Personal data processing policy

Effective October 19, 2026. Issued under Colombian Law 1581 of 2012 and Decree 1377 of 2013 (Decree 1074 of 2015). The Spanish version prevails.

1. Data controller

2. What data we collect

• When you ask to book via WhatsApp: your name, mobile/WhatsApp number and, optionally, your email.
• Details of your request: dates, number of guests, room, price shown and language.
• Technical data: a random session identifier stored in your browser and your IP address converted into an irreversible code (hash), used only to prevent abuse.

We do not collect sensitive data or payment card details on this site, and the service is not aimed at minors.

3. Purposes

• Handling your booking request and contacting you by WhatsApp, phone or email to confirm availability, price and payment.
• Managing your reservation and stay.
• Aggregate statistics on how the booking engine is used.
• Security and fraud prevention.

We do not sell your data or use it for advertising without a separate authorization.

4. Who processes it on our behalf

The booking engine is operated by AlojaBookings, which processes the data as a processor (encargado) following our instructions. It relies on cloud hosting and email providers that may store data outside Colombia (for example, in the United States), under security and confidentiality obligations. By authorizing the processing you accept this international transfer.

5. Your rights

• Know, update and correct your personal data.
• Request proof of the authorization you gave.
• Be informed about how your data has been used.
• Revoke the authorization and/or request deletion of your data, when there is no legal or contractual duty to keep it.
• Access your data free of charge.
• File complaints with the Superintendencia de Industria y Comercio (SIC) after contacting us first.

6. How to exercise them

Write to us at gerencia@ethnichotelcartagena.com · WhatsApp +573167800147 with your name, the phone number or email you used, and your request. We answer queries within 10 business days (extendable by 5) and claims within 15 business days (extendable by 8), as the law provides.

7. Retention and security

We keep your data only as long as needed for these purposes and to meet legal obligations. Access is restricted to authorized staff and data travels encrypted.

8. Cookies and browser storage

This site stores your language choice in a cookie, plus a session identifier and (if you fill in the booking form) your name, number and email in your own browser, so you don't have to type them again. You can delete them from your browser settings. We do not use advertising cookies here.

9. Changes

Any change to this policy will be published on this page with its new effective date.