Privacy Policy & Site Security

We appreciate your confidence in us and promise that personal information entrusted to us is protected to the best of our ability. The personal information that you provide us shall be treated in keeping with the provisions stipulated in this Privacy Notice and according to the Mexican Federal Law for Protection of Personal Data held by Private Persons http://www.ifai.gob.mx/.

The following companies, hereinafter referred to as El Cid, are companies committed to the protection of your privacy:

Hoteles El Cid Mazatlán, S.A. de C.V., located at: Av. Camarón Sábalo S/N, C.P. 82110, Mazatlán Sinaloa, México
Operadora Turística El Cid Riviera Maya, S.A. de C.V., located at: Blvd. El Cid, Mza 20, Lote 1-01, Unidad 15 Colonia SM 03, Puerto Morelos, Quintana Roo, Mexico
Desarrolladora e Inmobiliaria Turística Cozumel, S.A. de C.V., located at: Carretera a Chankanaab Km. 4.5 Zona Hotelera Sur, C.P. 77600, Cozumel, Quintana Roo, Mexico
El Cid Vacations Club, S.A. de C.V., located at: Carretera a Chankanaab Km. 4.5 Zona Hotelera Sur, C.P. 77600, Cozumel, Quintana Roo, Mexico
Desarrolladora e Inmobiliaria Náutica El Cid, S.A. de C.V., located at: Circuito el Campeador 1 Altos, Fracc. El Cid Mazatlán Sinaloa, Mexico C.P. 82110
Nucompanies S.A. de C.V., located at: Carretera a Chankanaab Km. 4.5 Zona Hotelera Sur, C.P. 77600, Cozumel, Quintana Roo, Mexico
Promotours del Noroeste S.A. de C.V., located at: Av. Camarón Sábalo S/N Centro Comercial El Cid Local 18, Zona Dorada, Mazatlán Sinaloa, Mexico C.P. 82110

El Cid is responsible for the personal information that it collects, as described below, in terms of individuals' right to privacy and information self-determination, in compliance with the provisions of the Protection of Personal Information in the Mexican Possession of Private Entities Law (Ley de Protección de Datos Personales en Posesión de Particulares) and its regulations, heeding the principles of lawfulness, consent, information, quality, purpose, fairness, proportionality, and responsibility. (http://www.diputados.gob.mx/LeyesBiblio/pdf/LFPDPPP.pdf)

Available Methods of Communication

El Cid has appointed a multidisciplinary technical committee for the protection of personal information, which, under its control, must comply and ensure compliance within the organization and its subsidiaries with the Federal Protection of Personal Information in the Possession of Private Entities Law, as well as its regulations, and, therefore, provides individuals with the following contact information, where we will receive any request to restrict the use or disclosure of their personal information, explanations or complaints.
Email address: datapermission@elcid.com.mx
Address: Av. Camarón Sábalo S/N, C.P. 82110 Mazatlan Sinaloa Mexico

Administrative, physical, and technical security measures have been established and are maintained for processing personal information, which ensures the integrity of the personal information, bearing in mind the existing risks, consequences for individuals, type of information, and technological development. These measures are consistent with to those used for the information of the organization.

PERSONAL INFORMATION

El Cid collects and processes the following personal information in a lawful manner:
Name, Address, Telephone, Email, Photo, Credit Card Information, Date of Birth (only for Vacations Club) and Marital Status (only for Vacations Club) as well as Likes and Preferences.
Provided you make no direct objection at the time that you provide us with your personal information or do not state your objection subsequently using our aforementioned methods, you may simply send us a letter expressing your desire to revoke the consent granted to us at any time. Upon request to revoke consent your data will be removed from our and our partners' databases.
In accordance with Art. 40, 41 and 42 of the regulations, the above personal information will be used for the following purposes, which are necessary for establishing the legal relationship with the organization.

