Hacienda Tres Rios Resort, Spa & Nature Park

I. Responsible for the protection of your personal data.

Promotora Sunset Beach Club S.A. de C.V. hereinafter referred as Promotora Sunset, with address in Boulevard Kukulcán, kilometer 10 Apple 51, Lote 13-B Zona Hotelera, Zip Code 77500, Cancún Quintana Roo México, is responsible for the collection and use of the personal data required from the vacational member club, in terms of the rules established by the Mexican Federal Law for Data Protection of Private Individuals (Ley Federal de Protección de Datos Personales en Posesión de los Particulares LFPDPPP) as well in the provisions of the articles 1º, 3º and 5º of the General Data Protection Regulation (EU) 2016/679 (GDPR).

II. Data collected and use of the information requested from our customers.

Personal data collected through physical formats in hotels, by telephone, or by electronic means (online) through our websites, will be used to begin, administer and maintain the services offered to our vacational members club.

a) General Data

The general data requested in our forms such as: name, gender, signature, home address, phone number, cell phone number, e-mail, date of birth, job, home city, economic dependents, country, national identity document or passport will be used for the following essential purposes:

1. Begin providing services that customers contract with the company;
2. To upload our vacational member club ´s information into our systems and database to provide and administer the services contracted
3. To create our vacational member clubs ´electronic and paper files;
4. Carry out the verification of your personal data collected by our Call Center;
5. To comply with the different laws that regulate our services and activities;
6. To deal with complaints and inquiries, and to provide our customers with information related to travel reservations or cancellations received by our Call Center;
7. To confirm, verify, correct and update the personal data;
8. Carry out the sign of the contract;
9. To administrate your personal data in the sales room and contracting Area;
10. To charge for our services and for the collection efforts with respect to receivables that are not paid when due;
11. To charge for services and programs paid electronically with a credit card;
12. To charge any additional expenses or fees for extra services contracted, and;
13. To properly identify our clients as vacational members club or guests.

Additionally, this information can be used for the following non-essential purposes:

1. a) To send our vacational member club offers, discounts, special fees and other benefits;
2. b) To improve our holiday offer by sending your information to our business partners;
3. c) For statistical purposes; and,
4. d) For promotional and marketing purposes.

b) Financial and Patrimonial Assets Data

The financial and patrimonial data collected such as credit card number, bank account, monthly income and additional incomes, will be used to analyze the financial profile of our vacational members club and customers in order to grant them access to promotions and programs based on their economic characteristics. Furthermore additional information may be required in compliance of Mexican Federal Law to prevent money laundering (Lay Federal para la Prevención e Identificación de Operacions con Recursos de Procedencia lícita LFPIORPI).

According to Mexican Privacy Law, is required to obtain express consent of guests and customers in order to use and process their financial and patrimonial assets data for the different purposes and uses described above. Therefore in compliance with the law, we will request your express authorization in written at the moment of the data collection, informing you the legal consequences of their decision to grant it or not.

III. Data transfer.

The personal data collected by “Promotora Sunset” can be transferred to companies that help provide some of the goods and services requested by our customers, which is necessary to comply with the provision of services that are contracted, and also can be transferred to companies who elaborate profiles and consumer trends for our vacational members club, therefore it will not be necessary to have the express consent of the owner of the data for this transfer in accordance to Article 37, Section VII of the LFPDPPP, as well as the provision contained in Article 49 of the GDPR.

Except for the cases indicated above, and unless one of the assumptions contained in Article 37 of the LFPDPPP and 49 of the GDPR is updated, the data provided by our visitors, partners, guests, vacational members club and referred visitors will not be transferred under any circumstances.

IV. Use of images.

Moreover, “Promotora Sunset” may use, print, reproduce and publish any captured image(s) of partners vacational members club, guests, beneficiaries and people referred in print, electronic media (blogs, private social networks such as Facebook, website) , in all its manifestations, its interpretations or executions, its editions, its phonograms or videograms, and in its broadcasts, in order to document journalistically and communicate information related to events that are celebrated, such as delivery of awards and rewards, be the images captured by “Promotora Sunset” itself or through external suppliers hired for these activities.

When any image of any guest, partners, family member, client, partner or referral is going to be used for advertising purposes, this situation will be notified to the owners, and their express consent will be required in a specific format, to indicate whether they accept the treatment of the images for these purposes.

Secondary Purposes

The information that we collect from our guests, members and customers may be used for advertising, marketing and/or market research, according to the relationship existing between them and “Promotora Sunset”. When “Promotora Sunset” pretends to use the images for these purposes, the company will request your express authorization in written before its use.

V. Restrictions on the use or disclosure of personal data.

In Accordance to the articles 16 section III of the LFPDPPP and article 18 of the GDPR, those who wish to limit the use and disclosure of their personal data, or who no longer wish to receive communications regarding the non-essential purposes detailed in this privacy notice, may at any time sign up for the “do not call list” (known by its Spanish acronym REPEP), which is administered by the Bureau of Consumer Protection (PROFECO). For more information visit http://rpc.profeco.gob.mx/; or, send an email to the address datospersonales@sunsetworld.net requesting stop being contacted for these purposes.

VI. Rights of access, rectification, cancellation and opposition, and withdrawal of consent.

As stated in the LFPDPPP as of January 6, 2012, as well as in Articles 15, 16, 17, 18 of the GDPR, the holders of personal data collected by “Promotora Sunset” may request to access, correct, cancel (should this be legally appropriate) and oppose the use of their personal data, as well as to withdraw their consent. To exercise these rights, you must follow this procedure:

1) Send an email to our Privacy Officer at datospersonales@sunsetworld.net to request the application document for the exercise of rights to access, correct, cancel and oppose, which must be filled out with your full name, your legal or commercial relationship with “Promotora Sunset” the type of right you wish to exercise, accurately identifying the data for which you request to access, correct, cancel or oppose, or those for which you decide to withdraw your consent, attaching any of the official identification documents (valid passport or current immigration document), in order to prove the identity with which the request is made.

2) In the case of personal data whose holders are minors or incapable persons, this request must be made by the person who legally represents the rights of the minor or incapable person, either through the accreditation of parental rights; or through his/her legally appointed guardian or tutor.

3) Holders must complete the application for the exercise of the aforementioned rights and may attach all the documents that are relevant to their request. For correction applications, it will be necessary to precisely specify the changes to be created, including the documentation that supports the origin of the request.

4) Applications for the exercise of these rights must be submitted during working hours and on business days in accordance with the Federal Law of Administrative Procedure.

5) The request must be sent to the email address mentioned in numeral 1) and an acknowledgment of receipt will be sent with the corresponding date of receipt. Should the application not fulfill the legal requirements, we will contact the holder within five (5) business days to ask to amend the application for up to ten (10) business days. Otherwise, the application will be considered as not submitted.

6) In the event that the request has been sent on Friday or on a non-business day, it may be received on the following business day after it was sent.

