Integrated Management Policy
The Neiva Plaza Hotel is committed to generating experiences as valuable purposes in the service, which responds to the wishes and needs of our customers and cause a level of remembrance of the hotel and its services, increasing sales through the application of marketing strategies and forming strategic business units in each process.
The hotel, in compliance with legal requirements, will implement the sustainability programs developed in sustainability management, as well as safety and health programs and tools developed to manage risks and generate healthy and safe working environments.
The hotel will have competent leaders, they will be able to form efficient and synergistic work teams with the processes, that contribute to the fulfillment of the organizational objectives by means of the strengthening of the competences of the human talent and developing activities that generate conditions that tend in the assurance of a Good working environment.
CHAPTER I GENERAL PROVISIONS
ARTICLE 1. DEFINITIONS. For the purposes of applying the rules contained in the Present policy and in accordance with what is established in Article 3 of Law 1581 of 2012 Means:
A) Authorization: Prior, express and informed consent of the Holder to carry out the Processing of personal data.
B) Privacy Notice: Verbal or written communication generated by the Responsible addressed to the holder for the processing of your personal data, by which you are informed about the Existence of the policies of Information Processing that will be applicable to it, the form of Access to them and the purposes of the Treatment intended to give personal data.
C) Database: Organized set of personal data that is subject to Treatment.
D) Personal data: Any information linked to or associated with one or more persons Natural or determinable.
E) Private data: It is the data that by its intimate or reserved nature is only relevant for the headline.
F) Sensitive data: Sensitive data are those that affect the privacy of the Holder or Whose abuse may lead to discrimination, such as those that reveal the origin Racial or ethnic origin, political orientation, religious or philosophical beliefs, membership in Unions, social organizations, human rights organizations or that promotes the interests of any Political parties or to guarantee the rights and guarantees of opposition political parties, as well as Such as data on health, sexual life and biometric data.
G) Responsible for the Treatment: Natural or legal person, public or private, that by itself or with another people, perform the processing of personal data on behalf of the treatment.
H) Responsible for the Treatment: Natural or legal person, public or private, that by itself or in association with others, decide on the database and / or the processing of the data.
I) Holder: Natural person whose personal data are subject to Treatment.
J) Treatment: Any operation or set of operations on personal data, such as the collection, storage, use, circulation or suppression thereof.
ARTICLE 2. OBJECT. This document is intended to regulate Collection, handling and treatment of personal data made by the HOTEL NEIVA PLAZA, in order to guarantee and protect the fundamental right of habeas data of its guests, Visitors, customers, users and suppliers within the framework established by law.
All previous In compliance with what is provided in paragraph (k) of Article 17 of Law 1581 of 2012, which regulates the Duties that assist those responsible for the processing of personal data, within which Is to adopt an internal policy and procedures manual to ensure the Adequate compliance with the law and, in particular, for the attention of inquiries and complaints.
ARTICLE 3. SCOPE OF APPLICATION. This manual will be applicable to personal data Registered and to be registered in the different databases managed by the NEIVA PLAZA HOTEL, that is, to the databases of our guests, visitors, customers and suppliers, To provide us with your data for commercial purposes.
The information collected by the NEIVA PLAZA HOTEL, may include, in whole or in part according to the needs of each product and / or service, among others the following data:
• Names and surnames.
• Type and identification number.
• Nationality and country of residence.
• Date of birth and gender.
• Marital status and / or relationship to persons Minors or disabled applicants for our services.
• Fixed and Contact phones (personal and / or work).
• Postal and electronic addresses (Personal and / or labor).
• Profession or trade
• Company in which you work and charge.
• Origin and destination
• Reason for travel
• Credit card information (card number,Bank, date of expiration).
• cardholder´s personal information (names and Surname, type and identification number).
• Billing Address where the cardholder Receives its bank statements.
ARTICLE 4. VERACITY OF THE INFORMATION. Our guests, visitors, customers, Users and suppliers must provide truthful information about their personal data to make possible the provision of services by the NEIVA PLAZA HOTEL and under Whose condition they agree to deliver the required information.
