Who is responsible for the processing of your data?

At BONSOL HOTELS GESTION COLOMBIA S.A.S, we value the privacy and protection of your personal data. Therefore, we inform you that, in compliance with Law 1581 of 2012, its regulatory decrees, and other applicable regulations, the personal data we obtain as a result of transactions you carry out with us will be processed responsibly and transparently, following legal and ethical principles.

BONSOL HOTELS GESTION COLOMBIA S.A.S, NIT: 900.814.875-6
Carrera 31 Nº 16. 221 Medellín, Colombia

What data do we collect through the website?

By the simple fact of browsing the website, THE MORGANA POBLADO SUITES, will collect information regarding:
- IP address.
- Browser version.
- Operating system.
- Duration of the visit or browsing of the website.

This information is stored by Google Analytics, so we refer to the Privacy Policy of Google, as it collects and treats such information. http://www.google.com/intl/en/policies/privacy/ Similarly, the Website provides the utility of Google Maps, which may have access to your location, if you allow it to do so, in order to provide you with greater specificity about the distance and/or paths to our headquarters. In this regard, we refer you to the Privacy Policy used by Google Maps, in order to know the use and processing of such data http://www.google.com/intl/en/policies/privacy/.

The information that we handle will not be related to a specific user and will be stored in our databases for the purpose of statistical analysis, improvements to the Website, our products and/or services and will help us to improve our commercial strategy. The data will not be communicated to third parties.

User registration on the website/ Submission of forms

In order to access certain products and/or services, such as booking, contacting us or requesting a quote, the user must fill in a form. For this purpose, in the registration form, a series of personal data are requested. The data are necessary and obligatory in order to carry out such registration. If these fields are not provided, the registration will not be carried out.
In this case, the browsing data will be associated with the user's registration data, identifying the specific user browsing the Website. In this way, it will be possible to personalise the offer of products and/or services which, in our opinion, best suits the user.

The registration data of each user will be incorporated into the databases of The Morgana Poblado Suites, together with the history of operations carried out by the same, and will be stored in the same as long as the registered user's account is not deleted. Once the account has been deleted, this information will be removed from our databases, and the data relating to the transactions carried out will be kept for a period of 10 years, without being accessed or altered, in order to comply with the legal deadlines in force. The data that is not linked to the transactions carried out will be kept unless you withdraw your consent, in which case it will be deleted immediately (always taking into account the legal deadlines).

The legal basis for the processing of your personal data is the performance of a contract between the parties.
In relation to the sending of communications and promotions by electronic means and the response to requests for information, the legitimisation of the processing is the consent of the data subject.

Thus, we inform you that you will be able to receive communications via email and/or on your telephone, in order to inform you of possible incidents, errors, problems and/or status of your requests.

For the sending of commercial communications, the user's express consent will be requested at the time of registration. In this regard, the user may revoke the consent given by contacting The Morgana Poblado Suites, using the means indicated above. In any case, in each commercial communication, the user will be given the opportunity to unsubscribe from receiving them, either by means of a link and/or e-mail address.

Sending Newsletter / Newsletter

In the event that the website allows the option of subscribing to the The Morgana Poblado Suites Newsletter, it will be necessary for you to provide us with an e-mail address to which the newsletter will be sent.
This information will be stored in a The Morgana Poblado Suites database, in which it will remain registered until the interested party requests to unsubscribe or, where appropriate, The Morgana Poblado Suites ceases to send it.
The legal basis for the processing of this personal data is the express consent given by all those interested parties who subscribe to this service by ticking the box provided for this purpose.
The data from e-mails will only be processed and stored for the purpose of managing the sending of the Newsletter by users who request it.
In order to send the Newsletter, the user's express consent will be requested when registering for the Newsletter by ticking the box provided for this purpose. In this respect, the user may revoke the consent given by contacting The Morgana Poblado Suites, using the means indicated above. In any case, in each communication, you will be given the possibility of unsubscribing from receiving them, either by means of a link and/or e-mail address.

