Privacy and personal data processing policy

1. Data controller

Glampings BV, with its registered address at Oude Oeverstraat 120-6, 6811 JZ Arnhem, the Netherlands and registration number 86746103 with the Netherlands Chamber of Commerce (KvK), operates glampings.co and is the controller of the data described here. Email: [email protected]. WhatsApp: +573009130364.

2. If you visit glampings.co

• WhatsApp with the accommodation. The WhatsApp button opens a conversation between you and the accommodation. That conversation takes place on WhatsApp: glampings.co does not see or store it. The suggested message includes a reference code (for example, GCO-4821) that does not identify you; it lets the accommodation know that you came through glampings.co.
• Anonymous statistics. We count page visits and clicks (for example, on the WhatsApp button) to know which pages are useful and to show each accommodation how many visits and contacts its listing receives. We store the page, the date, the type of event and the general origin of the visit (for example, a search engine or a direct link). We do not use cookies for this, we do not store your IP address and we do not create profiles. If your browser sends the “Do Not Track” or “Global Privacy Control” signal, we do not count your visits. Only if you accept do we also use Google Analytics; we explain this in section 10. Cookies.
• Technical logs. Our web hosting provider may record the IP address and the browser in security logs for a limited time. We only use them to protect the site, for example against abuse.

3. If you are the owner or manager of an accommodation

• “Claim your listing” form. We process your name, your role, your WhatsApp number, your email if you provide it, your message and the plan you are interested in, together with the date and time of your authorization and an encrypted fingerprint of your IP address (not the IP itself). Purposes: to verify your relationship with the accommodation, to contact you about your listing via WhatsApp or email (always a person, no mass mailings), to manage your listing and, if you request it, the Premium plan, and to keep proof of your authorization.
• Preview and photo authorization. We process your name, the capacity in which you act, the photographer’s name if applicable, the boxes you checked, the version of the accepted text, the date and time, an encrypted fingerprint of your IP address and the browser. Purpose: to prove the authorization to publish and use photos and videos, and to handle claims. If you import photos from your website, we also store the address of each photo and of the page where it was. We remove location data (GPS) from photos; from MP4 and MOV videos as well. See the photo policy.
• Premium plan. Card payment is processed by Stripe. We receive the customer and subscription identifiers, the plan, the status, the amount and the renewal date. Your card details do not reach glampings.co.
• Statistics for your listing. We give you a private link with the visits and clicks on your listing. It does not contain travelers’ data.
• Connection with Instagram (optional). If you connect your accommodation’s Instagram professional account, Instagram (Meta) provides us, with the basic read permission (instagram_business_basic), with your username, the account identifiers and your recent posts (photos, thumbnails and videos, captions, link and date). We store the access in encrypted form and a copy of your recent posts so that you can choose what is shown on your listing. We only show what you choose, and only on your accommodation’s listing: 1 photo with the Free plan; with Premium, up to 20 photos and videos and, if you enable that option, your new posts. What you do not choose is not published. We also keep proof of your authorization (date, version of the accepted text, an encrypted fingerprint of your IP and the browser). We keep the Instagram data for as long as the connection is active: if you disconnect Instagram from your listing or from the Instagram settings, or if you ask Instagram to have us delete your data, we immediately delete the access and the copies of your posts, and in that last case also your username and the identifiers. We keep the proof of your authorization without Instagram data in order to handle claims.

4. Data published in the listings

Listings show data on tourism establishments taken from the National Tourism Registry (Registro Nacional de Turismo) and from the accommodation’s own public sources, such as its name, municipality, RNT number and contact channels for bookings (for example, its WhatsApp). We publish them so that travelers can find and contact the accommodation. If you are the data subject of any of this data and do not want it to appear, write to us and we will remove it.

5. Authorization

Before processing your data we ask you for prior, express and informed authorization, for example with the checkbox on the form, and we keep proof of it. Data of a public nature, such as that appearing in the National Tourism Registry, does not require authorization under Law 1581 of 2012.

6. Your rights

As the data subject you may:

• know, update and rectify your data;
• request proof of the authorization you gave us;
• know what use we have made of it;
• revoke the authorization and request that we delete your data, when there is no legal or contractual duty to keep it;
• access your data free of charge;
• file complaints with the Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio, SIC), after having made the inquiry or claim with us.

