ORGANIZACIÓN PARKWAY VIAJES Y TURISMO S.A.S
PERSONAL DATA PROCESSING AND PROTECTION POLICY – 2025
IDENTIFICATION OF THE DATA CONTROLLER:
ORGANIZACIÓN PARKWAY VIAJES Y TURISMO S.A.S, headquartered in Bogotá, located at Av Carrera 24 # 42 – 10, La Soledad neighborhood.
1. DEFINITIONS
For proper understanding of this Policy, please consider the following definitions in accordance with current legislation:
- Authorization: Prior, express, and informed consent of the Data Subject to process personal data.
- Privacy Notice: Verbal or written communication issued by the Data Controller, directed to the Data Subject, informing them of the existence of data processing policies, how to access them, and the purposes for which the data will be processed.
- Database: Organized set of personal data subject to processing.
- Personal Data: Any information linked or that can be associated with one or more identified or identifiable natural persons.
- Public Data: Data that is not semi-private, private, or sensitive. Includes, among others, information such as marital status, profession, and public servant status.
- Sensitive Data: Data that affects the privacy of the Data Subject or whose misuse can lead to discrimination, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or biometric data.
- Data Processor: Individual or legal entity, public or private, who processes personal data on behalf of the Data Controller.
- Data Controller: Individual or legal entity, public or private, that decides on the database and/or data processing.
- Data Subject: The individual whose personal data is processed.
- Data Transfer: Occurs when the Data Controller and/or Processor located in Colombia sends personal data to another controller inside or outside the country.
- Transmission: Data processing involving the communication of data within or outside Colombian territory for processing by a Processor on behalf of the Controller.
- Processing: Any operation on personal data such as collection, storage, use, circulation, or deletion.
2. PURPOSE AND PROCESSING OF PERSONAL DATA
To comply with applicable data protection legislation (especially Law 1581 of 2012, Decree 1377 of 2013, and related regulations), we inform all data subjects that ORGANIZACIÓN PARKWAY VIAJES Y TURISMO S.A.S processes their personal data based on prior authorization granted.
In accordance with Article 15 of the Colombian Constitution, Law 1266 of 2008, and other applicable regulations, this policy outlines the company’s internal procedures regarding data processing, the purposes of such processing, data subject rights, and how to exercise them.
The general purpose of this privacy policy is to inform that the collection and use of personal data provided voluntarily by individuals with a commercial relationship with the company will be conducted only with the prior, express, and informed consent of the data subject.
Recognizing the right to privacy of data subjects, the company will process personal data for the following purposes:
- To establish and maintain a commercial relationship.
- To conduct customer service follow-ups.
- To collect payments for services rendered.
- To send advertising or promotional materials about the company’s services.
- To communicate with clients, employees, and suppliers about contractual or legal obligations.
- To fulfill legal obligations as the Data Controller.
- For fraud prevention and security purposes.
- To report financial or commercial information for statistical or regulatory purposes.
- To respond to inquiries or general questions.
- For any other purpose necessary for the execution of the contract or commercial relationship.
Personal data may be shared with employees or third parties (consultants, external offices, etc.) as needed to fulfill the above purposes.
2.1. CUSTOMER DATABASE
Managed by the commercial department for marketing and service management purposes.
2.2. EMPLOYEE AND CONTRACTOR DATABASE
Managed for hiring, service provision, performance, and contract termination purposes, depending on the relationship type.
2.3. SUPPLIER DATABASE
Includes information about suppliers providing physical infrastructure, technology, and services.
3. DATA SUBJECT RIGHTS
The data subject may exercise the following rights at any time, as established in Article 8 of Law 1581 of 2012:
- Know, update, and correct personal data.
- Request proof of authorization granted for data processing.
- Be informed about how personal data is used.
- File complaints with the Superintendency of Industry and Commerce.
- Revoke authorization and/or request data deletion.
- Access personal data free of charge.
4. SENSITIVE DATA
The data subject is not required to provide sensitive data, such as information regarding race, political beliefs, religious views, union membership, health, sexual life, or biometrics.
5. MINORS’ DATA
Providing personal data of minors is voluntary and must be authorized by their parents or legal guardians.
6. DATA SUBJECT AUTHORIZATION
Except for legally established exceptions, personal data processing requires prior, express, and informed authorization, which may be obtained through any verifiable means.
7. PROCEDURE TO EXERCISE RIGHTS
The company has a designated area to handle requests, questions, and complaints related to personal data. You may contact:
gerencia@yoviajoconparkway.co
Av Carrera 24 # 42-10, Bogotá
Requests may be submitted physically or electronically. They must include your contact information and clearly state the facts for proper handling.
The company will respond within fifteen (15) business days from the date of receipt. If the request lacks necessary information, the requester will be notified within five (5) business days to provide the missing details within fifteen (15) business days. Failure to do so will be considered withdrawal of the request.
8. VALIDITY
ORGANIZACIÓN PARKWAY VIAJES Y TURISMO S.A.S reserves the right to amend this policy at any time, with prior electronic notice to data subjects. The latest version will be available at www.yoviajoconparkway.co.
This Data Processing Policy enters into force on May 5th, 2025.