7) The request will be answered via email within a period of twenty (20) business days from the date of receipt. This period may be extended for twenty (20) additional business days when there are adequate reasons, and this situation will be notified to the holder under the terms of the provisions of Article 97 of the LFPDPPP Regulations.

8) In the event that the request is made in accordance with the LFPDPPP and other current regulations, access will be granted, the data will be corrected or canceled, the right of opposition will be effective or the consent will be revoked, within fifteen (15) business days following the date on which the request was answered. This period may be extended for fifteen (15) additional days for adequate reasons, and this situation will be notified to the holder under the terms of the provisions of Article 97 of the LFPDPPP Regulations.

9) In all cases where the request is appropriate, in accordance with the terms of Articles 32, 33, 34 and 35 of the LFPDPPP, the data will be sent free of charge through the holder’s email address for said purpose. In case the information should be required to be sent through another form of delivery, payment must be made for the cost of shipping and/or the cost of reproduction of copies or other formats that may be incurred.

VII. Online data management.

This section describes the use of your personal data in the following websites:
- www.sunsetworldresorts.com

Online Privacy Policy

Our policy regarding the information related to the use of our websites is described below. You should review this Privacy Policy regularly because it may change at any time at our discretion.

When you access “Promotora Sunset” website, we register your IP address (which is usually temporary and is assigned by your internet service provider when you log in), as well as the type of operating system and browser you use. In addition, we can trace the pages of the site you are visiting. The information we collect is used to improve our website’s user experience, and the whole process takes place without any knowledge of your name or any other information that will allow us to identify you. While visiting any “Yucatán Holidays” website, your navigation is anonymous unless you decide to identify yourself to us.

“Promotora Sunset” does not require that you provide personal data to use any of our websites, unless it is necessary. Some applications may require you to disclose any personal information, our contact forms may require your email address to register and answer your comments, requests, questions or suggestions, and contact you if necessary. On these forms, we will not require your name, financial or property data, and/or sensitive data. Any disclosure of this information is your responsibility. Regardless of the above, if you voluntarily provide any of this information, “Promotora Sunset” assures it will be used with strict confidentiality.

Cookies: A cookie is information that an Internet portal sends to your computer, which is stored on your hard drive. The next time you visit our site, we may use the information stored in the cookie to facilitate the use of our website. A cookie does not allow us to know your personal identity unless you explicitly choose to provide it. Most cookies expire after a period of time or can be deleted by you at any time. Also you can configure your browser to notify you when you receive a cookie so you can accept or reject it.

Social Networks

The data and information posted by the users of our social media is published on their own account and is subject to the terms and conditions established by the social media provider. “Promotora Sunset” will use this information to answer the requests and questions asked by the users and to contact them in case they request it.

The contact data of the users who request information about travel packages, tours and other services will be shared with our Customer Service Center to give them a personalized attention by email or phone. The information provided by those users who decide to participate in our contests will be used to contact them in case they win, and their image may be published.

Data Portability

In Accordance with the article 20 of the GDPR, you have the right to transfer your personal data to another supplier or controller without hindrance from the controller to which the personal data have been provided as long as the legal processing oy your data has been carried out by automated means. Promotora Sunset, ensures the most strict confidentiality and security to carry out the data transfer.

VIII. Complaints regarding the use of your personal data.

If you believe that your rights regarding the protection of your personal data have been violated by any conduct, act or omission regarding the attention of your requests or in the use of your personal data, you can submit a complaint with the National Institute for Access to Information and Data Protection (INAI), for more information visit www.inai.org.mx.

IX. More Information – Privacy Office.

If you have any questions regarding the content, interpretation or scope of this Privacy Notice, or need more information regarding the use of your personal data, please contact us through our Privacy Officer, at the following email address datospersonales@sunsetworld.net

X. Updates

This Privacy Notice is effective from January 1st of 2012 and may be modified on a discretionary basis by “Promotora Sunset”, under the terms of the LFPDPPP and its regulations, any amendment will be communicated by posting the new Privacy Notice in any of our website listed in the VII section of this Privacy Note.

Last Updated: June 1st 2020

I. Responsible for the protection of your personal data.

Promotora Cancún Share, S.A. de C.V.  hereinafter referred as Cancún Share, with address in Boulevard Kukulcán, kilometer 10 Apple 51, Lote 13-B Zona Hotelera, Zip Code 77500, Cancún Quintana Roo México, is responsible for the collection and use of the personal data required from the  vacational member club, in terms of the rules established by the Mexican Federal Law for Data Protection of Private Individuals (Ley Federal de Protección de Datos Personales en Posesión de los Particulares LFPDPPP) as well in the provisions of the articles 1º, 3º and 5º of the General Data Protection Regulation (EU) 2016/679 (GDPR).

II. Data collected and use of the information requested.

The general data requested in these forms such as: name, date of birth, national identity document or passport collected in the application for financing, and requested in the authorization of the amounts that will be charged to the credit card and for the signing of the promissory note, is and will be used for: (i) register you as a vacational member club; (ii) for process your application in order to purchase the membership; (iii) for the signing and formalization of the funding contract; (iv) for the administration of the contract signed and the collection efforts with respect to receivables that are not paid when due; and, (v) for the compliance of all governing laws and to maintain a communication channel with the clients.

• Financial and Patrimonial Assets Data

The financial data and information related to the patrimonial assets of the applicant collected such as: real property, personal property, monthly housing payments, monthly income, annual salary, additional income, source of the additional income, total household income, credit card number, expiration date and security number will be used for: (i) process your application in order to acquire financing; (ii) for the charges of the membership fees; (iii) for the management of the contract signed. Furthermore, additional financial data and information related to the patrimonial assets of the clients may be required in compliance of Mexican Federal Law to prevent money laundering (Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita LFPIORPI).

III. Express consent for the use of Financial and Patrimonial Assets Data.

According to article 8 of the LFPDPPP, Cancún Share required to obtain express consent of the applicants in order to use and process their financial and patrimonial assets data for the different purposes and uses described above. Therefore, in compliance with the law, we request your authorization for the management of this information in the following clause, on the understanding that if you refuse to give it, Cancún Share will be unable to proceed with the authorization of your application for financing.

______ (Yes) I consent to Cancún Share collecting and using my personal financial and patrimonial assets data as described in numeral II of this Privacy Notice.

______ (No) I don’t consent to Cancún Share collecting and using my personal financial and patrimonial assets data as described in numeral II of this Privacy Notice.

Your personal data can also be shared with service providers that support Cancún Share in the administration and execution of the contracts signed with the accredited customers. For these data transferences, your consent it’s not required by law, according to article 37, section VII, of the LFPDPPP. Except for the cases cited above, the personal data provided by our customers will not be transferred to any other party or company unless the data transfer is required by law under the provisions stated by article 37 of the LFPDPPP.

