With the authorization of the processing of personal data, the owner of the same accepts the terms of this policy. GRUPO HOTELERO CAMPANARIOS SAS is respectful of the personal data and information provided by its current, past and potential clients. In this Privacy Policy, the purposes, measures and procedures for the collection, storage, use, circulation and deletion of our databases are established, as well as the mechanisms available to the owners to know, update, rectify, delete the data supplied or revoke the authorization.

This policy applies to any registration of personal data carried out in person and / or virtual during any contact that is made between present clients and / or potential interested parties and GRUPO HOTELERO CAMPANARIOS. The owner of the data registers or delivers his information freely and voluntarily, and acknowledges that he has read and expressly accepts these terms.

DEFINITIONS

Authorization: Prior, express and informed consent of the Holder to carry out the Processing of personal data.

Database: Organized set of personal data that is subject to Treatment.

Personal data: Any information linked to or that may be associated with one or more specific or determinable natural persons.

Sensitive data: Those data that affect the privacy of the Holder or whose improper use may generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership of unions, social organizations, of human rights or that promotes the interests of any political party or that guarantees the rights and guarantees of opposition political parties, as well as data related to health, sexual life, and biometric data.

Treatment: Refers to any operation or set of operations on personal data, such as the collection, storage, use, circulation or deletion.

Responsible for the Treatment: Natural or legal person, public or private, that by itself or in association with others, carries out the Treatment of personal data on behalf of the Responsible for the Treatment.

Responsible for the Treatment: Natural or legal person, public or private, that by itself or in association with others, decides on the database and / or the Treatment thereof.

Owner: Natural person whose personal data is subject to Treatment.

PROVISIONS

1. RESPONSIBLE AND IN CHARGE OF THE DATA PROCESSING. The person in charge and in charge of the processing of personal data is GRUPO HOTELERO CAMPANARIOS, who assigns these functions to the Marketing Coordinator.

The following are your contact details

a) Address: Villa de Leyva, Boyacá

b) Address: Carrera 11ª # 12 - 47

c) Email: management@hotelcampanariodelavilla.com

d) Telephone number: (57-1) 310 5500216

2. PURPOSE OF THE DATABASE. The main purposes of the database are to inform you about the services we provide, for administrative, commercial and advertising purposes and contact with the owners of the same.

3. PERSONAL DATA. The information subject to treatment by GRUPO HOTELERO CAMPANARIOS, hereinafter in this document "Personal Data", is that provided by the Holders, when they access their goods and / or services, or on the occasion of them, such as: name , surnames, identification, age, sex, telephone, physical and electronic address, country, city and other necessary data that are requested in the registration process, which in no case will be sensitive in the terms of law.

GRUPO HOTELERO CAMPANARIOS will not collect data considered as Sensitive Data according to the provisions of Law 1581 of 2012, such as, for example, data that reveals racial or ethnic origin, political orientation, religious or philosophical convictions, union membership, social organizations , data related to health, sexual life or biometric data.

4. AUTHORIZATION FOR COLLECTION AND PROCESSING OF PERSONAL DATA AND OTHER INFORMATION. Through express verbal or written authorization, the Holder expressly or unequivocally authorizes GRUPO HOTELERO CAMPANARIOS to collect personal data and any other information that it provides, as well as to carry out the processing of their personal data, in accordance with this Privacy Policy and the law.

5. TREATMENT OF PERSONAL DATA STORED IN THE DATABASES OF GRUPO HOTELERO CAMPANARIOS. GRUPO HOTELERO CAMPANARIOS will only use, process and circulate personal data for the purposes described and for the treatments authorized in this Privacy Policy or in current laws. In addition to what is mentioned in other clauses, each HOLDER expressly authorizes GRUPO HOTELERO CAMPANARIOS for the collection, use and circulation of their personal data and other information for the following purposes:

i. Establish communication between GRUPO HOTELERO CAMPANARIOS and the HOLDER for any purpose related to the purposes established in this policy, either through calls, text messages, emails and / or physical.

ii. Audit, study, analyze and use the information in the Database to design, implement and develop programs, projects and events.

iii. Audit, study, analyze and use the information in the Database for the socialization of policies, projects, programs, results and organizational changes.

iv. Offer products and / or services

v. Evaluate the headlines' consumption habits, carry out market and / or statistical analysis and / or segmentation.

saw. Request the opinion of the Owner about products and / or services

vii. When the information must be disclosed to comply with laws, regulations or legal processes, to ensure compliance with the terms and conditions, to stop or prevent fraud, attacks on the security of GRUPO HOTELERO CAMPANARIOS or others, prevent technical problems or

protect the rights of others as required by terms and conditions or by law.

viii. The others described in this policy or in the Law.

6. STORAGE OF PERSONAL DATA. The Owner expressly authorizes GRUPO HOTELERO CAMPANARIOS to store it in the way it deems most appropriate and to comply with the security required for data protection. Only personnel authorized by GRUPO HOTELERO CAMPANARIOS can access the Databases where the data are stored, and therefore the personal data of our clients.

