Privacy notice

Trade name: MBH Maya Bacalar

Address: Carretera Federal 307, Chetumal – Cancún Km 25 + 600, Bacalar, Quintana Roo, C.P. 77930, Mexico.

Contact: For any questions, clarifications and/or corrections to your data, call +52 56 3394 4600 or write to reservaciones@mbhmayabacalar.com.

Competent authority: National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

Purpose of processing

To make appropriate, controlled and lawful use of the personal data handled in the processes of the MBH Maya Bacalar reservation system. Your information is required for the hotel's internal processes. It may be collected through registration cards, phone reservations, quotes, agreements, satisfaction surveys, and your comments, complaints and/or suggestions.

Information subject to processing

This information will be used for the following purposes:

• Guest safety during the stay.
• Making reservations.
• Tax invoices.
• Sending the company's promotional information.
• Inclusion in a customer database.
• Improving the control and delivery of subsequent service processes.

Personal data

Full name, date of birth, nationality, address, phone number, email address and the guest's signature.

Financial data

Credit or debit card details, to register online reservations; these details are entered only once.

Security and safekeeping of your personal data

The personal and/or sensitive data collected under this Privacy Notice may be used for the proper operation and purposes of MBH Maya Bacalar, and by government authorities that require it.

This is so that such data may be used for administrative, marketing, sales, statistical and other purposes that may be of interest to and/or benefit the data subject.

MBH Maya Bacalar is responsible for safeguarding personal data and will take the necessary measures to prevent the loss and/or theft of information stored in physical and digital files.

We undertake not to transfer your personal information to third parties without your consent, except as provided in article 37 of Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

Transfers (Art. 37 LFPDPPP)

Domestic and international data transfers may be carried out without the data subject's consent in any of the following cases:

• When the transfer is provided for in a Law or Treaty to which Mexico is a party;
• When the transfer is necessary for medical prevention or diagnosis, the provision of health care, medical treatment or the management of health services;
• When the transfer is made to holding companies, subsidiaries or affiliates under the common control of the data controller, or to a parent company or any company of the controller's group that operates under the same internal processes and policies;
• When the transfer is necessary under a contract entered into, or to be entered into, in the data subject's interest between the controller and a third party;
• When the transfer is necessary or legally required to safeguard the public interest, or for the procurement or administration of justice;
• When the transfer is needed to recognize, exercise or defend a right in legal proceedings, and
• When the transfer is needed to maintain or fulfill a legal relationship between the controller and the data subject.

Consent

Unless you object to this privacy notice, you will be deemed to have given your tacit consent to the processing of your personal data.

Updates or changes to this privacy notice

MBH Maya Bacalar reserves the right to modify or update this Privacy Notice at any time; any change will be announced through the same medium in which this notice is published, so we recommend checking it often.

Cookies and web beacons

When visiting websites you may come across "cookies": text files that are automatically downloaded and stored on the user's computer while browsing a specific web page, which allow the web server to record some of your data.

Web pages may also contain "web beacons": images embedded in a page or email that can be used to monitor a visitor's behavior and to store information such as the user's IP address, time spent interacting with the page and the type of browser used, among others.

Limiting use or disclosure for marketing purposes

To limit the use of your data for marketing, commercial prospecting or advertising, and to stop receiving emails about products, services, events, activities and promotions, use the "Unsubscribe" link at the end of our emails; once you click it you will no longer receive these communications.

Revoking consent to the processing of personal data

You may revoke your consent to the processing of your personal data by sending a request to the Privacy Officer by email or by phone.

ARCO rights

If a security breach occurs at any stage of the processing of your personal data that significantly affects your property or moral rights, you will be notified of it immediately by email so you can take the appropriate measures to defend your rights. If we do not have your email address, the notice will be published on the MBH Maya Bacalar website.

You have the right to access, rectify and cancel your personal data, to object to its processing, or to revoke the consent you have given us for that purpose, following the procedures set out in the Federal Law on the Protection of Personal Data Held by Private Parties.

If you believe your right to the protection of personal data has been violated by any conduct of MBH Maya Bacalar, you may file the corresponding complaint with the IFAI.