Privacy Policy & Personal Data Management
In compliance with Colombian Law 1581 of 2012 and its regulatory decrees, Los Nevados Ecolodge S.A.S. informs that it processes personal data in connection with its rural accommodation, gastronomic experience, day-trip tourism, and complementary services activities.
By interacting with us through any channel — in person, by phone, WhatsApp, email, or digital platforms — you expressly accept the conditions described in this policy, permanently available at www.econevados.com/en/privacy-policy.
⚖️ Applicable legal framework
- Law 1581 of 2012 – Colombian Statutory Law on Personal Data Protection.
- Decree 1377 of 2013 – Partial regulation of Law 1581 of 2012.
- Sole Regulatory Decree 1074 of 2015 – Compilation of data protection provisions.
- Law 1266 of 2008 – Financial and credit Habeas Data.
- Law 527 of 1999 – Electronic data messages and e-commerce.
- External Circular 002 of 2015 – SIC – Instructions on personal data protection.
🏢 Data controller
- Company name
- Los Nevados Ecolodge S.A.S.
- NIT
- 901.913.469-7
- RNT
- 255113
- Address
- Corregimiento de Potrerillos, Gigante, Huila, Colombia
- info@econevados.com
- +57 314 263 0798
- Website
- www.econevados.com
- Data controller
- Oscar Javier Rendón Urriago – General Manager
🗄️ Databases processed
- Guests and clients: data of individuals making bookings or purchasing tourism services.
- Suppliers and partners: data of natural or legal persons contractually linked to the ecolodge.
- Employees and staff: personnel data processed in accordance with Colombian labour law.
- Communication subscribers: individuals who have authorised the sending of commercial or promotional information.
🎯 Purpose of processing
- Manage bookings, invoicing, payments, and post-stay follow-up for tourism services.
- Comply with the guest registration required by RNT 255113 and tourism and police authorities.
- Send commercial communications, promotions, and ecolodge news (unsubscribe at any time).
- Fulfil legal, accounting, tax, and contractual obligations.
- Enforce internal coexistence, security, and sustainability policies.
- Conduct aggregated, anonymised statistical analysis of occupancy and visitor profiles to improve service offerings.
📋 Data collected
Depending on the purpose, we may collect: full name, ID type and number, email address, phone number, city of residence, nationality, occupation, purpose of visit, payment information (only what is strictly necessary for the transaction), data of accompanying persons and, where applicable, information about minors with the authorisation of their legal representatives.
🍪 Cookies & digital tools
The website www.econevados.com may use web traffic analytics tools (such as Google Analytics) and social media tracking pixels (Meta/Instagram) to measure site performance and optimise the user experience.
- These tools may collect anonymised browsing data (pages visited, session time, device used).
- You can manage or reject cookies through your browser settings.
- Continued use of the website implies acceptance of this practice.
⏱ Data retention periods
| Data category | Retention period | Legal basis |
|---|---|---|
| Guests and bookings | 5 years from last stay | Law 300/1996, tax obligations |
| Contracts and payments | 10 years | Commercial Code, art. 60 |
| Records involving minors | Until age of majority + 5 years | Law 1098/2006, Law 679/2001 |
| Commercial communications | Until consent is revoked | Law 1581/2012, art. 9 |
| Employees | Employment term + 20 years | Colombian Labour Code |
🌐 Data transfers and disclosures
- Technology providers (payment gateways, online booking platforms, email services) under confidentiality agreements.
- Public authorities (police, tourism authorities, tax agencies) when required by law.
- Distribution platforms (Booking.com, Airbnb, Ayenda) only the data strictly necessary to process the booking.
👶 Protection of minors
We do not collect data from minors without the explicit consent of their parents or legal representatives, pursuant to article 7 of Law 1581 of 2012. Data involving minors is used exclusively for the purposes of the contracted service and in compliance with Law 679 of 2001.
🧾 Your rights
- Access, update, and correct your personal data in our databases.
- Request proof of the consent you provided for data processing.
- Be informed about how your personal data has been used.
- File complaints with the Superintendencia de Industria y Comercio (SIC) after exhausting the internal procedure.
- Revoke consent and/or request deletion of your data when there is no legal obligation to retain it.
- Unsubscribe from commercial communications at any time, without affecting contracted services.
📬 Requests & complaints
Send your request to info@econevados.com with the subject line "Habeas Data Request", including your full name, ID number, description of the request, and any supporting documents.
| Request type | Response time | Extension |
|---|---|---|
| Queries | 10 business days | 8 additional business days, with prior notice. |
| Complaints | 15 business days | 8 additional business days, with prior notice. |
| Data deletion | 15 business days | Only if no legal obligation to retain exists. |
🔒 Information security
We implement technical (encryption in transit, access controls), human (staff training), and administrative (supplier confidentiality agreements) measures to protect data against unauthorised access, loss, alteration, or improper disclosure.
This policy may be updated at any time. Changes will be published at www.econevados.com/en/privacy-policy. Substantial changes will be communicated to data subjects at least 10 days in advance.
📂 Version history
| Version | Date | Changes |
|---|---|---|
| 1.0 | May 2025 | Initial version. |
| 1.1 | August 2026 | Cookie/digital tools clause added. RNT corrected. |
| 1.2 | August 2026 | Current version. Expanded legal framework, data retention, international transfers, data controller, rights. |