Privacy Policy

Your privacy and trust are very important to us. Therefore, we want to ensure that you know how we safeguard the integrity, confidentiality, and availability of your personal data, in compliance with Colombian legislation.

In compliance with Law 1581 of 2012 and Article 10 of Decree 1377 of 2013, we request your authorization to continue processing your personal data for the purpose of collecting, gathering, storing, using, circulating, deleting, processing, compiling, exchanging, processing, updating, and disposing of the personal data that you have provided to us and that has been incorporated into the databases of our company GRUPO VDT COLOMBIA-VUELOKEY SAS. Likewise, you may exercise the rights to know, update, rectify, delete, request proof of authorization, be informed of the use of your personal data, and file complaints with the Superintendence of Industry and Commerce for violations of the provisions of this law and other regulations that modify, add to, or complement it. For any questions in this regard, we make available the email address info@grupovdt.co – info@vuelokey.co.

In matters not covered by personal data protection legislation, the provisions regarding the processing of personal information according to current legislation will apply.

For GRUPO VDT COLOMBIA-VUELOKEY SAS, it is necessary to collect certain personal and sensitive data to carry out activities intrinsic to the corporate purpose.

This document contains our policy for the protection and processing of personal data, which aims to inform what data is captured in the provision of our services and products and for what purposes, when we share it, how we use and protect it, as well as the rights that belong to the holders of personal data and how to exercise them.

The personal information and/or data collected directly from you as a customer are as follows:

DEFINITIONS ACCORDING TO STATUTORY LAW 1581 OF 2012.

• Authorization: Prior, express, and informed consent of the Data Subject to carry out the Processing of personal data;
• Database: Organized set of personal data that is subject to Processing;
• Personal data: Any information linked or that can be associated with one or more specific or identifiable natural persons;
• Data Processor: Natural or legal person, public or private, who by themselves or in association with others, carries out the Processing of personal data on behalf of the data controller;
• Data Controller: Natural or legal person, public or private, who by themselves or in association with others, decides on the database and/or the Processing of data;
• Data Subject: Natural person whose personal data is subject to Processing;
• Processing: Any operation or set of operations on personal data, such as collection, storage, use, circulation, or deletion.
• Sensitive data: those that affect the privacy of the Data Subject or whose improper use may generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership in unions, social organizations, human rights organizations, or that promote the interests of any political party or that guarantee the rights and guarantees of opposition political parties, as well as data relating to health, sexual life, and biometric data.

Except when: Authorization of data will not be necessary when the Data Subject has given explicit authorization for such Processing, except in cases where the law does not require the granting of such authorization. In case it is necessary to safeguard the vital interest of the Data Subject and they are physically or legally incapacitated, the representative will give the authorization.

• Personal Data of Children and Adolescents: Personal data of minors, whose Processing is prohibited, except when the purpose pursued with such Processing responds to the interest of children and adolescents and ensures without exception the respect for their prevailing rights.
• Transfer: The Transfer of data takes place when the controller and/or processor of Personal Data, located in Colombia, sends the information or Personal Data to a recipient, who in turn is a Data Controller and is located inside or outside the country.
• Transmission: Processing of personal data that involves the communication of these within or outside the territory of the Republic of Colombia, when it has the purpose of carrying out processing by the processor on behalf of the controller.
• Processing: Any operation or set of operations on personal data, such as collection, storage, use, circulation, or deletion thereof. These definitions will be maintained when referred to in singular and plural, and will be understood as modified when the applicable law and/or regulations and/or interpretations of the competent authorities modify them.

