Customer data protection policy

Table of contents

Text Link

Policy objective

The purpose of this data protection policy is to define Tucaya Colombia's commitments regarding the protection of its customers' personal data.
The agency undertakes to respect the confidentiality of its customers' personal information and to process this data in accordance with current laws, including the General Data Protection Regulation (RGPD).

Collected data

As part of its services, Tucaya Colombia collects several types of personal data, including :

  • Identification details: surname, first name, place and date of birth, gender, nationality, passport number
  • Contact information: telephone number, e-mail address
  • Travel information: itineraries, travel preferences, dietary requirements, etc.
  • Usage data: how the customer came to know the company

Purpose of data collection

Tucaya Colombia collects and processes customer data for the following purposes:

  • Reservations and services management: to ensure the smooth running of reservations and travel services.
  • Customer communication: to respond to requests, send confirmations, service information or notifications of itinerary changes.
  • Enhanced customer experience: to offer services tailored to each customer's preferences and to ensure constant contact during the trip.
  • Legal compliance: to comply with regulatory and legal obligations, particularly in terms of accounting and security.

Data retention period

Tucaya Colombia retains personal data only for as long as is necessary for the purposes for which it is processed or in accordance with applicable legal obligations. In general :

  • Booking data: retained for the time required to draw up a quote or contract, and then for the duration of the trip, in accordance with applicable legislation.
  • Marketing data (if consent is given for the newsletter): retained for as long as the subscription is active. The customer may unsubscribe at any time.

Data security

Tucaya Colombia undertakes to implement technical and organizational measures to protect data against unauthorized access, loss, alteration or disclosure. This includes:

  • Encryption of sensitive data during transmission and storage
  • Firewalls and access controls to limit data access
  • Employee training on data protection and confidentiality

Sharing data with third parties

Tucaya Colombia only shares customers' personal data with third parties when strictly necessary and in the following cases:

  • Service providers: partners and service providers (hotels, airlines, etc.) for the execution of travel bookings.
  • Legal authorities: if required by law or to protect our rights
  • Subcontractors: technical or marketing service providers, subject to strict confidentiality obligations

Personal data will not be shared without the customer's prior consent, unless required by legal or contractual obligations.

Customer rights

In accordance with current regulations, customers have the following rights with regard to their personal data:

  • Right of access: access to personal information held by the agency
  • Right of rectification: correct inaccurate or incomplete information
  • Right of deletion: request the deletion of personal data under certain conditions
  • Right to object: to the processing of their data for legitimate reasons
  • Right to portability: receive personal data in a structured and transferable format

Changes to the data protection policy

This policy may be updated to comply with legal and technical developments.
Any changes will be communicated to customers by email or via a notification on our website.

Contact

For any questions regarding this policy or to exercise their rights, customers may contact Tucaya Colombia by the following means:
Email: colombia@tucaya.com
Postal address: Cra 5 No. 26 A - 50 oficina 307, Bogotá, Colombia

‍