity, validity, sufficiency and authenticity of the data that each of them provides. Therefore, it does not assume responsibility for damages and/or damages of any kind that may originate in the lack of veracity, validity, sufficiency or authenticity of the information, including damages that may be due to homonymy or the impersonation of identity.
Article 5. Applicable legislation. This manual was prepared taking into account the ordinances of Law 1581 of 2012 “by which general provisions are issued for the protection of personal data” and decree number 1377 of 2013 “by which the law is partially regulated 1581 of 2012”.
Article 6. Information on minor children and adolescents. Tay Beach Hotel It will ensure the proper use of the personal data of minor children and adolescents, guaranteeing that the best interest of them is respected in the processing of their data, and their fundamental rights and, where possible, taking into account their opinion, as holders of their personal data.
Article 7. Purposes of the processing of personal data. The information collected is used to process, confirm, comply with and provide the services and/or products purchased, directly and/or with the participation of third-party suppliers of products or services, as well as to promote and advertise our activities, products and services, carry out transactions, make reports to the different authorities Administrative of national or international control and surveillance, police authorities or judicial authorities, banking entities and/or insurance companies, for internal and/or commercial administrative purposes such as market investigation, audits, accounting reports, statistical analysis, billing, and offering and/or recognition benefits of our loyalty programs.
By accepting this Privacy and Treatment Policy, our guests, visitors, customers, users and suppliers, in their capacity as holders of the data collected, authorize that Tay Beach Hotel Carry out the treatment of the same, partially or totally, including the collection, storage, recording, use, circulation, processing, suppression, for the execution of activities related to the services and products purchased, such as, making reservations, modifications, cancellations and changes of the same, reimbursements, attention to consultations, Complaints and claims, payment of compensation and compensation, accounting records, correspondence, processing and verification of credit cards, debit and other payment instruments, identification of fraud and prevention of money laundering and other criminal activities and/or for the operation of the programs of loyalty and other purposes indicated in this document.
The foregoing, without prejudice to other purposes that have been reported in this document and in the terms and conditions of each of the products and services of each of our business units.
Additionally, our travelers, customers and users, in their capacity as owners of the data collected, by accepting this Privacy Policy, authorize us to:
use the information received from them, for the marketing purpose of their products and services, and of the products and services of third parties with which Tay Beach Hotel maintain a business relationship.
Provide personal data to the police or judicial control and surveillance authorities, by virtue of a legal or regulatory requirement and/or use or disclose this information and personal data in defense of their rights and/or their assets as soon as said defense is related to the products and/or services contracted by its travelers, customers and users.
Allow access to information and personal data to the auditors or third parties hired to carry out internal or external audit processes typical of the commercial activity that we develop.
Consult and update personal data, at any time, in order to keep such information updated.
Contract with third parties the storage and/or processing of information and personal data for the correct execution of the contracts concluded with us, under the standards of security and confidentiality to which we are obliged.
Chapter II Authorization
Article 8. Authorization. The collection, storage, use, circulation or deletion of personal data by Tay Beach Hotel requires the free, prior, express and informed consent of the owner of the same. Tay Beach Hotel In his capacity as responsible for the processing of personal data, he has provided the necessary mechanisms to obtain the authorization of the holders, guaranteeing in any case that it is possible to verify the granting of said authorization.
With the aforementioned authorization, the client accepts the policies and conditions established in this document.
Article 9. Form and mechanisms to grant authorization. The authorization of the owner of the information will be included in each of the channels and mechanisms for collecting data from Tay Beach Hotel
Thus, it can be recorded in a physical, electronic document or in any other format that guarantees its subsequent consultation. The authorization will be issued by the owner prior to the processing of your personal data, in accordance with the provisions of Law 1581 of 2012.
With the consented authorization procedure, it is guaranteed that the owner of the personal data has been informed, both the fact that his personal information will be collected and used for certain and known purposes, and that he has the option of knowing any alternation to them and the specific use that has been given of them. The foregoing in order for the owner to make informed decisions regarding his personal data and control the use of his personal information.