NEIVA PLAZA HOTEL assumes the accuracy of the information provided and does not verify, the obligation to verify, the identity of the guests, visitors, customers, users and suppliers, nor the veracity, validity, sufficiency and authenticity of the data that each of them provides. Therefore, it assumes no responsibility for damages and / or damages of any kind that could have origin in the lack of veracity, validity, sufficiency or authenticity of the information, including damages that may be due to the homonymy or the impersonation of the identity.
ARTICLE 5. APPLICABLE LEGISLATION. This manual was developed taking into account the Ordinances of Law 1581 of 2012 "By which general provisions are laid down for the Protection of personal data "and Decree No. 1377 of 2013" By which regulations partially the Law 1581 of 2012".
ARTICLE 6. INFORMATION OF CHILDREN AND ADOLESCENTS MINOR OF AGE. NEIVA PLAZA HOTEL shall ensure the proper use of the personal data of children, Adolescents, guaranteeing that in the treatment of their data the Interests, and their fundamental rights and, where possible, Opinion, as holders of their personal data.
ARTICLE 7. PURPOSES OF THE TREATMENT OF PERSONAL DATA. Information collected is used to process, confirm, comply with and provide the services and / or Products purchased, directly and / or with the participation of third party suppliers of products or Services, as well as to promote and advertise our activities, products and services, carry out transactions, make reports to the various administrative control authorities and National or international surveillance, police or judicial and/ or insurance companies, for internal and / or commercial administrative purposes such as Such as market research, audits, accounting reports, statistical analysis, billing, And offering and / or recognizing benefits of our loyalty programs.
By accepting this Privacy and Treatment Policy, our guests, visitors, customers, Users as providers of data collected, authorize the NEIVA PLAZA HOTEL carry out the treatment of the same, partially or totally, including the Collection, storage, recording, use, circulation, processing, suppression, for the Execution of activities related to services and products purchased, such as, Making reservations, modifications, cancellations and changes thereof, refunds, Consultation, complaints and claims, payment of compensation and compensation, records Accounting, correspondence, processing and verification of credit, debit and other Instruments of payment, identification of fraud and prevention of money laundering and other Criminal activities and / or for the operation of loyalty programs and other purposes Indicated in this document.
• Use information received from them, for the purposes of marketing their products and services, and of the products and services of third parties with which the NEIVA PLAZA HOTEL maintains a business relationship.
• Provide personal data to the control and surveillance authorities Police or judicial, by virtue of a legal or regulatory requirement and / or use or disclose this Information and personal data in defense of their rights and / or their property as soon as said Defense is related to the products and / or services contracted by its passengers, customers and Users.
• Allow access to information and personal data to auditors or third parties hired to carry out internal or external audit processes specific to the activity Commercial we develop.
• Consult and update personal data, at any time, In order to keep the information up to date.
• To contract storage with third parties And / or processing of information and personal data for the correct execution of the contracts with us, under the standards of security and confidentiality to which we are Forced.
CHAPTER II AUTHORIZATION
ARTICLE 8. AUTHORIZATION. The collection, storage, use, circulation or suppression of
Personal data by the NEIVA PLAZA HOTEL requires the free, prior, Express and informed consent of the holder thereof. The NEIVA PLAZA HOTEL, in its condition of Responsible for the processing of personal data, has provided the necessary mechanisms to obtain authorization from the holders, guaranteeing in any case that it is possible to verify the authorization. With the aforementioned authorization, the customer accepts the policies and conditions established in this document.
ARTICLE 9. METHOD AND MECHANISMS TO GRANT THE AUTHORIZATION. Authorization Of the holder of the information shall be included in each of the channels and mechanisms for collecting Data of NEIVA PLAZA HOTEL Thus, it may be recorded in a physical, electronic or any other format that allows Ensure their subsequent consultation. The authorization shall be issued by the holder prior the treatment of your personal data, in accordance with the provisions of Law 1581 of 2012. The consent procedure is guaranteed to be made known of the holder of the personal data, both the fact that your personal information will be collected and Used for specific and known purposes, as you have the option to know any Alternation to them and the specific use of them has been given. The above in order that the holder makes informed decisions regarding their personal data and controls the use of their personal information.
