Privacy Notice

CB HOTELES Y RESORTS S.A., hereinafter referred to as HOTEL ZUANA, offers accommodation services for its guests, recreational activities, and the organization of corporate and private events.

In the course of its activities, HOTEL ZUANA collects personal information from its direct customers, users, contract clients, timeshare owners, employees, suppliers, contractors, potential clients, former employees, former clients, former users, former suppliers, former contractors, prospective suppliers, and prospective employees.

Additionally, the hotel may also acquire personal contact information from individuals who are not yet customers or users but who may become such by expressing interest in the products and services of any of the companies within the Bolívar Group and authorizing future contact, including by the hotel.

In accordance with Law 1581 of 2012, "General Provisions for the Protection of Personal Data," and Decree 1377 of 2013, we provide this Privacy Notice to inform data subjects about the existence of the Data Processing Policies adopted by HOTEL ZUANA, how to access them, and the characteristics of the data processing intended.

Location

The corporate headquarters of HOTEL ZUANA is located at Avenida Tamacá No. 6-80 in Santa Marta. The following communication channels are available for data subjects: written communications addressed to the hotel, the telephone line +57 (5) 4380011 ext. 148 in Santa Marta, and the email address datos_personales@zuana.com.co.

Data Processing by Hotel Zuana

Hotel Zuana has identified the types of data it manages, including personal data from direct customers, users, contract clients, timeshare owners, employees, suppliers, contractors, potential clients, former employees, former clients, former users, former suppliers, former contractors, prospective suppliers, and prospective employees. Therefore, the hotel assumes the role of Data Controller for this information.

HOTEL ZUANA has also identified the activities associated with these data, particularly their collection, storage, use for the purposes of accommodation contracts, related services, event organization, and complementary activities related to the promotion and marketing of its products and services. The hotel may extend offers for services and products from other companies within the Bolívar Group, provided the data subject has given their consent, in accordance with the Data Processing and Protection Policies available on the website www.zuana.com.

Purposes of Data Processing

The purposes of processing personal data provided by our customers and users are as follows: The data collected by HOTEL ZUANA will be used for purposes related to accommodation and lodging contracts, event management, and complementary services, all in accordance with the provisions of the Commercial Code and other relevant sector-specific laws, such as Law 300 of 1996 and regulations issued by the Ministry of Industry and Commerce. Data collected from potential clients will be used to contact them and inform them about the services and products offered by HOTEL ZUANA.

The data will also be used to develop customer profile analysis, marketing campaigns, and advertising activities to better meet the needs of customers and users, and to offer, with the data subject's consent, the products and services of the Bolívar Group and its commercial partners that may complement or enhance the product and service offerings, which will be communicated to customers and users in a timely manner.

Purposes for Data Obtained from Candidates, Employees, and Suppliers

The information in the resumes of job candidates will be used by HOTEL ZUANA to assess the qualifications of the individuals. This information may also be shared with other companies within the Bolívar Group to increase the candidate's chances of employment.

Data collected from employees will be used to manage labor relations, including participation in wellness activities organized by HOTEL ZUANA.

In the case of suppliers who are natural persons, HOTEL ZUANA seeks to assess and monitor their financial suitability and commercial behavior, as well as involve them in activities or campaigns that may be of interest.

Rights of Data Subjects

As a data subject, you have the following rights with respect to Hotel Zuana as the Data Controller:

a) To know, update, and rectify your personal data with the Data Controllers or Data Processors. This right can be exercised, among other cases, for data that is partial, inaccurate, incomplete, fractioned, misleading, or where processing is expressly prohibited or unauthorized.

b) To request proof of the authorization granted to the Data Controller, except when it is expressly exempt as a requirement for processing, as provided in Article 10 of the law.

c) To be informed by the Data Controller or Data Processor, upon request, regarding the use of your personal data.

d) To file complaints with the Superintendence of Industry and Commerce for violations of the law and other applicable regulations.

e) To revoke the authorization and/or request the deletion of data when the processing does not comply with constitutional and legal principles, rights, and guarantees. Revocation and/or deletion will proceed when the Superintendence of Industry and Commerce determines that the Data Controller or Data Processor has engaged in conduct contrary to the law and the Constitution.

f) To access your personal data, subject to processing, free of charge.

To exercise your rights, you may submit inquiries and, where appropriate, claims in accordance with Articles 14 and 15 of Law 1581 of 2012 and the procedures outlined in the Manual of Data Processing and Protection Policies published on the website.

Security Measures

All information stored in databases managed by Hotel Zuana is protected during access, storage, and use.

Hotel Zuana maintains high standards of information security and has implemented the necessary procedures to ensure the confidentiality and proper use of information.

Changes to Policies or Privacy Notice

As stated in Section 2 above, the Manual of Data Processing and Protection Policies is available on the website www.zuana.com. Any substantial changes to these policies will be communicated through this same medium, and subsequently, through any other deemed appropriate. Substantial changes to the Privacy Notice will be timely communicated via the same online platform.