Casa Santo Origen

Privacy Notice

“Hotel Casa Santo Origen”, with address at Calle Huajal No. 100, San Felipe del Agua, Oaxaca, Mexico, C.P. 68026, website https://hotelcasasantoorigen.com/, is responsible for the use and protection of your personal data, and hereby informs you of the following:

Who is our data protection officer and how can you contact them?

Our data protection officer is the person within Hotel Casa Santo Origen formally appointed by our general director to promote and safeguard the protection of the personal data in our possession, as well as to handle the rights of data subjects.

For anything related to the processing and protection of your personal data, you may contact our data protection officer by email at: [email to be defined].

What will we use your personal data for?

The personal data we collect from you will be used for the following purposes, which are necessary to provide our services:

To book and/or register you and provide the services you request or contract.
To provide accommodation and/or food and beverage services.
To make our facilities and services available for meetings, weddings, banquets or events.
To grant memberships or day passes for exclusive use of our facilities.
To provide the complimentary safe deposit box service.
To provide parking services.
To assist you in arranging taxi services.
To address any special needs arising from your health condition or disabilities.
If you wish, to enroll you in our rewards programs and apply points to your account.
Where applicable, to provide immediate cash advances for extraordinary third-party payments charged to your account (“paid out”).
To handle lost and found requests.
To track and charge for the services and consumption you incur.
To build and keep our customer database up to date.
To issue your invoices and/or payment receipts.
To send you account statements.
To handle clarifications, complaints and enquiries.
To process returns or refunds.
To carry out financial analysis of accounts receivable.
In the event of outstanding balances, to carry out collection procedures.
Where applicable, to draw up contracts or agreements for negotiated rates with deferred payments or billing dates.
Video surveillance, for security reasons.

Additionally, we will use your personal information for the following secondary purposes, which are not necessary to provide the requested services but allow us to offer better service and promote our offerings:

To send you information about Hotel Casa Santo Origen and/or the hotels belonging to Grupo Brisas, as well as seasonal offers.
To send you promotions from our rewards programs.
To conduct surveys assessing your satisfaction and the quality of our services.
Marketing, advertising and commercial prospecting.

If you do not wish your personal data to be processed for the secondary purposes indicated, or any of them, you may inform us at any time by emailing our data protection officer.

Refusing the use of your personal data for these purposes may not be grounds for us to deny the services you request or contract with us. You have five business days to notify us, without prejudice to later exercising your right of revocation or objection.

What personal data will we use for these purposes?

To carry out the purposes described in this privacy notice, we will use the following categories of personal data: identification; contact; financial and/or asset data; employment data; and health data, which is considered sensitive personal data. Before collecting your sensitive personal data, we will request your express written consent to this privacy notice.

With whom do we share your personal information and for what purposes?

We inform you that your personal data may be transferred within the country to the following individuals or legal entities without your consent being legally required:

Authorities to which we are required to transfer data by law, in order to comply with applicable regulations.
Authorities, when the transfer is necessary for the recognition, exercise or defense of a right in judicial proceedings.
Doctors, paramedics or healthcare providers, in the event of an accident, medical emergency or health situation, in order to assist you.

We may also transfer your identification and contact data to the following individuals or legal entities, for which we do require your consent:

Credit card payment processors, E-global and Prosa, should they request data on your charges in connection with a billing clarification. The purpose of the transfer is to assist those processors in resolving it.
Nearby hotels, to help you find accommodation should an event beyond our control prevent us from honoring your reservation (only your name is transferred).
Email delivery companies, in order to send you information about our services and promotions by email.
Companies in the hospitality and marketing sectors, to promote our services.

If you do not object to these transfers, which you may do by emailing our data protection officer, we will understand that you have granted your consent.

How can you access, rectify or cancel your personal data, or object to its use?

You have the right to know what personal data we hold about you, what we use it for and the conditions of that use (Access). You also have the right to request the correction of your personal information if it is outdated, inaccurate or incomplete (Rectification); to have it removed from our records or databases when you consider it is not being used appropriately (Cancellation); and to object to the use of your personal data for specific purposes (Objection), under the terms permitted by applicable regulations. These are known as ARCO rights.

To exercise any of the ARCO rights, you may submit the corresponding request by email to our data protection officer, who will inform you of the procedure and requirements and will address any questions or comments you may have. You may also exercise your ARCO rights by requesting and completing the relevant form at the front desk of Hotel Casa Santo Origen, called the “ARCO Rights Request”. Our data protection officer will then follow up on your request in compliance with applicable regulations.

You may revoke any consent you have granted us. However, please note that not in every case will your request be admissible, nor will we always be able to end the use immediately, since a legal obligation may require us to continue processing your personal data. Please also consider that, for certain purposes, revoking your consent may mean we can no longer provide the service you requested, or that your relationship with us comes to an end.

To revoke your consent, you must submit your request by email to our data protection officer, who will inform you of the procedure and requirements for exercising this right and will address any questions or comments you may have.

How can you limit the use or disclosure of your personal information?

In addition to the procedure described in the previous section, you may limit the use or disclosure of your personal data in the following ways:

Register with the Public Registry to Avoid Advertising (Registro Público para Evitar Publicidad) of the Federal Consumer Protection Agency. For more information about this option, you may contact PROFECO directly or visit: rpc.profeco.gob.mx.
Send an email to our data protection officer requesting to be added to the “Grupo Brisas Advertising Exclusion List”, in order to stop receiving promotional information about our products and services.

Which authority oversees the protection of personal data?

The National Institute for Transparency, Access to Information and Personal Data Protection (INAI, formerly IFAI) is the authority in charge of overseeing compliance with the legal provisions on personal data protection.

How will you be informed of changes to this privacy notice?

This privacy notice may be amended, changed or updated as a result of new legal requirements; our own needs regarding the products or services we offer; our privacy practices; changes to our business model; or other causes.

We undertake to keep you informed of any changes to this privacy notice through our website, which we ask you to visit regularly.

Notifications about changes or updates to this privacy notice will be handled as follows: the current version of the privacy notice will be published on our website, showing the date it was last updated, and can be consulted at: hotelcasasantoorigen.com/en/privacy-policy.

Last updated: June 3, 2021