CHAPTER III RIGHTS AND DUTIES
ARTICLE 10. RIGHTS OF THE HOLDERS OF THE INFORMATION. In accordance with
Established in article 8 of Law 1581 of 2012, the holder of the personal data has the following rights:
A) Know, update and rectify your personal data in front of the NEIVA PLAZA HOTEL, in its Condition of controller.
B) Request proof of authorization granted to NEIVA PLAZA HOTEL, in its condition of Responsible for treatment.
C) Be informed by the NEIVA PLAZA HOTEL upon request, regarding the use you have given to your personal data.
(D) Submit to the Superintendence of Industry and Commerce complaints for violations of the provisions in Law 1581 of 2012, once it has exhausted the process of consultation or claim before the Responsible for Treatment.
E) Revoke the authorization and / or request the deletion of the data when in the Treatment, the principles, rights and constitutional and legal guarantees are not respected.
F) Access free of charge your personal data that have been processed.
ARTICLE 11. DUTIES OF STELLAR HOTELS IN RELATION TO THE TREATMENT OF
PERSONAL INFORMATION. The NEIVA PLAZA HOTEL will keep in mind at all times that personal data are owned by the persons to whom they refer and that only they can Decide on them. In this sense, it will use them only for those purposes for the Which is duly authorized, and respecting in all cases Law 1581 of 2012 on Personal data protection.
In accordance with the provisions of article 17 of Law 1581 of 2012, the NEIVA PLAZA HOTEL undertakes to comply permanently with the following duties:
A) Guarantee to the Holder, at all times, the full and effective exercise of the right of habeas data.
B) Keep the information under the necessary security conditions to prevent its Tampering, loss, consultation, use or unauthorized or fraudulent access.
C) Perform opportunely, this is in the terms foreseen in articles 14 and 15 of Law 1581 of 2012, Updating, rectification or deletion of data.
D) Handling queries and complaints Formulated by the Holders in the terms indicated in article 14 of Law 1581 of 2012.
E) To insert in the database the legend "information in judicial discussion" once notified by the competent authority on quality or Details of personal data.
F) Refrain from circulating information that is being disputed By the Holder and whose blockade has been ordered by the Superintendency of Industry and Commerce.
G) Allow access to information only to those who may have access to it.
H) Inform the Superintendency of Industry and Commerce when violations are presented to the Security codes and risks exist in the administration of the information of the Holders.
(I) Comply with the instructions and requirements issued by the Superintendency of Industry and Commerce.
CHAPTER IV ACCESS, CONSULTATION AND CLAIM PROCEDURES
• Names and surnames.
• Document type.
• Document number.
ARTICLE 13. RESPONSE TO CONSULTATIONS. In any case, regardless of the Mechanism implemented for the attention of requests for consultation, they will be met in a maximum term of ten (10) business days from the date of receipt. When It is not possible to attend the consultation within that term, the interested party shall be informed before The expiry of 10 days, stating the reasons for the delay and indicating the date of Will attend to your query, which in no case may exceed the five (5) business days following the Expiration of the first term.
ARTICLE 14. CLAIMS. In accordance with what is established in article 14 of Law 1581 of 2012, the Holder or his successors in title who consider that the information contained in a database be corrected, updated or deleted, or when they Breach of any of the duties contained in Law 1581 of 2012, may present A complaint to the Responsible for Treatment, which will be processed under the following rules:
1. The claim may be submitted by the Card Holder in the formats that the hotel has for its purpose. If the complaint received does not have complete information that allows you to procedure, with the identification of the Holder, the description of the facts that give rise to the management, and accompanying the documents that it wishes to assert, will be required to the Interested party within five (5) days of receiving it to remedy any faults. After two (2) months from the date of the request without the applicant submitting the Information, it shall be deemed to have waived the claim. If for any reason the Company receives a claim that should not be directed against him, Correspond within a maximum term of two (2) business days and inform the interested.