7. How to exercise your rights

Write to us at [email protected] or via WhatsApp at +573009130364 with your name, the listing or the data to which your request refers and what you are requesting. We may ask you to confirm your identity. These requests are handled by the glampings.co team.

• Inquiries: we respond within a maximum of 10 business days. If this is not possible, we explain the reason and respond within a maximum of 5 additional business days.
• Claims (to correct, update, delete or revoke): we respond within a maximum of 15 business days, extendable by 8 additional business days with notice. If the claim is incomplete, we ask you to complete it within the following 5 days; if 2 months pass without a response, we consider that you have withdrawn the claim.
• To stop receiving messages from us via WhatsApp, write BAJA at any time.

8. Who we share data with

We do not sell your data. We share it only with providers that help us operate the site and that process it on our behalf: web hosting, email, Stripe for payments and WhatsApp when we write to each other through that channel, Instagram (Meta) if you connect your account, and Google Ireland Limited (Google Analytics) if you accept the analytics cookies. We also hand it over to an authority when the law requires it.

9. International transfer and transmission

Glampings BV is established in the Netherlands (European Union), so your data is processed outside Colombia. We also use providers with servers in the European Union and in the United States, from whom we require security and confidentiality measures. Google may transfer Google Analytics data to the United States, where it is certified under the EU-U.S. Data Privacy Framework. By accepting this policy you expressly authorize this international transfer and transmission of your data. As a company established in the European Union we also apply the General Data Protection Regulation (GDPR); you can file a complaint with the Dutch data protection authority (Autoriteit Persoonsgegevens).

10. Cookies

Google Analytics. Only if you accept it in the cookie notice do we use Google Analytics 4, a service of Google Ireland Limited, to understand how the site is used (for example, which pages are visited and from what type of device). Google Analytics sets its own cookies (_ga) and receives technical data such as the page visited (without the parameters of the address), the browser, the device, the approximate location and your IP address, which Google does not store in Analytics. We do not send it your name, your phone number or any user identifier. The data is kept for 2 months, the standard period, which we can adjust in Google Analytics. Google acts as a processor on our behalf and may transfer data to the United States, where it is certified under the EU-U.S. Data Privacy Framework. If you do not accept, or if your browser sends the “Do Not Track” or “Global Privacy Control” signal, we do not load Google Analytics. You can change or withdraw your consent at any time with the “Cookies” link at the bottom of every page.

Apart from that, glampings.co does not use advertising or tracking cookies. Without your consent, the site does not set cookies for visitors. To know where a visit comes from, we store in your browser, only while the tab is open (session storage), the referring site and the campaign of the first page; when you close the tab it is deleted. On the pages for owners we use strictly necessary technical cookies: one to keep your session while you claim your listing and another, lasting a maximum of 15 minutes, to protect the connection with Instagram.

On some listings we show the accommodation’s public Instagram profile using Instagram’s embed tool. That box is loaded by Instagram (Meta) directly from its servers: when you view it, Instagram receives your IP address and may use its own cookies in accordance with its privacy policy. glampings.co does not receive data from that embed.

On some listings without authorized photos we show a photo of the accommodation published on Google Maps, with the name of the person who published it. Your browser loads that image directly from Google’s servers, so Google receives your IP address and the technical data of the request in accordance with its privacy policy; we do not send it the page you are viewing. glampings.co does not store those photos or receive any of your data from Google.

Payment for Premium is made on Stripe’s page, which uses its own cookies necessary for payment and fraud prevention.

11. Security and retention

Access to owners’ data is restricted to the team that needs it, connections are encrypted (HTTPS) and we do not record WhatsApp numbers in technical logs. We keep owners’ data for as long as your listing is published or we maintain a relationship with you, and afterwards only for the time necessary to handle claims or comply with legal obligations. Statistics are anonymous. Our databases remain in effect for as long as glampings.co is in operation.

12. Minors

glampings.co is intended for adults. We do not knowingly collect data from persons under 18 years of age.

13. Changes to this policy

We publish the current version on this page, with its date. If a change significantly affects the use of your data as an owner, we notify you beforehand. This policy has been in effect since October 29, 2026.

This is a translation for convenience. The Spanish version is the legally binding text; in case of differences, the Spanish version prevails.