Operadora Gention, S.A.de C.V., (hereinafter referred to as “Hotel Nickelodeon Riviera Maya and Aqua Nick Riviera Maya”), with address at Carretera Cancún – Playa del Carmen, Km 45 Muchim, Col. Carretera Federal Cancún Playa, Localidad Playa del Carmen, Municipio Solidaridad, Quintana Roo, C.P. 77710, for purposes of receiving notices related to this Privacy Notice, is responsible for the use, processing, and protection of your personal data in accordance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (the “Law”) and other applicable regulations, and hereby makes this Privacy Notice available to you.
1. Personal Data Subject to Processing
In accordance with the Law, the processing of personal data will be carried out under the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality, and accountability. Hotel Nickelodeon Riviera Maya and Aqua Nick Riviera Maya will only collect and process personal data that is necessary, adequate, and relevant for the fulfillment of the purposes described in this Privacy Notice.
Administrative, technical, and physical security measures will be adopted to ensure the confidentiality, integrity, and availability of the information, as well as to prevent damage, loss, alteration, misuse, unauthorized access, or unlawful disclosure.
Personal data that may be collected includes:
The processing of sensitive data will be carried out with reinforced security measures and only with your express consent, except as otherwise provided by the Law.
2. Purposes of Processing
In compliance with the Law, the personal data we collect will be processed only for purposes that are necessary, adequate, and relevant in connection with the relationship you maintain or may maintain with Hotel Nickelodeon Riviera Maya and Aqua Nick Riviera Maya.
For transparency, these purposes are classified as primary purposes, which are essential for the fulfillment of the legal relationship and corresponding obligations, and secondary purposes, which involve additional or complementary uses for which you may express your refusal at any time.
Note: Should you wish to object to the use of your personal data for secondary purposes, you may do so by sending an email to webmaster@lomas-travel.com or by calling +52 998 528 0555. The entity responsible for the processing and protection of your personal data is Operadora Gention, S.A. de C.V., through its Personal Data Department, located at the address indicated above.
3. Transfer of Personal Data
In compliance with the Law, we inform you that your personal data may be transferred, within and outside the country, to third parties other than the data controller, only when such transfers are necessary to comply with a legal relationship, to meet legal provisions, or upon request of a competent authority. In all cases, the recipients of the data will be required to assume the same obligations of security and confidentiality as the data controller, and their use will be strictly limited to the purposes that justify the transfer.
Your data may be transferred in the following cases:
| Recipient | Purpose |
|---|---|
| Tax, health, judicial, or immigration authorities | To comply with legal, tax, regulatory, health, and immigration provisions in Mexico or in the guest’s country of origin/residence. |
| National or foreign banking institutions and payment processors | To process charges, deposits, refunds, and payments related to reservations, stays, or contracted services. |
| Tourism, hotel, or transportation service providers in Mexico or abroad | To manage reservations, tours, transfers, activities, and additional services requested by the guest. |
| National or international medical service providers or insurance companies To provide medical assistance, travel insurance, or emergency coverage during the stay. | To provide medical assistance, travel insurance, or emergency coverage during the stay. |
| Affiliates, subsidiaries, or related Vacation Club entities in Mexico or abroad | To centralize guest information and standardize reservation processes, benefit programs, and service standards. |
In cases where the transfer of personal data does not fall under the exceptions provided by the Law (Articles 35 and 36), we will obtain your express consent in advance. For this purpose, the following acceptance clause is available:
☐ I consent to the transfer of my personal data under the terms described in this Privacy Notice.
☐ I do not consent to the transfer of my personal data under the terms described in this Privacy Notice.
4. ARCO Rights
You have the right to Access the personal data we hold about you and to know the details of its processing; to Rectify your information if it is outdated, inaccurate, or incomplete; to Cancel your data when you consider that it is not required for the purposes stated, is being misused, or when the legal relationship that justified its processing has ended; and to Object to the processing of your personal data for specific purposes. These rights are collectively known as ARCO Rights.
The data subject or their legal representative may request the exercise of ARCO Rights with respect to their personal data at any time. The request must contain and be accompanied by the following:
Once the request is received, we may request additional information within the first five business days, and you will have ten business days to respond to such request. A response will be provided within a maximum of twenty business days from receipt of the request, and, if applicable, it will be enforced within the following fifteen business days. Where necessary, these deadlines may be extended once under the terms permitted by the Law.
Contact information for exercising ARCO Rights:
5. Revocation of Consent
Revocation of Consent
You may revoke, at any time, the consent you have granted us for the processing of your personal data. However, please note that we may not always be able to fulfill your request immediately or cease the use of your data entirely, as we may be required to continue processing due to legal obligations or an existing legal relationship.
The revocation of consent may be requested through the contact methods indicated in this Privacy Notice. Once your request is received, we may require additional information within five business days, and you will have ten business days to respond. A resolution will be provided within a maximum of twenty business days from receipt of the request, and, if applicable, it will be enforced within the following fifteen business days. Where necessary, deadlines may be extended once under the terms established by the Law.
Contact information for exercising Revocation of Consent:
6. Options to Limit Use or Disclosure
In addition to ARCO Rights and revocation of consent, you may limit the use or disclosure of your personal data through the mechanisms made available by the data controller. These options include the possibility of enrolling in internal exclusion lists managed by the data controller, as well as registering your telephone number in the Public Registry to Avoid Advertising (REPEP) managed by the Federal Consumer Protection Agency (PROFECO), available at www.gob.mx/profeco.
For further information regarding these mechanisms and procedures, you may contact the Personal Data Department using the contact details provided in this Privacy Notice.
7. Security Measures
The Company informs you that it has implemented and maintains administrative, technical, and physical security measures designed to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or disclosure. Such measures take into account the nature of the data processed, the risks associated with its handling, and the available technological developments, ensuring the confidentiality, integrity, and availability of information at all times.
Internal privacy and security policies have also been established, which are mandatory for all personnel with access to personal data, as well as contractual clauses with third-party processors, in order to ensure that processing is always carried out under adequate protection standards and in compliance with the Law.
8. Changes to this Privacy Notice
This Privacy Notice may be modified due to legal changes, internal policies, or service updates. Modifications will be made available through the official website of Hotel Nickelodeon Riviera Maya and Aqua Nick Riviera Maya, where the most current version of this Privacy Notice will always be accessible: https://www.aquanickrivieramaya.com/es
9. Authority
If you believe that your data protection rights have been violated by the data controller (e.g., failure to respond to ARCO requests, incomplete or unsatisfactory response), you may file a complaint with the Secretariat of Anti-Corruption and Good Governance (SABG), which currently serves as the competent authority in matters of personal data protection.
For more information regarding this procedure, as well as the applicable requirements and deadlines, you may consult the relevant regulations or the official channels of this Secretariat.
10. Contact Information of the Personal Data Department
For any questions about the content of this Privacy Notice, as well as for the exercise of ARCO Rights, revocation of consent, limitation of use or disclosure of personal data, or any other matter related to the processing of your information, you may contact the Personal Data Department through the following means:
11. Acceptance
The use of our services implies that you have read, understood, and accepted the terms of this Privacy Notice.
