Your privacy is very important to us at Travelhapp. We only collect and use your data as necessary to provide you with a smooth and engaging experience on our site. This policy explains what data we collect, why we collect it, and how it’s protected.
We respect Colombian data protection laws (Law 1581 of 2012 and Decree 1377 of 2013) and comply with the EU’s General Data Protection Regulation (GDPR).
If you have any questions, please reach out to us at hello@travelhapp.com
Latest Update: November 11, 2024
CONTENTS
The data controller is Travelhapp S.A.S., a private company based in Bogotá, Colombia, and legally recognized by the National Government (NIT 901353418-8). Travelhapp S.A.S. manages data processing under the Colombian Chamber of Commerce (registration number 03200567).
We follow strict principles to ensure that data processing respects your rights and adheres to the law:
We collect certain information about our website visitors to improve the Travelhapp experience, optimize our content, and ensure site functionality. This may include both personal and non-personal data, as outlined below.
You may provide personal information to us directly in the following ways:
By choosing to provide this information, you consent to its use as described in this policy.
When you visit our site, we collect certain information automatically through cookies and other tracking technologies to understand how our site is used and enhance its performance. This may include:
This automatically collected information is stored separately from personal information you provide.
We may receive information about you from third-party services we use:
For details on how our partners use your data, see 6. Third-Party Services and links.
Cookies are small text files stored on your device by your web browser. They contain basic information (e.g., browser type, location data, IP address) that helps us recognize your device and improve your browsing experience. Cookies themselves don’t identify you personally.
When you visit our website, cookies are stored on your device if you give us permission. We use two types:
We use some third-party services, like Google Analytics, that set their own cookies on our site. These cookies are managed by the third parties and may collect data beyond our website. We encourage you to review the privacy and cookie policies of these services.
We use the Complianz Cookie Consent plugin to allow you to manage your cookie preferences. When you visit our website, a cookie banner will appear, allowing you to accept or decline cookies.
If you would like to modify your cookie preferences later, you can access the Cookie Settings from the web page footer on a desktop screen (computer) or here:
You have loaded the Cookie Policy without javascript support. On AMP, you can use the manage consent button on the bottom of the page.
In addition to the Complianz Cookie Settings, you can completely disable or delete cookies at any time in your web browser settings.
For guidance on deleting cookies, visit this illustrated step-by-step instruction by NordVPN. Be aware that restricting cookies may affect certain features on our site.
If you previously accepted personalized ads and wish to change your preferences, you can do so directly through the individual ad or ad platform. For example, on Google Ads, you can visit Google’s Ad Settings to opt out of personalized ads.
The information we collect is processed in accordance with applicable laws and regulations and is used for the following purposes:
Provide and Maintain Services: To operate and improve our website and services, ensuring a smooth user experience.
Understand and Enhance User Experience: To better understand how you interact with our website, so we can improve and personalize your experience.
Customer Support: To respond to your inquiries, assist with issues, and provide ongoing customer support.
Security and Safety: To safeguard the security of our website and services, preventing fraud, and ensuring the protection of both user data and our platform.
Product and Service Development: To help us create new features, products, and services based on user feedback and behavior.
Marketing and Communications: To promote Travelhapp through marketing campaigns and communicate updates, newsletters, or special offers (only if you have opted into receiving such communications).
Legal Compliance and Obligations: To comply with applicable laws and regulations, enforce our Terms of Service, and respond to any legal or regulatory requests.
We may share the information we collect with various entities for specific purposes, including:
Internal Team: When you interact with us on the website – such as by submitting inquiries or engaging with us through comments – your information is shared with our internal team. This allows us to respond to your inquiries, provide assistance, and improve our services.
Website Visitors: If you comment on an article, your username and comment will be visible to visitors.
Affiliates: Our website may feature affiliate links to third-party tourism and culture providers. These links redirect users to external websites, where additional services or products can be purchased. When you click on these links, we do not share any of your personal data directly with the tour providers.
Third-Party Service Providers: We may share information with third-party service providers to support website functionality, such as hosting, analytics, and marketing. These third-party providers are required to process your data only for the purpose of providing their services and are not allowed to use your data for other purposes.
Advertising Partners: If we work with third-party advertising partners, they may set cookies to collect information for the purpose of showing you relevant ads. This does not involve sharing your personal information directly with them, but they may collect data about your activity across different services.
