Privacy Policy

Ikuna Glamping, an individual trader identified with NIT 71.360.716, domiciled in San Vicente Ferrer, Antioquia, Colombia (email: ikunaglamping@gmail.com), is the controller of your personal data under Colombian Law 1581/2012 and Decree 1377/2013. This website's server is located in Germany (European Union); accordingly, processing is also subject to the EU General Data Protection Regulation (GDPR, EU 2016/679) to the extent applicable.

We collect only the data necessary to provide our service:

• ◆Booking data: full name, email address, phone number, and identity document number (required for receipt issuance under Colombian tax regulations).
• ◆Payment data: payment processing is handled entirely by Wompi S.A.S. (a subsidiary of Bancolombia S.A.). Ikuna Glamping does not store, access, or process card or bank details. We only receive a transaction reference and payment confirmation.
• ◆Technical data: your light/dark theme preference stored locally in your browser. We do not use third-party behavioural analytics tools or advertising.

We process your data under the following legal bases:

• ◆Contract performance (Art. 6.1.b GDPR / Law 1581): managing your booking, coordinating your stay, and issuing your payment receipt.
• ◆Legal obligation (Art. 6.1.c GDPR): fulfilling tax obligations with DIAN and accounting records under Decree 2649/1993.
• ◆Legitimate interest (Art. 6.1.f GDPR): sending you essential communications about your booking (confirmation, changes, or cancellations).

We share data only with the following third parties, strictly to the extent necessary:

• ◆Wompi S.A.S. / Bancolombia S.A.: payment processing. Regulated by the Colombian Superintendencia Financiera.
• ◆Google LLC (Gmail): sending booking confirmation emails. Operates under the EU-US Data Privacy Framework and EU Standard Contractual Clauses.
• ◆Hetzner Online GmbH (Germany): server hosting. Operates under GDPR, ISO 27001 certified.
• ◆We do not sell, rent, or share your data with third parties for commercial or advertising purposes.

Our primary server is located in Germany (EU), which involves a transfer of data from Colombia to the European Union. This transfer is covered by the high protection standard of the GDPR, equivalent to or higher than that required by Colombian Law 1581/2012. By accepting this policy and making a booking, you expressly authorise this international transfer under Decree 1377/2013, Article 26.

We retain data for the minimum time necessary:

• ◆Booking and payment data: 5 years, to comply with Colombian tax and accounting obligations (Decree 2649/1993).
• ◆Browser preferences (localStorage): deleted when you clear your browser data.
• ◆You may request early deletion of your data; if a legal retention obligation applies, we will inform you of the reason.

You may exercise the following rights free of charge by writing to ikunaglamping@gmail.com:

• ◆Under Colombian Law 1581/2012: to know, update, rectify, and delete your data; to withdraw consent; and to file complaints with the Superintendencia de Industria y Comercio (SIC).
• ◆Under the GDPR (Art. 15–22): access, rectification, erasure ('right to be forgotten'), restriction of processing, data portability, objection, and the right not to be subject to automated decisions with legal effects.
• ◆We will respond to your request within 10 business days (Law 1581) or 30 calendar days (GDPR), as applicable.

We use only first-party storage: (a) your light/dark theme preference, stored in your browser's localStorage and never transmitted to our servers; and (b) your cookie banner response, stored in localStorage so it is not shown again. We do not use third-party cookies, behavioural analytics (Google Analytics, Meta Pixel, Hotjar, etc.), or behavioural advertising.

We implement appropriate technical and organisational measures: HTTPS/TLS encryption for all communications, restricted database access, token-based authentication for the admin panel, and regular backups. In the event of a data breach affecting your rights, we will notify you in accordance with applicable legal obligations.

Our services are intended exclusively for persons aged 18 and over. We do not knowingly collect data from minors. If we become aware that we have processed a minor's data without the consent of their legal guardian, we will delete it immediately.

We may update this policy to reflect legal changes or changes to our services. Updates will be published at this same URL with a new effective date. For material changes, we will display a prominent notice on the website.

To exercise your rights, report a security incident, or ask any question about this policy, write to us at:

You may also lodge a complaint with the competent supervisory authority:

• ◆Superintendencia de Industria y Comercio (SIC) — Colombia
• ◆Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI) — Germany