Objectives

Personal information given to us will be used by El Cid to provide the services requested by you, such as: reservations, purchase of vacation packages, membership in vacation clubs, registration in any loyalty program, and any other transaction related to the general provision of commercial and tourism services, or the sale of any of their products.
El Cid may use the personal information that you provide to offer you better service, and if applicable, identify your preferences during your stay, making it more pleasant.
El Cid may also use the information to offer you promotions and commercial and tourism products in general, as well as any other related product or service, including but not limited to, the delivery of promotions, special services, information brochures, surveys, and other products and services from El Cid.
El Cid, in the case of the Vacation Club, may share with or transmit the information to their affiliated companies and/or third parties, for the sole purpose of executing tasks that El Cid has instructed them to carry out.
El Cid may use the information provided to bill you for our products and services; reservations, room service and collect outstanding debts accrued in the course of your stay such as upgrades, use of amenities that are not provided free of charge.
El Cid may share your information to assist in the investigation of a contravention of law and in the case the information acts in respect of an emergency that threatens the life, health, or security of an individual.

The abovementioned personal information may be transferred and handled by the abovementioned third parties, but only for the Vacation Club members. All of the purposes mentioned are contained in Art. 37 of the law, so it is not necessary to obtain consent for its transfer:

Third-Party / Data Processor Objective

ResortCom International, LLC Payment operator for overseas Vacation Club contracts with financing
Resort Condominiums International de Mexico, S. de R.L. de C.V. Payment services for maintenance fees and reservations
Wyndham Vacation Resorts, Inc. Administration of exchange programs for timeshare owners
International Cruise & Excursions, Inc. Points-based vacation services programs
Sabre Hospitality Solutions To complete transactions for hotel bookings
E-Travel Solutions To complete transactions for hotel bookings

Using the method provided in the section "AVAILABLE METHODS OF COMMUNICATION," we will kindly accept your request not to process your personal information. Details regarding the use of the abovementioned personal information may be provided at the request of the individual, using the mechanisms for exercising ARCO rights set forth below, in the section of the same name.

Detailed information regarding natural or legal persons to whom personal information is transferred, may be provided at the request of the individual, using the mechanisms set forth for exercising ARCO rights.

Sensitive Personal Information

El Cid does not collect sensitive personal information.

Retention Periods

El Cid will cancel and remove personal information after blocking it, once the purpose that justified the processing of this information has been completed unless specific contract terms supersede this language.
Personal information will not be canceled when the stipulations of Articles 26 and 34 of the Law are applicable.

EXERCISE OF ARCO RIGHTS

We will gladly grant the request received from the individual or his/her legal representative to exercise his/her Access, Correction, Cancellation, or Opposition (Acceso, Rectificación, Cancelación, u Oposición, ARCO) rights regarding his/her personal information in the possession of El Cid.

We will receive the request with the following information in a physical or electronic document, using the methods set forth in the section "AVAILABLE METHOD OF COMMUNICATION," in the first part of this notice.

Name and address, as well as any other additional information that may be used to contact you.
Identification documents.
Brief and clear description of the rights that you wish to exercise, as well as the personal information involved.
If the correction of personal information is requested, you must provide supporting documentation for the request.
Response to legal requirements
The response to your request will be sent to you within the periods set forth by Law, ( 35 days after the request has been received) provided that it does not fall under the exceptions stipulated in Article 26 of the law and 75 of the regulations.

KNOWLEDGE AND CONSENT

We collect personal information about you only when you voluntarily provide it. Usually, we will seek consent for the use or disclosure of your personal information at the time of collection. In particular circumstances, consent may be sought after the information has been collected but before use (for example, when we want to use information for a purpose not previously identified).

The form of consent that we seek, including whether it is express or implied, will largely depend on the sensitivity of the personal information and the reasonable expectations of the individual in the circumstances.

We will not, as a condition of the supply of a product or service, require you to consent to the collection, use or disclosure of information beyond that required to fulfill the explicitly specified and legitimate purposes for which the information is being provided.

In accordance with Article 21 of the regulations, you may revoke the consent granted to us at any time for the processing of your personal information so that we will stop using them and not transfer the information using the mechanisms provided in this document.

You must also send us your request using the methods mentioned in this notice and it must be accompanied by the following information:

Name and address, as well as any other additional information that may be used to contact you.
Identification documents.

USE OR DISCLOSURE FOR MARKETING PURPOSES

If you have not opted out of receiving marketing materials, we may also use (but will not disclose) your personal information to promote and market additional goods, services and special offers from us, our affiliates and/or our business associates, including by means of direct marketing. If you have provided your consent for us to do so, we may also disclose your personal information (including name, mailing address and e-mail address) to these affiliates and/or third-party business associates so that they can send you promotional materials directly.

You can select to not allow us to use or disclose your personal information for direct marketing purposes by indicating your preference on our website/hotel registration form or by contacting us as outlined below (see “Contact Us”).

