IT · EN · ES

Privacy Policy, Data Processing, and Legal Obligations

BOGLECC CORPORATION S.A.S. (Corporate Group)
Operating Brands: Hacienda Boutique Santa Rosanna • Café Anima Matris
RNT no. 107376 (National Tourism Registry) • Risaralda, Colombia
Compliant with EU Regulation 2016/679 (GDPR) and Colombia's Law 1581 of 2012 (Habeas Data)
Last updated: October 2026

This Privacy Policy transparently outlines the purposes, methods, and rights related to the collection, storage, and use of personal data, as well as the regulatory framework of tourism, legal, and environmental compliance adhered to by BOGLECC CORPORATION S.A.S. along with its managed commercial brands Hacienda Boutique Santa Rosanna and Café Anima Matris, for the benefit of web users, accommodation guests, B2B/B2C customers, and recipients of our communications.

1. Data Controller and Corporate Structure

The Data Controller and responsible legal entity is:

Corporate Group / Data Controller	BOGLECC CORPORATION S.A.S. (Simplified Joint-Stock Company under Colombian law)
Operating Commercial Brands	• Hacienda Boutique Santa Rosanna (Rural hospitality, tourism, and sensory experiences) • Café Anima Matris (Farming, specialty coffee, Honey/Lavado processes, and export)
Tourism Registry & Identifiers	RNT no. 107376 (National Tourism Registry of Colombia) NIT (Tax Identification Number – Colombia)
Registered and Operational Office	Vereda El Manzanillo, Santa Rosa de Cabal, Risaralda – Colombia
Data Processing Contacts	Alejandra Garcia / Luca Pacione
Official Contact Email	info@animamatris.cafe

2. Types of Personal Data Collected

Within our agricultural, commercial, and hospitality activities, we may collect the following categories of data:

Personal and contact data: First name, last name, email address, phone/WhatsApp number, country of origin (collected during newsletter subscription, web requests, or direct contacts).
Purchasing, B2B, and Export data (Café Anima Matris): Company name, tax code/company ID, shipping and billing address, details regarding orders of samples or batches of green or roasted coffee.
Hospitality and stay data (Hacienda Boutique Santa Rosanna): ID or passport details, date of birth, nationality, arrival and departure dates, information provided via paper registration forms at the facility or via the website before and after the stay (in compliance with the National Tourism Registry – RNT 107376 and Decree 4000 of 2004 on the Control of Foreigners).
Data relating to minors (Children and Adolescents): Personal data collected exclusively in the presence and with the express consent of those exercising parental responsibility for the sole purposes of hotel law obligations, public security, and the protection of the minor.
Navigation and technical data: IP address, online identifiers (cookies), aggregated statistical data on website usage collected through Google Analytics 4 and Microsoft Clarity (anonymous interactions with the pages, such as clicks, scrolling and pointer movements), and aggregated statistical data on the opening and interaction with periodic newsletters.

3. Purposes of Processing and Legal Basis

Personal data is processed exclusively for the following legitimate purposes:

Purpose	Processing Description	Legal Basis (GDPR / Law 1581)
Newsletter & Updates	Sending insights on processes (Lavado, Honey), cupping results, batch availability, and news about the Café Anima Matris and finca brands.	Explicit consent (Art. 6.1.a GDPR / Art. 6 Law 1581/2012)
Commercial and Export Management	Issuing quotes, shipping samples, commercial and customs management of B2B and B2C specialty coffee orders.	Contractual execution (Art. 6.1.b GDPR)
Hospitality and Tourism (Check-in)	Reservation management, reception at Hacienda Boutique Santa Rosanna, completion of hotel registration forms, and mandatory communications to authorities.	Contract and legal obligations (Art. 6.1.b-c GDPR / Law 300 of 1996)
Assistance and Direct Contact	Responding to requests submitted via web forms, email, or dedicated messaging channels (WhatsApp).	Legitimate interest in the relationship (Art. 6.1.f GDPR)
Website Statistics and Analysis	Aggregated, pseudonymised analysis of website usage (pages visited, duration, approximate geographic origin, device type) through Google Analytics 4 and, through Microsoft Clarity, heat maps and anonymous recordings of browsing sessions, to improve content and browsing experience.	Consent (Art. 6.1.a GDPR / Art. 6 Law 1581/2012)

