I. Responsible for the Protection of Your Personal Data
Hotelera Malecón S.A. de C.V., operating as Sunset Royal, located at Boulevard Kukulkan, kilometer 10, MZ 51, Lot 13-B, Hotel Zone, Zip Code 77500, Cancun, Quintana Roo, Mexico, is committed to protecting your personal data. As Sunset Royal Mexico, we are responsible for the collection and handling of personal data from our valued customers, website visitors, and vacation club members. This commitment aligns with the regulations outlined in article 3, section XIV of the Mexican Federal Law for Data Protection of Private Individuals (Ley Federal de Protección de Datos Personales en Posesión de los Particulares LFPDPPP) and articles 1º, 3º, and 5º of the General Data Protection Regulation (EU) 2016/679 (GDPR). At Sunset Royal Mexico, your privacy is paramount, and we ensure that your data is handled with the utmost care and in accordance with the strictest legal standards.
II. Types of Data Collected and How Sunset Royal Mexico Uses Your Information
At Sunset Royal Mexico, we collect personal data through various channels including online forms, telephone interactions, electronic communications, and our website to enhance your experience and provide you with exceptional services. This data allows us to keep you informed about discounts, special offers, and promotions tailored for our customers, visitors, and vacation club members. The specifics of how we manage your personal information are detailed below:
a) General Personal Data
Sunset Royal Mexico collects general personal data through forms and interactions, which may include: name, gender, signature, home address, phone number, cell phone number, email, date of birth, occupation, city of residence, number of children, economic dependents, country of origin, and national identity document or passport. This information is used for the following essential purposes:
i. To deliver and manage the services you have booked with Sunset Royal Mexico.
ii. To register your details in our secure systems and databases for efficient service delivery.
iii. To streamline your Check-In and Check-Out processes at Sunset Royal Mexico.
iv. To ensure compliance with all applicable laws and regulations governing our operations.
v. To provide comprehensive customer service, including handling inquiries about our services, transportation, reservations, and addressing any questions, complaints, or cancellations via our dedicated Call Center.
vi. To regularly confirm, verify, correct, and update your personal data to maintain accuracy and relevance.
vii. To effectively manage reservations for various plans including all-inclusive, European plan, and day passes at Sunset Royal Mexico.
viii. To accurately record and process all service reservations made by our clients.
ix. To process payments for services and manage the collection of outstanding balances.
x. To securely process payments for services and programs made electronically using credit cards.
xi. To manage charges for any additional expenses or fees incurred for extra services availed during your stay at Sunset Royal Mexico.
xii. To accurately identify our associates, guests, and customers, ensuring a secure and personalized experience at Sunset Royal Mexico.
Furthermore, Sunset Royal Mexico may use this general information for the following secondary (non-essential) purposes, aimed at enhancing your experience and providing added value:
a) To keep you informed about exclusive offers, discounts, special rates, and other benefits available at Sunset Royal Mexico.
b) To facilitate and arrange wedding, banquet, and honeymoon services tailored to your needs at Sunset Royal Mexico.
c) To offer and manage services at the Sunset Spa within our resort.
d) To provide access to and manage our gym services for your health and wellness.
e) To arrange for medical attention should you require it during your stay at Sunset Royal Mexico.
f) To provide and manage our restaurant and bar services, ensuring a delightful dining experience.
g) To facilitate currency exchange services for your convenience at Sunset Royal Mexico.
h) To organize and provide transportation services to and from Sunset Royal Mexico.
i) To compile service statistics to improve and tailor our offerings continuously.
j) For promotional and marketing activities to inform you about the latest news and offerings from Sunset Royal Mexico.
b) Financial and Patrimonial Assets Data
Sunset Royal Mexico collects financial and patrimonial data, such as credit card details (number, security code, expiration date), and bank account information, specifically for processing purchases of vacation packages and wedding services, managing reservations under the European Plan, and analyzing guest financial profiles. This analysis helps us to tailor promotions and programs based on individual economic characteristics. Additionally, to comply with Mexican federal law aimed at preventing money laundering (Ley Federal para la Prevención e Identificación de Operaciones con Recursos de Procedencia Ilícita LFPIORPI), Sunset Royal Mexico may require further financial and patrimonial information.
