This Privacy Notice is presented in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter referred to as “the Law”).
1. Identity and Address of the Data Controller
INMOBILIARIA MAYA SANMOR S.A. de C.V. (hereinafter referred to as “HOTEL CHABLIS PALENQUE”), with address for receiving notifications at Calle Merle Green No. 7, Col. La Cañada, Palenque, Chiapas, C.P. 29960, is responsible for the use and protection of the personal data it processes, and hereby informs you of the following:
2. Purposes of Data Processing
Your personal data may be processed for the following primary purposes:
A. Clients: To quote, reserve, and invoice lodging services, food and beverages, massages, event room rentals, laundry services, and tourism services.
B. Employees: To fulfill obligations established in the employment contract, as well as those required by applicable regulations and authorities governing this business activity.
C. Students completing professional internships: To inform the educational institution of compliance with the agreed work program, as well as to control attendance and performance.
D. Suppliers: To request quotations, purchase, and receive goods and services.
Clients:
1.- To know your opinions regarding service quality and satisfaction.
2.- To understand your preferences during your stay, lodging, and tourism services.
3.- To send promotions and informational newsletters. Personal data of employees, students, and suppliers will not be processed for secondary purposes.
3. Mechanisms to Refuse Secondary Purposes
Clients may express their refusal to the processing of their personal data for secondary purposes by: Omitting information in surveys. Indicating their opposition in data collection forms regarding quality surveys, promotions, advertising, and newsletters.
Exercising their ARCO rights.
Refusing the use of personal data for these purposes will not be grounds to deny the requested or contracted services.
4. Personal Data Processed
For the purposes mentioned above, we may collect your personal data through: written documents, telephone or email communications, opinion surveys, quotation, reservation and service forms, job applications, internal control forms, audio recordings, video surveillance cameras, official requests from authorities, and publicly available sources.
The personal data collected for primary purposes, in the case of clients, includes identification and contact data such as full name (first name, paternal surname, maternal surname), address (street, number, neighborhood, city, state, country, postal code), photographs, telephone number, mobile phone number, email address, company name, signatures, audio recordings, video surveillance images, and official identification (INE). Billing data includes business name, address, city, Federal Taxpayer Registry (RFC), and email address. Service-related data includes check-in date, check-out date, room number, and vehicle license plate number, make, and model. Agreement-related data includes contact name, job title, company name, business activity, address, city, country, email address, assistant, and business name. Credit card data includes the cardholder’s name, credit card number, expiration date, and security code.
In the case of students completing professional internships at the company, the mandatory data collected includes full name, student registration number, name of the academic program or subject, name of the educational institution, handwritten signature, and medical examinations when internships are carried out in food service areas, as well as audio recordings and video surveillance images.
Regarding employees, the mandatory data collected includes full name, address (city, state, country, postal code), nationality, date and place of birth, gender, marital status, CURP, RFC, handwritten signature, photograph, audio recordings, video surveillance images, and social media accounts. Optional data may include educational background, academic certificates or professional license number, telephone number, mobile phone number, email account, age, photograph, INFONAVIT credit number, FONACOT credit number, payroll bank account number, type of license, license number, license expiration date, Social Security Number, and work experience. Employment-related data includes payroll bank account number and salary. Employment references may include employee behavior, reason for separation from previous employment, position held, length of employment, last earned salary, relationship with coworkers, name of previous employer, and the name of the Human Resources manager at the previous company. Personal references may include reference name, relationship, telephone number, and individuals with whom the employee lives. Health data includes health status (only for employees working in food service areas). Documents provided for verification may include birth certificate, proof of address, proof of education, official identification, driver’s license, CURP, IMSS documentation, RFC, medical certificate, and statements or certificates related to INFONAVIT and FONACOT. For suppliers (individuals or legal entities) with whom a commercial or professional relationship is maintained for primary purposes, only the minimum data required by other Mexican laws is processed; therefore, such data is not considered personal data in accordance with Article 5 of the Regulations of the Federal Law on the Protection of Personal Data Held by Private Parties. Video surveillance images and audio recordings are only accessible to the hotel’s General Manager and to competent authorities responsible for the administration and enforcement of justice, when required through an official mandate, for a period not exceeding ten (10) calendar days from the date of recording, provided that the system has not automatically deleted such data. HOTEL CHABLIS PALENQUE does not process personal data for secondary or ancillary purposes.
5. Sensitive Personal Data
HOTEL CHABLIS PALENQUE processes sensitive personal data of its clients related to body temperature checks upon entry to the premises, without retaining any record thereof. Additionally, health-related data of employees are collected at the time of hiring in order to identify any chronic conditions that the company must be aware of in case of extraordinary situations requiring special attention, or when required by competent authorities in the event of a pandemic or similar circumstances.
For primary purposes, the sensitive personal data collected from clients consists of health data related to body temperature checks. For employees, sensitive data includes body temperature checks and health status (medical conditions). In order to comply with applicable health legislation and authorities, HOTEL CHABLIS PALENQUE may conduct periodic medical examinations of its personnel as determined by competent authorities for disease prevention and control. The results of such examinations will be collected and safeguarded in the employee’s personnel file, adopting all necessary security measures for their protection.
6. Transfer of Personal Data
HOTEL CHABLIS PALENQUE does not transfer personal data of clients or suppliers. Employee and student data may be transferred only to comply with legal obligations.
7. Acceptance of Data Transfers
No opt-out clause exists, as transfers are only made to comply with Mexican laws and authorities.
8. Means and Procedure to Exercise ARCO Rights
To access, rectify, cancel, or object to the processing of your personal data, please visit our premises and provide: (i) a written request (original and copy) and (ii) an official identification document (original and copy). To learn more about the procedures and requirements to exercise your ARCO rights, please schedule an appointment with Lic. Sergio Arcos Sánchez, Personal Data Protection Officer, via email at reserva@hotelchablis.com or by phone at +52 (916) 345 0870.
Please note that in some cases we may not be able to process a cancellation request immediately, as we may be legally required to continue processing your personal data. In such cases, the corresponding data blocking measures will be applied.
9. Mechanisms and Procedures to Revoke Consent for the Processing of Personal Data
We inform you that, in order to revoke the consent granted for the processing of your personal data, you must visit HOTEL CHABLIS PALENQUE and provide: (a) a written request (original and copy) and (b) an official identification document (original and copy).
10. Options and Means to Limit the Use or Disclosure of Your Personal Data
In order to limit the use or disclosure of your personal information, we suggest that you:
- register with the Public Registry to Avoid Advertising, administered by PROFECO, to prevent your personal data from being used to receive advertising or promotional communications from companies offering goods or services. For more information, please consult PROFECO’s official website.
11. Use of Cookies and Similar Technologies
HOTEL CHABLIS PALENQUE informs you that our website www.hotelchablis.com uses cookies, web beacons, and similar technologies that collect personal data, allowing us to obtain statistics regarding the cities, states, or countries from which the site is accessed, the time spent browsing our website, and the sections and pages visited. To limit the use of these technologies, please review and adjust the privacy settings in your web browser.
12. Changes to the Privacy Notice
This Privacy Notice may be modified, amended, or updated due to new legal requirements; our own needs related to the products or services we offer; our privacy practices; changes in our business model; or for other reasons. We commit to informing you of any changes to this Privacy Notice through notices displayed at our facilities or on our website www.hotelchablis.com. This Privacy Notice was last updated and published through the aforementioned means on June 10, 2021.