2. Once received the complete claim, will be included in the database that maintains Hotels STELLING a legend that says "reclamation in process" and the reason of the same, in a term not Greater than two (2) business days. This legend must be maintained until the claim is decided.
3. The maximum term to attend the claim shall be fifteen (15) working days from the Day following the date of receipt. When it is not possible to attend to it within the Inform the interested party before the expiry of the said period the reasons for the delay and the date in which your claim will be dealt with, which in no case may exceed eight (8) business days following the expiration of the first term.
ARTICLE 15. IMPLEMENTATION OF PROCEDURES TO GUARANTEE THE RIGHT SUBMITTING CLAIMS. At any time and free of charge, the holder or his Representative may request the NEIVA PLAZA HOTEL to rectify, update or delete of your personal data, with proof of your identity. The rights of rectification, Update or deletion may only be exercised by:
• The holder or his successors in title, with proof of his identity, or through instruments that allow you to identify yourself.
• Your representative, upon accreditation of the representation. When the request is made by a person other than the holder and does not prove that the same Acting on behalf of the latter, shall be deemed not to have been filed. The request for rectification, updating or deletion must be submitted through the means Authorized by the NEIVA PLAZA HOTEL indicated in the privacy notice and contain, as minimum, the following information:
1. The name and address of the holder or any other means of receiving the response
2. The Documents proving the identity or personality of its representative.
3. The description Clear and precise information of the personal data in respect of which the holder seeks to exercise any of the rights.
4. Other elements or documents that facilitate the location of the data Personal information.
PARAGRAPH 1. RECTIFICATION AND UPDATING OF DATA. The NEIVA PLAZAHOTEL Has the obligation to rectify and update at the request of the holder, the information that results be incomplete or inaccurate, in accordance with the procedure and terms above. To the following shall be taken into account in the requests for rectification and Personal data the owner must indicate the corrections to be made and provide the documentation that Endorse your request.
NEIVA PLAZA HOTEL has full freedom to enable mechanisms to facilitate the exercise of this right, as long as they benefit the holder. Consequently, Electronic or other means that it deems relevant.
NEIVA PLAZA HOTEL may establish forms, systems and other simplified methods, which must be informed in the privacy notice and which will be made available to the Interested in the web page. NEIVA PLAZA HOTEL will use the services of customer service that it has in Provided that the deadlines for response are not greater than those indicated by the Article 15 of Law 1581 of 2012. Each time the NEIVA PLAZA HOTEL makes available a new tool to facilitate the Exercise of their rights by the holders of information or modify existing information, Will inform through its web page.
PARAGRAPH 2. DATA SUPPRESSION. The owner has the right, at all times, to request to NEIVA PLAZA HOTEL the deletion (deletion) of your personal data when:
A.) Consider that they are not being treated in accordance with the principles, duties and obligations provided for in Law 1581 of 2012.
B.) No longer necessary or relevant for the purpose for which they were collected.
C.) The period necessary for the Fulfillment of the purposes for which they were collected this deletion implies the total or partial elimination of personal information in accordance with requested by the holder in the records, files, databases or treatments performed by the NEIVA PLAZA HOTEL. It is important to note that the cancellation right is not absolute and the responsible can deny the exercise of the same when:
• The request for deletion of the information will not proceed when the holder has a legal or contract to remain in the database.
• The elimination of data hinders judicial or administrative actions related to Tax obligations, investigation and prosecution of offenses or the updating of sanctions Administrative procedures.
• The data are necessary to protect the holder's legally protected interests; for conduct an action in the public interest, or to comply with a legally binding Acquired by the owner. In case of cancellation of the personal data, the NEIVA PLAZA HOTEL Must carry out the suppression in such a way that the elimination does not allow the Information retrieval.
ARTICLE 16. REVOCATION OF THE AUTHORIZATION. The holders of personal data May revoke the consent to the processing of their personal data at any time, provided it is not prevented by a legal provision.
