Skip to main content
Reservations and enquiries+57 310 587 6696
MAVI Cartagena

Privacy and personal data

Personal data processing policy

This policy explains what information MAVI COLOMBIA S.A.S. processes, why it is used and how people who visit the website or contact MAVI can exercise their rights.

Version 1.0 · Last updated: August 29, 2026

1. Scope and legal framework

This policy applies to personal data processed by MAVI COLOMBIA S.A.S. through mavicolombia.com, WhatsApp, email and communications related to enquiries, quotations and potential bookings.

Processing is governed by the Colombian Constitution, Law 1581 of 2012, Decree 1074 of 2015 and any rules that amend, supplement or replace them.

2. Data we may process

  • Identification and contact data provided by the person: name, telephone or WhatsApp number and optional email address.
  • Enquiry details: preferred date, number of guests, occasion, destination of interest and details voluntarily included in the message.
  • Technical and browsing data needed to host, protect and measure the website: visited URL, date and time, referrer, approximate country or city, browser, operating system and device type.
  • Records of communications and the authorization granted when an enquiry is sent to MAVI.

3. How the form works

The fields are processed locally in the browser to prepare a message. The website does not send or store this content in its own database. The information reaches MAVI only when the person opens WhatsApp and chooses to send the message.

The authorization checkbox is not preselected. When accepted, the prepared message includes a record of authorization to answer the enquiry and coordinate a potential booking. WhatsApp processes information under its own terms and privacy policy.

4. Purposes of processing

Data submitted for an enquiry will not be used for advertising or marketing campaigns without additional, specific and separate authorization.

  • Answer requests for information and check availability.
  • Prepare quotations and coordinate a potential booking, service or experience requested by the data subject.
  • Maintain service and customer-support communications related to the enquiry or booking.
  • Keep evidence of requests, authorizations and communications when necessary for contractual, accounting or legal obligations or the defence of legal rights.
  • Operate, protect and diagnose the website, prevent misuse and obtain aggregated browsing statistics to improve it.

5. Authorization and special categories of data

MAVI will request prior, express and informed authorization when required. Providing sensitive data is optional and this form does not request it. People should avoid including sensitive information or data about children or adolescents in the message field.

When processing is necessary to fulfil a request, a contractual relationship or a legal obligation, MAVI will limit its use to that purpose and what applicable law permits.

6. Providers, links and international processing

The website uses Vercel technology services for hosting and analytics. Vercel Web Analytics states that it does not use third-party cookies and presents aggregated data; technical infrastructure logs may also exist where necessary to operate and protect the service.

When sending a WhatsApp message, writing by email or visiting external links such as Instagram, Google or Tripadvisor, information is also subject to the selected service’s policies. These providers may process information outside Colombia. MAVI will limit provider access to what is necessary and apply Colombian rules on data transmission or transfer where applicable.

7. Cookies and analytics

The website does not currently implement advertising cookies or proprietary cross-site tracking tools. Vercel Web Analytics operates without third-party cookies and produces aggregated visit statistics. If non-essential technologies are added in the future, this policy and the consent mechanisms must be updated before they are enabled.

8. Retention and security

MAVI will retain information only for as long as necessary to answer the enquiry, manage the commercial relationship and comply with legal, accounting or contractual obligations or defend legal rights. Once the purpose and applicable periods have ended, information will be deleted, anonymized or kept blocked where a legal retention duty applies.

MAVI adopts reasonable administrative and technical measures to reduce the risk of loss, unauthorized access, alteration or disclosure. No system is completely infallible, so sensitive or unnecessary data should not be sent through the general form.

9. Data subject rights

  • Know, access, update and correct personal data.
  • Request evidence of authorization, subject to legal exceptions.
  • Be informed about how personal data has been used.
  • File a complaint with Colombia’s Superintendence of Industry and Commerce after completing the procedure before MAVI.
  • Revoke authorization or request deletion where legally appropriate.
  • Access personal data being processed free of charge.

10. Enquiries and complaints

MAVI COLOMBIA S.A.S. will handle data subject requests through info@mavicolombia.com. A request must state the data subject’s name, the preferred response channel, a clear description of the request and documents proving identity or representation where necessary.

Access enquiries will be answered within ten (10) business days of receipt. If an answer cannot be provided within that period, MAVI will explain the reason and state a new date, no later than five (5) additional business days.

Complaints will be answered within fifteen (15) business days from the day after a complete complaint is received. If an answer cannot be provided within that period, MAVI will explain the reason and state a new date, no later than eight (8) additional business days. Incomplete complaints and complaints sent to a party without authority will be handled under Law 1581 of 2012.

11. Effective date and changes

This policy takes effect when published and remains effective while MAVI carries out the processing described. Material changes will be communicated through an appropriate channel before new purposes requiring authorization are applied.

Official sources and provider policies

This English version is provided for convenience. The Spanish version is the primary policy for compliance with Colombian law. If the versions differ, the Spanish version prevails.