4. Liability Regime, Tourism Regulations, and Protection of Minors

BOGLECC CORPORATION S.A.S., holder of RNT no. 107376, operates in full compliance with the regulatory framework of the Republic of Colombia to protect legality, collective heritage, and fundamental rights:

Regulatory framework and binding legal commitments:

Tourism Liability Regime (Law 300 of 1996 and Decrees 1075 of 1997): The company is subject to the liability regime established by the general tourism law of the Republic of Colombia for all services and provisions provided at Hacienda Boutique Santa Rosanna.

Protection of Minors against Sexual Exploitation (Articles 16 and 17 of Law 679 of 2001): Boglecc Corporation S.A.S. is firmly and actively committed to complying with the legal provisions regulating the prevention and protection of minors (children and adolescents) against all forms of exploitation, pornography, and sexual violence in tourism.

Protection of Flora and Fauna (Law 17 of 1981): Strict adherence to conservation protocols, protection, and absolute prohibition of the illegal trafficking, trade, or possession of wild flora and fauna species.

Conservation of Archaeological and Cultural Heritage (Law 103 of 1931): Full compliance with the rules aimed at promoting, protecting, and preserving archaeological monuments and the historical and cultural heritage of Colombia.

Control and Registration of Foreigners (Decree 4000 of 2004): Punctual compliance with all requirements and controls provided by immigration authorities (Migración Colombia) regarding the identification, registration, and stay of foreign citizens.

Anti-Smoking Legislation (Law 1335 of 2009): Strict application of provisions to ensure healthy environments and 100% smoke-free spaces to protect the health of guests and staff.

Principle of Non-Discrimination: Guarantee of equal dignity and strict prohibition of any form of discrimination or exclusion against vulnerable groups and populations.

Special Protection of Personal Data of Minors and Adults: Application of special and enhanced requirements for the protection of personal data of minors (children and adolescents) and adults who provide their data included in our databases for tourism or other purposes. Boglecc Corporation S.A.S. preserves their integrity, retention, and protection, ensuring their responsible and safe use and protecting the right to privacy and protection of information provided via registration forms at the hotel and on the website, before and after the entry into force of the respective decrees and laws.

5. Processing Methods and Retention

Personal data is processed using IT procedures and paper records with appropriate technical and organizational security measures designed to prevent unauthorized access, disclosure, modification, or unlawful destruction of the data.

Retention periods:

Newsletter data is kept until the user requests to unsubscribe (opt-out).
Billing and commercial data is kept for the duration established by current tax regulations.
Data from tourism registration forms is kept for the time necessary to manage the stay and within the terms provided by Colombian legislation.

6. Communication to Third Parties and International Transfer

The data subject's data is not sold to third parties for promotional purposes. It may only be communicated to:

Technology service providers (e.g., the Brevo / Sendinblue platform for sending newsletters and managing lists; web hosting providers).
Google Ireland Limited / Google LLC for the Google Analytics 4 website analytics service.
Microsoft Corporation (Microsoft Ireland Operations Limited for the EEA) for the Microsoft Clarity browsing-behaviour analytics service.
Accounting, tax, customs consultants, and logistics couriers for shipping samples or coffee batches.
Administrative, tourism, and judicial authorities in case of an express legal obligation.