COOKIE POLICY

Our website visitors should be aware that information and data is automatically collected for advertising reasons through the standard operation of our internet servers and using “cookies”, the information collected in such ways is not personal information.

Cookies are small text files a website can use to recognize repeat users, facilitate the user’s ongoing access to and use of the site and allow a site to track usage behavior and compile aggregate data that will allow content improvements and targeted advertising. Cookies are not programs that come onto a system and damage files.

Generally, cookies work by assigning a unique number to each customer that has no meaning outside the assigning site. If you do not want information collected using cookies, there is a simple procedure in most browsers that allow a customer to deny or accept the cookies feature; however, you should note that cookies may be necessary to provide customers with certain features (e.g., customized delivery of information) available on the website.

Deleting and/or Blocking Cookies

If you choose to opt-out of cookies collecting your website usage information pertaining to this site, there are options users can take to delete or block cookies.

Browser Settings

Most browsers are set to accept cookies by default. However, you can customize your browser settings to:

Accept all cookies
Always block cookies, or
Choose which cookies to accept based on their senders.

Users can set their browsers to accept or block cookies on a case-by-case basis before they are installed. Your browser also allows you to regularly delete cookies from your device. Browser configurations will need to be made on all browsers for all your devices (smartphones, tablets, laptops, etc.).

To manage cookies and preferences, users will need to configure settings that are specific to each browser. To see how to configure your browser's cookie settings, view their respective link:

Cookie management is dependent on the user, who can exercise their preferences at any time through browser settings on their device. Keep in mind that if your browser is set to block cookies, some features, pages, and space on https://www.elcid.com/ and its respective individual resort websites will not be accessible, and we cannot be held responsible in this case.

Specialized Advertising Platforms

Many professional advertising platforms give website users the option to accept or block cookies used by companies that are members. These centralized mechanisms do not block the display of ads, rather, they prevent the installation of cookies that customize ads to the user's interests.

AMENDMENTS TO THE PRIVACY NOTICE

We reserve the right to amend or update this Privacy Notice, at any time, in compliance with new legislation, internal policies, or new requirements for the provision or offering of our services or products.

These amendments will be made available to the public through the means described in this document in the section "DECLARATION OF THE DATA CONTROLLER AND AVAILABLE METHODS OF COMMUNICATION," and on our webpage: http://www.elcid.com/

GLOSSARY

Blocking: The identification and storage of personal information once the purpose for which they were collected has been completed, for the sole purpose of assigning responsibilities for their processing, until the expiration of the statutory or contractual limitations period. During this period, the personal information shall not be processed and once this period has passed, the information will be canceled in the corresponding database.
Consent: Declaration of the will of the individual, whereby the information will be processed.
Data Controller: Private natural or legal person who makes decisions regarding the processing of personal information.
Data Processor: The natural or legal person who alone, or with others, processes personal information on behalf of the Data Controller.
Databases: The orderly arrangement of personal information referring to an identified or identifiable person.
Individual: The natural person who owns the personal information.
Law: Federal Protection of Personal Information in the Possession of Private Entities Law.
Personal information: Any information regarding a natural identified or identifiable person.
Privacy Notice: Physical, electronic, any other type of document generated by the Data Controller, made available to the individual, prior to the processing of his/her personal information, in accordance with Article 15 of this Law.
Processing: The acquisition, use, disclosure, or storage of personal information, by any means. Its use includes any action of access, handling, use, transfer, or disposal of personal information.
Public-access source: Those databases that may be consulted by any person, with only, if necessary, the payment of a consideration, in keeping with the stipulations in the regulations of this Law.
Sensitive personal information: Personal information that affects the most private sphere of the individual, or whose inappropriate use may give rise to discrimination or put him/her at serious risk. In particular, information will be regarded as sensitive if it reveals aspects such as racial or ethnic origin, current, and future health status, genetic information, religious, philosophical and moral beliefs, trade union affiliation, political views, and sexual preference.
Third party: The natural or legal person, national or foreign, other than the Individual or the Data Controller.
Transfer: Any transmission of information to a person other than the Data Controller or Data Processor.

CONTACT US

If you have any questions about this Privacy Statement or if you have reason to believe that we may have failed to adhere to this Privacy Statement, you may contact the hotel and ask for the General Manager.