If you have any questions regarding to the content, interpretation or scope of this Privacy Notice, or you need more information regarding the use of your personal data, you can have access to Cancún Share full Privacy Notice by sending an e-mail to: datospersonales@sunsetworld.net

Name and Signature                          _____________________________

Date                                                       _____________________________

I. Responsible for the protection of your personal data.

Desarrolladora Sunset de Occidente S.A. de C.V.  hereinafter referred as Desarrolladora Sunset, with address in Boulevard Kukulcán, kilometer 10 Block 51, Lote 13-B Zona Hotelera, Zip Code 77500, Cancún Quintana Roo México, is responsible for the collection and use of the personal data required from the  vacational member club, in terms of the rules established by the Mexican Federal Law for Data Protection of Private Individuals (Ley Federal de Protección de Datos Personales en Posesión de los Particulares LFPDPPP) as well in the provisions of the articles 1º, 3º and 5º of the General Data Protection Regulation (EU) 2016/679 (GDPR).

II. Data collected and use of the information requested from our customers.

The personal data and documents collected from our customer at the resort, in our Website, online services or by phone, will be used to start, management and maintenance of ours services and to send discounts, offers and promotions in terms of what is stated in this section.

a) General Data

The general data requested in our forms such as: name, gender, signature, home address, phone number, cell phone number, e-mail, date of birth, job, home city, economic dependents, country, national identity document or passport will be used for the following essential purposes:

• i. Provide all our services;
• ii. Include the information of our vacational member club in our systems and databases to provide and administrate the services contracted;
• iii. Carry out the verification of your personal data collected by our Call Center;
• iv. To comply with the different laws that regulate our services and activities;
• v. To attend complains, doubts and provide information to our vacational member club, related to transportation, reservations or cancellations received by our Call Center;
• vi. To confirm, verify, correct and update your personal data;
• vii. Carry out the sign of the contract;
• viii. To administrate your personal data in the sales room and contracting Area;
• ix. For the charge of maintenance fees, monthly payments, and the collection efforts with respect to receivables that are not paid when due; 
• x. In order to do the charges on-line of the services and programs paid with credit card;
• xi. To charge any extra charges or additional fees for extra services contracted by our customers and;
• xii. For the proper identification of our vacational member club.

Additionally, this information can be used for the following non-essential purposes: 

a) To send our vacational member club offers, discounts, special fees and other benefits;
b) For statistical purposes; and,
c) For promotional and marketing purposes.

b) Financial and Patrimonial Assets Data

The financial and patrimonial data collected such as credit card number, bank account, monthly income and additional incomes, will be used to purchase our memberships, make reservations analyze the financial profile of our vacational member club in order to grant them access to promotions and programs based on their economic characteristics. Furthermore, additional financial data and information related to the patrimonial assets of the clients may be required in compliance of Mexican Federal Law to prevent money laundering (Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita LFPIORPI).

According to Mexican Privacy Law, is required to obtain express consent of our vacational member club in order to use and process their financial and patrimonial assets data for the different purposes and uses described above. Therefore, in compliance with the law, we will request your express authorization in written at the moment of the data collection.

III. Data transfer.

The personal data collected by Desarrolladora Sunset can be transfer to companies (resorts) that help to provide some of the services requested by our vacational member club. These data transfer is necessary to comply with the contract and therefore express consent is not necessary for these transferences.

Out of these cases and unless one of the provisions stated in article 37 of the LFPDPPP and in the provision contained in article 49 of the GDPR are met, the data provided by our vacation members club, will not be transferred under any circumstances to third parties.

IV. Use of images.

Events: In order to document and communicate information about the activities and events held throughout the year, as well as news Desarrolladora Sunset can use, print, reproduce and publish the images of our vacation members club and customers and their friends or family that attend our activities in print or electronic media, newsletters, publications, photographic memories, in all its forms and expressions, performances, editions, phonograms, video and emissions for the purposes indicated. These images will not be commercially exploited by Desarrolladora Sunset.

Secondary Purposes

The information that we collect from our vacation members club, and customers may be used for advertising, marketing and/or market research, according to the relationship existing between them and Desarrolladora Sunset. When Desarrolladora Sunset pretends to use the images for these purposes, the company will request your express authorization in written before its use.

V. Restrictions on the use or disclosure of personal data.

In Accordance to the articles 16 section III of the LFPDPPP and article 18 of the GDPR, If our customers do not wish to receive communications or advertising by Desarrolladora Sunset at any time they can: Subscribe their data in the “do not call list” (REPEP for its acronym in Spanish), administrated by the Bureau of Consumer Protection (PROFECO). For more information visit http://rpc.profeco.gob.mx/; or, send an email to the address datospersonales@sunsetworld.net requesting stop being contacted for these purposes.

VI. Rights of access, rectification, cancellation and opposition, and withdrawal of consent.

As stated in the Federal Personal Data Protection Law and in the General Data Protection Regulation, customers may request the access, rectification, cancellation, oppose to the use of their personal data provided to the responsible, or revoke their consent. Their request will be answered by our Privacy Officer, through this email address: datospersonales@sunsetworld.net

To exercise these rights of access, rectification, cancellation, opposition, and to revoke the consent, the following procedure must be followed:

1. 1) Send an email to the address: datospersonales@sunsetworld.net with your full name, your legal or commercial relationship with Desarrolladora Sunset (for example vacational member club), and if you want to exercise your right of access, rectification, cancellation, opposition or revoke your consent.
2. 2) Fill the application form that our Privacy Officer will send you, identifying the data on which you request the access, rectification, cancellation, opposition or the revoke of your consent, providing a copy of any of the identifications mentioned in the form in order to prove that you are the owner of the data or its legal representative. 
3. 3) After filling this form you must sent it to the e-mail address indicated in the previous paragraph, attaching all the documents that are relevant to answer your request. For “rectification” applications it will be necessary to specify the changes to be done, including the documentation that supports your request.
4. 4) Once your request is received we will send you a notice with the file number and date of receipt. If your applicarion does not fulfill the legal requirements we will contact you within five business days of the receipt date informing you this situation. You will have ten business day to provide the information or documents required, otherwise your application will be considered as not submitted.
5. 5) If your application was sent on a saturday, sunday or non-working day, it will be received the following working day.
6. 6) Your request will be answered via e-mail in a period of twenty working days from the date of receipt. This period may be extended for twenty additional days for proper reasons, this situation will be notified to you in terms of the provisions of Article 97 of the LFPDPPP Regulations.
7. 7) If your application is accepted we will give you access, rectify or cancel you data, register your opposition to the use of your information or revoke your consent within the fifteen business days from the date on which we answer your request. 
8. 8) This period may be extended for fifteen additional days for proper reasons, this situation will be notified to you in terms of the provisions of Article 97 of the LFPDPPP Regulations.
9. 9) When your application is accepted, in terms of Articles 32, 33, 34 and 35 of the LFPDPPP we will sent your data without any charge through your email address, in case you request or need another form of delivery you will have to pay for the cost of shipment and/or the cost of reproduction of copies or other formats.

VII. Online data management.

This section describes the use of your personal data in the following websites:

–        www.sunsetworldresorts.com

Online Privacy Policy

Our policy regarding the information related to the use of our website is described below. You should review this Privacy Policy regularly since it may change at any time at our discretion.

