PRIVACY NOTICE
In accordance with this Privacy Notice, the natural or legal person who is the owner of the personal data (hereinafter, the Owner) is informed of the manner in which Oasis Hotels & Resorts, SA de CV with address located at Blvd. Kukulcán KM 6.5 Lote 1, Zona Hotelera, Cancún, Quintana Roo, CP 77500, email contact@oasishoteles.com (hereinafter, Oasis ) collects and uses your personal data in a lawful manner in compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties and other applicable regulations, which are provided to you through the Website www.oasishoteles.com, through the mobile Application, social networks and official Oasis pages, and of any other data that you may provide in the future to Oasis when you contract and receive services from our hotels.
This Privacy Notice supplements any other simplified or short privacy notices that our organization has made available to you and is supplementary in everything that such notices do not expressly refer to.
I. DEFINITIONS.
For the purposes of this Privacy Notice, the following terms shall be understood as:
I.1. ARCO. Abbreviation for “Access, Rectification, Cancellation and Opposition”.
I.2. Privacy Notice. This document made available to the Owner of the personal data.
I.3. Database. Control of the personal data held by Oasis.
I.4. Blocking. The identification and conservation of personal data once the purpose for which they were collected has been fulfilled, in order to determine possible responsibilities in relation to their treatment, until the legal or contractual limitation period for these expires. During said period, the personal data may not be processed and after this period, they will be cancelled from the database.
I.5. Data. Any information concerning an identifiable natural person that is registered in the Database.
I.6. Hotel.
I.7. Law. Federal Law on the Protection of Personal Data Held by Private Parties.
I.8. Oasis. Legal entity responsible for the processing of the personal data of the Owner of the personal data.
I.9. Regulations. Regulations of the Federal Law on the Protection of Personal Data Held by Private Parties.
I.10. Services. Services to be provided by Oasis, individually or jointly, at the request of the Owner of the personal data, with or without a current promotion, consisting of viewing the Image Bank, providing reservation information, making online reservations for rooms within the hotel of preference of the Owner of the personal data, pre-reservations, hotel locator, rate locator, pre-reservations of a hall or halls for conventions, weddings or events.
I.11. Website. Official Oasis page located on the Internet through the Uniform Resource Locator (URL): https://oasishoteles.com/es.
I.12. Owner. Natural or legal person who owns the personal data.
I.13. Processing. Obtaining, using, disclosing or storing personal data through the official Oasis websites.
II. PURPOSES OF THE DATA COLLECTED.
Oasis will process the personal data of the Owner of the personal data, always ensuring the principles of legality, consent, information, quality, purpose, loyalty, proportionality and loyalty, as well as the duties of security and confidentiality provided for by law.
Regarding the purposes of processing the personal data of the Owner of the personal data, they are as follows:
1.- The optimal provision of the Service(s) contracted in favor of or by the Owner of the personal data;
2.- Contract, modify or cancel the reservation and/or Services;
3.- The corresponding follow-up to the Service(s) contracted through the Website or those that may be contracted within the facilities of the Hotel.
4.- Make the payment(s);
5.- Request an invoice or digital tax receipt;
6.- Customer Service;
7.- Sending promotional material, personalizing the visits of the Owner of the personal data to the Website and official social networks of Oasis, the delivery of content tailored to the interests of the Owner, participation in advertising based on the interests of the same.
8.- Sending satisfaction survey material, market research surveys and/or quality assurance surveys.
9.- Sending instructions and/or responses regarding the Owner's participation in raffles, contests and/or promotions, which must be sent together with the terms and conditions governing each of these.
10.- Receiving advertising through electronic means, for online marketing purposes, or telemarketing about our services;
11.- Sharing your comments or suggestions about our services.
12.- Your personal data will be used for the purpose of conducting studies on the demographic data, interests and behavior of our customers;
13.- Market studies to offer you personalized services suited to your needs;
14.- Internal statistics indicating the services most appreciated by you;
15.- Affiliated companies and subsidiaries of Oasis, solely for internal administrative purposes.
We inform you that your personal data may be shared with companies related to Oasis, as well as government agencies, local or federal prosecutors, or local or federal courts, or public institutes or entities before which legal proceedings are initiated according to the nature of the services you contract, for compliance with identification requirements or similar.
Affiliates and/or third parties are prohibited from using your personal information for purposes other than those stated, nor will we use sensitive personal data (such as ideological data; data on political opinions; data on union membership; health data; data on sexual life or data on ethnic or racial origin) for any purpose other than providing the services and we oblige our affiliates, as well as third parties, to protect your personal data with appropriate security measures. These affiliates and/or third parties may not process or use your personal information except in accordance with this Oasis Privacy Notice and in accordance with applicable law.
