PRIVACY NOTICE

Operadora de Hoteles Holísticos SA de CV, representative of El Santuario Resort & SPA, with address at Carr. Federal a Colorines KM 4.5, Col. San Gaspar, Valle de Bravo State of Mexico CP 51217, Mexico, Internet portal www.elsantuario.com, is responsible for the use and protection of your personal data, and in this regard we inform you of the following:

Who is our data protection coordinator and how can I contact him?

Our data protection coordinator is the person within El Santuario Hotel & Resort who has been formally appointed by our general manager to promote and ensure the protection of the personal data in our possession, as well as to attend to the rights of the holders. For everything related to the processing and protection of your personal data, you may contact our data protection coordinator by sending an email to the following address: privacidad@elsantuario.com

For what purposes will we use your personal data?

The personal data we collect from you will be used for the following purposes that are necessary to provide you with our services:

complete reservations or information requests,

buy products or services,

register for partner programs,

send job applications,

respond to communications we send you (for example, surveys, promotional offers or booking confirmations),

satisfy your personal preferences,

complete requests for services or recommendations that we offer you

work with third parties, including collecting publicly available information from social event websites, to help us better understand your interests and provide more personalized service,

use our applications on your electronic devices, or

facilitate the transmission of messages to a friend's email, if desired.

Additionally, we will use your personal information for the following secondary purposes that are not necessary to provide you with the requested services, but that allow us to provide you with better service and promote our services:

Send you information about El Santuario Hotel & Resort

Send you promotions from our rewards programs.

Conduct surveys to evaluate your satisfaction and the quality of our services.

Marketing, advertising, commercial prospecting

If you do not wish for your personal data to be processed for the secondary purposes indicated, or any of them, you can inform us of this from now on by sending an email to privacidad@elsantuario.com

The refusal to use your personal data for these purposes cannot be a reason for us to deny you the services you request or contract with us, and you have five business days to let us know, without prejudice to the fact that you subsequently decide to exercise your right of revocation or opposition.

What personal data do we collect and use about you?

The types of personal information we collect may include your name, home and business addresses, email addresses, telephone and fax numbers, credit card information, date of birth, gender, and information related to your lifestyle, such as room preferences, recreational activities, names and ages of children, and any other information necessary to fulfill special requests (e.g., health data, which is considered sensitive personal data).

Santuario Hotel & Resort may also collect information that is not considered personally identifiable, such as your use of our websites, your communication preferences, travel habits, aggregated data related to your stays, and responses to promotional offers and surveys.

Please note that to better protect your information, you should not include credit card information in your electronic communication unless we specifically request it in order to complete the processing of a reservation or transaction on our brand websites or in our customer service centers.

With whom do we share your personal information and for what purposes?

We inform you that your personal data may be transferred within the country to the following individuals or legal entities, without legally requiring your consent:

When we have your consent.

In situations where it is necessary to provide your personal data in order to offer you the products or services you require (for example, a holiday package).

When companies or service providers that perform commercial activities on behalf of El Santuario Hotel & Resort (e.g. credit card processing, customer service, market research administration or database management services) require this information.

In the event that El Santuario Hotel & Resort merges with or is acquired by another company.

To comply with legal or regulatory requirements and obligations set forth in applicable law or as a result of a court order or subpoena.

In cases of emergencies such as saving a person's life, health or property.

In the event that El Santuario Hotel & Resort shares information in the terms indicated above, we will try to limit the scope of the data provided to what is necessary to carry out the specific function. Unless a legal process precludes us from doing so, we will require third parties to protect your information and to comply with applicable personal data protection laws and regulations.

If you do not express your refusal to carry out these transfers, which you can do by sending an email to our data protection coordinator, we will understand that you have given us your consent.

How can you access, rectify or cancel your personal data, or oppose its use?

You have the right to know what personal data we have about you, what we use it for, and the conditions of use we give it (Access). You also have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to have it deleted from our records or databases when you consider that it is not being used appropriately (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition) in the terms permitted by applicable regulations. These rights are known as ARCO rights.

To exercise any of the ARCO rights, you may submit the respective request via an email to our data protection coordinator, who will inform you about the procedure and requirements for exercising these rights, and will address any questions or comments you may have in this regard. Likewise, you may exercise your ARCO rights by requesting and filling out the corresponding form at the reception of El Santuario Hotel & Resort, which is called “ARCO Rights Request”. Subsequently, our data protection coordinator will follow up on your request in compliance with the applicable regulations.

You may revoke the consent that you have given us. However, it is important that you bear in mind that your request will not be granted in all cases or that we will be able to terminate the use immediately, since it is possible that due to some legal obligation we require to continue processing your personal data. You should consider that for certain purposes, the revocation of your consent will imply that we cannot continue providing the service you requested, or the conclusion of your relationship with us.