When you access the website of Desarrolladora Sunset, we register your Internet address (this address usually is temporary and is assigned by your Internet service provider when you log in), the type of operating system and browser you use. In addition, we can trace the pages of the site that you are visiting. The information we collect is used to improve the users experience of our website, the whole process is done without any knowledge of your name or any other information that will allow us to identify you. While visiting the website of Desarrolladora Sunset, unless you decide to identify with us, your navigation is anonymous.

Desarrolladora Sunset does not require that you provide personal data to use our website, unless necessary. Some applications may require you to disclose any personal information, our contact forms may require your email address to register and answer your comments, requests, questions or suggestions, and contact you if necessary. In these forms we will not require your name, financial, patrimonial and/or sensitive data, any disclosure of this information is your responsibility, regardless the above, if you voluntarily provide any of this information Desarrolladora Sunset assures it will be used with strict confidentiality.

Cookies: A cookie is information that an Internet portal sends to your computer, which is stored on your hard drive. The next time you visit our site, we may use the information stored in the cookie to facilitate the use of our website. A cookie does not allow us to know your personal identity unless you explicitly choose to provide it. Most cookies expire after a period of time or can be deleted by you at any time. Also you can configure your browser to notify you when you receive a cookie so you can accept or reject it.

Social Networks 

The data and information posted by the users of our social network, is published on their own account and is subjected to the terms and conditions established by the social network provider. Desarrolladora Sunset will use this information to answer the requests and questions asked by the users and to contact them in case they request so.

The contact data of the users that request information about travel packages, tours and other services will be shared with our Customer Service Center to give them a personalized attention by e-mail or phone. The information provided by those users who decide to participate in our contests will be use to contact them in case they win and their image may be published.

Data Portability

In Accordance with the article 20 of the GDPR, you have the right to transfer your personal data to another supplier or controller without hindrance from the controller to which the personal data have been provided as long as the legal processing oy your data has been carried out by automated means. Desarrolladora Sunset, ensures the most strict confidentiality and security to carry out the data transfer. 

VIII. Complaints regarding the use of your personal data.

If you believe that your rights regarding the protection of your personal data have been violated by any conduct, act or omission regarding the attention of your requests or in the use of your personal data, you can submit a complaint with the National Institute for Access to Information and Data Protection (INAI), for more information visit www.inai.org.mx. 

IX. More Information – Privacy Office.

If you have any questions regarding the content, interpretation or scope of this Privacy Notice, or need more information regarding the use of your personal data, please contact us through our Privacy Officer, at the following email address datospersonales@sunsetworld.net

X. Updates

This Privacy Notice is effective from January 1º of 2012 and may be modified on a discretionary basis by Desarrolladora Sunset, in terms of the GDPR and LFPDPPP and its regulations, any amendment will be communicated by posting the new Privacy Notice in of our website (section Vacational Member Club Privacy Notice) listed in the VII section of this Privacy Note, and in the Resort Lobby.

Last Update: January 1, 2019

I. Responsible for the protection of your personal data.

Promotora Sunset Beach Club S.A. de C.V. hereinafter referred as Promotora Sunset, with address in Boulevard Kukulcán, kilometer 10 Apple 51, Lote 13-B Zona Hotelera, Zip Code 77500, Cancún Quintana Roo México, is responsible for the collection and use of the personal data required from the vacational member club, in terms of the rules established by the Mexican Federal Law for Data Protection of Private Individuals (Ley Federal de Protección de Datos Personales en Posesión de los Particulares LFPDPPP) as well in the provisions of the articles 1º, 3º and 5º of the General Data Protection Regulation (EU) 2016/679 (GDPR).

II. Data collected and use of the information requested from our customers.

Personal data collected through physical formats in hotels, by telephone, or by electronic means (online) through our websites, will be used to begin, administer and maintain the services offered to our vacational members club.

a) General Data

The general data requested in our forms such as: name, gender, signature, home address, phone number, cell phone number, e-mail, date of birth, job, home city, economic dependents, country, national identity document or passport will be used for the following essential purposes:

1. Begin providing services that customers contract with the company;
2. To upload our vacational member club ´s information into our systems and database to provide and administer the services contracted
3. To create our vacational member clubs ´electronic and paper files;
4. Carry out the verification of your personal data collected by our Call Center;
5. To comply with the different laws that regulate our services and activities;
6. To deal with complaints and inquiries, and to provide our customers with information related to travel reservations or cancellations received by our Call Center;
7. To confirm, verify, correct and update the personal data;
8. Carry out the sign of the contract;
9. To administrate your personal data in the sales room and contracting Area;
10. To charge for our services and for the collection efforts with respect to receivables that are not paid when due;
11. To charge for services and programs paid electronically with a credit card;
12. To charge any additional expenses or fees for extra services contracted, and;
13. To properly identify our clients as vacational members club or guests.

Additionally, this information can be used for the following non-essential purposes:

1. a) To send our vacational member club offers, discounts, special fees and other benefits;
2. b) To improve our holiday offer by sending your information to our business partners;
3. c) For statistical purposes; and,
4. d) For promotional and marketing purposes.

b) Financial and Patrimonial Assets Data

The financial and patrimonial data collected such as credit card number, bank account, monthly income and additional incomes, will be used to analyze the financial profile of our vacational members club and customers in order to grant them access to promotions and programs based on their economic characteristics. Furthermore additional information may be required in compliance of Mexican Federal Law to prevent money laundering (Lay Federal para la Prevención e Identificación de Operacions con Recursos de Procedencia lícita LFPIORPI).

According to Mexican Privacy Law, is required to obtain express consent of guests and customers in order to use and process their financial and patrimonial assets data for the different purposes and uses described above. Therefore in compliance with the law, we will request your express authorization in written at the moment of the data collection, informing you the legal consequences of their decision to grant it or not.

III. Data transfer.

The personal data collected by “Promotora Sunset” can be transferred to companies that help provide some of the goods and services requested by our customers, which is necessary to comply with the provision of services that are contracted, and also can be transferred to companies who elaborate profiles and consumer trends for our vacational members club, therefore it will not be necessary to have the express consent of the owner of the data for this transfer in accordance to Article 37, Section VII of the LFPDPPP, as well as the provision contained in Article 49 of the GDPR.

Except for the cases indicated above, and unless one of the assumptions contained in Article 37 of the LFPDPPP and 49 of the GDPR is updated, the data provided by our visitors, partners, guests, vacational members club and referred visitors will not be transferred under any circumstances.

IV. Use of images.

Moreover, “Promotora Sunset” may use, print, reproduce and publish any captured image(s) of partners vacational members club, guests, beneficiaries and people referred in print, electronic media (blogs, private social networks such as Facebook, website) , in all its manifestations, its interpretations or executions, its editions, its phonograms or videograms, and in its broadcasts, in order to document journalistically and communicate information related to events that are celebrated, such as delivery of awards and rewards, be the images captured by “Promotora Sunset” itself or through external suppliers hired for these activities.