To do this, they should contact the NEIVA PLAZA HOTEL, by email: email@example.com or to through telephone 8710806 ext. 436 and 100. It should be borne in mind that there are two ways in which revocation of the Consent can be given. The first can be about the totality of the purposes that the NEIVA PLAZA HOTEL must stop fully headline; can occur on specific types of treatment, such as Advertising purposes or market research.
With the second modality, that is, the revocation Partial consent, are kept safe other treatment purposes than the responsible, in accordance with the authorization granted may carry out and with which the holder is agreement. Due to the above, it will be necessary that the holder at the moment raise the request for revocation Consent to the NEIVA PLAZA HOTEL, state in this if the revocation that you intend to perform is Total or partial. In the second hypothesis it should be indicated with which treatment the holder is not according. There will be cases where consent, because of its necessary nature in the relationship between Holder and responsible for the performance of a contract, by legal provision can not be Revoked. The mechanisms or procedures that the NEIVA PLAZA HOTEL establishes for Requests for revocation of consent can not exceed the To respond to complaints as outlined in article 15 of Law 1581 of 2012.
CHAPTER V INFORMATION SECURITY
SECTION 17. SAFETY MEASURES. In developing the established safety principle In Law 1581 of 2012, the NEIVA PLAZA HOTEL has adopted the technical, human and necessary to ensure the of security the records avoiding any tampering, loss, consultation, use or unauthorized or fraudulent access. Notwithstanding the foregoing, the client assumes the risks that derive from providing this information in A medium like the internet, which is subject to various variables - third-party attacks, failures Technical or technological, among others. The NEIVA PLAZA HOTEL will do its best technological effort to guarantee the security of the personal information of all its clients and / or users, employing reasonable and current security methods to prevent unauthorized access, to maintain the accuracy of the data and ensure the correct use of the information.
ARTICLE 18. IMPLEMENTATION OF SAFETY MEASURES. The NEIVA PLAZA HOTEL will maintain mandatory safety protocols for personnel with Access to personal data and information systems. The procedure shall consider, as a minimum, the following aspects:
A) The third parties hired by the NEIVA PLAZA HOTEL, will be obliged to adhere and give compliance with information security policies and manuals, as well as protocols Security that we apply to all our processes.
B) All contract of the NEIVA PLAZA HOTEL with third parties (contractors, external consultants, temporary collaborators, etc.) that Involves the processing of information and personal data, will include a confidentiality agreement which details its commitments for the protection, care, security and preservation of Confidentiality, integrity and privacy of the same.
(C) Scope of the procedure with detailed specification of protected resources.
(D) Measures, standards, procedures, Rules and standards aimed at guaranteeing the level of security required by Law 1581 of 2012.
E) Functions and obligations of staff.
F) Structure of the databases of character Personnel and description of the information systems that treat them.
G) Procedure for Notification, management and response to incidents.
H) Copying procedures Backup and recovery of data.
(I) Periodic checks to be carried out for Verify compliance with the provisions of the safety procedure that is implemented
J) Measures to be taken when a medium or document is to be transported, discarded or reused.
(K) The procedure shall be kept up to date at all times and shall be revised whenever there are relevant changes in the information system or in the Organization.
(L) The content of the procedure must be adjusted at all times to the current provisions on the security of personal data.
CHAPTER VI FINAL PROVISIONS
ARTICLE 20. VALIDITY OF THE TREATMENT OF THE INFORMATION AND PERSONAL DATA.
The information provided by customers and users will remain stored up to Fifteen (15) years from the date of the last treatment, to Compliance with the legal and / or contractual obligations in accounting, tax and tax.
For the NEIVA PLAZA HOTEL, the preservation, protection, integrity and confidentiality of the personal data of its clients is very important. For this, we have designed a policy of storage and processing of the information that our customers provide through our different marketing channels (websites, call centers). We are committed to the protection and proper management of this information, according to the legal regime of protection of personal data applicable in each territory where we operate. P>