OPERADORA HOTELERA BRISAS S.A. DE C.V. (hereinafter referred to as “OHB”), belonging to the group of companies known as GRUPO BRISAS, with address at Av. Universidad No. 1571, floor 3, colonia Florida, borough Álvaro Obregón, C.P. 01030, Mexico City, Federal District, Internet portal https://www.brisas.com.mx, is responsible for the use and protection of your personal data, and in this regard we inform you of the following:
Who is our corporate data protection director and how to contact him/her?
Our corporate data protection director is the person within OHB who has been formally appointed by our general director to promote and ensure the protection of the personal data in our possession, as well as to attend to the rights of the owners.
For everything related to the treatment and protection of your personal data, you can contact our corporate data protection director by sending an email to the following address: privacidaddatos.ohb@brisas.com.mx
For what purposes will we use your personal data?
The personal data we collect from you will be used for the following purposes that are necessary to provide you with our services:
- To reserve and/or register you for the services you request or contract at any of our hotels.
- To address any special needs you may have due to your health status or disabilities, by reserving or registering you for the services you request or contract at any of our hotels.
- To grant you memberships or day passes for use of the facilities at any of our hotels.
- To negotiate and develop preferential rate agreements.
- If you wish, register you for our rewards programs.
- Prepare your invoices and/or payment vouchers.
- Send you account statements.
- Address clarifications, complaints and queries.
- Make returns or refunds.
- Perform financial analysis of accounts receivable.
- Prepare and keep our customer database updated.
- In case of debt, carry out collection procedures.
- If applicable, manage or grant you credit.
- Video surveillance, for security reasons.
Additionally, we will use your personal information for the following secondary purposes that are not necessary to provide you with the requested services, but that allow us to provide you with better service and promote our services:
- Send you information about our hotels and the different seasonal offers.
- Send you promotions from our rewards programs.
- Customer satisfaction surveys (GSI).
- Marketing, advertising, commercial prospecting.
If you do not wish for your personal data to be processed for the secondary purposes indicated, or any of them, you can notify us of this from now on by sending an email to our corporate data protection director.
The refusal to use your personal data for these purposes may not be a reason for us to deny you the services you request or contract with us, and you have five business days to let us know, without prejudice to the fact that you subsequently decide to exercise your right of revocation or opposition.
What personal data will we use for these purposes?
In order to carry out the purposes described in this privacy notice, we will use the following categories of personal data: Identification; contact; financial and/or property; employment; health data, which are considered sensitive personal data. We inform you that before we collect your sensitive personal data, we will request your express written consent for this privacy notice.
With whom do we share your personal information and for what purposes?
We inform you that your personal data may be transferred within the country to the following individuals or legal entities, without legally requiring your consent:
- Authorities to whom we must do so by virtue of a law, in order to comply with the corresponding regulations.
- Authorities, when the transfer is necessary for the recognition, exercise or defense of a right in a judicial process.
- Doctors, paramedics or health service providers, in the event of an accident, medical emergency or health situation, in order to assist you.
- To companies that belong to our same corporate group (Brisas Group), which protect your personal data under our same internal policies and procedures, for the following purposes: (i) Provide you with the services you request; (ii) statistical information; (iii) commercial prospecting, advertising and marketing.
Likewise, Or, we may transfer your personal identification and contact information to the following individuals or legal entities, in which cases we do require your consent:
- Credit card payment processors, E-global and Prosa, in the event that they request your consumption data from us in order to clarify their charges. The purpose of the transfer is to assist these processors in making the clarification.
- Nearby hotels, to help you find accommodation, in the event that due to some eventuality beyond our control we are unable to honor your reservation (only the name is transferred).
- Electronic mailing companies, in order to send you information about our services and promotions by email.
- Companies in the hotel and marketing sector to promote our services.
If you do not express your refusal to make these transfers, which you can do by sending an email to our corporate data protection director, we will understand that you have given us your consent.
How can you access, rectify or cancel your personal data, or oppose its use?
You have the right to know what personal data we have about you, what we use it for and the conditions of use we give it (Access). Likewise, it is your right to request the correction of your personal information if it is outdated, inaccurate or incomplete (Rectification); that we delete it from our records or databases when you consider that it is not being used appropriately (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition) in the terms permitted by the applicable regulations. These rights are known as ARCO rights.
To exercise any of the ARCO rights, you may submit the respective request through an email addressed to our data protection coordinator, who will inform you about the procedure and requirements for the exercise of these rights, and will address any questions or comments you may have in this regard. Likewise, you can exercise your ARCO rights by requesting and filling out the corresponding form at the OHB reception desk, which is called “ARCO Rights Request”. Subsequently, our data protection coordinator will follow up on your request in compliance with the applicable regulations.
You can revoke the consent that you have given us, if applicable. However, it is important that you keep in mind that not in all cases will your request be admissible or we will be able to terminate the use immediately, since it is possible that due to some legal obligation we require to continue processing your personal data. You should consider that for certain purposes, the revocation of your consent will imply that we cannot continue providing you with the service you requested, or the conclusion of your relationship with us.
To revoke your consent, you must submit your request via email to our corporate data protection director, who will inform you about the procedure and requirements for exercising this right, and will address any questions or comments you may have in this regard. Likewise, you can exercise your right of revocation by requesting and filling out the corresponding form at the OHB reception desk, which is called “ARCO Rights Request”. Subsequently, our data protection coordinator will follow up on your request in compliance with the applicable regulations.
How can you limit the use or disclosure of your personal information?
In addition to the procedure contemplated in the immediately preceding section, you can limit the use or disclosure of your personal data in the following ways:
- Register in the Public Registry to Avoid Advertising of the Federal Consumer Protection Agency. For more information regarding this option, you can contact PROFECO directly or access the following link: http://rpc.profeco.gob.mx
- Send an email to our corporate data protection director requesting your registration in the “Grupo Brisas Advertising Exclusion List”, in order to not receive promotional information about our products and services.
What is the authority in charge of ensuring the protection of personal data?
The Federal Institute for Access to Information and Data Protection (IFAI) is the authority in charge of ensuring due observance of the legal provisions regarding the protection of personal data. For more information, you can consult the following website: www.ifai.gob.mx.
How can you find out about changes to this privacy notice?
This privacy notice may be subject to modifications, changes or updates derived from new legal requirements; our own needs; and We are committed to keeping you informed of any changes to this privacy notice through our website, which we ask you to visit frequently to learn about any changes that may have occurred in the privacy notice.
The procedure through which notifications about changes or updates to this privacy notice will be carried out is as follows: The current version of the privacy notice will be published on our website, with the date of the most recent update, and this updated version can be consulted by accessing the following link: https://www.brisas.com.mx/aviso-de-privacidad.
Date of the most recent update: 12-11-2015.