Effective October 5, 2026
Personal Data Processing Policy
This translation is provided for convenience. The Spanish version prevails.
1. Data Controller
GRAN INVERSIONES C & M S.A.S., tax ID (NIT) 902.014.927-5, operating under the brand Casa 53 Boutique Business House ("Casa 53"), located at Cra. 53 # 82 – 132, Barranquilla, Colombia, email front@casa53baq.com, phone +57 304 291 0714. Requests about your data are handled by the Administration and Customer Service department.
2. Legal Framework and Principles
This policy is governed by Law 1581 of 2012, Decree 1074 of 2015 and other complementary regulations. All data processing at Casa 53 follows the legal principles of legality, purpose, freedom, accuracy or quality, transparency, restricted access and circulation, security and confidentiality.
3. Data We Collect
We collect the data needed to respond to requests, manage bookings, provide our services and maintain the business relationship. Depending on your interaction with us, we may request: name, company, email address, phone or WhatsApp number, booking information, billing details (where applicable) and ID document (only when strictly necessary for entry or the contract).
4. Purposes of Processing and Advertising
Your data will be used to manage your bookings, issue invoices, allow you access to the premises and comply with our legal or tax obligations.
Commercial communications and advertising will only be sent with your express authorization. To guarantee your freedom of choice, our website offers fully independent, unticked boxes to grant these permissions. This advertising authorization can be revoked at any time.
5. Video Surveillance
Casa 53 has video surveillance systems in certain areas of its premises, intended to protect the safety of people, property and premises, prevent incidents and support the handling of security situations.
Areas under video surveillance have visible physical signs informing about the system and referring to this Policy. Images will be processed only for the stated purposes and are subject to security measures. Images will be kept for the period necessary to fulfil the stated purposes and then deleted or securely disposed of, unless they must be kept longer due to authority requests or incident investigations. When processing involves biometric or sensitive data, Casa 53 will observe the special rules applicable to this type of information.
7. Retention Period
Data will be kept only for as long as necessary to fulfil the stated purposes and, thereafter, for the periods required by legal, contractual, accounting or tax obligations (e.g. 10 years for accounting records) or for the exercise and defense of rights.
8. Providers and International Transfers
To operate our platform and manage client relationships, we use technology providers such as Netlify, Inc. (website hosting) and HubSpot, Inc. (CRM software), located in the United States. Each provider's level of access to data depends on its technical function. These providers will process information according to their respective functions and under the applicable data protection measures and mechanisms.
9. How to Exercise Your Rights (Data Requests)
As the data subject, you have the right to know, update, correct and delete your data or revoke your authorization. Revocation of authorization and deletion requests apply provided there is no legal or contractual duty requiring the data to be kept.
To exercise your rights, send an email to front@casa53baq.com with your name, ID number, contact details and a clear description of your request.
- Inquiries (to know your data): answered within a maximum of 10 business days. If that is not possible, we will inform you why and respond within a maximum of 5 additional business days.
- Claims (to correct, delete or report a breach): answered within a maximum of 15 business days. If the claim requires further analysis, we will inform you and the period may be extended by a maximum of 8 additional business days.