Privacy Policy and Personal Data Processing

INSTANTES GROUP SAS, identified with NIT 901885661-4 and hereinafter referred to as MOABI HOTEL, is a commercial company located in the city of Medellín, dedicated to providing tourist and business accommodations. As part of its activities, it regularly collects and processes personal data.

In accordance with Law 1581 of 2012 and Decree 1377 of 2013, MOABI HOTEL is committed to responsibly handling the personal data of its clients, suppliers, employees, and the general public, ensuring the privacy and security of such information. For this reason, we have adopted this Privacy Policy and Personal Data Processing Policy, which establishes guidelines for the collection, storage, use, and handling of personal data, as well as the rights and guarantees for its protection.

This policy applies to the processing of personal data by employees of MOABI HOTEL or by individuals and entities with whom personal data transfer agreements have been signed. The Privacy Policy and Personal Data Processing Policy will be available on our website: www.moabihotel.com.

For inquiries, concerns, or requests related to your personal data, you may contact us at:

• Phone: +573005618588

• Email: info@moabihotel.com

• Address: Cra 43B #12–147

I. Definitions

1. Data Subject: A natural person whose personal data is processed.

2. Authorization: Prior, express, and informed consent of the data subject for the processing of their personal data.

3. Database: An organized set of personal data subject to processing.

4. Personal Data: Information linked to or associated with an identified or identifiable natural person.

5. Sensitive Data: Data that affects the privacy of the data subject or whose misuse could result in discrimination, such as racial origin, political orientation, religious or philosophical beliefs, among others.

II. Purposes of Data Processing

The personal data collected will be used for the following purposes:

1. Manage reservations, check-ins, check-outs, and other accommodation-related services.

2. Issue invoices and collect payments for services rendered.

3. Contact data subjects for communications about promotions, events, and services offered by the hotel.

4. Comply with current legal, contractual, and tax obligations.

5. Ensure safety within the hotel premises.

6. Conduct internal analyses to improve the services offered.

III. Rights of Data Subjects

In accordance with Law 1581 of 2012, data subjects have the following rights:

1. Know, update, and rectify their personal data.

2. Request proof of the authorization granted.

3. Be informed about the use of their personal data.

4. File complaints with the Superintendence of Industry and Commerce (SIC).

5. Request the deletion of their personal data when legal principles and rights are not respected.

6. Revoke the authorization granted for data processing.

IV. Procedure to Exercise Rights

Data subjects may exercise their rights through:

• A written request sent to the email address: info@moabihotel.com

• Submitting a request at the hotel reception.

MOABI HOTEL will address inquiries within a maximum of 10 business days and claims within 15 business days, in accordance with current regulations.

V. Security Measures

MOABI HOTEL implements technical, administrative, and human measures to protect personal data against unauthorized access, loss, or misuse.

VI. Policy Modifications

This policy may be updated at any time. Changes will be communicated through the official channels of MOABI HOTEL.

Effective Date: 12/24/2024

Validity: Indefinite