The ASOCIACIÓN DE HOTELES DE CANCÚN, PUERTO MORELOS E ISLA MUJERES, A.C., hereinafter the “Association”, with its address at Mza. 1 Lote 6 #1, C.P. 77500, Calle José García de la Torre, Cancún, Quintana Roo, Mexico, is responsible for the processing of the personal data it collects, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations and other applicable provisions.
For the purposes of this Notice, “Data Subject” means the individual to whom the personal data belong.
I. Personal Data
The Association may collect identification, contact, employment or professional data, information related to requests and procedures, as well as technical data derived from the use of its digital platforms and, when necessary, tax, asset or financial data.
The data will be collected and processed lawfully, fairly and proportionately, in accordance with the stated purposes and with the principles of lawfulness, purpose, loyalty, consent, quality, proportionality, information and accountability.
The Association does not ordinarily collect sensitive personal data. Where it is exceptionally necessary to process such data, the express written consent of the Data Subject will be obtained, when required by applicable law.
II. Purposes
Personal data will be processed for the following primary purposes:
- Managing memberships and the relationship with members.
- Organizing and managing events, meetings, assemblies, training sessions and institutional activities.
- Managing the job board and, where applicable, receiving and forwarding résumés and employment information.
- Responding to requests, inquiries and communications.
- Managing contracts, agreements, suppliers and service providers.
- Complying with legal, tax and administrative obligations.
- Responding to requests from competent authorities.
- Exercising and defending the rights and interests of the Association.
They may also be used for secondary purposes, such as sending newsletters, invitations, press releases, campaigns and surveys, and promoting institutional activities.
The Data Subject may object to the processing of their data for secondary purposes by writing to relacionespublicas@ahcancun.com
III. Consent
Personal data will be processed with the consent of the Data Subject, except where the law allows processing without it.
Consent may be express or implied, as applicable. In the case of financial or asset data, express consent will be obtained when legally required.
The Data Subject may revoke their consent at any time, without retroactive effect, through the procedure set out in this Notice.
If personal data of minors are collected, the Association will observe the applicable legal provisions and, where applicable, obtain the consent of the person exercising parental authority, guardianship or legal representation.
IV. Transfers
The Association may transfer personal data to authorities, advisors, financial institutions, suppliers, service providers, member hotels and other third parties when necessary for the purposes set out in this Notice or when permitted by applicable law.
Where a transfer requires consent, the Data Subject may express their acceptance or refusal through the mechanisms the Association makes available.
Transfers that do not require consent will be made only when one of the cases provided for by applicable law applies.
International transfers, if any, will be carried out in accordance with the applicable legal provisions.
Recipient third parties will assume the corresponding obligations regarding the protection of personal data.
V. Security and Confidentiality
The Association will implement administrative, technical and physical security measures to protect personal data against damage, loss, alteration, destruction, or unauthorized access, use or processing.
It will also maintain confidentiality mechanisms and, in the event of a security breach that significantly affects the property or moral rights of the Data Subject, will make the notifications and take the corrective measures required by applicable law.
Personal data will be kept for as long as necessary to fulfill the corresponding purposes and applicable legal retention periods.
VI. ARCO Rights
The Data Subject may exercise their rights of Access, Rectification, Cancellation and Opposition (ARCO) by submitting a request to the:
Personal Data Department
Email: relacionespublicas@ahcancun.com
The request must include:
- Full name of the Data Subject.
- Means for receiving a response.
- Document proving their identity and, where applicable, the authority of their representative.
- Clear and precise description of the data in respect of which the right is exercised.
- Right to be exercised.
- Documents or information that help locate the data.
When the request is submitted by a representative, such representation must be proven in accordance with applicable law.
The Association will communicate its decision within 20 days of receiving the request and, if applicable, will make it effective within the following 15 days.
Exercising ARCO rights is free of charge, except for reproduction, copying or shipping costs permitted by applicable law.
VII. Revocation and Limitation
The Data Subject may request the revocation of their consent or the limitation of the use or disclosure of their personal data by writing to:
relacionespublicas@ahcancun.com
The request must state the name of the Data Subject, the means for receiving a response, the corresponding request and the information that allows the data to be located.
Revocation will not have retroactive effect and may be limited when there is a legal or contractual obligation or another legitimate reason that permits or requires continued processing.
IX. Image and Audiovisual Material
During events, meetings, training sessions and other institutional activities, photographs, videos and other audiovisual materials may be captured to document and promote the Association's activities through institutional media, the website, social media and other official channels.
When consent for such use is legally required, the corresponding mechanisms will be implemented.
X. Changes to This Notice
The Association may modify or update this Privacy Notice.
Changes will be published on the Association's official website and, where applicable, communicated through the available institutional channels.
The current version can be found at:
https://www.ahcancun.com/en/politica-de-privacidad
XI. Contact
For any questions, comments, ARCO requests, revocation of consent or matters related to the processing of personal data:
Personal Data Department
Email: relacionespublicas@ahcancun.com