PURPOSES OF PERSONAL DATA PROCESSING

The personal data collected will be subject to manual and/or automated processing and will be used for the following purposes:

· Manage the guest’s reservation, pre–check-in, check-in and check-out, room assignment, registration of companions, and the provision of accommodation, food, events, and other contracted services.

· Verify the identity and representation capacity of the guest and, when applicable, of the guardian of minors; validate data through supporting documents and lawful verification processes.

· Manage payment methods, process charges, previously authorized remote payments, refunds, cancellations, and guarantees, as well as issue invoices and tax receipts.

· Comply with legal and regulatory requirements of the tourism, migration, police, and tax sectors, including reports to competent authorities when applicable and compliance with administrative or judicial orders.

· Operate physical security systems through video surveillance for the protection of persons, property, and facilities, incident preservation, and provision of evidence to authorities when required.

· Prevent fraud, impersonation, and security incidents through identity verification, transactional risk analysis, and physical and logical access controls.

· Respond to requests, petitions, complaints, claims, and compliments, and process the rights of data subjects related to their personal information.

· Send reservation confirmations, reminders, operational information about the stay, service updates, safety notices, and other communications essential to contract execution.

· Conduct satisfaction surveys, measure service quality, manage loyalty and benefit programs, and, only with the guest’s authorization, send commercial communications and promotions.

· Coordinate complementary services requested by the guest such as transportation, tours, insurance, medical assistance, corporate events, mail, and courier services.

· Manage lost-and-found items, damage reports, charges for contractual breaches, and insurance claims when applicable.

· Manage the contractual relationship, preserve evidence of service delivery, handle pre-legal and legal collections, and resolve disputes or litigation.

· Perform administrative, accounting, fiscal, internal and external audit, risk management, internal control, and regulatory compliance activities.

· Carry out statistical and business analyses, management reporting, and process improvement using aggregated or anonymized data whenever possible.

· Manage hotel information security and cybersecurity, including system access logs, traceability of actions, and incident response.

· Manage relationships with suppliers and service providers that offer technological or logistical services for hotel operations and perform strictly necessary data transfers under data protection agreements.

· Handle emergency, health, or safety situations and contact family members, guardians, or authorities when necessary to protect the life or integrity of the guest.

· Apply policies for data retention and secure deletion within legal or contractual periods and maintain technical, human, and administrative measures to protect data confidentiality, integrity, and availability.

· Transmit or transfer personal data to administrative, judicial, control, or supervisory authorities when required by a legal or contractual obligation.

· Transmit or transfer personal data to public or private, national or international entities when necessary for the hotel’s functions, contract execution, service provision, compliance with legal or regulatory obligations, or control and supervision requirements.

· Share data with strategic partners, service providers, insurers, tour operators, booking platforms, or other related entities when essential to manage the contractual relationship, guest safety, asset protection, and the normal operation of the hotel.

RIGHTS OF THE HOLDERS

The information holder has the following rights:

· To access and know their personal data.

· To update, rectify, or request the deletion of their data when applicable.

· To obtain proof of the authorization granted for processing.

· To be informed, upon request, about the use of their data.

· To revoke the authorization and/or request deletion when principles, rights, or applicable guarantees are unknown.

· To file complaints with the Superintendency of Industry and Commerce.

· To access their personal data free of charge.

EXERCISE OF THE RIGHTS

The holder may exercise their rights of access, update, rectification, deletion, opposition/revocation, and proof of authorization through the following means:

Channels:
1. Physically or electronically: You can submit your requests in physical or digital format.
2. Service channels:
Email: morgana.protecciondedatos@gmail.com
In person: At our office located at Carrera 31 16 221, Medellín - Antioquia

ACCESS TO THE DATA PROCESSING POLICY

Our Personal Data Processing Policy is available for consultation at the following link: https://agilempresarial.my.canva.site/bonsol-hotels-gestion-colombia-s-a-s

SENSITIVE AND MINORS’ DATA

Providing sensitive data is optional; refusal does not affect access to services.
The processing of data of children and adolescents requires authorization from the legal representative and is subject to the best interests of the minor