Oasis complies with the various obligations set forth in the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDP) and the regulations related to it, and other laws or administrative provisions at both the federal and local level.
The data collected will be for the purposes set forth in this Privacy Notice. We may collect your personal data in different ways:
a) When you stay at any of the Oasis hotels and complete the registration forms,
b) When you visit our Website,
c) When you request a quote from any area of the hotel,
d) When you use any of the services provided by and/or dependent on any of the Oasis hotels and in general when personal data is obtained through the means permitted by law.
The owner of the personal data will have the right at all times to cancel their personal data by means of a written request sent to the email address contact@oasishoteles.com. Such cancellation will result in a blocking period after which the data will be deleted. Oasis may retain the data necessary exclusively for the purposes of the responsibilities arising from the processing. The blocking period will be equivalent to the statute of limitations for actions arising from the legal relationship that underlies the processing under the terms of the Law. Once the data has been cancelled, Oasis will notify the Owner of the personal data.
III. PERSONAL DATA COLLECTED.
In order to provide the Services, Oasis through the Website or Paraty Tech through the booking engine, requests the Owner of the personal data, referring to:
1. Name(s) surname(s)
2. Cell phone number
3. Address
4. Sex
5. Nationality
6. Email
7. Federal Taxpayer Registry
8. Official identification.
9. Data owned by the Owner of the personal data regarding the banking institution, bank account number(s) and credit and/or debit card data are collected exclusively in cases where such data are necessary for the consolidation of a contractual relationship between Oasis and the Owner, as they are of a financial and patrimonial nature.
They are collected and stored in the Database.
Oasis may verify the personal data provided by consulting public entities, specialized companies or risk centers; verification expressly authorized by the Owner of the personal data with the acceptance of this Privacy Notice, all information obtained through said investigation will be treated by Oasis confidentially, respecting the applicable legislation and this Privacy Notice.
In the event that the Owner of the personal data provides data to third parties, he/she declares that he/she has their consent and undertakes to transfer to the interested party, Owner of said data, the information contained in this Privacy Notice, exempting Oasis from any liability in this regard. However, Oasis may carry out the necessary verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.
IV. EXERCISE OF THE RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION AND OPPOSITION.
The owner of the personal data has the right to know what personal data we have about him/her, what we use it for and the conditions of use we give it ( Access ). Likewise, it is his/her right to request the correction of his/her personal information if it is outdated, inaccurate or incomplete ( Rectification ); that we delete it from our records or databases when he/she considers that it is not being used in accordance with the principles, duties and obligations provided for in the regulations ( Cancellation ); as well as to oppose the use of his/her personal data for specific purposes (Opposition ). These rights are known as ARCO rights .
I. Request. The owner of the personal data must submit their Request to Exercise ARCO Rights, either in person or digitally (exclusively by email contact@oasishoteles.com). Said request must be accompanied by the following information:
A. Name of the owner of the personal data.
B. Documents proving the identity of the owner (Voter ID, passport, military ID, professional ID, driver's license and immigration document).
C. If applicable, name of the owner's representative and documents proving their identity and personality.
To prove the identity of the representative, when it is a natural person, any of the following three options may be chosen: 1) the presentation of a simple power of attorney signed before two witnesses, attaching a simple copy of their official identification; 2) by means of a public instrument (document signed by a Notary Public); or, 3) The Owner of the personal data and his representative appearing before Oasis to testify.
D. Address or any means to receive notifications.
E. Clear and precise description of the personal data that you want to rectify, cancel or oppose its processing.
F. Description of the right you want to exercise or what the Owner of the personal data is requesting.
G. If applicable, documents or information that facilitate the location of the personal data, including the area responsible for the processing.
For more information for cases in which the Owner of the personal data is a minor or is under interdiction, it will be attended to in accordance with the provisions of the "PROCESS TO EXERCISE MY DPDP IN THE PRIVATE SECTOR", find out how to present it by selecting https://home.inai.org.mx/?page_id=3374 Oasis is obliged to receive the request for the exercise of the ARCO rights, at the following location: Blvd. Kukulcán KM 6.5 Lote 1, Zona Hotelera, Cancún, Quintana Roo, CP 77500.
It is important to take into account that, if the request does not have the information described above, the person responsible may request the missing information through a REQUIREMENT, which must be issued within a maximum period of 5 (five) business days counted from the day following the submission of the request, and the Owner of the personal data will have 10 (ten) business days, after receiving the prevention, to provide the required information, otherwise your request will be considered as not submitted.