To revoke your consent, you must submit your request via email to our data protection coordinator, who will inform you about the procedure and requirements for exercising this right, and will address any questions or comments you may have in this regard. Likewise, you can exercise your right of revocation by requesting and filling out the corresponding form at the reception of El Santuario Hotel & Resort, which is called “ARCO Rights Request”. Subsequently, our data protection coordinator will follow up on your request in compliance with the applicable regulations.

How can you limit the use or disclosure of your personal information?

In addition to the procedure contemplated in the immediately preceding section, you may limit the use or disclosure of your personal data in the following ways:

Register in the Public Registry to Avoid Advertising from the Federal Consumer Protection Agency. For more information regarding this option, you can contact PROFECO directly or visit the following link: http://rpc.profeco.gob.mx.

Send an email to our data protection coordinator requesting your registration in the “El Santuario Hotel & Resort Advertising Exclusion List” in order to not receive promotional information about our products and services.

Which authority is responsible for ensuring the protection of personal data?

The Federal Institute for Access to Information and Data Protection (IFAI) is the authority in charge of ensuring compliance with the legal provisions regarding the protection of personal data. For more information, you can consult the following website: www.ifai.gob.mx.

Online Technologies

El Santuario Hotel & Resort and its business partners may use cookies and web beacons to collect information about you while you are visiting our websites. A “cookie” is a small text file that is sent to your browser from a web server and stored on your computer’s hard drive. El Santuario Hotel & Resort cookies assign a unique identifier to your computer, which in turn becomes your identification card each time you visit an El Santuario Hotel & Resort website.

Cookies are designed to save you time by helping us to provide you with a personalized service without having to remind you of your preferences every time you visit our web pages. El Santuario Hotel & Resort cookies are not designed to damage your files or read information that you store on your computer's hard drive.

Cookies may also help us provide you with a personalized online service in the following ways:

They remember your username and password for future visits, making login easier and faster.

They ensure that you have the right frameworks and content.

They ensure that you receive all the requested information.

They help us deliver communications to you that are relevant and related to your interests and location.

El Santuario Hotel & Resort cookies are limited to our websites only and are not designed to follow you as you navigate the Internet once you leave websites belonging to El Santuario Hotel & Resort. We track your use of our websites in order to better serve your needs and to help you find information more easily in the future. Please note that in addition to El Santuario Hotel & Resort cookies, third parties may place cookies on your computer's hard drive. El Santuario Hotel & Resort is not responsible for the presence or absence of third party cookies or the technological features or practices that these third parties may use in connection with their cookies.

If you prefer not to enjoy the benefits of cookies, you can configure your Internet browser to handle these cookies in different ways. Depending on the type of browser you use, you may be able to configure your browser to: (i) prompt you to accept or reject cookies individually or (ii) prevent the acceptance of any type of cookies. You should consult the provider or manufacturer of your Internet browser if you want specific details about security related to cookies. However, you should also be aware that rejecting cookies may hinder your ability to perform certain operations on our websites and our ability to recognize your browser from one visit to the next.

Links to other websites

In order to anticipate your needs, El Santuario Hotel & Resort provides links to other websites for your convenience and information. El Santuario Hotel & Resort is not responsible for the content provided or included on any independent website, including, but not limited to, any advertising claims or business practices. While El Santuario Hotel & Resort will protect the information found on websites it owns and operates, we cannot control and assume no responsibility for the privacy policies of third party websites, including websites owned or controlled by independent franchisees and other owners of hotels, resorts, timeshares or residential properties that may use a El Santuario Hotel & Resort brand name or websites not controlled or authorized by El Santuario Hotel & Resort. Third party websites accessed through links on our websites have different privacy and data collection practices and security measures. We assume no responsibility for the practices, policies and security measures implemented by third parties on their websites. We encourage you to contact them and ask about their privacy practices, policies and security measures before disclosing any type of INFORMATION. We recommend that you review the privacy policies and statements applicable to the linked websites to understand how these sites collect, handle and store information.

How can you learn about changes to this privacy notice?

This privacy notice may be subject to modifications, changes or updates derived from new legal requirements; our own needs for the products or services we offer; our privacy practices; changes in our business model, or for other reasons.

We undertake to keep you informed of any changes to this privacy notice through our website, which we ask you to visit frequently to learn about any changes that may have occurred in the privacy notice.

The procedure through which notifications about changes or updates to this privacy notice will be carried out is as follows: The current version of the privacy notice will be published on our Internet portal, with the date of the most recent update, and this updated version can be consulted by accessing the following link www.elsantuario.com/politicas-de-privacidad