In accordance with the FEDERAL LAW ON THE PROTECTION OF PERSONAL DATA HELD BY PRIVATE PARTIES (LFPDPPP), PEBE DEL SOL, S. DE R.L. DE C.V., hereinafter referred to as “THE COMPANY,” provides you with this privacy notice prior to processing your personal data, in accordance with the following:

I.- IDENTITY AND ADDRESS OF “THE COMPANY”:

PEBE DEL SOL, S. DE R.L. DE C.V. is responsible for the processing (use) of your personal data. It is a duly constituted and legally existing company under the laws of the United Mexican States, with registered address for the purposes of this privacy notice at Amaca Beach Quimixto Pez Volador 4 A, Playa El Volador Quimixto, Cabo Corrientes – Jalisco, C.P. 48440. Contact telephone number +52 1 322 292 3546

All communications should be addressed to the Personal Data Department, which has been designated as responsible for processing requests and promoting the protection of Personal Data, in accordance with Article 30 of the Law.

II. PERSONAL DATA WE COLLECT AND SOURCE:

Personal data we collect from legal entities:

Customer information (company name, email address, address, proof of address, telephone number, fax number).
Identity documentation (articles of incorporation, registration number with the public registry of property and commerce).
Tax information (tax identification number, billing address).
Financial data: bank account information, payment methods.

Personal data we collect from individuals:

Contact information (full name, email address, address, proof of address, telephone number, cell phone number, fax number)
Identification documents (voter registration card, passport, driver's license, military ID, or professional license)
Información fiscal (Cedula de identificación fiscal, dirección de facturación).

Sensitive personal, financial, or property data that we may collect:

Financial data: bank account information, payment methods.

III.- PURPOSE OF PROCESSING PERSONAL DATA:

“THE COMPANY” undertakes to make proper use of your personal data, including any sensitive personal data that may be collected, in accordance with the principles of the Federal Law on Protection of Personal Data Held by Private Parties, legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility. The purpose or aim of obtaining, using, and storing the personal data of the data subject is broken down as follows:

Provide legal advice.
Verify the information you give us.
For internal use by “THE COMPANY,” as well as to respond to your questions or comments arising from the provision of services.
For the promotion of products and services offered by “THE COMPANY” or, where applicable, invitations to any of our events.
Add your file as a customer.
To provide the required services and products and to inform about new products or services that are related to those contracted or purchased by “The Owner.”
To inform you about changes to our services and evaluate the quality of our services and products.
Identification, information technology, operation, administration, marketing, commercialization, and other similar and lawful purposes in accordance with the provisions of the Law, derived from the services contracted by “The Owner.”

Sensitive data will be collected for the following purposes:

To have the necessary background information in order to provide appropriate care.

By reading and accepting this Privacy Notice, I give my consent for the processing of my sensitive personal data for the purposes necessary for the provision of services by the Data Controller.

For the purposes outlined above, we may collect your personal data in various ways:

When you freely and voluntarily provide them to us.
Through our website.
By telephone.
When we obtain information through other publicly available sources that are permitted by law (telephone directories, email, websites, and other similar sources).

Please be advised that our facilities are equipped with a closed-circuit surveillance camera system, which is active 24 hours a day. This allows us to stay informed and control access to visitors entering the facilities, ensuring the safety of staff, customers, and visitors.

All personal and aggregate information obtained from “The Owner” will constitute a database owned by “THE COMPANY,” which is stored to protect it and prevent its loss, misuse, alteration, or interception by third parties. “The Customer” hereby expressly authorizes “THE COMPANY” to share the personal information provided with any Authority that requests it in writing and in accordance with the law.

IV. LINKS TO OTHER WEBSITES:

For your convenience, our website may contain links to other websites. “THE COMPANY” is not responsible for these websites and therefore does not guarantee or accept responsibility for the content found on them. We invite you to carefully read the privacy notice of each website you visit.

V.- OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA:

When “THE COMPANY” collects your personal data, you may limit its use or disclosure by expressing your opposition to unnecessary purposes. You must express this opposition when your personal data is requested and indicate which data you are not willing to provide to the data controller.

Similarly, if the Owner does not express their disagreement at the time their personal data is being collected, “THE COMPANY” will collect the data it considers sufficient to carry out the contracted service.

VI.- MEANS TO EXERCISE YOUR RIGHT TO OBJECT TO THE PROCESSING OF DATA FOR UNNECESSARY PURPOSES:

You may express your opposition to the processing of your data for unnecessary purposes by writing a letter stating which data you do not agree to provide to the data controller. The letter should be sent to the contact email address for the area responsible for personal data processing, which is info@hotelamaca.com. The letter must comply with the following requirements:

Full name of the owner of the personal data.
Specify the information you do not wish to provide to the controller.
Provide a brief explanation of why you believe it is unnecessary to provide this information to the controller.
Attach an official identification document of the owner of the personal data to the letter.

VII.- MEANS FOR EXERCISING RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION, OR OBJECTION:

“ The Owner“ may request from ”THE COMPANY," at any time, access, rectification, cancellation, or opposition regarding the personal data concerning them. The mechanisms that have been implemented for the exercise of these rights are through the submission of the respective request to our Personal Data Department, either in person at its address or by sending an email to the one indicated above, where, after receiving your request “THE COMPANY” has a period of 20 business days to respond and let you know whether your request is valid or not. If it is valid, the person responsible will have a period of 15 business days to carry out the request made by the owner of the personal data.

VIII.- DATA TRANSFERS THAT ARE MADE:

“THE COMPANY” undertakes not to transfer your personal information to third parties without your consent, except for the exceptions provided for in Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties, and to carry out this transfer in accordance with the terms established by that Law.

In the event that “THE COMPANY” transfers your personal data to third-party service providers for the fulfillment of legal, accounting, regulatory, or contractual obligations incumbent upon PEBE DEL SOL, S. DE R.L. DE C.V. or any of its affiliated companies in Mexico or abroad, in order to carry out the purposes of the processing set out in this privacy notice, it will do so after entering into confidentiality agreements and provided that (1) the provider or person to whom the data is transferred agrees to submit the processing of personal data to this privacy notice and (2) none of the cases set out in Article 37 of the Law apply. If you do not express your opposition to the transfer of your personal data to third parties, it will be understood that you have given PEBE DEL SOL, S. DE R.L. DE C.V. your consent to do so.

IX.- SECURITY MEASURES FOR THE PROTECTION OF PERSONAL DATA:

The company has adopted and maintains the necessary administrative, technical, and physical security measures within its power to protect the personal data you have freely provided to us.

X.- CHANGES TO THE PRIVACY NOTICE:

This privacy notice may be modified or updated unilaterally by “THE COMPANY,” informing “The Owner” of such changes through the following means: (I) visible announcements in our establishments or customer service centers; (II) leaflets or brochures available in our establishments or customer service centers; (III) on our website; (IV) or we will send them to the last email address you have provided us.

If you have any questions about this privacy notice, you can contact us at the telephone numbers and/or email address indicated in the first section entitled “I.- IDENTITY AND ADDRESS OF ”THE COMPANY," where you will receive the requested assistance.