When any image of any guest, partners, family member, client, partner or referral is going to be used for advertising purposes, this situation will be notified to the owners, and their express consent will be required in a specific format, to indicate whether they accept the treatment of the images for these purposes.

Secondary Purposes

The information that we collect from our guests, members and customers may be used for advertising, marketing and/or market research, according to the relationship existing between them and “Promotora Sunset”. When “Promotora Sunset” pretends to use the images for these purposes, the company will request your express authorization in written before its use.

V. Restrictions on the use or disclosure of personal data.

In Accordance to the articles 16 section III of the LFPDPPP and article 18 of the GDPR, those who wish to limit the use and disclosure of their personal data, or who no longer wish to receive communications regarding the non-essential purposes detailed in this privacy notice, may at any time sign up for the “do not call list” (known by its Spanish acronym REPEP), which is administered by the Bureau of Consumer Protection (PROFECO). For more information visit http://rpc.profeco.gob.mx/; or, send an email to the address datospersonales@sunsetworld.net requesting stop being contacted for these purposes.

VI. Rights of access, rectification, cancellation and opposition, and withdrawal of consent.

As stated in the LFPDPPP as of January 6, 2012, as well as in Articles 15, 16, 17, 18 of the GDPR, the holders of personal data collected by “Promotora Sunset” may request to access, correct, cancel (should this be legally appropriate) and oppose the use of their personal data, as well as to withdraw their consent. To exercise these rights, you must follow this procedure:

1) Send an email to our Privacy Officer at datospersonales@sunsetworld.net to request the application document for the exercise of rights to access, correct, cancel and oppose, which must be filled out with your full name, your legal or commercial relationship with “Promotora Sunset” the type of right you wish to exercise, accurately identifying the data for which you request to access, correct, cancel or oppose, or those for which you decide to withdraw your consent, attaching any of the official identification documents (valid passport or current immigration document), in order to prove the identity with which the request is made.

2) In the case of personal data whose holders are minors or incapable persons, this request must be made by the person who legally represents the rights of the minor or incapable person, either through the accreditation of parental rights; or through his/her legally appointed guardian or tutor.

3) Holders must complete the application for the exercise of the aforementioned rights and may attach all the documents that are relevant to their request. For correction applications, it will be necessary to precisely specify the changes to be created, including the documentation that supports the origin of the request.

4) Applications for the exercise of these rights must be submitted during working hours and on business days in accordance with the Federal Law of Administrative Procedure.

5) The request must be sent to the email address mentioned in numeral 1) and an acknowledgment of receipt will be sent with the corresponding date of receipt. Should the application not fulfill the legal requirements, we will contact the holder within five (5) business days to ask to amend the application for up to ten (10) business days. Otherwise, the application will be considered as not submitted.

6) In the event that the request has been sent on Friday or on a non-business day, it may be received on the following business day after it was sent.

7) The request will be answered via email within a period of twenty (20) business days from the date of receipt. This period may be extended for twenty (20) additional business days when there are adequate reasons, and this situation will be notified to the holder under the terms of the provisions of Article 97 of the LFPDPPP Regulations.

8) In the event that the request is made in accordance with the LFPDPPP and other current regulations, access will be granted, the data will be corrected or canceled, the right of opposition will be effective or the consent will be revoked, within fifteen (15) business days following the date on which the request was answered. This period may be extended for fifteen (15) additional days for adequate reasons, and this situation will be notified to the holder under the terms of the provisions of Article 97 of the LFPDPPP Regulations.

9) In all cases where the request is appropriate, in accordance with the terms of Articles 32, 33, 34 and 35 of the LFPDPPP, the data will be sent free of charge through the holder’s email address for said purpose. In case the information should be required to be sent through another form of delivery, payment must be made for the cost of shipping and/or the cost of reproduction of copies or other formats that may be incurred.

VII. Online data management.

This section describes the use of your personal data in the following websites:
– www.sunsetworldresorts.com

Online Privacy Policy

Our policy regarding the information related to the use of our websites is described below. You should review this Privacy Policy regularly because it may change at any time at our discretion.

When you access “Promotora Sunset” website, we register your IP address (which is usually temporary and is assigned by your internet service provider when you log in), as well as the type of operating system and browser you use. In addition, we can trace the pages of the site you are visiting. The information we collect is used to improve our website’s user experience, and the whole process takes place without any knowledge of your name or any other information that will allow us to identify you. While visiting any “Yucatán Holidays” website, your navigation is anonymous unless you decide to identify yourself to us.

“Promotora Sunset” does not require that you provide personal data to use any of our websites, unless it is necessary. Some applications may require you to disclose any personal information, our contact forms may require your email address to register and answer your comments, requests, questions or suggestions, and contact you if necessary. On these forms, we will not require your name, financial or property data, and/or sensitive data. Any disclosure of this information is your responsibility. Regardless of the above, if you voluntarily provide any of this information, “Promotora Sunset” assures it will be used with strict confidentiality.

Cookies: A cookie is information that an Internet portal sends to your computer, which is stored on your hard drive. The next time you visit our site, we may use the information stored in the cookie to facilitate the use of our website. A cookie does not allow us to know your personal identity unless you explicitly choose to provide it. Most cookies expire after a period of time or can be deleted by you at any time. Also you can configure your browser to notify you when you receive a cookie so you can accept or reject it.

Social Networks

The data and information posted by the users of our social media is published on their own account and is subject to the terms and conditions established by the social media provider. “Promotora Sunset” will use this information to answer the requests and questions asked by the users and to contact them in case they request it.

The contact data of the users who request information about travel packages, tours and other services will be shared with our Customer Service Center to give them a personalized attention by email or phone. The information provided by those users who decide to participate in our contests will be used to contact them in case they win, and their image may be published.

Data Portability

In Accordance with the article 20 of the GDPR, you have the right to transfer your personal data to another supplier or controller without hindrance from the controller to which the personal data have been provided as long as the legal processing oy your data has been carried out by automated means. Promotora Sunset, ensures the most strict confidentiality and security to carry out the data transfer.

VIII. Complaints regarding the use of your personal data.

If you believe that your rights regarding the protection of your personal data have been violated by any conduct, act or omission regarding the attention of your requests or in the use of your personal data, you can submit a complaint with the National Institute for Access to Information and Data Protection (INAI), for more information visit www.inai.org.mx.

IX. More Information – Privacy Office.

If you have any questions regarding the content, interpretation or scope of this Privacy Notice, or need more information regarding the use of your personal data, please contact us through our Privacy Officer, at the following email address datospersonales@sunsetworld.net

X. Updates

This Privacy Notice is effective from January 1st of 2012 and may be modified on a discretionary basis by “Promotora Sunset”, under the terms of the LFPDPPP and its regulations, any amendment will be communicated by posting the new Privacy Notice in any of our website listed in the VII section of this Privacy Note.

