In accordance with the provisions of article 3.2 and other applicable provisions of the General Data Protection Regulation of the European Union (hereinafter, GDPR), we present to individuals residing in the specified countries with the following information concerning the processing and protection of the personal data thereof. This information and the legal effects thereof shall precisely be applicable to individuals residing in the following countries:
Germany Cyprus Slovenia France Italy Malta United Kingdom
Austria Croatia Spain Greece Latvia Netherlands Czech Republic
Belgium Denmark Estonia Hungary Lithuania Poland Romania
Germany Austria Belgium Bulgaria Cyprus Croatia Denmark
Identity and contact data of Data Controller Palace Premier Memberships, S.A. de C.V. (hereinafter, “Palace Premier®” or “Data Controller”) is responsible for processing personal data to fulfill the purposes specified in section so called “Data Processing Purposes”. Data Controller’s domicile is Carretera Cancún Puerto Morelos km 21, Manzana 01, Lote 1 – 11, Edificio A, Supermanzana 47, Municipio Benito Juárez, Cancún, Quintana Roo, C.P.77506, México. Interested parties may also contact Data Controller via the following e-mail address: derechosarco@palaceresorts.com. Identity and Contact Data of Data Controller’s Representative within the European Union Territory Palace Premier® has appointed the following person as the representative thereof within the European Union territory, pursuant to article 27 of the GDPR: name: Héctor Efraín Guzmán Rodríguez; domicile: Avenida de Brasil 29 -1, 28020, Madrid, Spain; e-mail address: derechosarco@palaceresorts.com Purposes and Legal Basis for the Processing of your Personal Data Data Controller processes your personal data for the purposes and under the legal basis listed below, including the legitimate interests of Data Controller:
Purpose
Legal Basis
To provide services expressly hired, in any of the modalities thereof, as an affiliate of Palace Premier®.
(1) Processing of your personal data is necessary to enforce an agreement whereto you are a party.
To provide information or to assist the interested party in the engagement of services rendered by Data Controller or by third parties, which services had been requested before or during your stay in the resorts of Grupo Palace Resorts®.
(1) Processing of your personal data is necessary to enforce an agreement whereto you are a party. (2) Data processing is necessary to apply pre-contractual measures requested by you.
To allow access to our online services should you be eligible and chose to so do expressly.
(1) The interested party has given the consent thereof to create a personal account in our websites, electronic services and/or applications. (2) Processing of your personal data is necessary to enforce an agreement whereto you are a party.
To bill the products and services provided by Data controller, as well as to judicially or otherwise collect such products and services.
(1) Processing your personal data is necessary to enforce an agreement whereto you are a party. (2) Data controller has a legitimate interest to receive the payment of outstanding debts thereto.
To make statistics and to keep a historical record of users, which includes satisfaction surveys.
(1) Data Controller has a legitimate interest to obtain and process data concerning the quality of the services thereof, in order to improve or broaden the service level thereof.
To communicate electronically offers, events, and new products or services, organized and provided by Data Controller in any of the resorts thereof.
(1) The interested party has given consent for Data Controller to send thereto electronic communications for marketing and advertisement purposes. (2) Data Controller has a legitimate interest for the clients thereof to be loyal thereto, so that such clients hire again Data Controller’s services and/or recommend the services thereof to third parties.
With whom can we share your information? In what cases? For the purposes indicated below, we may share your personal data based on your consent or in applicable legal provisions:
Purpose of the Transfer
Recipient Category
Provision to the interested parties of such services third parties have requested expressly before or during the stay thereof in the resorts of Grupo Palace Resorts®.
Service providers identified by the interested subjects or with regard to whom information is required for the hiring of such services
Centralized protection of information, registration and de-registration control, and making of statistics with regard to the use of our services
Controlling companies, subsidiaries, or affiliates of Data Controller
TDelivery of electronic communications on third parties’ products or services
Business parties of Data Controller, who have authorized access to the personal data of the interested parties.
Judicial or extra-judicial collection of past due credits
Collection companies that render the services thereof to Data Controller as processors or as data receivers of your personal data
Delivery of electronic communications on offers, events and new products or services of Data Controller
Providers of digital marketing services that render the services thereof to Data Controller as processors
Conduction of satisfaction surveys
Providers of statistics, surveys, and survey examination services that render the services thereof to Data controller as processors
Retention Periods; Criteria for Determination Data Controller shall retain the personal data thereof during the term strictly required to achieve the purposes indicated in this Privacy Notices and, if applicable, until the maturity of acts derived from the legal relationship that gave rise to the processing of your data.
Purpose
Criteria to Determine the Term of Retention
To provide services expressly hired, in any of the modalities thereof, as an affiliate of Palace Premier®.
Up to10 years from the conclusion of the provision of the services engaged by the interested party, except in the case of an interruption to the maximum maturity date set forth in the regulations on consumer protection.
