In accordance with the provisions of article 3.2 and other applicable provisions of the General Data Protection Regulation of the European Union (hereinafter, “GDPR”), we present to individuals who are in the specified countries with the following information concerning the processing and protection of the personal data thereof.
This information and the legal effects thereof shall precisely be applicable to individuals who are in the following countries:
Alemania
Chipre
Eslovenia
Francia
Italia
Malta
Reino Unido
Austria
Croacia
España
Grecia
Letonia
Países Bajos
República Checa
Bélgica
Dinamarca
Estonia
Hungría
Lituania
Polonia
Rumanía
Bulgaria
Eslovaquia
Finlandia
Irlanda
Luxemburgo
Portugal
Suecia
Identity and contact data of Data Controller
Palace Elite Resorts, S.A. de C.V. (hereinafter, “Palace Elite®” or “Data Controller”) is responsible for processing personal data to fulfill the purposes specified in section so called “Purposes and legal basis for the processing of your personal data”. Data Controller’s domicile is Carretera Cancún Puerto Morelos km 21, Manzana 01, Lote 1 – 11, Edificio A, Supermanzana 47, Municipio Benito Juárez, Cancún, Quintana Roo, C.P.77506, México.
Data Subjects may also contact Data Controller via the following e-mail address: derechosarco@palaceresorts.com.
Purposes and legal basis for the processing of your personal data
Data Controller processes your personal data for the purposes and under the legal basis listed below, including the legitimate interests of Data Controller:
Purpose
Legal basis
To provide services expressly hired by Data Subject, in any of the modalities thereof, as a member of Palace Elite®.
(1) Processing of your personal data is necessary to enforce an agreement where you are a party.
To provide information or to assist Data Subject in the engagement of services provided by Data Controller or by third parties, which services had been requested before or during Data Subject´s stay in Grupo Palace Resorts® and/or Le Blanc Spa Resorts®.
(1) Processing of your personal data is necessary to enforce an agreement where you are a party.
(2) Data processing is necessary to apply pre-contractual measures requested by you.
To allow access to our online services should you be eligible and chose to do so expressly.
(1) Data Subject has given the consent thereof to create a personal account in our websites, electronic services and/or applications.
(2) Processing of your personal data is necessary to enforce an agreement where you are a party.
To bill the products and services provided by Data Controller, as well as to judicially or otherwise collect such products and services.
(1) Processing your personal data is necessary to enforce an agreement where you are a party.
(2) Data Controller has a legitimate interest to receive the payment of outstanding debts thereto.
To make statistics and to keep a historical record of users, which includes satisfaction surveys.
(1) Data Controller has a legitimate interest to obtain and process data concerning the quality of the services thereof, in order to improve or broaden the service level thereof.
To communicate electronically offers, events, and new products or services, organized and provided by Data Controller in any of the resorts of Grupo Palace Resorts® and/or Le Blanc Spa Resorts®.
(1) Data Subject has given consent for Data Controller to send thereto electronic communications for marketing and advertisement purposes.
(2) Data Controller has a legitimate interest for the clients thereof to be loyal thereto, so that such clients hire again Data Controller’s services and/or recommend the services thereof to third parties.
With whom can we share your information? In what cases?
For the purposes indicated below, we may share your personal data based on your consent or in applicable legal provisions:
Purpose of the transfer
Recipient category
To provide Data Subject with those services that were expressly hired before or during the stay thereof in Grupo Palace Resorts® and/or Le Blanc Spa Resorts®.
Service providers identified by Data Subjects or on which Data Subjects require information for the hiring of such services.
Centralized protection of information, registration and de-registration control, and making of statistics with regard to the use of our services.
Holding, subsidiary or affiliate corporations of Data Controller.
Delivery of electronic communications on third parties’ products or services.
Business parties of Data Controller, who have authorized access to the personal data of Data Subjects.
Judicial or extra-judicial collection of past due credits.
Collection companies that provide the services thereof to Data Controller, as data processors or as data controllers of your personal data.
Delivery of electronic communications on offers, events and new products or services of Data Controller.
Providers of digital marketing services that provide the services thereof to Data Controller as data processors.
Conduction of satisfaction surveys.
Providers of statistics, surveys, and survey examination services that provide the services thereof to Data Controller as data processors.
Terms of preservation; criteria for determination of such terms
Data Controller shall retain the personal data thereof during the term strictly required to achieve the purposes indicated in this Privacy Notices and, if applicable, until the maturity of acts derived from the legal relationship that gave rise to the processing of your data:
Purpose
Criteria to determine the term of retention
To provide services expressly hired, in any of the modalities thereof, as a member of Palace Elite®.
Up to 10 years from the conclusion of the provision of the services engaged Data Subject, except in the case of an interruption to the maximum maturity date set forth in the regulations on consumer protection.