Chapter III Rights and Duties
Article 10. Rights of the holders of the information. In accordance with the provisions of article 8 of Law 1581 of 2012, the owner of the personal data has the following rights:
Know, update and rectify your personal data against Tay Beach Hotel, as responsible for the treatment.
Request proof of the authorization granted to Tay Beach Hotel, as responsible for the treatment.
be informed by Tay Beach Hotel upon request, regarding the use you have given to your personal data.
Submit to the Superintendence of Industry and Commerce Complaints for infringements of the provisions of Law 1581 of 2012, once you have exhausted the consultation or claim process before the person in charge of the treatment.
Revoke the authorization and/or request the deletion of the data when the constitutional and legal principles, rights and guarantees are not respected in the treatment.
Free access to your personal data that has been subject to treatment.
Article 11. Duties of Sansiraka S.A.S in relation to the processing of personal data. Tay Beach Hotel will keep in mind, at all times, that personal data is the property of the people to whom they refer and that only they can decide on them. In this sense, it will use them only for those purposes for which it is duly empowered, and in any case respecting Law 1581 of 2012 on the protection of personal data.
In accordance with the provisions of article 17 of Law 1581 of 2012 Tay Beach Hotel undertakes to permanently fulfill the following duties:
Guarantee the owner, at all times, the full and effective exercise of the right of habeas data.
Keep the information under the necessary security conditions to prevent its adulteration, loss, consultation, use or access to unauthorized or fraudulent.
Perform in a timely manner, this is in the terms provided in articles 14 and 15 of Law 1581 of 2012, the updating, rectification or deletion of data.
Process the queries and claims made by the holders in the terms indicated in article 14 of Law 1581 of 2012.
Insert in the database the legend “Information under judicial discussion” once notified by the competent authority on judicial processes related to the quality or details of the personal data.
Refrain from circulating information that is being disputed by the owner and whose blockade has been ordered by the Superintendence of Industry and Commerce.
Allow access to information only to people who can access it.
Inform the Superintendence of Industry and Commerce when there are violations of the security codes and there are risks in the administration of the information of the holders.
Comply with the instructions and requirements provided by the Superintendence of Industry and Commerce.
Chapter IV Access, consultation and claim procedures
Article 13. Right of access: The power of disposition or decision that the owner has about the information that concerns him necessarily entails the right to access and know if his personal information is being processed, as well as the scope, conditions and generalities of said treatment.
Likewise, the Owner has the right to request its rectification in case of being inaccurate or incomplete and to cancel them when they are not being used in accordance with legal or contractual purposes and terms or according to the purposes and terms contemplated in this Privacy Policy.
Tay Beach Hotel It will guarantee the right of access when, after accrediting the identity of the owner or his representative or attorney, requests it as provided for in Law 1581 of 2012.
Customers and Users may exercise their rights to know, update, rectify and delete their personal data by sending their request to the email: taybeach@sansirakahotel.com and by phone 4357900 ext.401, in accordance with this policy of privacy.
You must include the following data in the application:
names and surnames.
Document type.
document number.
phone.
email.
country.
subject.
Article 13. Response to queries. In any case, regardless of the mechanism implemented for the attention of requests for consultation, they will be attended within a maximum term of ten (10) business days from the date of their receipt. When it is not possible to attend the consultation within said term, the interested party will be informed before the expiration of the 10 days, expressing the reasons for the delay and indicating the date on which their consultation will be attended, which in no case may exceed five (5) business days following the expiration of the first term.