To provide information or to assist the interested party in the engagement of services rendered by Data Controller or by third parties, which services had been requested before or during your stay in the resorts of Grupo Palace Resorts®.
Up to 1 year from the communication of data to the interested party or when the interested party requests the cancellation of the personal data thereof for said purpose.
To allow access to our online services should you be eligible and chose to so do expressly.
Up to10 years from the conclusion of the provision of the services engaged by the interested party, except in the case of an interruption to the maximum maturity date set forth in the regulations on consumer protection.
To bill the products and services provided by Data controller, as well as to judicially or otherwise collect such products and services.
Up to 5 years from the conclusion of the provision of the services engaged by the interested party, except for an interruption of the maximum maturity date established in the consumer protection regulations.
To make statistics and to keep a historical record of users, which includes satisfaction surveys.
Up to 1 year from the performance of the corresponding statistics.
To communicate electronically offers, events, and new products or services, organized and provided by Data Controller in any of the resorts thereof.
Indefinitely or when the interested party requests your personal data related to this purpose be cancelled.
Rights of Data Subjects; Means for the Exercise of such Rights In all legally applicable cases, you may, at any time, exercise your access, rectification, cancellation, and opposition rights by means of a request addressed to the following e-mail address: derechosarco@palaceresorts.com. The request shall contain: a) Your name and domicile or another means to communicate the response to your request;; b) Documents that prove your identity or, if applicable, the corresponding legal representation c) A clear and precise description of personal data with respect to which any of the rights related to the processing of your data are intended to be exercised; and d) Any other element or document that facilitates the localization of personal data. Data Controller shall communicate the decision made in connection to your request, within a month from the date when we receive your request. Exceptionally, Data controller may extend such term up to two months, considering the complexity and the number of requests issued. In the event your request be inapplicable, Data Controller shall inform you about the reasons for the decision thereof not after the month following the receipt of your request. In the event data provided in your request be mistake or insufficient or in case the documents required to prove your identity, or the corresponding legal representation be not attached, Data Controller shall require that you cure such deficiencies to process your request. You may withdraw your consent for the processing of your personal data without retroactive effects, in all cases in which such a revocation shall not result in the impossibility to comply with obligations derived from an effective legal relationship between you and Data Controller; you may also limit the processing of your personal data in the cases expressly provided under the GDPR. You shall be responsible for updating your personal data held by Data Controller Consequently, you guarantee and shall be liable, in any case, for the truthfulness, accuracy, effectiveness, and authenticity of the personal data provided, and you undertake to update your personal data and to communicate any changes thereto to Data Controller. In the event you disagree with the decision made by Data Controller in response to a request for the exercise of your rights as an interested party you may file a complaint before the control authority of your country of residence.
Automatic Means to Collect Personal Data Data Controller uses cookies to facilitate navigation in the website www.palacepremier.com. Cookies constitute a tool used be web servers to keep and retrieve information stored in the browser used by the users or visitors of the web site, which allows saving the personal preferences thereof to provide a better navigation experience. Cookies have an expiry date, which may vary between the time a session or web site visit lasts up to a given dated from which such cookies cease to operate. Most cookies used at www.palacepremier.com are solely related to an anonymous User and the computer equipment thereof; cookies may not provide any references that allow deducting the name and last name of a User or read any data from a hard disk or include any viruses in your texts. We may also collect information by using “web beacons”, “pixel tags”, “clear gifs” of similar means (generically called “web beacons”), which allow us to obtain non-personal or aggregated data, such as domain names, the parts of a web site you visit, your operating system, the version of the operating system you use, the version of the browser you use and the URL previous to your visit. This information is used to improve your experience in the site and to understand traffic patterns. We may also use third parties’ advertisement in our websites. Such advertisers may also use cookies and pixel tags to identify, among other things, the advertisements that have been shown to you and the pages wherein they have been shown. Data Controller does not have the usage control of such a technology of third parties and hence each such third party shall be responsible for the processing of the information obtained through automatic means. You may configure your browser to accept or reject automatically all cookies or to receive a notice on screen upon the receipt of each cookie and then decide if said cookie shall be implanted or not in your hard disk. We suggest you consult the help section of your browser, to know how to change the configuration to accept or reject cookies. Even when you configure your browser to reject all cookies or even when you expressly reject cookies from www.palacepremier.com, you may continue navigating the web site with the sole inconvenient of not being able to enjoy the functionalities of the site that require their installation. In any case, you may eliminate cookies from www.palacepremier.com that have been implanted in your hard disk at any time by following the procedure established in the help section of your browser.
Amendments or Updates to this Privacy Notice (GDPR) Data Controller may amend, update, extend or otherwise change the contents and scope hereof at any time and at Data controller’s own discretion. In such cases, Data controller shall publish those changes in the website thereof www.palacepremier.com, under section so called “EU Privacy”. Changes hereto may also be notified by e-mail, should such means of communication had been established as a communication channel between the interested parties and data controller, during the term of the legal relationship. Last update: May 25, 2018