Personal Data Processing Policy
SUMAJ TOURS SAS ZOMAC BIC
Privacy Policy – SUMAJ TOURS SAS ZOMAC BIC
1. Applicable regulations
In compliance with Statutory Law 1581 of 2012, Decree 1377 of 2013, and all related data protection regulations in Colombia, SUMAJ TOURS SAS ZOMAC BIC, NIT 901.512.936, headquartered in Riohacha – La Guajira, hereby informs that it is the data controller responsible for the processing (collection, storage, use, circulation, and deletion) of personal data obtained in the development of its tourism and commercial activities.
2. Purpose
This policy establishes the guidelines for handling the personal data that clients, suppliers, employees, and partners provide to SUMAJ TOURS, ensuring their proper protection, confidentiality, and use in accordance with current regulations.
3. Data Controller Information
Business name: SUMAJ TOURS SAS ZOMAC BIC
NIT: 901.512.936
Address: Riohacha, La Guajira – Colombia
Phone: +57 310 672 2674
Email: sumajtoursguajira@hotmail.com
Website: www.sumajtours.com
4. Scope
This policy applies to all personal data stored in SUMAJ TOURS’ databases and collected through reservations, forms, emails, phone calls, digital channels, website interactions, and in-person exchanges.
5. Purposes of data processing
Personal data collected by SUMAJ TOURS will be used to:
• Process reservations, confirmations, and the delivery of tourism services.
• Manage administrative, accounting, tax, and legal information.
• Contact clients with information about plans, promotions, and updates.
• Conduct satisfaction surveys and post-sale activities.
• Coordinate activities with suppliers and strategic partners.
• Comply with legal requirements from the relevant tourism and commerce authorities.
Additionally, data may be processed when:
• There is a contractual relationship with the data subject.
• It is necessary to comply with legal obligations or decisions from competent authorities.
• It is expressly authorized by law.
6. Processing of sensitive data
SUMAJ TOURS does not regularly collect sensitive personal data (related to health, religion, political affiliation, etc.). If such information were ever required for legal or contractual reasons, express authorization from the data subject will be requested, and all legal guidelines for handling such data will be followed.
7. Rights of data subjects
According to Law 1581 of 2012, data subjects have the right to:
• Know, update, rectify, delete, or revoke the information provided.
• Request proof of the authorization granted for data processing.
• Be informed about how their data is used.
• File complaints before the Superintendence of Industry and Commerce (SIC).
• Access their personal data free of charge.
8. Procedure for exercising rights
Data subjects may submit requests for consultation, update, correction, deletion, or claim by sending a written communication to sumajtoursguajira@hotmail.com.
The request must include:
• Full name and identification number.
• Clear description of the request or claim.
• Physical or electronic address for notifications.
The administrative area of SUMAJ TOURS will respond within the legally established terms (15 business days for consultations and 15 business days, extendable, for claims).
9. Principles for data processing
SUMAJ TOURS guarantees compliance with the following principles:
• Confidentiality: protection of information against unauthorized access.
• Security: measures to prevent alteration, loss, or unauthorized access.
• Transparency: ensuring data subjects can obtain clear information about data use.
• Restricted access: only authorized personnel may access data strictly for functions related to their role.
10. Modifications
SUMAJ TOURS may modify this policy at any time in response to regulatory or internal changes. Updates will be published on the website and will take effect from the date of publication.
11. Validity
The databases will remain active as long as a contractual, commercial, or service relationship with the data subject exists.