To provide information or to assist Data Subject in the engagement of services provided by Data Controller or by third parties, which services had been requested before or during Data Subject´s stay in Grupo Palace Resorts® and/or Le Blanc Spa Resorts®.
Up to 1 year from the communication of Data Subject or when Data Subject requests the cancellation of the personal data thereof for said purpose.
To allow access to our online services should you be eligible and chose to do so expressly.
Up to 10 years from the conclusion of the provision of the services engaged by Data Subject, except in the case of an interruption to the maximum maturity date set forth in the regulations on consumer protection.
To bill the products and services provided by Data controller, as well as to judicially or otherwise collect such products and services.
Up to 5 years from the conclusion of the provision of the services engaged by Data subject, except for an interruption of the maximum maturity date established in the consumer protection regulations.
To make statistics and to keep a historical record of users, which includes satisfaction surveys.
Up to 1 year from the performance of the corresponding statistics.
To communicate electronically offers, events, and new products or services, organized and provided by Data Controller in any of the resorts of Grupo Palace Resorts® and/or Le Blanc Spa Resorts®.
Indefinitely or when Data Subject requests personal data thereof related to this purpose be cancelled.
Rights of Data Subjects; means for the exercise of such rights
In all legally applicable cases, you may, at any time, exercise your access, rectification, cancellation, and opposition rights by means of a request addressed to the following e-mail address: derechosarco@palaceresorts.com.
The request shall contain:
Data Controller shall communicate the decision made in connection to your request, within a month from the date when we receive your request. Exceptionally, Data controller may extend such term up to two months, considering the complexity and the number of requests issued. In the event your request be inapplicable, Data Controller shall inform you about the reasons for the decision thereof not after the month following the receipt of your request.
In the event data provided in your request be mistake or insufficient or in case the documents required to prove your identity, or the corresponding legal representation be not attached, Data Controller shall require that you cure such deficiencies to process your request.
You may withdraw your consent for the processing of your personal data without retroactive effects, in all cases in which such a revocation shall not result in the impossibility to comply with obligations derived from an effective legal relationship between you and Data Controller; you may also limit the processing of your personal data in the cases expressly provided under the GDPR.
You shall be responsible for updating your personal data held by Data Controller consequently, you guarantee and shall be liable, in any case, for the truthfulness, accuracy, effectiveness, and authenticity of the personal data provided, and you undertake to update your personal data and to communicate any changes thereto to Data Controller.
In the event you disagree with the decision made by Data Controller in response to a request for the exercise of your rights as an interested party you may file a complaint before the control authority of your country of residence.
Automatic means to collect personal data
Data Controller uses cookies to facilitate navigation in the website www.palaceelite.com. Cookies constitute a tool used be web servers to keep and retrieve information stored in the browser used by the users or visitors of the web site, which allows saving the personal preferences thereof to provide a better navigation experience.
Cookies have an expiry date, which may vary between the time a session or web site visit lasts up to a given dated from which such cookies cease to operate. Most cookies used at www.palaceelite.com are solely related to an anonymous User and the computer equipment thereof; cookies may not provide any references that allow deducting the name and last name of a User or read any data from a hard disk or include any viruses in your texts.
We may also collect information by using “web beacons”, “pixel tags”, “clear gifs” of similar means (generically called “web beacons”), which allow us to obtain non-personal or aggregated data, such as domain names, the parts of a web site you visit, your operating system, the version of the operating system you use, the version of the browser you use and the URL previous to your visit. This information is used to improve your experience in the site and to understand traffic patterns.
We may also use third parties’ advertisement in our websites. Such advertisers may also use cookies and pixel tags to identify, among other things, the advertisements that have been shown to you and the pages where they have been shown. Data Controller does not have the usage control of such a technology of third parties and hence each such third party shall be responsible for the processing of the information obtained through automatic means.
You may configure your browser to accept or reject automatically all cookies or to receive a notice on screen upon the receipt of each cookie and then decide if said cookie shall be implanted or not in your hard disk. We suggest you consult the help section of your browser, to know how to change the configuration to accept or reject cookies. Even when you configure your browser to reject all cookies or even when you expressly reject cookies from www.palaceelite.com, you may continue navigating the web site with the sole inconvenient of not being able to enjoy the functionalities of the site that require their installation. In any case, you may eliminate cookies from www.palaceelite.com that have been implanted in your hard disk at any time by following the procedure established in the help section of your browser.
Amendments or updates to this Privacy Notice (GDPR)
Data Controller may amend, update, extend or otherwise change the contents and scope hereof at any time and at Data Controller’s own discretion. In such cases, Data controller shall publish those changes in the website thereof www.palaceelite.com, under section so called “Privacy Notices”.
Changes hereto may also be notified by e-mail, should such means of communication had been established as a communication channel between the interested parties and Data Controller, during the term of the legal relationship.
Last Updated:
September 01st, 2020
en 