Article 14. Claims. In accordance with the provisions of article 14 of Law 1581 of 2012, the owner or his successors who consider that the information contained in a database must be subject to correction, update or deletion, or when they notice the alleged breach of Any of the duties contained in Law 1581 of 2012, may file a claim with the person in charge of the treatment, which will be processed under the following rules:
The claim may be submitted by the owner in the formats that he has for this purpose. Tay Beach Hotel in your hotel registration. If the claim received does not have complete information that allows you to process it, that is, with the identification of the owner, the description of the facts that give rise to the claim, the address, and accompanying the documents that you want to assert, the interested party will be required within five (5) days following their receipt to correct the failures. After two (2) months from the date of the request without the applicant presenting the required information, it will be understood that he has withdrawn from the claim. If for some reason the company receives a claim that should not be directed against it, it will transfer to whomever it corresponds within a maximum term of two (2) business days and inform the interested party of the situation.
Once the full claim has been received, it will be included in the database that it maintains Tay Beach Hotel A legend that says “Claim in process” and the reason for it, in a term not exceeding two (2) business days. Said legend must be maintained until the claim is decided.
The maximum term to attend to the claim will be fifteen (15) business days from the day following the date of your receipt. When it is not possible to attend to it within said term, the interested party will be informed before the expiration of the aforementioned period the reasons for the delay and the date on which their claim will be attended, which in no case may exceed eight (8) business days following the expiration of the first term.
Article 15. Implementation of procedures to guarantee the right to file claims. At any time and free of charge, the owner or his representative may request the Tay Beach Hotel The rectification, updating or deletion of your personal data, after proof of your identity. Rights of rectification, updating or deletion may only be exercised by:
The owner or his successors, after proof of his identity, or through electronic instruments that allow him to identify himself.
your representative, after accreditation of the representation.
When the request is made by a person other than the owner and it is not proven that it acts on behalf of the former, it will be deemed not presented.
The request for rectification, updating or deletion must be submitted through the means enabled by Tay Beach Hotel indicated in the Privacy Notice and contain, at a minimum, the following information:
The name and address of the holder or any other means of receiving the response.
Documents that prove the identity or personality of your representative.
The clear and precise description of the personal data with respect to which the owner seeks to exercise any of the rights.
In case given other elements or documents that facilitate the location of personal data.
Paragraph 1. Data rectification and updating. Tay Beach Hotel You have the obligation to rectify and update at the request of the owner, the information of the latter that turns out to be incomplete or inaccurate, in accordance with the procedure and the terms indicated above. In this regard, the following will be taken into account: In requests for rectification and updating of personal data, the owner must indicate the corrections to be made and provide the documentation that guarantees his request.
Tay Beach Hotel He has full freedom to enable mechanisms that facilitate the exercise of this right, as long as they benefit the owner. Consequently, electronic means or others that it deems pertinent may be enabled.
Tay Beach Hotel You can establish forms, systems and other simplified methods, which must be informed in the Privacy Notice and that will be made available to the interested parties on the website.
Tay Beach Hotel It will use the customer service or service services it has in operation, as long as the response times are not greater than those indicated by article 15 of Law 1581 of 2012.
Everytime that Tay Beach Hotel Make available a new tool to facilitate the exercise of their rights by the holders of information or modify existing ones, they will inform you through their website.
Paragraph 2. Data suppression. The holder has the right, at all times, to apply to Tay Beach Hotel The deletion (delete) of your personal data when:
Consider that they are not being treated in accordance with the principles, duties and obligations provided for in Law 1581 of 2012.
when they have ceased to be necessary or pertinent for the purpose for which they were collected.
The period necessary for the fulfillment of the purposes for which they were collected has been exceeded.
This deletion implies the total or partial elimination of personal information in accordance with what is requested by the owner in the records, files, databases or treatments carried out by Tay Beach Hotel It is important to note that the cancellation right is not absolute and the person responsible can deny the exercise of the same when:
The request for deletion of the information will not proceed when the holder has a legal or contractual duty to remain in the database.
The elimination of data hinders judicial or administrative actions related to tax obligations, the investigation and prosecution of crimes or the updating of administrative sanctions.
the data is necessary to protect the legally protected interests of the owner; to carry out an action based on the public interest, or to comply with an obligation legally acquired by the owner.
