Hotelera Malecón S.A. de C.V. (hereinafter Sunset Royal), located at Boulevard Kukulkan, kilometer 10, MZ 51, Lot 13-B, Hotel Zone, Zip Code 77500, Cancun, Quintana Roo, Mexico, is responsible for collecting and using necessary personal data from guests, visitors, and vacation club members, in accordance with Article 3, Section XIV of the Mexican Federal Law on Protection of Personal Data (Ley Federal de Protección de Datos Personales en Posesión de los Particulares LFPDPPP) and Articles 1, 3 and 5 of the General Data Protection Regulation (EU) 2016/679 (GDPR).
Sunset Royal collects general personal information such as full name, gender, signature, home address, phone number, email address, date of birth, occupation, city of residence, number of children, economic dependents, nationality, and ID or passport number. This information is used for essential purposes like providing and managing services, registering information in our system, check-in and check-out procedures, legal compliance, customer service (including providing information about services, transportation, reservations, answering questions, complaints, and cancellations), verifying and updating personal data, managing reservations, and payment for services.
Additionally, this information may be used for secondary (non-essential) purposes such as sending offers, discounts, special rates, and other benefits to customers; providing wedding, banquet, and honeymoon services; Sunset Spa services; gym services; medical attention when necessary; restaurant and bar services; currency exchange services; transportation services; service statistics; and advertising and marketing purposes.
Financial and asset data such as credit card numbers, security codes, expiration dates, and bank accounts are used for purchasing vacation packages, wedding services, reservations, managing European Plan service packages, and analyzing customer financial profiles to grant access to promotional programs based on their economic characteristics. Sunset Royal complies with the Mexican Federal Law for the Prevention and Identification of Operations with Resources of Illegal Origin (Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita LFPIORPI) and requires the express consent of customers to use financial and asset data for the aforementioned purposes.
Sensitive data collected in the health questionnaire, such as health conditions (allergies, heart conditions, blood pressure, diabetes, cancer, epilepsy, dermatological problems), will be used to assess your health to determine if you are physically fit for the services offered by the SPA, and to receive medical attention if necessary in case of an emergency during the use of the services. Sunset Royal complies with Article 9 of the Mexican Privacy Law (LFPDPPP) and Article 9(2.a) of the GDPR requiring the express consent of customers for the collection and processing of sensitive personal data.
Sunset Royal may transfer personal data to companies that support the provision of certain services to customers. This data transfer is necessary for the performance of the services contracted by the customer and therefore does not require express consent for these transfers as per Article 37, Section VII of the Mexican Privacy Law and Article 44 of the GDPR. Except for the cases mentioned above, and unless the conditions established in Article 37 of the LFPDPPP and 49 of the GDPR are met, the data provided by customers will not be transferred under any other circumstances.
To record and communicate information about activities and events that take place throughout the year at the resort, as well as news, Sunset Royal may use, print, reproduce, and publish images of guests, visitors, vacation club members, and customers with their friends or family attending our events and activities: in print or electronic media (website, social networks, blogs, apps), newsletters, publications, photo albums, in all forms and manifestations, performances, editions, recordings, videos and broadcasts for the aforementioned purposes. For advertising, marketing and/or market research purposes, Sunset Royal will request the express written consent of the customer before using their image.
Customers who wish to limit the use and disclosure of their personal data or do not wish to receive communications related to the secondary (non-essential) purposes detailed in this privacy notice, please send an email to: [email protected] to request to be removed from communication for these purposes. Customers also have the right to access, rectify, cancel, and oppose the use of their personal data, as well as to revoke their consent as established by the LFPDPPP and GDPR. To exercise these rights, customers need to send a request via email to Sunset Royal’s Privacy Office at [email protected].
When accessing the Sunset Royal website, your IP address, type of operating system and browser will be recorded. This information is used to improve the user experience on the website and the entire process takes place anonymously without knowing your name or any other information that allows Sunset Royal to identify you. Browsing the Sunset Royal website is anonymous unless you decide to identify yourself. The Sunset Royal website uses cookies to provide a personalized and secure experience for users as well as to display advertising related to their preferences. Cookies allow Sunset Royal to understand user behavior on the website and improve it. If you decide to navigate our website, we understand that you consent to the processing of your personal data according to our “online privacy policy” described in this Notice. Personal data and information sent through the inbox or posted by users on Sunset Royal’s social network pages are publicly available on their own accounts and are subject to the terms and conditions established by the social network provider.
If you believe that your rights regarding the protection of personal data have been violated by any conduct, action or omission related to the processing of your requests or in the use of your personal data, you may file a complaint with the National Institute for Access to Information and Data Protection (INAI). For more information, you can visit the website: www.inai.org.mx. Any questions regarding the content, interpretation or scope of this Privacy Notice, or if you require further information regarding the use of your personal data, please contact the Sunset Royal Privacy Office at the following email address: [email protected]. This Privacy Notice is effective as of January 1, 2012 and may be updated by Sunset Royal, in accordance with the GDPR and LFPDPPP and the provisions of this law, by publishing the new version on our website.
