PRIVACY NOTICE

Operadora de Hoteles Holísticos SA de CV, representative of El Santuario Resort & SPA, with address at Carr. Federal a Colorines KM 4.5, Col. San Gaspar, Valle de Bravo, State of Mexico, CP 51217, Mexico, website www.elsantuario.com, is responsible for the use and protection of your personal data, and in this regard we inform you of the following:

Who is our data protection coordinator and how can I contact them?

Our Data Protection Officer is the individual within El Santuario Hotel & Resort who has been formally appointed by our Managing Director to promote and ensure the protection of the personal data we hold, as well as to address the rights of data subjects. For all matters related to the processing and protection of your personal data, you may contact our Data Protection Officer by sending an email to the following address: privacidad@elsantuario.com

For what purposes will we use your personal data?

The personal data we collect from you will be used for the following purposes, which are necessary to provide you with our services:

to complete reservations or information requests,

buy products or services,

send job applications,

respond to communications we send you (for example, surveys, promotional offers or booking confirmations),

satisfy their personal preferences,

complete service requests or recommendations that we offer you

working with third parties, including collecting publicly available information from social event websites, helps us to better understand your interests and provide a more personalized service,

use our applications on your electronic devices, or

facilitate the transmission of messages to a friend's email address, if desired.

Additionally, we will use your personal information for the following secondary purposes, which are not necessary to provide you with the requested services, but which allow us to provide you with better service and promote our services:

Sending you information about El Santuario Hotel & Resort

Send you promotions for our rewards programs.

To conduct surveys to evaluate your satisfaction and the quality of our services.

Marketing, advertising, business development

If you do not wish for your personal data to be processed for the secondary purposes indicated, or any of them, you may inform us of this at any time by sending an email to privacidad@elsantuario.com

Refusal to allow the use of your personal data for these purposes cannot be a reason for us to deny you the services you request or contract with us, and you have five business days to let us know, without prejudice to your later decision to exercise your right of revocation or opposition.

What personal data do we collect and use about you?

The type of personal information we collect may include your name, home and business address as well as email addresses, telephone and fax numbers, credit card information, date of birth, gender and information related to your lifestyle, such as room preferences, recreational activities, names and ages of children and any other information necessary that is useful to fulfill special requests (e.g., health data, which is considered sensitive personal data).

The Sanctuary Hotel & Resort may also collect information that is not considered personally identifiable, such as your use of our websites, your communication preferences, travel habits, embedded data related to your stays, and responses to promotional offers and surveys.

Please note that, to better protect your information, you should not include information related to your credit card in your electronic communication unless we specifically request it to complete the processing of a booking or transaction on our brand websites or at our customer service centers.

With whom do we share your personal information and for what purposes?

We inform you that your personal data may be transferred within the country to the following individuals or legal entities, without legally requiring your consent:

When we have your consent.

In those situations where it is necessary to share your personal data in order to offer you the products or services you want (for example, a holiday package).

When companies or service providers that conduct business on behalf of El Santuario Hotel & Resort (e.g., credit card processing, customer service, market research administration, or database management services) require this information.

In the event that El Santuario Hotel & Resort merges with or is acquired by another company.

To comply with legal or regulatory requirements and obligations set forth in applicable legislation or as a result of a court order or subpoena.

In emergency situations such as saving a person's life, preserving their health, or protecting their property.

Should El Santuario Hotel & Resort share information as described above, we will endeavor to limit the scope of the data provided to what is necessary to perform the specific function. Unless otherwise required by law, we will require third parties to protect your information and comply with applicable data protection laws and regulations.

If you do not object to these transfers, which you can do by sending an email to our data protection coordinator, we will understand that you have given us your consent.

How can you access, rectify or cancel your personal data, or oppose its use?

You have the right to know what personal data we hold about you, what we use it for, and the conditions of its use (Access). Likewise, you have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to have it deleted from our records or databases when you believe it is not being used appropriately (Cancellation); and to object to the use of your personal data for specific purposes (Opposition), under the terms permitted by applicable regulations. These rights are known as ARCO rights.

To exercise any of your ARCO rights, you may submit the corresponding request via email to our Data Protection Coordinator, who will inform you about the procedure and requirements for exercising these rights and will address any questions or comments you may have. You may also exercise your ARCO rights by requesting and completing the corresponding form at the reception desk of El Santuario Hotel & Resort, which is called the “ARCO Rights Request Form.” Our Data Protection Coordinator will then follow up on your request in accordance with applicable regulations.

