Skip to main content
+57 310 587 6696
MAVI Cartagena

Privacy and personal data

Personal data processing policy

This policy explains what information MAVI COLOMBIA S.A.S. processes, why it is used and how people who visit the website or contact MAVI can exercise their rights.

Version 1.4 · Last updated: October 15, 2026

1. Scope and legal framework

This policy applies to personal data processed by MAVI COLOMBIA S.A.S. through mavicolombia.com, WhatsApp, email and communications related to enquiries, quotations and potential bookings.

Processing is governed by the Colombian Constitution, Law 1581 of 2012, Decree 1074 of 2015 and any rules that amend, supplement or replace them.

2. Data we may process

  • Identification and contact data provided by the person: name, telephone or WhatsApp number and optional email address.
  • Enquiry details: preferred date, number of guests, occasion, destination of interest and details voluntarily included in the message.
  • Technical and browsing data needed to host, protect and measure the website: visited URL, date and time, referrer, approximate country or city, browser, operating system and device type.
  • Records of communications and the authorization granted when an enquiry is sent to MAVI.

3. How the form works

When a person submits the form, the enquiry data is securely transmitted to a server function and delivered to MAVI’s corporate email. The website does not keep this content in its own database. After delivery, the same message is optionally prepared so the person can continue the conversation through WhatsApp.

The authorization checkbox is not preselected and is required to submit the enquiry. The email delivered to MAVI includes a record of authorization to answer the request and coordinate a potential booking. If the person chooses to continue through WhatsApp, that service processes information under its own terms and privacy policy.

4. Purposes of processing

Data submitted for an enquiry will not be used for advertising or marketing campaigns without additional, specific and separate authorization.

  • Answer requests for information and check availability.
  • Prepare quotations and coordinate a potential booking, service or experience requested by the data subject.
  • Maintain service and customer-support communications related to the enquiry or booking.
  • Keep evidence of requests, authorizations and communications when necessary for contractual, accounting or legal obligations or the defence of legal rights.
  • Operate, protect and diagnose the website, prevent misuse and obtain aggregated browsing statistics to improve it.

5. Authorization and special categories of data

MAVI will request prior, express and informed authorization when required. Providing sensitive data is optional and this form does not request it. People should avoid including sensitive information or data about children or adolescents in the message field.

When processing is necessary to fulfil a request, a contractual relationship or a legal obligation, MAVI will limit its use to that purpose and what applicable law permits.

6. Providers, links and international processing

The website uses Vercel technology services for hosting and analytics. Vercel Web Analytics states that it does not use third-party cookies and presents aggregated data; technical infrastructure logs may also exist where necessary to operate and protect the service.

To deliver form enquiries, the website uses MAVI’s configured corporate email provider. That provider receives only the submitted information and what is necessary to transport the message to MAVI’s authorized mailbox.

With the visitor’s prior consent, the website may load Google Analytics 4 to measure page views and general actions such as clicks on WhatsApp or check availability. MAVI does not send Google the person’s name, phone number, email address, date, number of guests or content entered in the enquiry form.

When configured and the visitor accepts analytics, Microsoft Clarity analyzes interactions through heatmaps and session recordings. The website masks enquiry forms, their confirmations and the instant-booking module in recordings. It does not use the Clarity identification API to send customer personal data. Microsoft may process technical browsing information outside Colombia.

When sending a WhatsApp message, writing by email or visiting external links such as Instagram, Google or Tripadvisor, information is also subject to the selected service’s policies. These providers may process information outside Colombia. MAVI will limit provider access to what is necessary and apply Colombian rules on data transmission or transfer where applicable.

7. Cookies, analytics and advertising

Vercel Web Analytics operates without third-party cookies and produces aggregated visit statistics. Google Analytics 4 is optional and remains blocked until the visitor selects “Accept analytics”. If accepted, Google may use analytics cookies such as _ga and _ga_* to distinguish visits and generate statistics. Google Signals and advertising-personalization features remain disabled.

Microsoft Clarity, when configured, also remains blocked until analytics is accepted. It may use _clck and _clsk cookies to group visits. The website grants analytics storage consent and denies advertising storage consent. Earlier acceptance for Google Analytics alone does not enable the new recordings: a new choice is requested.

Meta Pixel only loads when the visitor selects “Accept analytics and advertising”. Accepting analytics alone does not enable it. It measures visits, WhatsApp clicks and enquiries accepted by the server to measure and improve advertising on Facebook and Instagram. A click or enquiry is not a confirmed booking or sale. Meta may use cookies such as _fbp and _fbc and process technical browsing information, such as IP address, browser, page URL and referrer, outside Colombia. MAVI does not send Meta form fields, names, phone numbers, email addresses, booking references or payment details. The integration does not enable advanced matching, automatic events or Conversions API.

The choice is stored locally in the browser and can be changed at any time through “Cookie preferences” in the footer. Selecting “Necessary only” prevents the Google, Clarity and Meta tags from loading; withdrawing prior consent disables analytics, stops recordings and removes Google Analytics, Clarity and Meta cookies that the website can identify on this domain. “Accept analytics” keeps Meta disabled. The advertising choice is stored separately; withdrawing it revokes Meta consent and reloads the page to stop its code.

8. Retention and security

MAVI will retain information only for as long as necessary to answer the enquiry, manage the commercial relationship and comply with legal, accounting or contractual obligations or defend legal rights. Once the purpose and applicable periods have ended, information will be deleted, anonymized or kept blocked where a legal retention duty applies.

MAVI adopts reasonable administrative and technical measures to reduce the risk of loss, unauthorized access, alteration or disclosure. No system is completely infallible, so sensitive or unnecessary data should not be sent through the general form.

9. Data subject rights

  • Know, access, update and correct personal data.
  • Request evidence of authorization, subject to legal exceptions.
  • Be informed about how personal data has been used.
  • File a complaint with Colombia’s Superintendence of Industry and Commerce after completing the procedure before MAVI.
  • Revoke authorization or request deletion where legally appropriate.
  • Access personal data being processed free of charge.

10. Enquiries and complaints

MAVI COLOMBIA S.A.S. will handle data subject requests through info@mavicolombia.com. A request must state the data subject’s name, the preferred response channel, a clear description of the request and documents proving identity or representation where necessary.

Access enquiries will be answered within ten (10) business days of receipt. If an answer cannot be provided within that period, MAVI will explain the reason and state a new date, no later than five (5) additional business days.

Complaints will be answered within fifteen (15) business days from the day after a complete complaint is received. If an answer cannot be provided within that period, MAVI will explain the reason and state a new date, no later than eight (8) additional business days. Incomplete complaints and complaints sent to a party without authority will be handled under Law 1581 of 2012.

11. Effective date and changes

This policy takes effect when published and remains effective while MAVI carries out the processing described. Material changes will be communicated through an appropriate channel before new purposes requiring authorization are applied.

Official sources and provider policies

This English version is provided for convenience. The Spanish version is the primary policy for compliance with Colombian law. If the versions differ, the Spanish version prevails.

Instant booking