Privacy notice

Trade name: MBH Maya Bacalar

Address: Carretera Federal 307, Chetumal – Cancún Km 25 + 600, Bacalar, Quintana Roo, C.P. 77930, Mexico.

Contact: For any questions, clarifications and/or corrections to your data, call +52 56 3394 4600 or write to reservaciones@mbhmayabacalar.com.

Competent authority: National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

Purpose of processing

To make appropriate, controlled and lawful use of the personal data handled in the processes of the MBH Maya Bacalar reservation system. Your information is required for the hotel's internal processes. It may be collected through registration cards, phone reservations, quotes, agreements, satisfaction surveys, and your comments, complaints and/or suggestions.

Information subject to processing

This information will be used for the following purposes:

• Guest safety during the stay.
• Making reservations.
• Tax invoices.
• Sending the company's promotional information.
• Inclusion in a customer database.
• Improving the control and delivery of subsequent service processes.

Personal data

Full name, date of birth, nationality, address, phone number, email address and the guest's signature.

Financial data

Credit or debit card details, to register online reservations; these details are entered only once.

Security and safekeeping of your personal data

The personal and/or sensitive data collected under this Privacy Notice may be used for the proper operation and purposes of MBH Maya Bacalar, and by government authorities that require it.

This is so that such data may be used for administrative, marketing, sales, statistical and other purposes that may be of interest to and/or benefit the data subject.

MBH Maya Bacalar is responsible for safeguarding personal data and will take the necessary measures to prevent the loss and/or theft of information stored in physical and digital files.

We undertake not to transfer your personal information to third parties without your consent, except as provided in article 37 of Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

Transfers (Art. 37 LFPDPPP)

Domestic and international data transfers may be carried out without the data subject's consent in any of the following cases:

• When the transfer is provided for in a Law or Treaty to which Mexico is a party;
• When the transfer is necessary for medical prevention or diagnosis, the provision of health care, medical treatment or the management of health services;
• When the transfer is made to holding companies, subsidiaries or affiliates under the common control of the data controller, or to a parent company or any company of the controller's group that operates under the same internal processes and policies;
• When the transfer is necessary under a contract entered into, or to be entered into, in the data subject's interest between the controller and a third party;
• When the transfer is necessary or legally required to safeguard the public interest, or for the procurement or administration of justice;
• When the transfer is needed to recognize, exercise or defend a right in legal proceedings, and
• When the transfer is needed to maintain or fulfill a legal relationship between the controller and the data subject.

Consent

Unless you object to this privacy notice, you will be deemed to have given your tacit consent to the processing of your personal data.

Updates or changes to this privacy notice

MBH Maya Bacalar reserves the right to modify or update this Privacy Notice at any time; any change will be announced through the same medium in which this notice is published, so we recommend checking it often.

Cookies and web beacons

"Cookies" are small text files that a website stores in your browser to recognize you on later visits. "Web beacons" are images or snippets of code embedded in a page or an email that reveal whether it was visited or opened. Through these technologies, data such as your IP address, browser and device type, approximate location, pages visited, time spent and the site or ad you came from are collected automatically.

On this site we use:

• Necessary cookies. They store your cookie choice in your browser so we don't ask again. They cannot be turned off from the site, because without them we could not respect that choice.
• Analytics cookies (Google Analytics). They tell us, statistically, how the site is used so we can improve it. They may be kept for up to 2 years.
• Advertising cookies (Google Ads). They let us measure which ads lead to a booking and show relevant ads on other sites. They may be kept for up to 90 days.

We manage these tools through Google Tag Manager. They are provided by Google LLC, which processes the information on our behalf and may do so outside Mexico. You can read how Google uses this data at policies.google.com/technologies/partner-sites (opens in a new tab).

Analytics and advertising cookies are on by default. You can turn off either of them at any time under "Preferences" in the cookie notice, which you can reopen from the "Cookie preferences" link at the bottom of every page. When you turn them off we stop storing those cookies, delete any that were already stored, and the site works the same. You can also block or delete cookies in your browser settings.

Limiting use or disclosure for marketing purposes

To limit the use of your data for marketing, commercial prospecting or advertising, and to stop receiving emails about products, services, events, activities and promotions, use the "Unsubscribe" link at the end of our emails; once you click it you will no longer receive these communications.

Revoking consent to the processing of personal data

You may revoke your consent to the processing of your personal data by sending a request to the Privacy Officer by email or by phone.

ARCO rights

If a security breach occurs at any stage of the processing of your personal data that significantly affects your property or moral rights, you will be notified of it immediately by email so you can take the appropriate measures to defend your rights. If we do not have your email address, the notice will be published on the MBH Maya Bacalar website.

You have the right to access, rectify and cancel your personal data, to object to its processing, or to revoke the consent you have given us for that purpose, following the procedures set out in the Federal Law on the Protection of Personal Data Held by Private Parties.

If you believe your right to the protection of personal data has been violated by any conduct of MBH Maya Bacalar, you may file the corresponding complaint with the IFAI.