7. SECURITY MEASURES. GRUPO HOTELERO CAMPANARIOS is committed to the correct use and treatment of personal data, avoiding unauthorized access by third parties that allows knowing or violating, modifying, disclosing and / or destroying the information that resides in its databases. For this reason, GRUPO HOTELERO CAMPANARIOS has security protocols and access to its information, storage and processing systems, including physical measures to control security risks.

8 RIGHTS OF THE HOLDERS. GRUPO HOTELERO CAMPANARIOS informs the owners that, in accordance with current legislation, they have the right to know, update, rectify their information, and / or revoke the authorization for their treatment. In particular, the rights of the holders as established in article 8 of Law 1581 of 2012 are:

a) Know, update and rectify your personal data. This right may also be exercised, in the face of partial, inaccurate, incomplete, fractioned and / or misleading data,

b) Request proof of the authorization granted for the processing of your personal data,

c) To be informed, upon request submitted through the channels established in this policy, regarding the use that has been given to their personal data,

d) Present before the Superintendency of Industry and Commerce complaints for infractions of the provisions of the law and the other regulations that modify, add or complement it,

e) Revoke the authorization and / or request the deletion of one or more data,

f) Free access to your personal data that have been subject to Treatment.

NOTE 1. Person in charge of requests, inquiries and claims. The person in charge of attending to the requests, inquiries and claims of the holders to exercise their rights to know, update, rectify and delete their data and revoke their authorization is the Marketing Coordinator.

NOTE 2. Procedure to exercise your rights. In case you want to exercise your rights, the owner must send an email or send a physical document to the contact addresses established in this Privacy Policy.

NOTE 3. Requests and Queries on Personal Data. When the owner of the data or his successors in title wish to consult the information contained in the database, they must make the request in writing through any of the channels provided by GRUPO HOTELERO CAMPANARIOS, who will respond to the request within a maximum period of ten ( 10 working days. The request must be made with the full name of the owner, the description of the facts that give rise to the request, the address of residence or email, the contact telephone number and the documents that you want to enforce must be attached. In compliance with the provisions of Law 1581 of 2012, when it is not possible to attend the query within said term, the user will be informed, the reasons for the delay will be expressed and the date on which the query will be answered will be indicated, which may not exceed five (5) business days following the expiration of the first term.

NOTE 4. Revocation of authorization, withdrawal or deletion of the Database and claims about personal data. When the owner of the data or his successors in title consider that the information contained in the databases should be subject to correction, updating or deletion, or when they notice the alleged breach of any of the duties contained in Law 1581 of 2012, they may submit a claim before GRUPO HOTELERO CAMPANARIOS, which will be processed under the following rules:

i. The claim will be formulated through a request addressed to GRUPO HOTELERO CAMPANARIOS where it must include: (i) the identification of the Owner (s), (ii) the description of the facts that give rise to the claim and (iii) the data of notification (the address of residence and / or email and the contact telephone number), and the documents to be enforced will be attached. If the claim is incomplete, GRUPO HOTELERO CAMPANARIOS may request the interested party within five (5) days following receipt of the claim to correct the faults. After two (2) months from the date of the request, without the applicant submitting the required information, it will be understood that the claim has been withdrawn. In the event that GRUPO HOTELERO CAMPANARIOS is not competent to resolve the claim, it will transfer to whoever corresponds within a maximum term of two (2) business days and will inform the Holder of the situation, with which it will be relieved of any claim or liability for the use, rectification or deletion of the data.

ii. Once the complete claim is received, a legend that says "claim in process" and the reason for it will be included in the database, within a term not exceeding two (2) business days. Said legend must be maintained until the claim is decided.

iii. The maximum term to attend the claim will be fifteen (15) business days from the day following the date of receipt. When it is not possible to attend the claim within said term, the Holder will be informed of the reasons for the delay and the date on which his claim will be attended, which in no case may exceed eight (8) business days following the expiration of the first finished.

9. CONTACT. Any questions or additional information will be received and processed by sending them to the contact addresses established in this Privacy Policy.

10. VALIDITY OF THE DATA. The personal data included in the Database will be valid for the period necessary to fulfill its purposes. Once this (s) purpose (s) is fulfilled and provided that there is no legal or contractual duty to keep your information, the data will be eliminated from our Databases.

11. CHANGES IN THE PRIVACY POLICY. GRUPO HOTELERO CAMPANARIOS reserves the right to modify, at any time and unilaterally, its policy and procedures for the processing of personal data. Any substantial change in the Treatment policies will be promptly communicated to the Holders through publication on our web portals.

12. CURRENT LEGISLATION. The current national legislation regarding the protection of personal data is contained in Law 1581 of 2012, Decree 1377 of 2013 and Law 1266 of 2008 and the regulations that modify or complement it.

13. DISCLOSURE OF INFORMATION. The Holder, with the acceptance of this personal data treatment policy, declares to know that GRUPO HOTELERO CAMPANARIOS can provide this information to judicial and / or administrative entities and other entities of the State that, in the exercise of their functions, request this information or when there is a court order. Likewise, it accepts that they may be subject to internal audit or external audit processes by companies in charge of this type of control. The foregoing, subject to the confidentiality of the information.