Privacy Policy of Coñaripe Hotel & Termas

Termas Conaripe SpA, RUT 77338793-1, with business address at Coñaripe, Región de Los Ríos, Chile, hereinafter "Coñaripe Hotel & Termas" or "we", is the controller of the personal data collected through the website https://termasconaripe.cl, booking forms, WhatsApp channels, email and in person. For questions about data processing you can write to us at reservas.conaripe@patagoniandina.com.

We collect only the data needed to provide our services:

• Identification: full name, RUT or passport where required by law.
• Contact: email address, mobile or WhatsApp number, postal address where applicable.
• Booking data: visit dates, size and composition of the group (adults, children, senior guests), services booked, dietary or accessibility preferences you tell us voluntarily.
• Payment data: processed directly by our payment gateway provider (Mercado Pago or Pxsol). We only keep a transaction reference and the last 4 digits when the provider supplies them, never the full card number or the CVV.
• Technical data: IP address, browser, operating system, device type, pages visited, session duration, traffic source, advertising campaign identifier.
• Cookies and similar technologies: see section 9.

We do not collect sensitive data (ethnic origin, political opinions, religion, sex life or sexual orientation, genetic or biometric data) unless the guest provides it voluntarily to arrange a specific service, for example a special diet.

We process your data in order to:

• Process and confirm your booking.
• Send receipts, vouchers, arrival instructions and operational communications about your visit.
• Comply with legal, accounting, tax and guest registration obligations required by the Chilean authorities.
• Provide customer service before, during and after your visit.
• Improve the website, our services and the overall experience (aggregated, non-identifiable analytics).
• Prevent fraud and protect the safety of guests, staff and facilities.
• Send promotional communications only where you give express consent, with an immediate opt-out in every message.

We process your data on the basis of:

• Consent of the data subject (booking form, newsletter subscription, acceptance of the cookie banner).
• Performance of the contract for the provision of tourism services.
• Legal obligations (accounting, tax, and guest registration under Ley 21.155, the Chilean tourism act administered by SERNATUR).
• Legitimate interest of Coñaripe Hotel & Termas in improving its services, on terms compatible with your rights.

We share data only with the providers strictly necessary to run the service, under confidentiality and data protection agreements:

• Payment gateways: Mercado Pago and Pxsol (payment processing, fraud prevention).
• Messaging: Resend or equivalent (transactional email), Kapso or equivalent (WhatsApp Business messaging).
• Infrastructure: Vercel (frontend hosting), Supabase (database), Railway (n8n automations), Sentry (error monitoring).
• Analytics and advertising (only with consent): Google Analytics, Google Ads, Meta (Facebook and Instagram).
• Authorities: where there is a legal obligation to report to Chilean authorities (SII, SERNATUR, courts, public prosecutors, police).

We do not sell or transfer data to third parties for purposes other than those described here.

Some providers (Vercel, Sentry, Meta, Google) store data on servers outside Chile. These transfers are made to countries with equivalent levels of protection, or under standard contractual clauses that guarantee compliance with Chilean rules.

• Booking and invoicing data: 6 years, in accordance with the Chilean Tax Code.
• Contact data with no active booking: up to 2 years from the last interaction, unless you ask us to delete it sooner.
• Aggregated analytics data: indefinitely, in non-identifiable form.
• Cookies: see the specific duration in the cookie banner.

Under Ley 19.628 and Ley 21.719 you have the following rights over your personal data:

• Access: to know what data of yours we process.
• Rectification: to correct inaccurate or out-of-date data.
• Erasure: to ask us to delete your data when it is no longer needed or you withdraw your consent.
• Objection: to object to your data being processed for specific purposes, for example advertising.
• Portability: to receive your data in a structured format and ask for it to be transferred to another controller.
• Not to be subject to automated decisions that produce legal effects concerning you.

To exercise these rights, write to us at reservas.conaripe@patagoniandina.com from the email address linked to your booking. We reply within the legal deadlines (30 calendar days at most).

If you believe the processing of your data breaches the rules, you can complain to the Agencia de Protección de Datos Personales (the authority created by Ley 21.719) or to the ordinary courts.

Our site uses cookies and equivalent technologies for essential functions and, with your consent, for analytics and personalised advertising.

• Strictly necessary cookies: keep your session, remember your cookie preferences and make the site work. They do not require consent.
• Analytics cookies: measure site performance in aggregate (Google Analytics 4). They are only enabled if you accept in the cookie banner.
• Advertising cookies: allow us to measure campaign performance on Google Ads and Meta Ads, and to show relevant content. They are only enabled if you accept.
• Third-party cookies: YouTube (embedded videos), Google Maps (location map).

You can change your cookie preference at any time from the "Cookie settings" link in the site footer, or from your browser settings.

We apply reasonable technical and organisational measures to protect your data:

• Encrypted HTTPS connection across the whole site.
• Role-based access control to the database and administrative panels.
• Encryption in transit and at rest where applicable.
• Active incident monitoring and access auditing.
• Regular training for staff with access to personal data.
• Minimum exposure policy: each provider accesses only the data essential to its function.

If we detect a personal data breach affecting users, we will notify those affected and the Agencia de Protección de Datos Personales in accordance with Ley 21.719, within the deadlines set by that act.

Our services are aimed at adults. When a minor visits Coñaripe Hotel & Termas they must be accompanied by a responsible adult, who accepts this policy on their behalf. We do not intentionally collect data from minors. If we find that a minor has provided data without authorisation, we delete it as soon as we become aware.

We do not make automated decisions producing significant legal effects on data subjects. Availability and pricing are validated with the support of automated systems, but the final confirmation of every booking goes through human review by our team.

We may update this policy when our services, internal practices or the regulatory framework change. The version in force is always published on this site with the date it was last updated. Substantial changes will be communicated by email to guests with an active booking.

For questions, to exercise your rights, or to complain about the processing of personal data:

• Email: reservas.conaripe@patagoniandina.com
• Phone or WhatsApp: +56968332419
• Postal address: Coñaripe, Región de Los Ríos, Chile

Controller: Termas Conaripe SpA, RUT 77338793-1.