Privacy Policy
Privacy and Personal Data Policy Hoteles MX acts as the data controller and collects users' personal information for the purpose of managing reservations and responding to inquiries. The legal basis for this processing is the necessity of performing a contract or the user's consent. Data is retained for the time necessary to manage the reservation and, subsequently, for six months. If the user has consented to receive marketing information, the data will be stored until that consent is revoked. Hoteles MX uses Cloudbeds as the data processor for its booking engine. Users have rights of access, rectification, erasure, and objection, which they can exercise by contacting the company. Rates are expressed in local currency per room per night, including taxes. Reservations without a guarantee can be canceled at any time. In compliance with the Personal Data Protection Act, Hoteles MX may use data within and outside the country to maintain and fulfill the services provided. The company may retain information in its database to send information about its services. The confidentiality, integrity, and availability of the data are protected by security measures to prevent damage.
Data controller (we): the hospitality business that will provide you, the user, with the requested service. Our identification and contact details are available on the website you used to make your booking/to ask us your questions. They will also appear on the invoice we will send you.
Data Compliance Officer: does not apply to the activities of Data Controllers.
User: you, who completed the booking form or any other related documentation.
Purpose: The purpose of processing the data provided through this form is to manage the bookings made by you, the user, and/or to answer the questions/requests you raised.
Legal basis:
- Whether it is the need to execute our contract with you, user / the need to take measures at your request before entering into a contract.
- Or your consent, the user, by ticking the box accepting the Terms and Conditions of which this Privacy and Personal Data Policy is an integral part.
Duration: We will store the data you, the user, provide for the time necessary to manage your booking and the accommodation services you requested. Once this process is complete, your data will be kept for six (6) months. If you agree to receive marketing and/or commercial information, your data will be stored until you withdraw your consent.
Processor: We have contracted our partner Cloudbeds to operate our booking engine. Cloudbeds operates under our authority, and we have a contract with Cloudbeds for the provision of its services. We have provided Cloudbeds with written instructions on how to perform the processing.
Data other than users: When you, the user, provide us with personal data belonging to a data subject other than yourself, you are responsible for such actions, as well as obtaining the respective consent of said data subjects for the provision of their data.
Data transfer: We will not transfer personal data to a third country outside the EEA (European Economic Area).
Rights of data subjects: Data subjects may exercise their rights of access, rectification, cancellation and opposition by sending an email or by post to the contact details on our booking website and on our invoices.
Supervisory authority: If a data subject believes their rights have been infringed, they may also contact the competent supervisory authority of the Member State concerned. Further information is available at: https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en
