Data Policy

Personal Data Processing Policy of Hoteles Memorables de Colombia S.A.S.

Hoteles Memorables de Colombia S.A.S. (Tax ID/NIT 901130292-1), domiciled in Medellín, Colombia, hereinafter “THE COMPANY”, reaffirms its commitment to protecting the personal data of its guests, clients, suppliers, visitors and users.

In compliance with Law 1581 of 2012 and Decree 1377 of 2013, which partially regulates the Habeas Data Law in Colombia, we adopt this Personal Data Processing Policy in order to guarantee the privacy, confidentiality and security of the information provided.

For any inquiry related to the processing of personal data, you may contact us through the following email address:
marketing@eehoteles.com

1. Purpose of personal data processing

The personal data collected by THE COMPANY is processed for the following purposes:

• Managing reservations and commercial transactions.
• Responding to requests, petitions, complaints or claims.
• Sending commercial information related to our hotels and services.
• Maintaining contact with guests, clients and suppliers.
• Complying with legal and contractual obligations.

We do not sell, transfer, exchange or share our databases with third parties for commercial purposes.

2. Data collection methods

Personal data may be collected through:

• Calls to our landline or mobile phone numbers.
• Forms completed on our website.
• Reservation or purchase processes at our establishments.
• Direct communications by email.

In all cases, we request the prior, express and informed authorization of the data subject when completing our forms or carrying out transactions.

3. Data collected

The mandatory data that may be requested includes:

• Subject.
• Full name.
• Email address.

Optionally, the data subject may provide:

• City.
• Company.
• Comments.
• Landline or mobile phone number.

In the event of a commercial transaction, data related to payment methods —debit or credit— may be requested. Such data shall be processed exclusively for the management of the corresponding commercial transaction.

4. Storage and processing

Data may be stored and/or processed on our own servers or on servers contracted with third-party technology service providers, located in data centers that comply with security standards.

The data subject expressly authorizes this processing by accepting this policy.

5. Rights of the data subject

In accordance with current legislation, the data subject has the right to:

• Know, update and rectify their personal data.
• Request proof of the authorization granted.
• Be informed about the use given to their data.
• File complaints before the Superintendence of Industry and Commerce.
• Revoke the authorization and/or request the deletion of data when applicable.

The data subject may consult their information free of charge once per calendar month or whenever there is a substantial modification to the data provided.

For inquiries, updates, corrections or deletion requests, you may write to:
marketing@eehoteles.com

6. Sensitive data

In accordance with Decree 1377 of 2013, when sensitive data is involved, the data subject is not required to authorize its processing.

7. Data retention period

Personal data shall be retained from the date of authorization and for a maximum period of ten (10) years, unless the data subject exercises their right to request deletion.

8. Costs of additional inquiries

For inquiries made more than once per calendar month, THE COMPANY may charge shipping, reproduction and certification costs, which may not exceed the recovery costs of the corresponding material.

9. Legal framework

You may consult Decree 1377 of 2013 at the following official link:

Consult Decree 1377 of 2013

10. Information security

Hoteles Memorables de Colombia S.A.S. adopts reasonable technical, administrative and human measures to protect personal data against loss, misuse, unauthorized access, alteration or disclosure. Our internal processes are aimed at guaranteeing the confidentiality and security of the information provided by guests, clients and suppliers.

We also periodically review our data processing protocols to ensure compliance with current regulations and to maintain adequate information protection standards.