PRINCIPLES FOR DATA PROCESSING

• Principle of legality: The Processing referred to in this law is a regulated activity that must be subject to what is established in it and in the other provisions that develop it;
• Principle of purpose: The Processing must obey a legitimate purpose in accordance with the Constitution and the Law, which must be informed to the Data Subject;
• Principle of freedom: The Processing can only be exercised with the prior, express, and informed consent of the Data Subject. Personal data may not be obtained or disclosed without prior authorization, or in the absence of a legal or judicial mandate that relieves consent;
• Principle of veracity or quality: The information subject to Processing must be truthful, complete, accurate, updated, verifiable, and understandable. The Processing of partial, incomplete, fragmented data or data that induces error is prohibited;
• Principle of transparency: In the Processing, the right of the Data Subject to obtain from the data controller or the data processor, at any time and without restrictions, information about the existence of data concerning them must be guaranteed;
• Principle of restricted access and circulation: The processing is subject to the limits that derive from the nature of personal data, the provisions of this law, and the Constitution. In this sense, the Processing may only be carried out by persons authorized by the Data Subject and/or by the persons provided for in this law; Personal data, except public information, may not be available on the Internet or other means of mass disclosure or communication, unless access is technically controllable to provide restricted knowledge only to Data Subjects or authorized third parties in accordance with this law;
• Principle of security: The information subject to Processing by the Data Controller or Data Processor referred to in this law must be handled with the technical, human, and administrative measures necessary to provide security to the records, avoiding their alteration, loss, consultation, unauthorized or fraudulent use or access;
• Principle of confidentiality: All persons involved in the Processing of personal data that do not have the nature of public data are obliged to guarantee the confidentiality of the information, even after the end of their relationship with any of the tasks that comprise the Processing, being able only to provide or communicate personal data when it corresponds to the development of the activities authorized in this law and under its terms.

RIGHTS AND LEGAL CONDITIONS FOR DATA PROCESSING

Rights of data subjects:

To know, update, and rectify their personal data before GRUPO VDT COLOMBIA regarding partial, inaccurate, incomplete, fragmented data that induces error, or those whose Processing is expressly prohibited or has not been authorized.

To request proof of the authorization granted to GRUPO VDT COLOMBIA except when expressly exempted as a requirement for Processing, in accordance with the provisions of the law.

To be informed by GRUPO VDT COLOMBIA, upon request, regarding the use of this data.

To file complaints with the Superintendence of Industry and Commerce for violations of the provisions of this law and other regulations that modify, add to, or complement it.

To revoke the authorization and/or request the deletion of data when the principles, constitutional and legal rights and guarantees are not respected.

To access their personal data free of charge, which were voluntarily indicated to GRUPO VDT COLOMBIA.

Type of person:

Natural: names and surnames, type of identification, identification number, gender, marital status, and date of birth.

Legal: company name, tax ID, address, telephone, mobile, email, country, city. Information necessary to facilitate travel or other services, including preferences such as travel class, names and surnames of passengers (type of document, document number, date of birth, name, surname, gender, email, nationality, passport expiration date), contacts for accidents or any other anomaly (names and surnames, telephone)

Cardholder data: type of document, document number, telephone, address, email, names, card number, expiration date, and bank.

Quote request: names, surnames, telephone numbers, city, and email.

Travel information: type of request, destination, departure date, duration, number of adults, number of children, hotel category, meals, additional services, preferences, transportation service, budget per person.

Rate our site: your opinion is very important for us to continuously improve our service channels: names, surnames, email, telephone numbers, and city.

Complaint request: names, surnames, identification number, address, telephone numbers, city, email, and comments.

Technical problem report: names, surnames, address, telephone numbers, city, email, and comments.

DUTIES OF DATA CONTROLLERS AND DATA PROCESSORS

To guarantee the Data Subject, at all times, the full and effective exercise of the right to habeas data;

To request and keep, under the conditions provided in this law, a copy of the respective authorization granted by the Data Subject;

To properly inform the Data Subject about the purpose of the collection and the rights they have by virtue of the authorization granted;

To keep the information under the necessary security conditions to prevent its alteration, loss, consultation, unauthorized or fraudulent use or access;

To guarantee that the information provided to GRUPO VDT COLOMBIA is truthful, complete, accurate, updated, verifiable, and understandable;

To update the information, communicating in a timely manner to GRUPO VDT COLOMBIA, all developments regarding the data previously provided and adopt the other necessary measures so that the information provided to it remains updated;

To provide or rectify the information when it is incorrect and communicate what is pertinent; likewise, GRUPO VDT must inform at the request of the Data Subject about the use given to their data;

To process the queries and claims filed under the terms indicated in this law;

To inform the data protection authority when violations of security codes occur and there are risks in the administration of the Data Subjects' information.

