COSTA RICA EXPRESS

DeViajecon – RNT No. 274163

Bogotá, Colombia

Email: info@deviajecon.com

Last update: 2026

DeViajecon, a travel agency based in Bogotá, Colombia, identified with National Tourism Registry No. 274163 (hereinafter “the Agency”), recognizes the importance of the security, privacy, and confidentiality of the personal data of its clients, users, suppliers, and partners. In compliance with Law 1581 of 2012, Decree 1377 of 2013, Decree 1074 of 2015, and other applicable regulations in Colombia regarding personal data protection and habeas data, the Agency adopts this Privacy and Personal Data Processing Policy.

The Agency acts as the data controller of the personal data collected through its various service channels, including its website, digital or physical forms, social media, WhatsApp, phone calls, email communications, advertising campaigns, quotation processes, reservations and purchase of travel services, as well as in the development of commercial relationships with clients in Colombia and abroad.

By providing personal data through any means, the data subject grants prior, express, and informed authorization to DeViajecon to collect, store, use, circulate, transfer, and delete such information in accordance with the purposes described herein and applicable legislation.

The Agency may collect personal data such as full name, identification document, date of birth, nationality, passport number, migration information, phone number, email address, city and country of residence, as well as information necessary for managing reservations and travel services, including destinations, travel dates, preferences, purchase history, travel companions, and billing and payment information. In certain cases, when strictly necessary for the proper provision of services, sensitive data may be requested, such as relevant medical conditions, dietary requirements, special assistance needs, or information related to minors. Such data will be handled with absolute confidentiality and only with the express authorization of the data subject or their legal representative.

Additionally, when users browse the Agency’s website or interact with its digital platforms, certain automatic information may be collected, such as IP address, browser type, device information, approximate location, cookies, and browsing behavior, in order to improve user experience, optimize services, and perform internal statistical analysis.

The personal data collected will be used to manage quotations, reservations, and purchases of travel services; issue tickets and vouchers; manage itineraries; send confirmations; provide customer support before, during, and after travel; process payments and billing; send relevant information about contracted services; comply with legal, accounting, and regulatory obligations; and for commercial and marketing purposes related to promotions, updates, and campaigns, provided that authorization has been granted by the data subject. Likewise, the information may be used for internal analysis, market research, and service quality improvement.

Due to the nature of tourism services, personal data may be shared or transferred to third-party partners or service providers such as airlines, hotels, tour operators, insurance companies, payment platforms, financial institutions, or migration authorities, both within Colombia and internationally, when necessary for the proper provision of the contracted service. The Agency will ensure that such transfers are carried out under appropriate data protection standards and solely for authorized purposes.

The data subject has the right to know, update, and rectify their personal data; request proof of the authorization granted; be informed about the use of their data; revoke authorization and request deletion of their information when applicable; access their personal data free of charge; file complaints before the Superintendence of Industry and Commerce (SIC) for violations of the law; and refrain from answering questions regarding sensitive data. These rights may be exercised by sending a request to info@deviajecon.com with the subject line “Personal Data Protection.” Inquiries will be addressed within a maximum of ten (10) business days, and claims within fifteen (15) business days, in accordance with Colombian regulations.

The Agency adopts reasonable technical, administrative, and human security measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, the data subject acknowledges that no internet transmission is completely secure and agrees to take appropriate measures to protect their own information.

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, for the duration of the commercial relationship, and for any additional period required by law to comply with legal, accounting, or contractual obligations. Thereafter, the data will be securely deleted or anonymized when possible.

The Agency may use cookies or similar technologies on its website to improve browsing experience, analyze user behavior, and personalize content. Users may configure their browser settings to reject cookies if they wish.

In the case of minors, the Agency will process personal data only when necessary for the provision of travel services and with prior authorization from a parent or legal guardian.

DeViajecon reserves the right to modify or update this Privacy Policy at any time. Any substantial changes will be communicated through official channels. Continued use of services after the publication of changes constitutes acceptance of such changes.

For any inquiries related to this policy or the processing of personal data, the data subject may contact the Agency via email at info@deviajecon.com