Privacy Policy & GDPR Compliance
Last Updated: November 2026 • Compliant with EU General Data Protection Regulation (GDPR) and Bolivian Commercial Law.
1Data Controller
Madidi Jungle Ecolodge is an authentic indigenous ecotourism enterprise established and operated by native Uchupiamonas families inside the Madidi National Park.
Entity: Madidi Jungle Ecolodge
Head Office: Calle Comercio s/n, Rurrenabaque, Beni, Bolivia
Lodge Location: Tuichi River, Madidi National Park Integrated Management Natural Area
Official Privacy Email: info@madidijungle.com
Data Protection Officer (DPO): dpo@madidijungle.com
2Personal Data We Collect
We only collect personal information that you voluntarily provide when requesting a tour quote, initiating a reservation, downloading our wildlife guide, or communicating via WhatsApp:
- Contact Information: Full name, email address, telephone / WhatsApp number, country of residence.
- Travel Logistics: Travel dates, flight arrival details in Rurrenabaque, number of passengers, cabin bathroom preference.
- Special Category Data (GDPR Art. 9): Dietary restrictions and physical/medical considerations you explicitly submit so our kitchen and native guides can ensure your safety and comfort in the remote Amazon.
3Legal Basis for Processing
Under Article 6 and Article 9 of the EU GDPR, we process your personal data under the following lawful grounds:
Contractual Necessity (Art. 6.1.b)
Processing is required to issue your reservation code, confirm cabin availability, and organize riverboat transfers on the Beni and Tuichi rivers.
Explicit Consent (Art. 9.2.a)
Special dietary notes or health guidelines are processed strictly with your affirmative consent for your personal safety in the rainforest.
4Your Data Rights (Right to be Forgotten)
As a visitor or customer, you have full control over your data. Under GDPR, you have the right to:
- Right of Access: Request a copy of all personal records we hold about you.
- Right to Rectification: Update or correct inaccurate contact details.
- Right to Erasure ("Right to be Forgotten"): Request immediate and permanent deletion of your booking details from our database once your travel has concluded.
- Right to Restrict Processing: Request suspension of communications or lead marketing at any time.
To exercise any of these rights, email us at info@madidijungle.com with the subject line "GDPR Rights Request". Requests are fulfilled within 72 hours.
6Security Controls
All communications between your browser and our servers are encrypted with TLS 1.3. Our database runs in an isolated network segment without direct public exposure, and API mutations are safeguarded by cryptographic tokenization and automated rate-limiting defenses.