Personal Data Processing Policy

1. Data Controller

Company name: INVERSIONES MAXITOURS S.A.S.
Trade name: Viajes Maxitours
Address: Medellín, Colombia
Contact channels: Official WhatsApp lines and digital channels authorized by the company.

2. Purpose of Data Processing

The personal data provided by data subjects will be used solely and exclusively for:

• Managing and confirming tour bookings.

• Logistical coordination of tourism services.

• Operational contact before, during and after the service.

• Issuing invoices when required.

• Meeting contractual and legal obligations.

🚫 The information will not be used for promotional, advertising or commercial purposes, unless the data subject gives express, prior and verifiable authorization.

Likewise, the data will not be added to databases for mass marketing campaigns, unless the data subject has clearly consented.

3. Data Collected

We may request, among others:

• First and last names.

• ID or passport number.

• Contact number.

• Email address.

• Information related to the tour booking.

• Data required for invoicing.

We never request sensitive information that is not strictly necessary to provide the service.

4. Information Management and Security

The official WhatsApp lines and other digital channels of Viajes Maxitours are managed directly by the company's own staff, not by external third parties.

This ensures that the data shared by our customers is handled confidentially and used exclusively for purposes related to booking operations.

We implement reasonable administrative, technical and organizational measures to protect information against unauthorized access, loss, misuse or alteration.

5. Rights of the Data Subject

The data subject has the right to:

• Access, update and correct their data.

• Request proof of the authorization granted.

• Be informed about how their data has been used.

• Revoke the authorization or request deletion of the information when there is no legal or contractual duty preventing it.

• File complaints with the Superintendence of Industry and Commerce (SIC).

6. Data Retention

Personal data will be kept only for as long as necessary to fulfill the purpose for which it was collected and the corresponding legal obligations.

7. Acceptance of the Policy

By voluntarily providing their personal data through our official channels, the data subject declares that they have read and accepted this Personal Data Processing Policy.

At Viajes Maxitours we work under the principles of legality, transparency, confidentiality and responsibility, guaranteeing that our customers' personal information will be used solely and exclusively for the proper provision of our tourism services.