We take the protection of your personal data seriously. This policy explains what data we collect on mytriptocolombia.com, why, how long we keep it and how to exercise your rights, in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
Samuel Bourille, sole proprietor (EI)
11 rue Jacques Gabriel, 33160 Saint-Médard-en-Jalles, France
Email: contact[at]mytriptocolombia.com
Only Samuel Bourille and Angélica Troya, the creators of this website, have access to your data, for the purposes described below.
Data we collect and how we use it
Contact form. Last name, first name, email address and message, to reply to your request. Legal basis: our legitimate interest in answering people who write to us. Retention: three years after our last exchange.
Request form for Colombian providers. Last name, first name, email address, nationality, phone number and travel dates, to forward your request to the provider you have chosen so that they can reply to you directly. Legal basis: steps taken at your request prior to entering into a contract. Retention: three years after our last exchange. The provider then keeps your data under its own responsibility.
Newsletter. First name and email address, to send you our news, through our provider FeedBlitz. Legal basis: your consent. Retention: until you unsubscribe, which you can do at any time using the link in every email.
Comments. Name or nickname, email address, IP address and browser information, to publish and moderate comments and fight spam. Legal basis: our legitimate interest. Retention: as long as the comment is online.
Audience measurement. Browsing data collected by Google Analytics, to understand how the website is used and improve it. Legal basis: your consent. Retention: 13 months maximum for cookies, 25 months for data.
Recipients
Your data is never sold. It may only be shared with:
- Our technical providers, acting on our instructions: Monarobase (hosting, France), FeedBlitz (newsletter, USA), Automattic (Akismet anti-spam and Gravatar services, USA), Google (audience measurement, USA).
- The travel provider you have chosen, for requests sent through the dedicated form.
Transfers outside the European Union
Transfers to the United States (FeedBlitz, Google, Automattic) rely on the EU–US Data Privacy Framework for certified providers or, failing that, on the European Commission’s standard contractual clauses.
Requests sent to a Colombian provider are transferred to Colombia, which does not benefit from a European Commission adequacy decision. This transfer is necessary to process the request you entrust to us (Article 49(1)(b) GDPR). You are informed of this before submitting the form.
Cookies and affiliate links
On your first visit, a banner lets you accept or refuse non-essential cookies (audience measurement, affiliate tracking). You can change your choice at any time via the “Manage cookies” link at the bottom of the page.
Some links on this website are affiliate links. When you click one, the partner (for example Booking) may place a cookie that tells it you came from our website. If you book, it pays us a commission at no extra cost to you. These cookies are governed by the partner’s own privacy policy.
Content embedded from other websites (YouTube videos, Instagram posts, etc.) behaves as if you were visiting those websites, which may collect data about you.
Your rights
You have the right to access, rectify and erase your data, to restrict and object to its processing, the right to data portability and the right to withdraw your consent at any time. You may also give instructions on what should happen to your data after your death.
To exercise these rights, email us at contact[at]mytriptocolombia.com or write to the postal address above. We will reply within one month. We will only ask for proof of identity if we have reasonable doubts about your identity.
If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the data protection authority of your country.
Security
The website uses an encrypted connection (HTTPS). Access to data is restricted to the creators of the website and protected by personal credentials, and data is backed up regularly.
Changes
This policy may be updated. The date of the latest update appears at the top of this page.