Legal Requirements: We may share information when required to comply with laws or regulations, to protect our rights, and to ensure safety. This includes preventing fraud and addressing security issues.
Business Transfers: In the case of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, but will remain subject to this Privacy Policy.
Explicit Consent: We may share your information if you provide explicit consent, for example, to third-party services or partners that are not mentioned above.
All sharing of information will be done in accordance with applicable privacy laws and the safeguards necessary to protect your data.
To be able to offer you all functions and services of the Travelhapp platform we use third-party services and partners. We also use the assistance of third parties to improve our website and for marketing purposes. These providers may be located in third countries.
We are not responsible for the privacy policies and/or practices of these third-party services or the data protection regulations of third countries. We encourage you to carefully review these third-party privacy policies, since the Travelhapp Privacy Policy does not override them.
Overview of third-party services:
Below you will find a detailed the description for what purposes we use each third-party service.
6.1 Host Europe: Web Hosting
Host Europe provides web hosting services for the Travelhapp platform. As part of their service, they may process data related to the hosting environment, server logs, and other technical aspects of the hosting infrastructure. This is necessary for the proper functioning and security of the website.
Data Collected:
Data Processing Agreement: Host Europe provides web hosting services in compliance with GDPR, ensuring that data processed on their servers is handled appropriately and securely.
We use services from Pinterest on our Platform and also maintain an online presence on the Pinterest platform. These services are provided by Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.
Pinterest Inc. complies with the EU-US Data Privacy Framework and Privacy Shield Framework regarding the collection, use, and retention of personal information transferred from the European Union, United Kingdom and Switzerland to the United States.
To advertise our products and services and to communicate with interested parties or customers, we have a presence on Pinterest. Pinterest is a service of Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.
This might cause user data to be processed in the United States. We do not have access to this user data; access is only available to Pinterest.
We integrate social media links to Pinterest on our Platform.
These links work the same way as outlined for Facebook and Instagram above (see Social Media Links to Facebook and Instagram).
We use various services from Google on our Platform, in particular Google Analytics, Google Search Console, Google AdSense, Google Maps and Google Web Fonts.
These Services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).
Google complies with the EU-US Data Privacy Framework and Privacy Shield Framework regarding the collection, use, and retention of personal information transferred from the European Union, United Kingdom and Switzerland to the United States.
Google’s data protection practices
We use the Google Analytics web analytics service and Google Tag Manager on our Platform to understand how people use our Service. The legal basis is Art. 6 Para. 1 lit. f) GDPR: our legitimate interest lies in analyzing user behavior in order to evaluate, optimize, and operate our Platform and its advertising.
Google Analytics uses “cookies”. Usage and user-related information, such as IP address, place, time, or frequency of your visits to our website will be transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the so-called anonymisation function, whereby Google truncates the IP address within the EU or the EEA (European Economic Area) before it is transmitted to the US. Google states that it will not connect your IP address to other data.
The data collected in this way is used by Google to provide us with analyses and reports on visitors’ usage of our Platform. This data can also be used to provide other services related to the use of our website and of the internet in general.
Google offers an opt-out add-on that can be installed on the most popular browsers and offers you control over the data that Google collects when you visit our Platform. https://tools.google.com/dlpage/gaoptout?hl=en
Google Analytics Data Privacy and Security
Google Analytics Terms of Service
We use Google Search Console to monitor and improve our website’s performance in Google Search results. Google Search Console collects data such as search queries, clicks, impressions, and other performance metrics related to our website. This data helps us optimize our website for better visibility and user experience.
For more information on how Google handles this data, please refer to Google’s Privacy Policy: Google Privacy Policy.
We use Google AdSense to display advertisements on our site. Google AdSense may use cookies and web beacons to collect information about your activities on our website and other websites in order to provide advertisements tailored to your interests. Google may use the information collected to personalize ads and measure the effectiveness of the ads displayed.
For more information on how Google AdSense collects and processes data, you can review Google’s Privacy Policy here: Google Privacy Policy.
You can opt out of personalized advertising by visiting Google Ads Settings.
We use Gmail (via SMTP and aliases) to manage email communications. When you send and receive emails, Gmail (provided by Google) processes the content of the emails, including metadata (such as sender/receiver information, IP addresses, timestamps, etc.), and may use this data for purposes such as spam filtering and security.
Google’s Privacy Policy governs the collection and use of this data, including their handling of email content. For more details, please review Google’s Privacy Policy here: Google Privacy Policy.