Last Updated: June 1st 2020

Naviera Dorada S.A. de C.V. hereinafter referred as “Sunset Admiral Yacht Club Y Marina”, with address in Boulevard Kukulcán Kilómetro 5.8 MZ-37 LT-18 SECC-C, Zona Hotelera, CP 77500, Cancún, Quintana Roo, Mexico, is responsible for the collection and use of the personal data required from customers, in terms of the rules established by the Mexican Federal Law for Data Protection of Private Individuals (Ley Federal de Protección de Datos Personales en Posesión de los Particulares –LFPDPPP) as well in the rules established by articles 1, 3 and 5 of the General Data Protection Regulation (EU) 2016/679 (GDPR).

II. Data collected and use of the information requested from our customers.

In accordance with the rules established by LFPDPP and GDPR, we inform you that the personal data collected through our formats, by telephone or by electronic means (online) through our website, such as: name, phone number, email, home city, country, the national identity document, passport or the national voting card issued by National Electoral Institute (INE), will be used for the following essential purposes:

a) General Data

i. Provide and administrate the services contracted by our customers (rent of yachts, fishing boats and water scooters);
ii. To lease stay spaces for vessels.
iii. Register their information in our systems and databases;
iv. To comply with the different laws that regulate our services and activities;
v. To confirm, verify, correct and update their personal data;
vi. To hire the insurance policies required by law;
vii. To administrate the reservations requested by our customers;
viii. To charge for our services and for the collection efforts with respect to receivables that are not paid when due;
ix. To charge for services and programs paid electronically with a credit card;
x. To charge any additional expenses or fees for extra services contracted, and;

Additionally, this information can be used for the following non-essential purposes:

a) To send customers: offers, discounts, special fees and other benefits;
b) For statistical purposes; and,
c) For promotional and marketing purposes.

b) Financial and Patrimonial Assets Data

The financial and patrimonial data collected such as insurance policy and vessel invoice, will be used to sign the lease contract of stay spaces for vessels. According to Mexican Privacy Law, is required to obtain express consent of customers in order to use and process their financial and patrimonial assets data for the different purposes and uses described above. Therefore in compliance with the law, we will request your express authorization in written at the moment of the data collection, informing you the legal consequences of their decision to grant it or not.

III. Data transfer.

The personal data collected by “Sunset Admiral Yacht Club Y Marina” can be transferred to companies that help provide some of the goods and services requested by our customers, which is necessary to comply with the provision of services that are contracted, so this information will be send to these providers in compliance with the provisions stated in article 37, section VII of the LFPDPPP, as well as the provision contained in article 49 of the GDPR.

Except for the cases indicated above, and unless the conditions set by articles 37 of the LFPDPPP and 49 of the GDPR are being materialized, the data provided by our customers will not be transferred under any circumstances.

IV. Restrictions on the use or disclosure of personal data

In Accordance to the articles 16 section III of the LFPDPPP and article 18 of the GDPR, those who wish to limit the use and disclosure of their personal data, or who no longer wish to receive communications regarding the non-essential purposes detailed in this privacy notice, must send an email to the adress:
privacidadadmiral@sunset.com.mx requesting stop being contacted for these purposes.

V. Withdrawal of consent and rights of Access, Rectification, Cancellation and Opposition.

As stated in the LFPDPPP as of January 6, 2012, as well as in Articles 15, 16, 17, 18 of the GDPR, the owners of personal data collected by “Sunset Admiral Yacht Club Y Marina” may request: access, correction, cancellation (should this be legally appropriate) and opposition of the use of their personal data, as well as to withdraw their consent. To exercise these rights, they must follow this procedure:

1) They must send an application by email to our Privacy Office at privacidadadmiral@sunset.com.mx stating the right they want to exercise: access, correction, cancellation and/or opposition, which must indicate their full name, the legal or commercial relationship with “Sunset Admiral Yacht Club Y Marina” the type of right they wish to exercise, accurately identifying the data for which they request access, correction, cancellation or opposition, or those for which they decide to withdraw their consent, attaching any of the official identification documents (valid passport or current immigration document), in order to prove their identity

2) In the case of personal data whose owners are underage or people that cannot legally give consent themselves, this request must be made by the person who legally represents their rights, either through the accreditation of parental rights; or through his/her legally appointed guardian or tutor.

3) Data owners must send their application for the exercise of the aforementioned rights and may attach all the documents that are relevant to their request. For correction applications, it will be necessary to precisely specify the changes requested, including the documentation that supports their claim.

4) Applications for the exercise of these rights must be submitted during working hours and on business days in accordance with the Federal Law of Administrative Procedure.

5) The request must be sent to the email address mentioned in numeral 1) and an acknowledgment of receipt will be sent with the corresponding date of receipt. Should the application not fulfill the legal requirements, we will contact the holder within five (5) business days to ask to amend the application for up to ten (10) business days. Otherwise, the application will be considered as not submitted.

6) In the event that the request has been sent on Friday or on a non-business day, it may be received on the following business day after it was sent.

7) The request will be answered via email within a period of twenty (20) business days from the date of receipt. This period may be extended for twenty (20) additional business days when there are adequate reasons, and this situation will be notified to the holder under the terms of the provisions of Article 97 of the LFPDPPP Regulations.

8) In the event that the request is made in accordance with the LFPDPPP and other current regulations, access will be granted, the data will be corrected or canceled, the right of opposition will be effective or the consent will be revoked, within fifteen (15) business days following the date on which the request was answered. This period may be extended for fifteen (15) additional days for adequate reasons, and this situation will be notified to the holder under the terms of the provisions of Article 97 of the LFPDPPP Regulations.
9) In all cases where the request is appropriate, in accordance with the terms of Articles 32, 33, 34 and 35 of the LFPDPPP, the data will be sent free of charge through the holder’s email address for said purpose. In case the information should be required to be sent through another form of delivery, payment must be made for the cost of shipping and/or the cost of reproduction of copies or other formats that may be incurred.

9) In all cases where the request is appropriate, in accordance with the terms of Articles 32, 33, 34 and 35 of the LFPDPPP, the data will be sent free of charge through the holder’s email address for said purpose. In case the information should be required to be sent through another form of delivery, payment must be made for the cost of shipping and/or the cost of reproduction of copies or other formats that may be incurred.

VI. Online data management

This section describes the use of your personal data in the following website:
https://www.sunsetworldresorts.com/experiences/sunset-admiral/

Online Privacy Policy

Our policy regarding the information related to the use of our website is described below. You should review this Privacy Policy regularly because it may change at any time at our discretion.

When you access to “Sunset Admiral Yacht Club Y Marina” website, we register your IP address (which is usually temporary and is assigned by your internet service provider when you log in), as well as the type of operating system and browser you use. In addition, we can trace the pages of the site you are visiting. The information we collect is used to improve our website’s user experience, and the whole process takes place without any knowledge of your name or any other information that will allow us to identify you. While visiting “Sunset Admiral Yacht Club Y Marina” website, your navigation is anonymous unless you decide to identify yourself to us.