In accordance with Mexican Privacy Law, we are required to obtain your explicit consent to process financial and patrimonial data for the purposes described. Therefore, Sunset Royal Mexico ensures to request your express written authorization at the time of data collection, upholding your rights and privacy.
c) Sensitive Data
Sunset Royal Mexico gathers sensitive data through our health questionnaire, including details about health conditions such as allergies, heart conditions, blood pressure, diabetes, cancer, epilepsy, and dermatological issues. This information is crucial for evaluating your health to ensure your suitability for SPA services and to provide appropriate medical attention should an emergency arise during your time with us.
Under Mexican Privacy Law (LFPDPPP) article 9º and article 9 (2.a) of the GDPR, explicit consent is mandatory for collecting and processing sensitive personal data. Sunset Royal Mexico is fully compliant with these regulations and will request your express written authorization at the point of data collection, ensuring your sensitive information is handled with the highest standards of privacy and care.
III. Data Transfer Policies at Sunset Royal Mexico
Sunset Royal Mexico may share personal data with trusted companies that provide support services necessary for delivering the services you request. These transfers are essential for fulfilling our service commitments to you. Under article 37, section VII of the Mexican Privacy Law and article 44 of the GDPR, these necessary data transfers do not require express consent, ensuring seamless service delivery.
Except as described above, Sunset Royal Mexico guarantees that your data will not be transferred under any other circumstances unless mandated by conditions set by articles 37 of the LFPDPPP and 49 of the GDPR. We are committed to protecting your privacy and ensuring your data remains secure and confidential within our operational framework.
IV. Use of Images at Sunset Royal Mexico
Sunset Royal Mexico may document and share information about events and activities throughout the year at our resort. This may include using, printing, reproducing, and publishing images of guests, visitors, vacation club members, customers, and their families or friends who participate in our events and activities. These images may appear in various media, including print and electronic platforms such as our website, social networks, blogs, apps, newsletters, publications, and photographic records. This usage extends to all forms of media, performances, editions, phonograms, video, and broadcasts, strictly for informational and journalistic purposes.
Secondary Purposes for Image Use
Images collected at Sunset Royal Mexico may also be used for advertising, marketing, and market research. Should Sunset Royal Mexico intend to use your images for these secondary purposes, we will always seek your express written authorization beforehand. Your consent ensures that you have control over how your image is used in promotional contexts.
V. Managing Your Preferences: Restricting Use or Disclosure of Personal Data
In accordance with article 16 section III of the LFPDPPP and 18 of the GDPR, you have the right to limit the use and disclosure of your personal data. If you prefer to restrict the use of your data or wish to opt out of receiving communications related to secondary purposes as detailed in this privacy notice, please contact us via email at [email protected]. Simply request to be removed from secondary communications, and we will promptly honor your request.
VI. Your Rights: Access, Rectification, Cancellation, Opposition, and Withdrawal of Consent
As per the LFPDPPP effective January 6, 2012, and articles 15, 16, 17, 18 of the GDPR, as a data owner, you possess rights regarding your personal data held by Sunset Royal Mexico. These rights include the ability to request access to, correction of, cancellation of (if legally permissible), and opposition to the use of your personal data. Furthermore, you have the right to withdraw your consent at any time. To exercise these rights effectively, please follow the procedure outlined below:
- Initiate your request by sending an email to our Privacy Office at [email protected]. Clearly state the right you wish to exercise: access, rectification, cancellation, and/or opposition. Your application must include your full name, the nature of your legal or commercial relationship with Sunset Royal Mexico, and specify the right you are exercising. Accurately identify the data for which you seek access, correction, cancellation, or opposition, or for which you are withdrawing consent. Attach a copy of an official identification document (valid passport, identification document, or current immigration document) to verify your identity.
- For personal data belonging to minors or individuals legally incapable of consent, the request must be submitted by their legal representative. This requires accreditation of parental rights or legal guardianship through appropriate documentation.
- Data owners should submit their rights application and may include any supporting documents relevant to their request. For correction requests, clearly detail the changes requested and attach documentation supporting the amendment.
- Applications for exercising these rights must be submitted during business hours on business days, in accordance with the Federal Law of Administrative Procedure.
- Send your request to the email address specified in point 1. You will receive an acknowledgment of receipt with the date of submission. If your application does not meet legal requirements, we will contact you within five (5) business days to request amendments, providing up to ten (10) business days for corrections. Failure to amend will result in the application being considered not submitted.
