Personal Data Processing Policy
This policy sets out in detail how Viaje365 processes personal data across the different legal frameworks that apply to our global audience: the CCPA/CPRA for California residents, the GDPR for users in the European Union, and, since the site is operated from Colombia, Law 1581 of 2012 and its regulatory Decree 1377 of 2013 (Habeas Data), together with Brazil's LGPD (Law 13,709/2018) for our Brazilian users.
Here we explain the specific purpose of the processing, how we obtain your authorization or consent, when your data may be transferred outside your country of residence (since we serve a global audience), the security measures we apply, and the channel available for requests, complaints, and claims.
Purpose of the processing
- Responding to inquiries and requests submitted through our forms or contact email.
- Connecting users with commercial partners, like Assist-365, when requesting a travel insurance quote.
- Producing aggregate statistics on site usage to improve our content.
- Complying with legal obligations applicable to the site's operator.
Legal basis for processing
For California residents, processing is grounded in the CCPA/CPRA's transparency and consumer control requirements. For users in the European Union, we rely on consent or legitimate interest under the GDPR. Under Colombia's Article 4 of Law 1581 of 2012, we process personal data only with the data subject's prior, express, and informed authorization, granted by accepting this policy when using the site's forms or writing to us voluntarily. You can withdraw your authorization or consent at any time, with no retroactive effect.
International data transfer
Because Viaje365 serves an audience across the Americas and Europe and works with commercial partners and technology providers that may be located outside your country of residence, your personal data may be transferred or transmitted internationally. In those cases, we verify that the receiving country offers adequate protection levels or that contractual clauses guarantee treatment equivalent to what's required under the CCPA/CPRA, the GDPR, the LGPD, and Colombia's Law 1581 of 2012.
Information security
We apply reasonable technical, human, and administrative measures to protect your personal data against loss, misuse, unauthorized access, or alteration, consistent with the security principles set out across these frameworks, including Article 4 of Colombia's Law 1581 of 2012.
Your rights and response timeframes
As a data subject, you can exercise, at any time, your rights to know, update, correct, and delete your data, as well as withdraw any authorization granted, by writing to pachoviloriainsurances@gmail.com. We handle these requests within the legal timeframes summarized in the table below, applying the relevant framework for your country of residence.
Requests, complaints, and claims channel
To file a request, complaint, or claim related to your personal data, write to pachoviloriainsurances@gmail.com including your full name, the specific data or request, and a contact email. If you're not satisfied with our response and you're located in Colombia, you can escalate to the Superintendencia de Industria y Comercio (SIC), Colombia's data protection authority. California residents may contact the California Privacy Protection Agency if they believe their rights under the CCPA/CPRA weren't honored.
.
Response timeframes under Colombian Law 1581 of 2012
| Type of request | Legal timeframe | Possible extension |
|---|---|---|
| Inquiry (know your data) | 10 business days from receipt | 5 additional business days, with reason given |
| Claim (update, correct, or delete) | 15 business days from receipt | 8 additional business days, with reason given |
Frequently Asked Questions
What authority oversees data protection compliance in Colombia?
The Superintendencia de Industria y Comercio (SIC) oversees compliance with Law 1581 of 2012 in Colombia.
How do I authorize the processing of my personal data?
By accepting this policy and voluntarily using the site's contact or quote forms, you grant your prior, express, and informed authorization.
Can I withdraw my authorization later?
Yes, at any time by writing to pachoviloriainsurances@gmail.com, without affecting processing carried out before the withdrawal.
Does my data leave my country if I contact a partner like Assist-365?
It's possible, since we work with international partners and providers; in those cases we require protection guarantees equivalent to the applicable law in your country.