When you submit your request, Oasis must deliver an ACKNOWLEDGEMENT stating the date of receipt of the same.
II. Response . Oasis will respond to the request by email or in person at the address indicated by Oasis for such purposes, within a period of 20 (twenty) business days counted from the date the acknowledgment of receipt of the request is sent to the Owner of the personal data or his representative.
Once the required documents have been submitted, Oasis will be obliged to inform the Owner of the personal data or his representative, in order to count the business days in which the request will be carried out.
III. Resolution . When the request is appropriate, with respect to the personality and ownership of the ARCO Rights and the Owner of the personal data and/or his representative has been informed of this, the terms to carry out the request will be the following:
A. For data access: within a period of 15 (fifteen) days from the affirmative response made by Oasis, the electronic documents that guarantee your request will be sent by the same means used to make your request.
B. For data rectification: within a period of 15 (fifteen) days from the affirmative response made by Oasis, the electronic documents that guarantee the rectification will be sent by the same means used to make your request.
C. For the cancellation or opposition of data: first, the data will be blocked from the moment the required documentation is compared, where access to personal data will be restricted to all persons until there is a response to the request, whether affirmative or negative, in the first case within a period of 15 (fifteen) days from the affirmative response made by Oasis, and in the second case, the data will be unblocked to continue with the treatment.
The terms referred to in the previous paragraphs may be extended once for an equal period if necessary and upon prior notification by Oasis.
In accordance with Article 34 (thirty-four) of the Law, Oasis may deny access to personal data, or to rectify or cancel or grant opposition to the treatment of the same, in the following cases:
I. When the applicant is not the owner of the personal data, or the legal representative is not duly accredited to do so;
II. When the personal data of the applicant are not found in its database;
III. When the rights of a third party are violated;
IV. When there is a legal impediment, or the resolution of a competent authority, which restricts access to personal data, or does not allow the rectification, cancellation or opposition of the same, and
V. When the rectification, cancellation or opposition has been previously carried out.
It also provides that the refusal may be partial, in which case, Oasis will carry out the access, rectification, cancellation or opposition requested by the Owner of the personal data.
In all the above cases, Oasis must inform the Owner of the personal data, or where appropriate, the legal representative, of the reason for its decision and communicate it within the time limits established for this purpose, by the same means by which the request was made, accompanying, where appropriate, the relevant evidence.
The exercise of the "ARCO Rights" will be free of charge, but if the provisions of article 35 of the law are met, that is, the Owner of the personal data reiterates his request in a period of less than 12 (twelve) months, the cost will be the sum of 3 (three) times the Measurement and Update Unit (UMA) that is in effect at the time of the request and the Value Added Tax, unless there are substantial modifications to the Privacy Notice that motivate new Requests to Exercise ARCO Rights.
All justified expenses resulting from shipping, reproduction in copies or formats will be at the expense of the Owner of the personal data or his representative.
V. MODIFICATIONS TO THE PRIVACY NOTICE
Oasis reserves the right to make modifications or updates to this Privacy Notice at any time.
These modifications will be available to the public through the following means: (I) notices visible in the corporate offices; (II) brochures or pamphlets available at the corporate offices; (III) on our website https://oasishoteles.com/es or (IV) we will send them to the last email address you have provided us.
VI. LEGAL BASIS.
For the purposes of this Privacy Notice, it shall be governed first by the provisions set forth herein and, additionally, by the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, the Regulations of the Federal Law on the Protection of Personal Data Held by Private Parties, the Guidelines of the Privacy Notice published in the Official Gazette of the Federation and other applicable legal regulations.
VII. CONTACT US.
If you have any questions about this Privacy Notice, about the processing of your personal data, or any concerns or complaints regarding the administration of this Privacy Notice, or if you wish to send a written request about your personal data, then you may contact us by email at contact@oasishoteles.com.
VIII. CONSENT.
The Data Subject confirms that he/she has read and accepted the terms of the Oasis Privacy Notice, giving his/her consent for Oasis to share his/her information with its affiliates, who will use it as stipulated. Oasis offers various services, such as online reservations, room information and events, for which the Data Subject must provide personal data such as name, telephone number, email address and payment details. This information is crucial to process reservations and ensure a personalized experience. Oasis is committed to handling data confidentially and to complying with current data protection regulations.
In addition, the Data Subject may choose to give his/her consent to receive services, promotions, as well as marketing and telephone calls other than the reservation.
The Owner of the personal data YES ☐ NO ☐ You consent to Oasis sharing your personal information with its affiliated companies and/or contracted third parties, who may use such information to provide you with services, promotions, marketing, as well as marketing and telephone calls other than reservations.