To comply with the instructions and requirements issued by the Superintendence of Industry and Commerce.

Duties of Data Processors

To guarantee the Data Subject, at all times, the full and effective exercise of the right to habeas data;

To keep the information under the necessary security conditions to prevent its alteration, loss, consultation, unauthorized or fraudulent use or access;

To timely update, rectify, or delete data under the terms of this law;

To update the information reported by the Data Controllers within five (5) business days from its receipt;

To process the queries and claims filed by Data Subjects under the terms indicated in this law;

To adopt an internal manual of policies and procedures to guarantee adequate compliance with this law and, especially, for the attention of queries and claims by Data Subjects;

To register in the database the legend "in process" in the manner regulated in this law;

To refrain from circulating information that is being disputed by the Data Subject and whose blocking has been ordered by the Superintendence of Industry and Commerce;

To allow access to information only to persons who may have access to it;

To inform the Superintendence of Industry and Commerce when violations of security codes occur and there are risks in the administration of the Data Subjects' information;

To comply with the instructions and requirements issued by the Superintendence of Industry and Commerce.

GRUPO VDT COLOMBIA-VUELOKEY SAS reserves the right to improve, update, modify, delete any type of information, content, domain or subdomain that may appear on the website, without any obligation of prior notice, understanding as sufficient the publication on the websites of GRUPO VDT COLOMBIA-VUELOKEY SAS and its different business units, for the solution of legal or internal requests and for the provision or offering of new services or products.

AUTHORIZATION FORM AND MECHANISMS FOR GRANTING IT

PARCE TRAVEL COLOMBIA informs customers of its different services and/or products about its personal data protection policy, as follows.

I. The Personal Data you will provide will be collected and its manual or automated processing is for the following purposes:

The support of the contractual relationship, if applicable, established with PARCE TRAVEL COLOMBIA.

The provision of services related to the products and services offered. In which the user and/or customer decides to subscribe, register, or use.

The performance of all activities related to the service or product will be included in an email list for sending the newsletter.

To communicate changes to them.

Processing of your requests, administration of activities, clarifications, research, and market statistics.

Marketing and sale of our products and services.

To notify you about new services or products related to those already contracted or acquired with us.

The performance of any complementary or auxiliary activity necessary for the provision of services.

To prepare studies and programs that are necessary to determine consumption habits.

For the refinement of security filters and business rules in commercial transactions; confirm, process such transactions, with your financial institution, with our service providers, and with you.

To conduct periodic evaluations of our products and services in order to improve their quality.

To evaluate the quality of the service we provide, and in general, to fulfill the obligations we have contracted with you.

The sending, by traditional and electronic means, of technical, operational, and commercial information about products and services offered by PARCE TRAVEL COLOMBIA, its different business units and/or suppliers, currently and in the future.

The request for satisfaction surveys, which the user is not obliged to answer.

II. Only personal data referring to natural persons are considered personal data. All types of legal entities are excluded from them.

III. We start from the fact that the user is legitimately enabled to provide, receive, and forward "Personal Data". To avoid any defenselessness, PARCE TRAVEL COLOMBIA provides the user with the possibility of responding on the same platform to the information sent, free of charge without mediating contractual relationship.

IV. If you provide us with personal information about a person other than yourself, such as your spouse, children, or a coworker, we understand that you have the authorization of that person to provide us with their data; and we do not verify, nor do we assume the obligation to verify the identity of the user/customer, nor the veracity, validity, sufficiency, and authenticity of the data of each of them that you provide. By virtue of the foregoing, we do not assume responsibility for damages or losses of any nature that may originate from the lack of veracity, homonymy, or identity information impersonation.

V. PARCE TRAVEL COLOMBIA reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as to good practices in the tourism sector and other sectors of the economy that are part of the business group.

