Effective date: 10 November 2025 (Organización Aviatur personal data policy). English version published 13 October 2026.
This policy explains how your personal data is collected, used, shared and protected when you plan or book a trip with ColombiaSky, part of Organización Aviatur. It follows Organización Aviatur’s personal data policy and Colombian data protection law, including Law 1581 of 2012 and its implementing decrees.
1. Who is responsible for your data
- Data controller: Agencia de Viajes y Turismo Aviatur S.A.S., NIT 860000018-2, Avenida 19 No. 4-62, Bogotá, Colombia. Tel (601) 381 7111. www.aviatur.com
- ColombiaSky contact: info@colombiasky.com · Tel (+57) 601 234 7344 · Carrera 7 No. 115-60, Zona D, Oficina 401, Bogotá, Colombia
- Requests about your data are handled by Organización Aviatur’s data security department.
2. Who this policy covers
Clients, travelers and passengers, website visitors, suppliers, employees and job candidates. This page focuses on clients, travelers and website visitors.
3. Key principles
We process personal data only for stated purposes, with your authorization or another legal basis, and we keep it accurate, secure and confidential. Sensitive data (such as health or biometric data) is processed only with your explicit consent or where the law allows, and you are never required to provide it.
4. What data we collect
- Identification: names, type and number of ID (passport, national ID, driver’s license, foreigner ID, tax ID), gender, nationality, date of birth, age, signature, and family relationship where relevant.
- Contact and location: email, phone, home or work address, city.
- Online access data: usernames, passwords, IP address, user profiles and device fingerprint.
- Sensitive data: images of ID documents (passports, IDs, visas, driver’s licenses), voice and video recordings, payment card details used to pay for services, and medical certificates when you ask for special assistance or claim a health-related refund or cancellation.
- Data of minors traveling with you, only when strictly necessary (see section 6).
5. Why we use your data
- To book and deliver your travel services: hotels, flights, ground transport, tours and itineraries, directly or through airlines, hotels and local operators.
- To send confirmations, reminders and updates by email, phone, SMS or messaging apps such as WhatsApp.
- To share with airlines, hotels and operators the data they need for check-in, boarding and accommodation.
- To handle contracts, invoices, payments, refunds and accounting.
- To respond to your requests, questions and complaints.
- To arrange special assistance for medical conditions or disabilities, and to support refunds or cancellations caused by documented health reasons.
- To record calls for quality purposes and, with prior notice and your explicit consent, record video calls with our advisors.
- To keep copies of ID documents required for bookings, tickets, immigration formalities and provider requirements.
- To send personalized offers, surveys and promotions by email and WhatsApp. You can opt out at any time.
- To analyze travel trends and improve our services.
- To meet legal obligations, including reports to immigration, tax and security authorities, IATA Resolution 830, and checks against UN and OFAC sanctions lists under Colombian anti-money-laundering rules (SAGRILAFT and PTEE).
- To keep a historical record of our interactions and transactions.
The legal bases are the performance of your contract, legal obligations, legitimate interest and your consent; for sensitive data, your explicit consent.
6. Data of children and adolescents
We avoid collecting data of minors whenever possible. When it is essential, for example to book a child’s flight, hotel or tour, we process it only with prior authorization from a parent with custody or a legal representative, respecting the child’s best interests and fundamental rights, under Article 7 of Law 1581 of 2012.
7. How you authorize us
You give your authorization before or at the time we collect your data. It can be given in writing, verbally, or through clear conduct, such as sending us your details to request a quote or booking.
8. Your rights
- Know, update and correct your personal data.
- Request proof of the authorization you gave.
- Be informed of how your data has been used.
- Revoke your authorization or request deletion of your data, unless a legal or contractual obligation requires us to keep it.
- Access your data free of charge.
- File complaints with Colombia’s Superintendencia de Industria y Comercio (SIC) once you have completed our internal process.
9. How to make a request
Write to info@colombiasky.com, or contact Organización Aviatur at Tel (601) 381 7111 or Avenida 19 No. 4-62, Bogotá. Include your name, ID, a description of your request and your contact details.
- Queries are answered within 10 business days of receipt.
- Complaints (corrections, updates, deletion or alleged breaches) are answered within 15 business days from the day after receipt. If more time is needed, we will tell you why and give a new date no more than 8 business days after the first deadline.
- If a complaint is incomplete, we will ask you for the missing information within 5 days. If you do not reply within 2 months, the complaint is considered withdrawn.
- Within 2 business days of receiving a complete complaint, your record is marked as “complaint in progress” until it is resolved.
10. Who we share your data with
We may share your data with Grupo Aviatur companies, airlines, hotels, transport companies, insurers, tour operators, commercial partners, technology and cloud providers, advertising agencies, auditors, and government authorities when legally required. Some of them are outside Colombia, including in countries whose data protection standards differ from Colombia’s. We use contractual, technical and organizational measures to protect your data when it is shared.
11. How long we keep your data
We keep your data for as long as needed for the purposes described above and to meet legal and contractual obligations. We honor deletion requests unless such an obligation requires us to keep the data.
12. How we protect your data
We use measures such as encryption, access controls, backups, confidentiality agreements and staff training to protect your data against loss, misuse and unauthorized access.
13. Cookies
Our websites use cookies and device fingerprinting to make browsing work, remember your preferences, recognize return visits, produce statistics, keep the site secure and show advertising, including from third parties. Cookies do not directly identify you unless you register or give us your details. You can disable cookies in your browser settings at any time; some features may then not work as expected.
14. Changes to this policy
Organización Aviatur reviews its policy every year, or sooner if the law or its processes change. Changes take effect when published. We will tell you about substantial changes through the website or your usual contact channels.