FULL PRIVACY NOTICE PROSPECTS

A.Identity and domicile of Data Controller.

In compliance with the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter referred to as LFPD) and in accordance with applicable provisions, Palace Elite Resorts, S.A. de C.V. (hereinafter and distinctively referred to as "Palace Elite®" or as the "Data Controller") having corporate domicile for hearing for hearing and being served notices at Carretera Cancún Puerto Morelos km 21, Manzana 01, Lote 1 – 11, Edificio A, Supermanzana 47, Municipio Benito Juárez, Cancún, Quintana Roo, Zip Code 77506, expressly informs:  

B.Personal data collected and subjected to processing.

In order to fulfill of the purposes described herein, we collect the following personal data categories: 

  1. Identification data.
  2. Personal characteristics data.
  3. Social circumstances data.
  4. Labor data.
  5. Economy, financial and insurances data. 

Additionally, we inform to you that the personal data of third-parties provided by you to Data Controller for the fulfillment of the purposes identified (for instance, data of recommended people or references) shall be provided after they have been informed over the existence of the processing and over the content hereof. 

C.Processing of sensitive personal data.

Data Controller does not collect any sensitive personal data for the purposes listed herein below. 

D.Purposes of the processing.

  1. Initial and necessary Purposes:
    1. To inform to the interested party about the benefits of Palace Elite® membership, including modalities and prices thereof.
    2. To facilitate the engagement of the services offered by Palace Elite®.
    3. To consult the credit history and the credit request.
  2. Additional purposes:
    1. To submit communications about offers and new products and/or services offered by Palace Elite®.

E.Additional purposes. Processing denial.

  • I do not want to receive communications about offers and new products and/or services offered by Palace Elite®. 

F.Transfer of personal data.

Your personal data may be transferred to and processed by other parties different from Data Controller. Addressees of such transferences (either national or international) correspond to the following categories: 

  1. Credit information corporations, in order to guarantee that the interested parties have an appropriate credit history for the membership to Palace Elite®.
  2. Financial Entities, in order to request the personal credits for your membership to Palace Elite®. 

G.Data transference consent.

In order to conduct the personal data transferences mentioned under numbers 1 and 2 of section herein above, we require your consent for the conduction thereof. 

  • I consent the transference of my data to the third-parties identified as "Credit information corporations" and/or "Financial entities", for the identified purposes. 

For the rest of the cases, your personal data shall not be transferred to third-parties without your consent, except for the cases contemplated at LFPD article 37. In which case the transference shall be conducted while complying with the conditions described at LFPD Regulations article 17. 

H.ARCO rights exercise.

For all legally possible cases, you may, at all times, enforce your access, rectification, cancellation and opposition rights (hereinafter referred to as ARCO rights) through procedures we have implemented. 

Your request shall comply with requirements set forth on the effective legislation, by means of a document addressed to our Data Privacy Officer, whose domicile is Carretera Cancún Puerto Morelos Km 21, Manzana 01, Lote 1 – 11, Edificio A, Supermanzana 47, Municipio Benito Juárez, Cancún, Quintana Roo, C.P. 77506. 

  1. The request shall contain the following information: 
  2. Your name and domicile or any other means for letting you know the answer to your request;  
  3. The documents proving your identity or, if applicable, your power of attorney;
  4. A clear and precise description of the personal data with regard to which any ARCO rights are to be enforced; and
  5. Any other element or document which makes it easy to locate personal data.

Data Controller shall inform to you, within a twenty business day maximum term from the date when Data Controller receives the relevant request, on the adopted determination. If your request is accepted, it shall be conducted within a fifteen business day term after the date when Data Controller communicates the answer. In case the information provided in your request is mistaken or insufficient, or in the event that documents required for proving your identity or power of attorney are not enclosed thereto, Data Controller, within the five business days after your request had been received, shall demand that deficiencies are corrected in order to process your request. In these cases, you shall have ten business days for the performance of the correction; which period shall commence on the day after receipt thereof. It shall be deemed that the relevant request has not been submitted should you do not answer within said term. 

You may obtain the requested information or personal data through single copies thereof, electronic documents in conventional formats (Word, PDF, etc.), by means of a restricted and authorized access to the system processing your personal data (access) or trough any other lawful means guaranteeing and accrediting the efficient exercise of the requested right. 

Alternatively, Data Subject may address the request to derechosarco@palaceresorts.com, meeting all the aforementioned requirements, stating as subject thereof as follows: “ARCO Rights and/or Revocation of Consent”. Procedure terms shall be the same mentioned at paragraph above. The usage of electronic means for enforcing the ARCO rights authorizes Data Controller to answer the relevant request through the same means thereof, unless Data Controller clearly and expressly establishes any other means for such purposes. 

You shall be responsible for updating your personal data held by Data Controller; therefore, you guarantee and shall be liable, in any case, for the veracity, accuracy, effectiveness and authenticity of personal data provided and bind to keep such data updated, communicating any change to Data Controller. 

I.Consent revocation.

You may revoke your consent for the processing of your personal data, without any retroactive effects, in all cases were such revocation does not entail that it will be impossible to fulfill any obligations arising from an effective legal relation between you and Data Controller. The procedure for revoking the consent, if applicable, shall be the same one that is set forth at the foregoing section H. ARCO rights exercise. 

J.Limitations to the disclosure of your personal data.

You may limit the usage or disclosure of your personal data by addressing the relevant request to our Data Protection Officer. Requirements for proving your identity, as well as the procedure for answering your request shall be the same as those indicated at section. 

K.Amendments or updating to this Full Privacy Notice.

Data Controller may amend, update, extend or otherwise change the terms, conditions and scope of this Full Privacy Notice at any time at its entire discretion. In which event, Palace Elite® shall publish such changes at the website www.palaceelite.com, section “Privacy Notices”. 

Last updated:

October 22nd, 2021