By using our services, you agree to Google’s data collection and processing as described in their policy.
Our website uses Google Maps to display the location of travel destinations, tourism provider offices, etc. The legal basis is Art. 6 Para. 1 lit. f) GDPR: our legitimate interest lies in providing our Services and optimising the functionality of our website.
If you access the Google Maps components integrated into our Platform, or if you access Google Maps by clicking a link on our Platform, Google will store a cookie on your device via your browser. Your user settings and data are processed to display location information. By connecting to Google in this way, Google can determine from which website your request has been sent and to which IP address the directions are transmitted. We cannot prevent Google from using servers in the US.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser.
Terms and Conditions for Google Maps
Our website uses Google Web Fonts to display external fonts. The legal basis is Art. 6 Para. 1 lit. f) GDPR: our legitimate interest lies in the operation of our Platform and a consistent, attractive and fast display of information.
To enable the display of certain fonts on our Platform, a connection to the Google server in the US is established whenever our Platform is accessed. In this way Google can identify the site from which a request has been sent and to which IP address the fonts are being transmitted for display.
More information on the Google Web Fonts is provided in Google’s Web Fonts Developer FAQs, in particular in the answer to the question “What does using the Google Fonts API mean for the privacy of my users?”
Our website is powered by WordPress, which provides the infrastructure for our platform. When you comment on our website, WordPress collects the following data:
This data is collected to manage and moderate comments, prevent spam, and provide functionality related to commenting.
Please note that while comments require name and email, registration is not available on the site, so no additional user account information is collected.
For further details on how WordPress handles data, please review their privacy policy here: WordPress Privacy Policy.
To provide and enhance the functionality of our website, we use various third-party plugins on our WordPress platform. Some of these plugins may collect and process personal data as part of their operation. Below, we provide an overview of the plugins we use, the data they collect, and their purposes. Please note that the plugins listed here may collect data directly from users or in connection with their use of certain features or services on our website.
Polylang is used for multilingual content management. It collects user data related to language preferences in order to display content in the selected language. Polylang may store cookies related to language preferences for user convenience.
Data Collected: Language preferences (via cookies), IP addresses.
Rank Math is an SEO plugin that helps improve your site’s search engine optimization. It collects user data to track SEO performance, such as search queries and website traffic analytics.
Data Collected: Search query data, user interactions with website content, cookies for SEO tracking purposes.
WP-Optimize is used for cleaning and optimizing the WordPress database. It may collect certain anonymized data to improve its performance.
Data Collected: Database activity, anonymized usage data.
Elementor is a page builder used for designing website pages. It collects data for personalization and user experience improvements.
Data Collected: User interactions with pages, cookies for session management and site performance tracking.
This plugin adds extra design elements and features to Elementor. Similar to Elementor, it may track user interactions with the design elements.
Data Collected: User interactions, cookies for functionality and design purposes.
This plugin provides additional widgets and elements for Elementor. It may collect data on user interactions with those elements.
Data Collected: User interactions, cookies for session management and functionality.
Unlimited Elements Privacy Policy
Complianz helps manage cookie consent and ensures compliance with privacy laws such as GDPR and CCPA. It collects data about user consent and cookie preferences.
Data Collected: Consent preferences, cookies set for tracking user consent across sessions.
You have the opportunity to register for our email newsletter via our website.
We use MailChimp to manage our newsletter and to analyze our newsletter campaigns. MailChimp is a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA (hereinafter “The Rocket Science Group”).
The legal basis for sending the newsletter and analysing our campaigns are Art. 6 Para. 1 lit. a) and f) GDPR. The newsletter will only be sent to you if you have given us your consent to do so. You may revoke your consent at any time. Our legitimate interest in analysing campaigns and user interaction with our newsletter is to improve the quality of the newsletter.
If you register for our newsletter, your email address and, optionally, your name, will be processed by The Rocket Science Group. In addition, your IP address and the date and time of your registration will be saved. When you open an email sent by MailChimp, a file included in the email (called a web beacon) connects to MailChimp’s servers in the US. This allows us to understand if you have opened a newsletter message and which links you click. Moreover, technical information is collected (e.g. time of retrieval, IP address, browser type, and operating system). This information cannot be connected to a specific recipient. It is used exclusively for the statistical analysis.
If you do not want your newsletter usage data to be analysed by MailChimp, you will have to unsubscribe from the newsletter.
