Iberostar Hotels & Resorts
This Privacy Statement is issued by Iberostar The Club México, S.A. de C.V. and Iberoclub, N.V. (hereinafter collectively referred to as the “Supplier”) in accordance with the applicable legislation of Mexico, Curacao and European Union governing protection of personal data possessed by private entities or individuals ( hereinafter referred to as the “Law”) and its existing regulations (hereinafter referred to as the “Regulations”). This Privacy Statement has the purpose of informing the terms and conditions of the Privacy Statement on Personal Data (hereinafter referred to as the “Privacy Statement”) of the Supplier whose address is Carretera Chetumal Puerto Juárez Km 309, Fracción Playa Paraíso, Municipio Solidaridad, Localidad Playa del Carmen, Estado Quintana Roo, Código postal 77710, Mexico and atPietermaai 15, Willemstad, Curaçao, respectively.
1. What information is collected?
The Supplier collects information on personal data by using different templates or formats, which may include: (i) personal data such as name, birth date, personal address, business address, phone numbers, e-mail, tax payer information; and (ii) finance information such as number of credit or debit cards in order to charge them to collect the service rendered by Supplier. Foregoing information is hereinafter collectively referred to as “Personal Data”.
2. What is the purpose of collecting such information?
Personal Data collected is used only for the following purposes:
Primary Purposes: (a) Identification; (b) Evaluation as potential customer; (c) Provide contracted services; (d) Notice on new services or products associated with those previously contracted or acquired; (e) Prepare surveys and programs needed to determine consumers habits; (f) Charges to credit and/or debit cards for services rendered; (g) Invoicing, and (h) Performance of obligations assumed with the holder of Personal Data.
Secondary Purposes: (a) Distribution of advertisement by e-mail; (b) Information on changes, gifts and/or promotions; (c) Evaluation of quality on the services rendered; and (d) Personal contact with client by phone or e-mail for the above mentioned purposes.
We collect and handle Personal Data in accordance with the legal requirements of quality, consent, information, purpose, loyalty, proportionality and responsibility.
3. Who are the assignees of such information?
Supplier may only transfer Personal Data to companies that have entered into an agreement with Supplier whereby such companies are to render services or perform certain activities for the benefit of the client. However, Personal Data may be also transferred in accordance with the terms contained in section 9 herein. Supplier may disclose or allow access to the Personal Data furnished by you in order to comply with applicable legislation or fulfill any requirement of a competent governmental agency. Such Personal Data shall not be marketed, sold or rented to third parties unless a prior written consent is obtained from the holder of such Personal Data.
4. Which security and control measures are used to protect Personal Data?
Supplier has implemented several administrative, technical and physic security measures to protect Personal Data against damage, losses, alteration, destruction, use, access or unauthorized treatment, same that are likewise enforced to be complied with by third parties even those Supplier’s subsidiaries or affiliates that render services.
5. Who is responsible to manage such Personal Data?
The Iberoclub N.V. Administrative Department is the responsible area to manage Personal Data received by Iberoclub N.V. Its address is Pietermaai 15, Willemstad, Curaçao and the attention hours to clients is from 09.00 to 14.00 hoursand from 16.00 to 19.00 hours (EEUU time) from Monday to Friday. All requests and/or enquires shall be addressed to the Call Center at the following phone number:1-855-423-2582.
The Iberostar The Club Mexico S.A. de C.V. Administrative Department is the responsible area to manage Personal Data received by Iberostar The Club Mexico S.A. de C.V. Its address is CarreteraChetumal Puerto Juárez Km 309, Fracción Playa Paraíso, MunicipioSolidaridad, Playa del Carmen, Estado Quintana Roo, Area Code. 77710, Mexico and the attention hours to clients is from 09.00 to 14.00 hoursand from 16.00 to 19.00 hours (EEUU time) from Monday to Friday. All requests and/or enquires shall be addressed to the Call Center at the following phone number: […].
6. How do you make effective your ARCO’s rights and revoke your consent to the Personal Data agreed treatment?
Holders of Personal Data may exercise their ARCO’s rights (access, cancellation, rectification and objection to treat Personal Data) or even revoke their consent granted to Supplier for the treatment of Personal Data by sending an e-mail with their application to the following e-mail: email@example.com. Such application may include at least: (a) name and address or any other means to communicate a reply to the application; (b) documents evidencing their identity or legal representation, if any; (c) clear and precise description of the Personal Data corresponding to the exercise of ARCO’s rights; and (d) any other information that facilitates location and identification of the Personal Data.