“Sunset Admiral Yacht Club Y Marina” does not require that you provide personal data to use our website, unless it is necessary. Some applications may require you to disclose any personal information, our contact forms may require your email address to register and answer your comments, requests, questions or suggestions, and contact you if necessary. On these forms, we will not require your name, financial or property data, and/or sensitive data. Any disclosure of this information is your responsibility. Regardless of the above, if you voluntarily provide any of this information, “Sunset Admiral Yacht Club Y Marina” assures it will be used with strict confidentiality.

Cookies

A cookie is information that an internet portal sends to your computer and is stored on your hard drive. The next time you visit our site, we may use the information stored in the cookie to facilitate the use of our websites. A cookie does not allow us to know your personal identity unless you explicitly choose to provide it. Most cookies expire after a short period of time or can be deleted by you at any time. Also, you can configure your browser to notify you when you receive a cookie so you can accept or reject it.

Social Networks

The personal data and information posted by the users of our social media is published on their own account and is subject to the terms and conditions established by the social media provider. “Sunset Admiral Yacht Club Y Marina” will use this information to answer the requests and questions asked by the users and to contact them in case they request it.

The contact data of the users who request information about travel packages, tours and other services will be shared with our Customer Service Center to give them a personalized attention by email or phone. The information provided by those users who decide to participate in our contests will be used to contact them in case they win, and their image may be published.

Data Portability

In Accordance with article 20 of the GDPR, you have the right to transfer your personal data to another supplier or controller without hindrance from the controller to which the personal data has been provided as long as the legal processing of your data has been carried out by automated means. “Sunset Admiral Yacht Club Y Marina”, ensures the strictest confidentiality and security to carry out the data transfer.

VII. Complaints regarding the use of your personal data.

If you believe that your rights regarding the protection of your personal data have been violated by any conduct, act or omission regarding the attention of your requests or in the use of your personal data, you can submit a complaint with the National Institute for Access to Information and Data Protection (INAI). For more information you can visit the website: www.inai.org.mx.

VIII. More Information – Privacy Office.

If you have any questions regarding the content, interpretation or scope of this Privacy Notice, if you need more information regarding the use of your personal data, please contact us through our Privacy Officer at the following email address: privacidadadmiral@sunset.com.mx

X. Updates

This Privacy Notice is effective from January 1st of 2012 and may be modified on a discretionary basis by “Sunset Admiral Yacht Club Y Marina”, under the terms of the LFPDPPP and its regulations, if you have any questions regarding to the content, interpretation or scope of this Privacy Notice, or you need more information regarding the use of your personal data, please contact our Privacy Office.

Last Updated: October 1st, 2020

I. Responsible for the protection of your personal data.

Hotelera Sunrise S.A. de C.V. hereinafter referred as Hacienda Tres Ríos, with address in Boulevard Kukulkan, kilometer 10, MZ 51, Lot 13-B, Hotel Zone, Zip Code 77500, Cancun, Quintana Roo, Mexico, is responsible for the collection and use of the personal data required from customers, visitors and members of the vacation club, in terms of the rules established by article 3, section XIV of the Mexican Federal Law for Data Protection of Private Individuals (Ley Federal de Protección de Datos Personales en Posesión de los Particulares LFPDPPP) as well in the rules established by articles 1º, 3º and 5º of the General Data Protection Regulation (EU) 2016/679 (GDPR).

II. Data collected, and use of the information requested from our customers.

We inform you that the personal data collected through our formats, by telephone or by electronic means (online) and through our website will be used to provide our services and to send to our customers, visitors, and members of the vacation club: discounts, offers and promotions. The rules for the personal information management are described in the following section:

a) General Data

The general personal data collected through our formats such as: name, gender, signature, home address, phone number, cell phone number, e-mail, date of birth, job, home city, number of children, economic dependents, country, national identity document or passport will be used for the following essential purposes:

i. Provide and administrate the services contracted by our customers.
ii. Register their information in our systems and databases.
iii. Check-In and Check-out process.
iv. Comply with the laws that govern our activities.
v. Customer service, including providing information of our services, transportation, reservations, doubts, complaints, and cancellations received through our Call Center.
vi. To confirm, verify, correct, and update their personal data.
vii. To administrate the reservations requested by our customers (all inclusive, European plan and day pass).
viii. To register the reservations requested by our clients.
ix. To charge for our services and for the collection efforts with respect to receivables that are not paid when due.
x. To charge for services and programs paid electronically with a credit card.
xi. To charge any additional expenses or fees for extra services contracted.
xii. To properly identify our associates, guests, and customers.

Additionally, this information can be used for the following secondary (non-essential) purposes:

a) To send to our customers offers, discounts, special fees, and other benefits.
b) For our wedding, banquets, and honeymoon services.
c) For Sunset Spa services.
d) For babysitting services.
e) For our gym services.
f) For medical attention if it is required.
g) For our restaurant and bar services.
h) For currency exchange.
i) For transportation services.
j) For statistics of our services.
k) For promotional and marketing purposes.

b) Financial and Patrimonial Assets Data

The financial and patrimonial data collected such as credit card number, card security code, card expiration date, bank account, will be used to purchase our vacation packages, to purchase our wedding services, make reservations, to administrate our European Plan and analyze the financial profile of our guests and customers to grant them access to promotions and programs based on their economic characteristics. Furthermore, additional financial data and information related to the patrimonial assets of the clients may be required in compliance of Mexican federal law to prevent money laundering (Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita LFPIORPI). According to Mexican Privacy Law, is required to obtain express consent of guests and customers in order to use and process their financial and patrimonial assets data for the different purposes and uses described above. Therefore, in compliance with the law, we will request your express authorization in written at the moment of the data collection.

c) Sensitive Data

The sensitive data collected in our health questionnaire such as health conditions (allergies, hearth diseases, blood pressure, diabetes, cancer, epilepsy, dermatologic problems), will be used to evaluate your health to determine that you have the physical conditions required for the services offered by the SPA, for the babysitting services and for medical attention if it’s required in case of emergency during
our services.

According to Mexican Privacy Law (LFPDPPP) article 9º and the provisions established by article 9 (2.a) of the GDPR is required to obtain express consent of guests and customers to collect and process their sensitive personal data for the different purposes and uses described above. Therefore, in compliance with these regulations, we will request your express authorization in written at the moment of the data collection.

III. Data transfer.

The personal data collected by Hacienda Tres Ríos can be transfer to companies that help it to provide some of the services requested by its customers, associates, and visitors. These data transfer is necessary to comply with the services contracted by the clients and therefore express consent is not necessary for these transferences according to article 37, section VII of the Mexican Privacy Law and article 44 of the GDPR.

Except for the cases indicated above, and unless the conditions set by articles 37 of the LFPDPPP and 49 of the GDPR are being materialized, the data provided by our customers will not be transferred under any other circumstances.