The Rocket Science Group complies with the EU-US Data Privacy Framework and Privacy Shield Framework regarding the collection, use, and retention of personal information transferred from the European Union, United Kingdom and Switzerland to the United States.
We may provide links to websites of third parties. Although we carefully select those websites, we make no guarantee and assume no liability for the correctness or completeness of content or data protection on any third-party websites. We are not responsible for the privacy policies and/or practices of these third-party websites, and we encourage you to carefully review their privacy policies.
Our legal basis for collecting and processing personal information depends on the specific context in which we collect it. Generally, we collect and process personal data in the following circumstances:
Contractual Necessity: We need to process your personal information to fulfill a contract with you or to take steps before entering into a contract (e.g., when you sign up for our services).
Consent: You have given us explicit consent to collect and process your personal information for specific purposes (e.g., subscribing to a newsletter or agreeing to receive marketing communications).
Legitimate Interests: We may process your personal information based on our legitimate interests, provided these interests do not override your rights and freedoms. This includes processing for purposes such as improving our services, communication, and marketing.
Legal Obligations: In some cases, we may be required to collect and process personal information to comply with a legal obligation or to protect your vital interests or those of another person.
If we ask you to provide personal information to comply with a legal requirement or to fulfill a contract with you, we will clearly inform you at the time of collection whether the provision of that data is mandatory or optional, and outline any potential consequences if you choose not to provide the required information.
We retain personal information only for as long as we have an ongoing legitimate business need, such as providing the services you have requested or fulfilling contractual obligations.
When we no longer have a legitimate business need to process your personal information, we will either delete, block, or anonymize it. However, we may retain personal data for longer periods if required to comply with legal, tax, or accounting obligations.
If you choose to cancel your user account, or if you request that we do so, we will erase your personal information within a reasonable time frame. The only exception to this is if we are legally required to retain certain data for a specific period.
In accordance with Article 8 of Colombian Law 1581 of 2012, and for residents of the European Economic Area (EEA), you have certain rights regarding your personal data under the General Data Protection Regulation (GDPR).
We will respond to all requests from individuals wishing to exercise their data protection rights in accordance with the applicable laws.
For more detailed information, please refer to the “Contact & Procedures” section at the end of this document.
You also have the right to lodge a complaint with a data protection authority regarding our collection and use of your personal data. For more information, please contact your local data protection authority.
In Colombia, you can file complaints with the Superintendence of Industry and Commerce regarding violations of Law 1581 and its related regulations.
We are committed to safeguarding your personal data and strive to minimize the risk of unauthorized access by third parties. To ensure the security of your information, we implement state-of-the-art security measures.
We use SSL/TLS encryption to protect the transmission of sensitive data, such as inquiries you send to us or communications with other users. You can recognize an encrypted connection when the URL in your browser changes from “http://” to “https://” and the lock icon appears in your browser’s address bar.
While we take these precautions to secure your data, please be aware that no data transmission over the internet is entirely secure. Despite our best efforts, there may be factors beyond our control that could lead to the unauthorized disclosure of your data. Unfortunately, it is currently impossible to guarantee the complete protection of data from unauthorized third-party access, and as such, we cannot offer a 100% guarantee of security and assume no liability for such occurrences.
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.
If we make significant changes, that affect how personal data is collected, used, or shared, or if the legal basis for processing changes, we will notify you through our website.
For any requests, complaints, or claims related to personal data processing, in accordance with the provisions of Law 1581 of 2012 and Decree 1377 of 2013, please contact:
Nicole Neuberger
Travelhapp S.A.S., Bogota, Colombia
Email: hello@travelhapp.com
Mobile or WhatsApp: +57 322 395 9274
Requests to consult, correct, update, or delete your information should be made in writing and sent to us via email or postal service. We will respond to your requests within ten (10) business days from the date following receipt. If we cannot meet this deadline, we will notify you of the reason for the delay and provide a new response date, within five (5) business days after the original deadline.
Claims should be submitted in writing via email, and should include the following information:
If the claim is incomplete, we will ask you to complete it within five (5) business days of receipt. If the missing information is not provided within two (2) months, the claim will be considered withdrawn.
Once we have received a complete claim, we will begin processing it within two (2) business days and provide updates on its status. We will respond to your claim within fifteen (15) business days. If we cannot meet this deadline, we will inform you of the reason for the delay and provide a new response date, which will be within eight (8) business days after the original deadline.