VI. In such cases, PARCE TRAVEL COLOMBIA will announce on this page the changes introduced with reasonable advance notice before their implementation.

VII. Certain services or products provided on the page www.parcetravel.com, and on any of the portals, may contain particular conditions with specific provisions regarding the protection of Personal Data.

VIII. The Personal Data collected will be subject to manual or automated processing and incorporated into the corresponding databases by PARCE TRAVEL COLOMBIA, as data processor and responsible for data protection. This information provided to PARCE TRAVEL COLOMBIA by its customers or users will be valid for a term of up to 10 years, counted from the date of the last authorization by the information holder. The foregoing to comply with the legal, fiscal, tax, or contractual obligations borne by the parties.

IX. For this purpose, PARCE TRAVEL COLOMBIA will provide "USERS" with adequate technical resources so that, in advance, they can access this notice about this Policy or any other relevant information and can provide their consent so that PARCE TRAVEL COLOMBIA proceeds with the collection.

All forms will be designed so that users freely and voluntarily determine whether they wish to provide PARCE TRAVEL COLOMBIA with the Personal Data that may be required of them or that may be obtained from "USERS" on the occasion of subscription or registration for some of the services or products offered by PARCE TRAVEL COLOMBIA, or their reception and possible response in others.

In the hypothesis of services aimed at minors, in which the collection of Personal Data occurs, PARCE TRAVEL COLOMBIA will always request the consent of their parent or legal guardian, so that minors can access their Personal Data and these can be subject to manual or automated processing as provided in this notice about this policy.

XII. Usually, the services or products provided to the user are in their capacity as a natural person. Therefore, in most cases, it is necessary to prove their digital identity and capacity to act conveniently and legally.

XIII. Sometimes PARCE TRAVEL COLOMBIA receives personal information from our business partners. PARCE TRAVEL COLOMBIA only uses this information if it has been collected in accordance with this Data Protection and Information Processing Policy.

XIV. We will always notify you before collecting any personal information and inform you about the purpose of such collection.

XV. We will request your express consent for processing or before using or communicating your data, for any purpose other than the initial one. Therefore, we will need your consent in the physical or digital form, accepting this Policy, our customers, internal or external, travelers and users, in their capacity as holders of the collected data, authorize PARCE TRAVEL COLOMBIA to carry out the processing thereof, partially or totally, including collection, storage, use, processing, recording, circulation, deletion, transmission, and transfer to third countries, the data or information provided, for the purposes previously related.

XVI. Protection of personal data: PARCE TRAVEL COLOMBIA SAS has adopted the legally required levels of security for the protection of Personal Data, and has installed all the means and technical measures at its disposal to avoid the loss, misuse, alteration, unauthorized access, and theft of Personal Data provided to PARCE TRAVEL COLOMBIA, however, the user must be aware that security measures on the Internet are not unbreakable.

Our security server uses cryptographic techniques consisting of the use of mathematical algorithms that allow encrypting and decrypting messages, ensuring that any transaction carried out over the Internet remains private and protected. We use a security protocol called «SSL3».

What is SSL?

It is an encryption method that prevents third parties from viewing or modifying data transmitted via the Internet. It works so that the consumer's browser automatically encrypts the payment order information before sending it to the merchant or, if using a virtual POS, to the Financial Institution. Once sent, only the recipient will be able to access this information, which will be protected. To be operational, you only need to have a browser (Internet Explorer, Netscape Communicator). Recent developments in server/browser technology have made it easier to use Internet services without any concern about electronic fraud. Two examples are SSL (Secure Sockets Layer), developed by Netscape, and S-HTTP (Secure Hypertext Transfer Protocol), developed by Terisa Systems, Inc. These two security protocols allow server and browser authentication so that the communication flowing between them is secure. Through cryptographic techniques and digital signature, these protocols allow Internet browsers and servers to identify each other; It allows website owners to control access to particular servers, directories, and files; It facilitates the sending of sensitive information, such as credit card numbers, and that this is inaccessible to third parties; and ensures that this information shared between the browser and the server cannot be tampered with, accidentally or deliberately, without being detected.