IV. Use of images.

In order to document and journalistically communicate information about the activities and events held throughout the year in the resort, as well as news Hacienda Tres Ríos can use, print, reproduce and publish the images of our guests, visitors, members of the vacation club and customers and their friends or family that attend to our events and activities: in print or electronic media (website, social networks, blogs, Apps), newsletters, publications, photographic memories, in all its forms and expressions, performances, editions, phonograms, video and emissions for the purposes stated above

Secondary Purposes

The images collected form guests, members of the vacation club, and customers may be used for advertising, marketing and/or market research. When Hacienda Tres Ríos intends to use the images for these purposes, the resort will request their express authorization in written before its use.

V. Restrictions on the use or disclosure of personal data.

In Accordance to the articles 16 section III of the LFPDPPP and 18 of the GDPR, those who wish to limit the use and disclosure of their personal data, or who no longer wish to receive communications regarding the non-essential (secondary) purposes detailed in this privacy notice, must send an email to the adress: privacidad@haciendatresrios.com requesting stop being contacted for these purposes.

VI. Rights of access, rectification, cancellation and opposition, and withdrawal of consent.

As stated in the LFPDPPP as of January 6, 2012, as well as in articles 15, 16, 17, 18 of the GDPR, the owners of personal data collected by Hacienda Tres Ríos may request: access, correction, cancellation (should this be legally appropriate) and opposition of the use of their personal data, as well as to withdraw their consent. To exercise these rights, they must follow this procedure:

1) Send an application by email to our Privacy Office at privacidad@haciendatresrios.com stating the right they want to exercise: access, rectification, cancellation and/or opposition, which must indicate their full name, the legal or commercial relationship with Hacienda Tres Ríos, the type of right they wish to exercise, accurately identifying the data for which they request access, correction, cancellation or opposition, or those for which they decide to withdraw their consent, attaching any of the official identification documents (valid passport or current immigration document), in order to prove their identity.
2) In the case of personal data whose owners are underage or people that cannot legally give consent by themselves, this request must be made by the person who legally represents their rights, either through the accreditation of parental rights; or through his/her legally appointed guardian or tutor.
3) Data owners must send their application for the exercise of the rights and may attach all the documents that are relevant to their request. For correction applications, it will be necessary to precisely specify the changes requested, including the documentation that supports their claim.
4) Applications for the exercise of these rights must be submitted during working hours and on business days in accordance with the Federal Law of Administrative Procedure.
5) The request must be sent to the email address mentioned in numeral 1 and an acknowledgment of receipt will be sent with the corresponding date of receipt. Should the application not fulfill the legal requirements, we will contact the data holder within five (5) business days to ask to amend the application for up to ten (10) business days. Otherwise, the application will be considered as not
submitted.
6) If the request has been sent on Friday or on a non-business day, it may be received on the following business day after it was sent.
7) The request will be answered via email within a period of twenty (20) business days from the date of receipt. This period may be extended for twenty (20) additional business days when there are adequate reasons, and this situation will be notified to the data holder under the terms of the provisions of Article 97 of the RLFPDPPP.
8) If the request is made in accordance with the LFPDPPP and other current regulations, access will be granted, the data will be corrected or canceled, the right of opposition will be effective or the consent will be revoked, within fifteen (15) business days following the date on which the request was answered. This period may be extended for fifteen (15) additional days for adequate reasons, and this situation will be notified to the data holder under the terms of the provisions of Article 97 of the RLFPDPPP.
9) In all cases where the request is appropriate, in accordance with the terms of Articles 32, 33, 34 and 35 of the LFPDPPP, the data will be sent free of charge through the data holder’s email address for said purpose. In case the information should be required to be sent through another form of delivery, payment must be made for the cost of shipping and/or the cost of reproduction of
copies or other formats that may be incurred.

VII. Online data management.

This section describes the use of your personal data in the following website:
- http://www.sunsetworldresorts.com/resorts/hacienda-tres-rios-resort-spa-nature-park/

Online Privacy Policy

When you access to Hacienda Tres Ríos website, we register your IP address (which is usually temporary and is assigned by your internet service provider when you log in), as well as the type of operating system and browser you use. In addition, we can trace the pages of the site you are visiting. The information we collect is used to improve our website’s user experience, and the whole process takes place without any knowledge of your name or any other information that will allow us to identify you. While visiting Hacienda Tres Ríos website, your navigation is anonymous unless you decide to identify yourself.

Hacienda Tres Ríos does not require that you provide personal data to use the website unless it’s necessary. Some applications may require you to disclose any personal information, our contact forms may require your email address to register and answer your comments, requests, questions, or suggestions, and contact you if necessary. In these forms, we will not require your financial or property data, and/or sensitive data. Any disclosure of this information is your responsibility. Regardless of the above, if you voluntarily provide any of this information, Hacienda Tres Ríos assures it will be used with strict confidentiality.

Cookies: A cookie is information that an internet portal sends to your computer and is stored on your hard drive. The next time you visit the website, we may use the information stored in the cookie to facilitate the use of our internet portal. A cookie does not allow us to know your personal identity unless you explicitly choose to provide it. Most cookies expire after a short period of time or can be deleted by you at any time. Also, you can configure your browser to notify you when you receive a cookie so you can accept or reject it.

Our website uses cookies to provide a personalized and secure experience to our users as well as to show them advertising related to their preferences. Cookies allow us to understand the behavior of our users on the site and improve it. If you decide to navigate our website, we understand that you consent to the processing of your personal data in accordance with “our online privacy policy” described in this Notice.

Social Networks

The personal data and information sent by inbox or posted by the users of our social networks profiles is published on their own account and is subject to the terms and conditions established by the social network provider. Hacienda Tres Ríos will use this information to answer the requests and questions asked by the users and to contact them in case they request it and for statistical purposes.

The contact data of the users that request information about travel packages, tours and other services will be shared with our Customer Service Center to give them a personalized attention by email or phone. The information provided by those users who decide to participate in our contests will be used to contact them in case they win, and their image may be published.

Data Portability

In Accordance with the article 20 of the GDPR, you have the right to transfer your personal data to another supplier or controller without hindrance from the controller to which the personal data have been provided if the legal processing of your data has been carried out by automated means. Hacienda Tres Ríos ensures the strictest confidentiality and security to carry out the data transfer.

VIII. Complaints regarding the use of your personal data.

If you believe that your rights regarding the protection of your personal data have been breached by any conduct, act, or omission regarding the attention of your requests or in the use of your personal data, you can submit a complaint with the National Institute for Access to Information and Data Protection (INAI). For more information you can visit the website: www.inai.org.mx.

IX. More Information – Privacy Office.

If you have any questions regarding the content, interpretation, or scope of this Privacy Notice, or if you need more information regarding the use of your personal data, please contact us through our Privacy Office at the following email address: privacidad@haciendatresrios.com

X. Updates

This Privacy Notice will be in force since January 1º, of 2012 and may be updated by Hacienda Tres Ríos, in terms of the GDPR and LFPDPPP and its regulations, by publishing a new version in our website.

Last Update: December 1st, 2023