Privacy and Personal Data Processing Policy

1. Data controller

Reinier Rodríguez Cabrera, owner of RRC Travels, publicly located in Bogotá, Colombia, is responsible for processing personal data collected through this website.

• Email: [email protected]
• Phone and WhatsApp: +57 316 618 9588

2. Scope

This policy applies to personal data voluntarily provided through the available RRC Travels customer service channels. The public contact form is not currently enabled. Before it is activated, this policy will be reviewed and updated to describe its operation and the applicable processing.

3. Data we may collect

The public website does not currently collect personal data through its own form. If a person voluntarily contacts RRC Travels through the available customer service channels, RRC Travels may receive the information needed to handle the request, such as name, phone or WhatsApp number, email address when provided, preferred contact method, type of service requested and the details included in the communication.

RRC Travels does not request sensitive personal data through the public website. People should avoid sending sensitive or unnecessary information through the customer service channels.

4. Purposes of processing

Information voluntarily provided through the available customer service channels may be used to:

• Respond to information or contact requests.
• Prepare quotations.
• Coordinate and follow up on requested services.
• Communicate through the method selected by the data subject.
• Handle questions, petitions or complaints.
• Protect the website and enabled channels against fraud, spam and abusive use.
• Comply with legal obligations when applicable.

Data received will not be sold. It will not be used for advertising or marketing campaigns without additional authorization when such authorization is required.

5. Authorization

When a person voluntarily provides personal data through the available customer service channels, the person authorizes its processing to manage and respond to the request under this policy, except where the law permits or requires processing without authorization. When the public form is enabled, the applicable authorization mechanism will be implemented before personal data is received through that channel. Authorization may be withdrawn when legally applicable.

6. Retention

Data will be kept for the time reasonably required to address the request, follow up on the service, comply with legal obligations or resolve potential claims. When the data is no longer needed, it will be reasonably deleted or anonymized unless a legal retention duty applies.

7. Security and confidentiality

RRC Travels applies reasonable technical and organizational measures to limit access, protect information integrity and reduce the risks of loss, misuse, alteration or unauthorized access. No system can guarantee absolute security, so safeguards will be reviewed and strengthened as the website and its infrastructure evolve.

Information will only be accessible to persons who need it for the purposes described or when it is lawfully requested by a competent authority.

8. Rights of data subjects

Subject to applicable law, data subjects may:

• Know, consult and access their personal data.
• Request updates or corrections.
• Request proof of authorization when applicable.
• Request deletion of data or withdrawal of authorization when legally applicable.
• Submit inquiries or complaints concerning data processing.
• Contact the competent authority after completing the relevant procedure with the controller, when applicable.

9. Procedure for inquiries and complaints

Requests may be sent to [email protected] or made by calling +57 316 618 9588. The request should include the data subject's name, a contact method for the response, a clear description of the request and, when necessary, information that allows identity verification and location of the relevant data.

RRC Travels will respond within the time limits established by applicable law. Additional information may be requested if the submission is incomplete.

10. Service providers and authorities

RRC Travels may use technology providers necessary to host, protect or maintain the website. Such providers must process information only for the authorized purposes and under the applicable conditions. Information may also be provided when legally required or requested by a competent authority.

11. Cookies and analytics

The current version of the website does not use non-essential cookies or analytics or advertising tools. When the public form is enabled, strictly necessary technical functions may be used for its security and operation. Before introducing analytics, advertising or non-essential cookies, this policy and the applicable consent mechanisms will be updated.

12. Children and minors

The website and RRC Travels customer service channels are not specifically directed to minors. If information concerning a minor must be processed, the legal representative must be involved and the corresponding legal safeguards will apply. Before the public form is enabled, the applicable safeguards will be reviewed.

13. Changes and effective period

This policy may be updated to reflect legal, technical or operational changes. The current version and its update date will be available on this page.