Access to certain PARCE TRAVEL COLOMBIA web pages, services, products, and activities requires a username and password. It is your responsibility to maintain the confidentiality of your username and password.

We have trust seals to conduct electronic commerce, and adequate tools for vulnerability management.

How can I know if a Web page is secure?

When you are asked to enter personal data such as credit card number, regardless of the security system implemented, you will have the certainty that a merchant is secure when a closed padlock appears at the bottom of the browser of this type:

Netscape Navigator 4.0 | Internet Explorer 3.0

Our secure technology server

Every Reservation you make at PARCE TRAVEL COLOMBIA with your credit card is made through our Secure Technology Server. Our server meets the requirements for an Internet commercial transaction to be considered secure:

• Authentication: ensures your browser that the information is being sent to the correct server, and that the server is secure.
• Encryption: encodes the data so that it cannot be read by anyone, except the security server and thus ensures its confidentiality.
• Data integrity: checks the transferred data to ensure that it is not altered and thus ensures the integrity of the information that is exchanged.

XVI. Likewise, there are Security risks that you should take into account when conducting transactions on the Internet:

a) It may occur that a user is deceived by emails or some DNS server deception, to visit a fake site that has the same design, but where the card data is loaded into the fake system, stealing information from the cardholder. Therefore, it is important to generate the culture that users to conduct transactions must enter directly through known domains to reduce risks.

b) It may occur that the computer where the user is conducting the transaction has installed without the user's prior knowledge some spyware or malicious software that captures everything typed on the keyboard or captures information from input devices and is sent to some network or host on the Internet. Therefore, it is recommended as much as possible that the transaction be carried out on the home or office computer.

c) User impersonation could occur or the user denies having sent and/or received the transaction and it is used by a third party.

d) It is recommended that from the equipment where electronic transactions are carried out, have an updated and active antivirus to mitigate fraud risks.

XVII. Since PARCE TRAVEL COLOMBIA is a travel agency that sells products to third parties, your personal information may be shared with business partners and/or third-party suppliers involving (flight reservation systems, hotels, cars, transactional security validators, banks, financial networks, tourist services), such processes can be carried out in different places from where the tourist service or product acquired is contracted, with the same purposes that have been indicated for the collection of Personal Data. These entities are obliged to comply with the corresponding confidentiality and transfer agreements.

XVIII. PARCE TRAVEL COLOMBIA does not transfer the Personal Data of its users to third parties, unless it has the appropriate authorizations or there is a court order. When this circumstance proceeds, due to legal or corporate obligation, it will be duly warned to users in the Personal Data collection forms, along with the identification of the company that transfers them and said third party, the type of activities to which it is dedicated and the purpose to which the transfer responds.

XIX. In cases where PARCE TRAVEL COLOMBIA has to transfer Personal Data to third parties, they may have their domicile abroad. For the purpose of providing services and/or products. PARCE TRAVEL COLOMBIA guarantees the maintenance of confidentiality and secure processing of Personal Data in international movements that may occur as a result of these sessions.

XX. If personal information was collected or provided prior to July 30, 2013, and you did not express your opposition to your personal data being transferred, it will be understood that you have given your consent. In the event that you wish to ratify your consent or express your refusal, you can indicate it through the following email info@parcetravel.com.

1. Use of cookie technology or other tracking: Like other websites, PARCE TRAVEL COLOMBIA uses certain technologies, such as cookies, that allow us to make your visit to our sites easier and more efficient, providing you with a personalized service and recognizing you when you return to our site. For the purposes of this Privacy Notice, "cookies" will be identified as text information files that a website transfers to the hard drive of users' computers for the purpose of storing certain records and preferences.