You may revoke any consent you have previously given us. However, please note that your request may not be granted in all cases, or we may not be able to immediately cease processing your data, as we may be legally obligated to continue processing your personal data. You should be aware that for certain purposes, revoking your consent will mean we can no longer provide you with the service you requested, or it will result in the termination of your relationship with us.

To revoke your consent, you must submit your request via email to our Data Protection Coordinator, who will inform you about the procedure and requirements for exercising this right and will address any questions or comments you may have. You may also exercise your right to revoke your consent by requesting and completing the corresponding form at the reception desk of El Santuario Hotel & Resort, which is called the “ARCO Rights Request Form.” Our Data Protection Coordinator will then process your request in accordance with applicable regulations.

How can you limit the use or disclosure of your personal information?

In addition to the procedure outlined in the preceding section, you may limit the use or disclosure of your personal data in the following ways:

Register with the Public Registry to Avoid Advertising of the Federal Consumer Protection Agency (PROFECO). For more information regarding this option, contact PROFECO directly or visit the following link: http://rpc.profeco.gob.mx.

Send an email to our data protection coordinator requesting your registration on the “El Santuario Hotel & Resort Advertising Exclusion List”, in order to not receive promotional information about our products and services.

Which authority is responsible for ensuring the protection of personal data?

The Federal Institute for Access to Information and Data Protection (IFAI) is the authority responsible for ensuring compliance with legal provisions regarding the protection of personal data. For more information, please visit the following website: www.ifai.gob.mx.

Online technologies

El Santuario Hotel & Resort and its business partners may use cookies and web beacons to collect information about you while you visit our websites. A cookie is a small text file that we send to your browser from a web server and that is stored on your computer's hard drive. El Santuario Hotel & Resort cookies assign a unique identifier to your computer, which then becomes your identification card each time you visit an El Santuario Hotel & Resort website.

Cookies are designed to save you time by helping us provide personalized service without having to remember your preferences each time you visit our website. El Santuario Hotel & Resort's cookies are not designed to harm your files or read information stored on your computer's hard drive.

Cookies can also help us provide you with a personalized online service in the following ways:

They remember your username and password for future visits, making login easier and faster.

They ensure you have the right frames and content.

They assure you that you will receive all the requested information.

They help provide you with communications that are relevant and related to your interests and location.

The cookies used by El Santuario Hotel & Resort are limited to our websites and are not designed to track you while you browse the internet after you leave El Santuario Hotel & Resort websites. We monitor the use of our websites to better meet your needs and help you find information more easily in the future. Please note that in addition to El Santuario Hotel & Resort cookies, third parties may place cookies on your computer's hard drive. El Santuario Hotel & Resort is not responsible for the presence or absence of third-party cookies or for the technological functions or practices that these third parties may use in connection with their cookies.

If you prefer not to enjoy the benefits of cookies, you can configure your internet browser to handle them in various ways. Depending on the type of browser you use, you can configure it to: (i) prompt you to accept or reject cookies individually, or (ii) prevent the acceptance of any cookies. You should consult your internet browser provider or manufacturer for specific details regarding cookie security. However, you should also be aware that rejecting cookies may hinder certain operations on our websites and our ability to recognize your browser from one visit to the next.

Links to other websites

To anticipate your needs, El Santuario Hotel & Resort provides links to other websites for your convenience and information. El Santuario Hotel & Resort is not responsible for the content provided or included on any independent website, including, but not limited to, any advertising claims or business practices. While El Santuario Hotel & Resort will protect the information found on the websites it owns and operates, we cannot control or assume any responsibility for the privacy policies of third-party websites, including websites owned or controlled by independent franchisees and other owners of hotels, resorts, timeshares, or residential properties that may use an El Santuario Hotel & Resort brand name, or websites not controlled or authorized by El Santuario Hotel & Resort. Third-party websites accessed through links on our websites have different privacy and data collection practices, as well as different security measures. We assume no responsibility for the practices, policies, and security measures implemented by third parties on their websites. We urge you to contact them and inquire about their privacy practices, policies, and security measures before disclosing any information. We recommend reviewing the privacy policies and statements of linked websites to understand how they collect, handle, and store information.

How can you find out about changes to this privacy notice?

This privacy notice may be modified, changed or updated due to new legal requirements; our own needs related to the products or services we offer; our privacy practices; changes in our business model; or other reasons.

We are committed to keeping you informed about any changes to this privacy notice through our website, which we ask you to visit frequently to stay updated on any changes to the privacy notice.

The procedure for notifying you of changes or updates to this privacy notice is as follows: The current version of the privacy notice will be published on our website, along with the date of the most recent update. This updated version can be accessed at the following link: www.elsantuario.com/politicas-de-privacidad