Privacy & Personal-Data Processing Policy
EL SANATORIO S.A.S.
NIT: 902.051.563-5
ADDRESS: CALLE 19 #4-23, CENTRO HISTÓRICO, SANTA MARTA, MAGDALENA, COLOMBIA
PHONE: +1 903 459 8763
CONTACT EMAIL: legal@el-sanatorio.com
BRAND OPERATED: EL SANATORIO — YAKITORI BAR · HORROR BAR · PACIENTE 013 (HORROR HOUSE)
This English version is a courtesy translation. The legally binding text is the Spanish original, which governs in the event of any discrepancy.
1. Legal Framework
This Privacy and Personal-Data Processing Policy is issued in compliance with Colombian Statutory Law 1581 of 2012 (General Personal-Data Protection Regime), Regulatory Decree 1377 of 2013, Law 1266 of 2008, and all other applicable Colombian regulations. EL SANATORIO S.A.S. acts as the Data Controller for personal data collected through the website el-sanatorio.com.
2. Personal Data We Collect
| Data | Source | Required | Purpose |
|---|---|---|---|
| Full name | Booking form | Yes | Identifying the holder of the booking |
| Phone | Booking form | Yes | Confirming and communicating about the booking |
| Booking form | No | Email confirmation and commercial communications (with consent) | |
| Requested date and time | Booking form | Yes | Operational management of the booking |
| Party size | Booking form | Yes | Venue capacity planning |
| Additional notes | Booking form | No | Service personalisation (allergies, celebrations) |
| Web analytics data (anonymised IP, cookies) | Google Analytics | Only with consent | Measuring website performance |
3. Purposes of Processing
Your personal data will be processed exclusively for the following purposes:
- Managing, confirming and administering table and experience bookings.
- Responding to requests, enquiries and petitions sent through the site or via WhatsApp.
- Sending booking confirmations and reminders.
- With your express authorisation: sending commercial communications about events, promotions and venue news.
- Complying with applicable legal and regulatory obligations.
- Measuring website performance (only if you accept analytics cookies).
4. Authorisation and Consent (Art. 9, Law 1581 of 2012)
Under Article 9 of Law 1581 of 2012, the processing of personal data requires the prior, express and informed authorisation of the data subject. By ticking the consent box on the booking form, you grant this authorisation. Authorisation may be revoked at any time by written notice to legal@el-sanatorio.com.
For analytics cookies, authorisation is granted via the consent banner shown when you first enter the site.
5. Rights of the Data Subject (Art. 8, Law 1581 of 2012)
As the subject of your personal data, you have the right to:
- Know the personal data we hold about you.
- Update and correct your data when it is inaccurate or incomplete.
- Request proof of the authorisation you granted.
- Be informed of the use that has been made of your personal data.
- File complaints with Colombia’s Superintendency of Industry and Commerce (SIC) for breaches of the law.
- Revoke authorisation and/or request deletion of your data, except where a legal duty to retain it applies.
- Free access to your personal data.
To exercise any of these rights, contact the data controller: EL SANATORIO S.A.S., email: legal@el-sanatorio.com, phone: +1 903 459 8763. We will respond within the time limits set by law (up to 15 business days for enquiries and 15 business days for claims).
6. Sharing of Data
The personal data we collect will not be sold, assigned or transferred to third parties for commercial purposes without your consent. Data may only be shared with:
- Netlify, Inc. (hosting provider, USA), as a data processor for form reception and routing.
- Supabase Inc. (database provider, USA), as a data processor for storing booking, casting and contact form submissions. Data is encrypted at rest and only the authorised Maia Management team can query it.
- Google LLC (web analytics provider, USA), only if you accept analytics cookies.
- Competent Colombian authorities, where there is a legal obligation.
All international data transfers are made under standard contractual clauses or adequate-protection arrangements pursuant to Article 26 of Law 1581 of 2012 and Decree 1377 of 2013.
7. Data Retention
Booking data is retained for 24 months from the date of the booking, or until the data subject requests deletion. Web analytics data is anonymous and does not allow identification of natural persons.
8. Cookies and Tracking Technologies
The website el-sanatorio.com uses the following technologies:
- Essential cookies: Store your consent preference. Do not require authorisation.
- Google Analytics: Web-traffic measurement tool. Only loads after your explicit consent for analytics cookies.
You can withdraw your cookie consent at any time by clearing your browser cookies and
reloading the site. Your preference is stored in localStorage under the key
maia_consent.
9. Security
EL SANATORIO S.A.S. implements reasonable technical and organisational measures to protect personal data against unauthorised access, loss or destruction, including the use of HTTPS (TLS) for all site communications.
10. Minors
El Sanatorio is a nighttime entertainment venue that serves alcohol. The website is not directed at people under 18 and does not knowingly collect data from minors. If you are under 18, you should not use the booking form or the services of this venue.
11. Changes to This Policy
EL SANATORIO S.A.S. reserves the right to amend this policy at any time. Amendments take effect from the moment they are published on the website. We recommend reviewing this policy periodically.
12. Policy Validity
This Privacy Policy was approved by EL SANATORIO S.A.S. and is in force from January 2025. The associated databases will have indefinite validity unless otherwise instructed by the data controller.
13. Supervisory Authority
To file complaints with the data-protection authority in Colombia:
Superintendency of Industry and Commerce (SIC)
Carrera 13 #27-00, Bogotá D.C., Colombia
Helpline: 01 8000 910165
Website: www.sic.gov.co
14. SMS / WhatsApp Messaging (A2P Program)
When you provide your mobile phone number, you may receive messages from EL SANATORIO S.A.S. via WhatsApp and/or SMS regarding your booking, your deposit and opening updates. By providing your number and giving your consent, you expressly authorise these messages.
- Mobile phone numbers we collect for messaging are not shared or sold to third parties for marketing purposes. They are used solely to contact you about your booking, your deposit and the opening.
- Message frequency may vary.
- Message and data rates may apply, depending on your carrier and plan.
- To stop receiving messages, reply STOP to opt out; for help, reply HELP. You can also reach us on WhatsApp at +1 903 459 8763.
This messaging consent is separate from and additional to the general authorisation for the processing of personal data described in this policy (Law 1581 of 2012), and you may withdraw it at any time without affecting other services.