Cookies

1. A "cookie" is a piece of information that the browser stores on your computer's hard drive. Each time you visit our website, our server will recognize the "cookie" and provide us with information about your last visit so that we can provide you with better service. Most browsers accept the use of "cookies" automatically, but you can usually modify the browser settings so that it does not.
2. Websites may allow advertising or third-party features that send "cookies" to users' computers.
3. Cookies are only associated with an anonymous user and their computer, and do not provide the user's first and last name by themselves, in many cases, you can browse any of the PARCE TRAVEL COLOMBIA websites anonymously. When you access any PARCE TRAVEL COLOMBIA website, your IP address (your computer's Internet address) is recorded, so that it gives us an idea of what parts of the website you visit and how much time you spend in each section. We do not link your IP address to any of your personal information, unless you have registered with us and have entered the system using your profile.
4. Therefore, it is possible that in certain applications PARCE TRAVEL COLOMBIA recognizes users after they have registered for the first time, without having to register on each visit to access the areas and services or products reserved exclusively for them.
5. In other services, it will be necessary to use certain access keys, and even the use of a digital certificate, in the characteristics that are determined.
6. The cookies used cannot read cookie files created by other providers. PARCE TRAVEL COLOMBIA encrypts users' identifying data for greater security.
7. To use the PARCE TRAVEL COLOMBIA website, it is not necessary for the user to allow the installation of cookies sent by PARCE TRAVEL COLOMBIA without prejudice to the fact that in such case it will be necessary for the "USER" to register as users of each of the services whose provision requires

COMPLAINTS AND CLAIMS

In accordance with the provisions of Article 15 of Law 1581 of 2012, the Data Subject or their successors who consider that the information contained in a Database should be subject to rectification, updating, or deletion, or when they notice the alleged breach of any of the duties contained in Law 1581 of 2012, Decree 1377 of 2013, or any other applicable regulation, may file a claim with the Data Controller, which will be processed under the following rules:

The right of consultation may be exercised by:

1. The Data Subject, upon proof of their identity, or through electronic instruments that allow them to identify themselves.
2. By the representative and/or attorney of the Data Subject, upon proof of representation or power of attorney.
3. By stipulation in favor of another or for another.
4. The rights of children or adolescents will be exercised by the persons who are authorized to represent them.
5. When the request is made by a person other than the Data Subject and it is not proven that they act on their behalf, it will be considered as not filed.

The request for rectification, updating, or deletion must be submitted through the means enabled by PARCE TRAVEL COLOMBIA. indicated in the Privacy Notice and contain, at a minimum, the information indicated in Article 15 of Law 1581 of 2012 and in Article 9 of Decree 1377 of 2013, and other regulations that replace or complement:

1. The name and address of the Data Subject or any other means to receive the response.
2. The documents that prove the identity or personality of their representative.
3. The clear and precise description of the Personal Data with respect to which the Data Subject seeks to exercise any of the rights.
4. The description of the facts that give rise to the claim, the address and documents that the Data Subject wants to assert.
5. If applicable, other elements or documents that facilitate the location of Personal Data.

If the claim received does not have complete information that allows it to be processed, the interested party will be required within five (5) days following its receipt to correct the failures. If two (2) months have elapsed from the date of the requirement without the applicant presenting the required information, it will be understood that they have withdrawn from the claim.

If for any reason a claim is received that should not really be directed against PARCE TRAVEL COLOMBIA, it will transfer, to the extent of its possibilities, to whom it corresponds within a maximum term of two (2) business days, and will inform the interested party of the situation.

The maximum term to attend to the claim will be fifteen (15) business days counted from the day following the date of its receipt. When it is not possible to attend to it within said term, the interested party will be informed before the expiration of said term of the reasons for the delay and the date on which their claim will be attended to, which in no case may exceed eight (8) business days following the expiration of the first term.

POLICY AND PURPOSE OF PROCESSING PARCE TRAVEL COLOMBIA POLICY

In compliance with Statutory Law 1581 of 10/17/2012 and other regulations that modify, add to, or complement it, we have processes and guidelines for the management of information from customers, suppliers, collaborators, and other interest groups, which are referred to in this policy, and within which the following aspects are concentrated.