If the cancellation of the personal data is appropriate, Tay Beach Hotel You must operatively perform the deletion in such a way that the deletion does not allow the retrieval of the information.
Article 16. Revocation of the authorization. The holders of the personal data may revoke the consent to the processing of your personal data at any time, as long as it is not prevented by a legal provision. To do this, they must contact Tay Beach Hotel, by email:booking@www.taybeach.com.coor through the cell number (+57)310 606 5673.
It should be noted that there are two modalities in which the revocation of consent can be given. The first, can be about all the consented purposes, that is, that Tay Beach Hotel must stop processing the data of the owner completely; The second, can occur on certain types of treatment, such as for advertising purposes or market studies. With the second modality, that is, the partial revocation of consent, other purposes of the treatments are kept safe, in accordance with the authorization granted, the owner can carry out and with which the owner agrees.
Therefore, it will be necessary for the holder at the time to submit the request for revocation consent to Tay Beach Hotel Indicate in this one if the revocation that you intend to carry out is total or partial. In the second hypothesis, it should be indicated with which treatment the owner is not satisfied. There will be cases in which the consent, due to its necessary nature in the relationship between the owner and responsible for the fulfillment of a contract, by legal provision may not be revoked. the mechanisms or procedures that Tay Beach Hotel Establish to attend to requests for revocation of consent may not exceed the deadlines foreseen to meet claims as indicated in article 15 of Law 1581 of 2012.
CHAPTER V INFORMATION SECURITY
Article 17. Security measures. In development of the principle of security established in Law 1581 of 2012, Tay Beach Hotel It has adopted the technical, human and administrative measures that are necessary to grant security to the records, avoiding their adulteration, loss, consultation, use or access to unauthorized or fraudulent.
Notwithstanding the foregoing, the client assumes the risks derived from delivering this information in a medium such as the Internet, which is subjected to various variables – third-party attacks, technical or technological failures, among others.. Tay Beach Hotel It will make its best technological effort to guarantee the security of the personal information of all its clients and/or users, using reasonable and current security methods to prevent unauthorized access, to maintain the accuracy of the data and guarantee the correct use of the information.
Article 18. Implementation of security measures. Tay Beach Hotel It will maintain mandatory security protocols for personnel with access to personal data and information systems. The procedure should consider, at a minimum, the following aspects:
The third parties hired by Tay Beach Hotel They will be obliged to adhere to and comply with information security policies and manuals, as well as the security protocols that we apply to all our processes.
all contract Tay Beach Hotel With third parties (contractors, external consultants, temporary collaborators, etc.) that involves the processing of information and personal data, it will include a confidentiality agreement that details its commitments for the protection, care, security and preservation of its confidentiality, integrity and privacy.
Scope of the procedure with detailed specification of the protected resources.
Measures, rules, procedures, rules and standards aimed at guaranteeing the level of security required in Law 1581 of 2012.
functions and obligations of the staff.
Structure of the databases of a personal nature and description of the information systems that treat them.
Notification, management and response to incidents procedure.
Procedures for performing backup and data recovery.
Periodic controls that must be carried out to verify compliance with the provisions of the security procedure that is implemented.
Measures to be adopted when a support or document is to be transported, discarded or reused.
The procedure must be kept up to date at all times and must be reviewed whenever relevant changes occur in the information system or its organization.
The content of the procedure must be adapted at all times to the current provisions regarding the security of personal data.
Chapter VI Final provisions
Article 19. Modifications to the Privacy Policy. Tay Beach Hotel It reserves the right to make changes or updates to this Privacy Policy at any time, for the attention of legislative developments, internal policies or new requirements for the provision or offer of its services or products.
Article 20. Validity of the processing of information and personal data. The information provided by customers and users will remain stored for up to a term of fifteen (15) years from the date of the last treatment, to allow us to comply with legal and/or contractual obligations, especially in accounting, tax and tax matters.