- Requests sent on Fridays or non-business days will be deemed received on the next business day.
- You will receive a response to your request via email within twenty (20) business days from the date of receipt. This period may be extended by an additional twenty (20) business days if justified, as per Article 97 of the LFPDPPP Regulations. You will be notified of any extension.
- If your request is compliant with the LFPDPPP and other applicable regulations, access to data will be granted, data will be corrected or canceled, opposition rights will be enforced, or consent will be revoked within fifteen (15) business days following the date of response. This period may also be extended by fifteen (15) business days under justifiable circumstances, with notification as per Article 97 of the RLFPDPPP.
- In all valid requests under articles 32, 33, 34, and 35 of the LFPDPPP, data will be provided free of charge via the data holder’s designated email. Should you require data delivery through other means, you will be responsible for covering shipping costs and/or reproduction expenses for copies or alternative formats.
VII. Online Data Management at Sunset Royal Mexico
This section outlines how Sunset Royal Mexico handles your personal data when you interact with our website: – https://www.sunsetworldresorts.com/resorts/sunset-royal-beach-resort/
Online Privacy Policy
When you visit the Sunset Royal Mexico website, we automatically record your IP address (usually temporary, assigned by your internet service provider), your operating system, and browser type. We also track the pages you navigate within our site. This collected information is used to enhance your website experience and is processed without identifying you personally unless you choose to do so. Your website navigation remains anonymous until you decide to identify yourself.
Sunset Royal Mexico does not require personal data for general website use unless necessary for specific applications. Certain features, like contact forms, may request your email address to register and respond to your comments, requests, questions, or suggestions, and to contact you if needed. These forms will not request financial, patrimonial, or sensitive data; any disclosure of such information is at your discretion. However, if you voluntarily provide such data, Sunset Royal Mexico assures it will be handled with strict confidentiality and security.
Cookies
Cookies are small pieces of information that a website sends to your computer and stores on your hard drive. On subsequent visits, we may use cookie data to streamline your website experience, such as for password management. Cookies do not reveal your personal identity unless you explicitly provide it. Most cookies are set to expire after a short duration or can be manually deleted by you at any time. You can also configure your browser to notify you upon receiving a cookie, allowing you to accept or reject it.
Our website uses cookies to personalize and secure your online experience and to present advertising that aligns with your preferences. Cookies help us understand user behavior on our site, enabling us to make improvements. By continuing to navigate our website, you consent to the processing of your personal data as described in this “Online Privacy Policy” section of our Privacy Notice.
Social Networks
Personal data and information shared via inbox messages or posted by users on our social network profiles are published under their account’s terms and conditions, governed by the respective social network provider. Sunset Royal Mexico uses this information to respond to user inquiries and questions, contact users if requested, and for statistical analysis.
Contact details from users requesting information about travel packages, tours, and other services will be shared with our Customer Service Center to provide personalized assistance via email or phone. For users participating in contests, their provided information will be used to contact them if they win, and their image may be published, subject to prior consent where required.
Data Portability
In accordance with article 20 of the GDPR, you have the right to data portability, allowing you to transfer your personal data to another service provider or controller without hindrance from Sunset Royal Mexico, provided the data processing is carried out by automated means. Sunset Royal Mexico ensures the highest standards of confidentiality and security in facilitating any data transfer requests.
VIII. Submitting Complaints Regarding the Use of Your Personal Data
If you believe that your data protection rights have been violated by any action, conduct, or omission related to your requests or the use of your personal data, you have the right to lodge a complaint with the National Institute for Access to Information and Data Protection (INAI) in Mexico. For detailed information and guidance, please visit: www.inai.org.mx.
IX. Contact Information – Privacy Office
For any inquiries, clarifications, or concerns regarding the content, interpretation, or scope of this Privacy Notice, or if you require further information about the use of your personal data at Sunset Royal Mexico, please contact our Privacy Office directly via email at: [email protected]
X. Privacy Notice Updates
This Privacy Notice is effective as of January 1, 2012, and may be updated periodically by Sunset Royal Mexico in compliance with the GDPR, LFPDPPP, and their respective regulations. Any updates will be communicated by publishing a revised version on our website.
Last Updated: December 1st, 2023