Since the finca and the corporate headquarters are based in Colombia, data may be managed outside the European Economic Area (EEA). Such processing takes place ensuring protection standards compliant with the GDPR (Standard Contractual Clauses) and Law 1581 of 2012 (Habeas Data). For Google Analytics, data may be transferred to the United States on the basis of the safeguards provided by Google (EU-U.S. Data Privacy Framework and Standard Contractual Clauses). The same applies to Microsoft Clarity, on the basis of the safeguards provided by Microsoft.

7. Data Subject's Rights (GDPR and Habeas Data)

At any time, the user may exercise their rights pursuant to Articles 15-22 of EU Regulation 2016/679 (GDPR) and Article 8 of Law 1581 of 2012 (Colombia):

Right of Access: to know if personal data is being held and to obtain a copy of it.
Right to Rectification: to request the update or correction of inaccurate data.
Right to Erasure ('Right to be Forgotten'): to obtain the removal of data when no longer necessary.
Right to Withdraw Consent: to withdraw consent for sending the newsletter at any time.
Right to Object: to oppose the processing for legitimate reasons.

8. Procedure for Exercising Rights

To exercise your rights or request information, simply send a message to:

Privacy Relations Office — BOGLECC CORPORATION S.A.S.
Brands: Hacienda Boutique Santa Rosanna • Café Anima Matris (RNT 107376)
Email: info@animamatris.cafe
Address: Vereda El Manzanillo, Santa Rosa de Cabal, Risaralda – Colombia
Responses are provided within legal deadlines (15 working days under Colombian law, 30 days under the GDPR).

9. Newsletter Unsubscribe (Opt-out)

Every newsletter sent contains an "Unsubscribe" link. By clicking it, the address is instantly and automatically removed from the periodic communications list.

This website uses Google Analytics 4, a web analytics service provided by Google, to obtain aggregated statistics on page usage (pages visited, time on site, approximate geographic origin, device and browser type) and to improve the website's content.

It also uses Microsoft Clarity, a behaviour analytics service provided by Microsoft, which produces heat maps and anonymous recordings of browsing sessions (clicks, scrolling, pointer movements) to understand how to improve usability and content. The content of form fields (for example the newsletter name and email) is masked and is not recorded.

Prior consent: Google Analytics and Microsoft Clarity are loaded, and their cookies are set, only after the user clicks "Accept" in the banner. Before consent, and if the user declines, the website makes no requests to Google's or Microsoft's servers.
Cookies used: with consent, Google Analytics uses cookies and online identifiers (_ga and _ga_*) to distinguish visitors in pseudonymised form. The information generated is transmitted to Google and processed by Google on behalf of the Controller. With consent, Microsoft Clarity uses the _clck (lasting up to 1 year) and _clsk (lasting 1 day) cookies to recognise the browsing session in pseudonymised form; the information is transmitted to Microsoft and processed by Microsoft on behalf of the Controller.
Legal basis: user consent (Art. 6.1.a GDPR / Art. 6 Law 1581 of 2012), which may be withdrawn at any time through the "Cookie preferences" link at the bottom of every page of the website.
Storage of your choice: your choice is stored in your browser (localStorage, key am_cookie_consent) for 180 days, after which the banner is shown again.
Other cookies and external services: the website does not use advertising or profiling cookies. Fonts are hosted on our own servers and are not requested from Google Fonts.
Retention: for the period configured in the website's Google Analytics property and Microsoft Clarity project, within the maximum allowed by the respective services.
How to object or opt out: besides declining in the banner, you can block or delete cookies in your browser settings or install the Google Analytics opt-out browser add-on. For more information: Google's privacy policy and the Microsoft Privacy Statement.

11. Environmental Commitment and Territory Protection

🌱 Our Commitment to the Planet

We invite you to be an active part of our shared environmental commitment for the efficient and conscious use of water and energy, as well as for the comprehensive management of solid waste through constant reduction, reuse, and virtuous recycling.

♻️ PRINT ONLY IF NECESSARY. IF YOU MUST, USE RECYCLED PAPER IF POSSIBLE. LET'S PROTECT THE PLANET.