To request that the processing of your data for commercial purposes be discontinued you can simply click on the unsubscribe link in the footer of the messages, or send an email to the following email address: direcciónatencion.firstname.lastname@example.org.
7. When can you make effective ARCO’s rights?
According to the Law and Regulations, the client may file an application to exercise ARCO’s rights. Supplier shall to reply client’s application within the term of twenty (20) calendar days following the date the application is received. If Supplier does not reply within such term, the client shall be entitled to initiate the legal proceeding to protect ARCO’s rights before the relevant agency ruling access information and data protection (“IFAI”) or the institute, department or entity entitled to grant access to information and data protection
8. Modifications to Privacy Statement
Supplier withholds the right to amend the Privacy Statement at any time. In case the Privacy Statement is modified, such modification shall be communicated to clients by: (i) visible announcements in the commercial locations; (ii) making a public announcement in the Supplier’s website; or (iii) e-mail or courier to the addresses furnished by the clients. Supplier shall not be responsible if clients do not receive notice on the changes made to the Privacy Statement, if there is any problem with clients’ e-mail account, if there is any problem with the transfer of data by internet; or any other cause no imputable to Supplier. For clients’ convenience, it is advisable that clients review the Privacy Statement at any time by sending an application to Supplier’s e-mail.
9. Other applicable legal rules.
Supplier is located in Mexico and Curazao and any other matters related to Personal Data shall be governed by the laws of the United Mexican States, Curazao, Spain and the European Union to the extent applicable, when corresponds to each of the Supplier. Upon the time when Supplier delivers information to Supplier, clients grant their consent and authorize the use and transfer of Personal Data in accordance with the above mentioned terms and accept the terms of the Privacy Statement.
If the clients have so stated, the Personal Data you have given to Supplier along with the data generated by the use of the platform and by making the bookings shall be communicated to IBEROSTAR HOTELES Y APARTAMENTOS S.L., head of the IBEROSTAR Group, with registered office at C/General Riera 154, 07010 Palma de Mallorca, Baleares (SPAIN), for its incorporation into the IBEROSTAR Brand Users file, for the purposes of customer loyalty, customizing services and to send you by post, or even by electronic or telephone media, personalized commercial communications about IBEROSTAR group tourism products and services. Incorporation of clients data into said file involves your consent to entities of the IBEROSTAR Group clients made contact with for the contracting or provision of services accessing clientsPersonal Data as a brand user to personalize these services. Clients likewise consent to the international transfer of clients’ data when said entities are located outside the European Economic Area. In this case, exercising the rights to access, rectify, cancel or oppose shall be governed by the provisions set forth in Spanish Organic Law 15/1999, of 13 December on the Protection of Personal Data and its implementing regulations.To exercise these rights, you must write, accompanied by a copy of your National Identity Card or Passport addressed to LOPD of IBEROSTAR at the address mentioned above.
In case clients are residents in the American continent, excluding Cuba, clients’ Personal Data shall also be communicated to Visit Us, Inc., a U.S. entity dedicated to the marketing of tourism products with address at Le Jeune Road Suit 704, Coral Gables, FL 33134, USA. Visit Us, Inc., shall be entitled to send Clients residing in the American continent, excluding Cuba, commercial information related to such products so that clients shall consent to the corresponding international transfer of Personal Data. With respect to the treatment of Personal Data conducted by Visit Us, Inc. clients may exercise their rights to access, rectify, cancel and object in writing by sending an application to Visit Us, Inc. address.
Clients may object to these assignments as well as the treatment of the Personal Data with commercial purposes by IBEROSTAR HOTELES Y APARTAMENTOS S.L. and Visit Us, Inc. filling out any of the blanks as follows:
___ I do not want my Personal Data are communicated to IBEROSTAR HOTELES Y APARTAMENTOS S.L. and Visit Us, if any
___ I do not want to receive commercial communications by SMS.
___ I do not want my Personal Data are used for commercial purposes.
This Privacy Statement complies with requirements set forth in the Law and Regulations.