Personal data policy.
What data we ask for, what we use it for, how long we keep it and how you can exercise your rights as the data owner.
Last updated August 12, 2026
Draft. These texts are drawn from Colombian law (Law 1581 of 2012, Decree 1074 of 2015 and Law 300 of 1996) and from the data Casa Mare has provided. Fields marked PENDIENTE_ must be completed and the whole set should be reviewed by a professional before publishing.
Data controller
The controller of the personal data collected through this website and during your stay is the owner of Casa Mare.
- Controller
- PENDIENTE_TITULAR
- ID / Tax number
- PENDIENTE_DOCUMENTO
- Address
- VistaMare building, third floor, La Boquilla, Cartagena de Indias, Bolívar, Colombia
- Contact channel
- PENDIENTE_EMAIL
- PENDIENTE_TELEFONO
Legal framework
This policy complies with Law 1581 of 2012, Decree 1074 of 2015 (which consolidated Decree 1377 of 2013) and article 15 of the Colombian Constitution, on the right of habeas data.
The supervisory authority is the Personal Data Protection Delegature of the Superintendency of Industry and Commerce.
What data we collect
We only ask for what is needed to answer an enquiry and to provide the accommodation in line with tourism regulations.
| Data | When it is collected | What for |
|---|---|---|
| Name | When you write on WhatsApp or by email | To answer the enquiry and identify the booking |
| Phone and email | When you write on WhatsApp or by email | To reply, confirm dates and send arrival instructions |
| Dates and number of guests | When checking availability | To check availability and calculate the rate |
| ID document | Before confirming the booking and at check-in | Mandatory guest registration with the Ministry of Commerce, Industry and Tourism |
| Billing data | When the booking is confirmed | To issue the invoice and meet tax obligations |
Purposes of processing
- Handling availability enquiries and managing the booking.
- Registering guests with the Colombian tourism authorities, as current regulations require.
- Meeting accounting, tax and invoicing obligations.
- Sending practical information about the stay: arrival, smart lock, shared-area hours.
- Handling requests, complaints and claims.
We do not use the data for advertising or profiling, and no commercial communications are sent unless the data owner expressly and separately authorises it.
Data owner's authorisation
Law 1581 of 2012 requires the data owner's prior, express and informed authorisation to process their data. By sending us a WhatsApp or email message with the details of the enquiry, the data owner authorises processing for the purposes described in this policy.
Processing the ID document for guest registration does not depend on that authorisation: it responds to a legal obligation under tourism regulations, and without it the accommodation cannot be provided.
The authorisation may be revoked at any time by writing to the contact channel, except for what the law requires us to keep.
Rights of the data owner
As the owner of the data, Colombian law grants you these rights:
- To know, update and correct your personal data.
- To request proof of the authorisation you gave, except where the law does not require it.
- To be informed about the use made of your data.
- To file complaints with the Superintendency of Industry and Commerce for breaches of Law 1581 of 2012.
- To revoke your authorisation and request deletion of the data when there is no legal duty to keep it.
- To access, free of charge, the data that has been processed.
How to exercise them: enquiries and claims
Simply write to the contact channel stating your name, the reason for the request and a copy of your ID document to prove ownership.
Enquiries are answered within a maximum of ten (10) business days, extendable by five (5) more if they cannot be resolved sooner. Claims are answered within a maximum of fifteen (15) business days, extendable by eight (8) more, under articles 14 and 15 of Law 1581 of 2012.
- Contact channel
- PENDIENTE_EMAIL
- Enquiry deadline
- 10 business days (+5)
- Claim deadline
- 15 business days (+8)
Retention and recipients
Data from an enquiry that does not become a booking is kept for the duration of the conversation and deleted afterwards. Data from a stay is kept for the periods required by Colombian tourism and tax regulations.
Data is disclosed only to tourism and tax authorities when the law requires it, and to the providers needed to deliver the service (for example, accounting or the payment gateway once contracted). It is never sold or transferred for commercial purposes.
Security
Reasonable measures are applied to prevent unauthorised access, loss or alteration of the data: restricted access to conversations, copies of documents kept only as long as necessary, and secure deletion once the registration obligation has been met.
Term
This policy is effective from its publication and replaces any earlier version. Databases will be kept for as long as necessary for the purposes described and to comply with applicable legal obligations.
Any significant change will be published on this same page, with its update date.