Adequate provision of services: It includes everything related to the data necessary to analyze and develop the feasibility, contracting, adaptation, execution of the service, in aspects such as: provision of a service, customer service, customer satisfaction, information, security; and in general all the information essential to comply with the scope, regulation, and current regulations.

Commercial Purposes: Any activity aimed at presenting offers, services, advertising, opportunities, loyalty, customer retention; and in general information on goods, products, and services that may be of interest to customers and users.

Other purposes: Eventually, the company may establish other purposes for the processing of personal data, and for this, it must have the prior, express, consented, and informed authorization of the holder for its corresponding processing.

CUSTOMER DATABASES: PARCE TRAVEL COLOMBIA obtains information directly from the Data Subject, to obtain the different services we offer. The processing that will be done with your personal data and its purpose will obtain prior authorization from customers for this purpose and will be stored in our database.

Identification and contact data: For quote requests, names, surnames, identity document, telephone numbers, address, city, and email are collected.

Financial data: Type of document, document number, telephone, address, email, names, card number, expiration date, and bank.

Travel information: Type of request, destination, departure date, duration, number of adults, number of children, hotel category, meals, additional services, preferences, transportation service, budget per person, emergency contacts, baggage information, insurance.

SUPPLIER AND CONTRACTOR DATABASES: PARCE TRAVEL COLOMBIA has a supplier database which contains data of natural and/or legal persons who maintain a commercial and contractual relationship, for the acquisition of services. This database contains public, private, or sensitive personal data.

Suppliers, by authorizing by any means, the use of their information, accept that PARCE TRAVEL COLOMBIA may use, keep, transfer, collect, store, and use personal information for the purpose of:

• Enter your information into this database
• Collect and process your information and that of your representatives
• Make reports to different national or international control and surveillance entities.
• For internal administrative and commercial purposes of audits, accounting reports, statistics, and other purposes indicated in this document, among others.
• Storage and/or processing by approved third parties for the control and management of information and personal data for the correct execution of contracts entered into with us, under the security and confidentiality standards to which we are obliged

EMPLOYEE DATABASES: These are manual or automated databases that contain data of natural persons who are employed by PARCE TRAVEL COLOMBIA, whose processing is intended to comply with legal and regulatory provisions. In this database, both private, public information, sensitive data, and minors' data are incorporated. The processing of data for purposes other than those derived from the employment relationship will require prior authorization from the holder or their legal representative, as the case may be. In no case will PARCE TRAVEL COLOMBIA process sensitive data or minors' data without prior authorization.

• The company as Employer and by mandate of labor legislation and conventional Agreements must have personal information of its employees.
• To materialize labor obligations, it has information and data related to the worker's identification, hiring exams, academic training, work experience, home address, beneficiaries, salaries, Pension Funds, Severance, Occupational Risks, Compensation Fund, Life and accident insurance, bank account for payment from the employment relationship, affiliations to external entities to which the employee voluntarily, consciously, and freely has requested their inclusion to authorize discounts or direct payments through payroll, to facilitate their relationships and prior existence of agreements with those third parties and the company.

NATIONAL AND INTERNATIONAL TRANSFER OF DATA AND PERSONAL INFORMATION

At PARCE TRAVEL COLOMBIA and in compliance with the parameters established by the regulations, transfer and transmission of all personal data may be carried out, with the acceptance of this policy. All measures will be adopted so that third parties know and commit and it may not be used or destined for a different purpose or end. Provided for in Article 26 of Law 1581 of 2012.

International transmissions will not require being informed to the holder or having their consent when there is a personal data transmission contract in accordance with Article 25 of Decree 1377 of 2013.

If you have any questions or inquiries about the process of collection, processing, or transfer of your personal information, or consider that the information contained in a database should be subject to correction, updating, or deletion, please send us a message to the following email account: info@parcetravel.com or through our website contact button https://parcetravel.com/contacto/.

XXIII. Validity: this policy is being modified and updated to be published on the PARCE TRAVEL COLOMBIA website on August 26, 2024, and enters into force from the date of publication.