Privacy Policy
Your privacy matters to us. This document explains how we collect, use, and protect your personal information.
Contents
Questions about privacy?
Contact UsVisitAtlántico is committed to protecting user privacy. This Privacy Policy describes our practices for collecting, using, and protecting personal data, in accordance with Law 1581 of 2012 (Colombia's Personal Data Protection Law) and its implementing decrees.
By using VisitAtlántico, you accept the practices described in this policy. We recommend reading it carefully.
Information We Collect
We collect different types of information depending on how you interact with our site:
Information you provide voluntarily
- Email address (when you use the Trip Planner or subscribe to our newsletter)
- Travel preferences selected in the Planner (days, interests, towns)
- Messages and inquiries sent through Jimmy or contact forms
- Comments or feedback about destinations and experiences
Information collected automatically
- Browsing data (pages visited, time on site, navigation paths)
- Device information (browser type, operating system, screen resolution)
- IP address and approximate location
- Referral data (how you arrived at the site)
How We Use Your Information
We use the information we collect for the following purposes:
- Personalizing your experience: Generating itineraries tailored to your preferences, showing relevant destinations, and remembering your preferred language.
- Improving the service: Analyzing usage patterns to optimize the site, fix bugs, and develop new features.
- Communications: Sending you your itinerary by email (if requested), newsletters (with your consent), and responding to your inquiries.
- Aggregate statistics: Producing reports on tourism trends that help improve the department's offerings.
Jimmy (AI Assistant) and the Trip Planner
VisitAtlántico includes artificial intelligence features that deserve special mention:
Jimmy, Your Virtual Guide
- Conversations with Jimmy are stored as part of the service to improve the tourism experience in Atlántico
- Records are stored anonymously (without name or email) and used for aggregate statistical analysis
- Jimmy uses Anthropic's (Claude) technology to process queries
- Do not share sensitive personal information (identity documents, banking data) in your conversations
AI Trip Planner
- Travel preferences (days, interests, trip type) are stored to improve and personalize the service
- Generated itineraries are stored anonymously for tourism-trend analysis at the department level
- Email is optional and is only used to send you your itinerary if you request it
- You can download your itinerary as a PDF without providing any personal information
Cookies and Similar Technologies
We use cookies and similar technologies to improve your experience:
| Type | Purpose | Duration |
|---|---|---|
| Essential | Basic site operation, language preferences | Session / 1 year |
| Analytics | Anonymous usage statistics (Google Analytics) | 2 years |
| Functional | Remembering Planner preferences | 30 days |
You can manage cookies from your browser settings. Disabling certain cookies may affect site functionality.
Sharing Information with Third Parties
We do not sell or rent your personal information. We may share data under the following circumstances:
- Service providers: Firebase (data storage), Anthropic (AI processing), email services, analytics.
- Legal requirements: When required by law, court order, or to protect rights, safety, or property.
- Aggregate data: Anonymous statistics on tourism trends may be shared with government entities in Atlántico.
Your Rights in Colombia (Law 1581 of 2012)
Under Colombian law, you have the following rights:
Access
Find out what data we hold about you
Rectification
Correct inaccurate or incomplete data
Deletion
Request that your data be erased
Revocation
Withdraw your consent at any time
Inquiry
Request information about how your data is used
Complaint
File a complaint with the SIC (Colombia's data protection authority) if you believe your rights have been violated
To exercise these rights, contact us at: info@visitatlantico.com
Rights of European Union Residents (GDPR)
If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):
Your Rights under the GDPR
✓ Right of access
You can request a copy of all personal data we hold about you.
✓ Right to rectification
You can request that we correct inaccurate or incomplete data.
✓ Right to erasure ("right to be forgotten")
You can request that we delete your personal data under certain circumstances.
✓ Right to data portability
You can receive your data in a structured, commonly used, machine-readable format.
✓ Right to object
You can object to the processing of your data under certain circumstances.
✓ Right to withdraw consent
You can withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
✓ Right to restriction of processing
You can request that we restrict the processing of your data in certain situations.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: For analytics cookies and marketing communications (you can withdraw consent at any time).
- Performance of a contract: To generate and send you personalized itineraries when you use our Planner.
- Legitimate interest: To improve our services and detect fraud.
International Data Transfers
Your data may be transferred to and processed on servers located outside the European Union:
- Google Cloud (Firebase): Data is stored on servers in the U.S., protected under the EU-U.S. Data Privacy Framework.
- Anthropic (Claude AI): Processing of conversations with Jimmy. Data is processed in the U.S. under EU-approved Standard Contractual Clauses (SCCs).
We take steps to ensure your data is handled securely and in accordance with this policy and applicable data protection laws.
Exercising Your Rights
To exercise any of these rights, contact us at info@visitatlantico.com. We will respond to your request within 30 days.
If you are not satisfied with our response, you have the right to file a complaint with the data protection authority in your country. In Spain, you can contact the Spanish Data Protection Agency (AEPD).
Data Security
We implement technical and organizational measures to protect your information:
- SSL/TLS encryption on all communications
- Secure storage on Firebase servers (Google Cloud)
- Access to personal data restricted to authorized personnel only
- Regular security monitoring and updates
- Periodic backups
Note: No system is 100% secure. If you discover a vulnerability or have security concerns, contact us immediately.
Data Retention
We retain your information only for as long as necessary:
- Browsing data: 26 months maximum (aligned with Google Analytics)
- Newsletter emails: Until you unsubscribe
- Shared itineraries: 90 days from creation
- Jimmy conversations and itineraries: 24 months maximum from creation. Stored anonymously as part of the service.
Minors
VisitAtlántico is a tourism information site suitable for all ages. We do not knowingly collect personal information from children under 14 without the consent of their parents or legal guardians.
If you are a parent or guardian and believe your child has provided personal information, contact us to have it removed.
Changes to This Policy and Contact
We may update this Privacy Policy from time to time. Significant changes will be announced through a prominent notice on the site. We recommend reviewing this page regularly.
Contact Information
Data Controller:
VisitAtlántico
Address:
Calle 40 No. 45-46, Barranquilla, Atlántico, Colombia
Email:
info@visitatlantico.com
Official website:
www.visitatlantico.com
