COMPREHENSIVE PRIVACY NOTICE

Turística Ráfaga SA de CV (“Hotel Handall Cancún”)

1) Identity and address of the responsible party

Turística Ráfaga SA de CV, with address at Av. Tulúm Supermanzana 20, Manzana 1, Lote 4-9, CP 77500, Cancún, Quintana Roo, Mexico, email: privacidad@hotelhandall.com, telephone: 9988845731.

2) Personal data that we process

  • Identification: name, date of birth, nationality.

  • Contact: phone, email.

  • Accommodation: arrival and departure dates, companions, preferences.

  • Billing: RFC, tax address, company name.

  • Payments: form and means of payment, necessary financial/asset data.

  • CCTV images in common areas.

  • Browsing data/cookies when you use our website.

  • If sensitive data is collected (e.g., health or accessibility data), we will ask for your express written consent.

    • 3) Purposes of the processing

  • Primary (necessary): managing reservations (web, telephone, OTAs), guest registration (check-in/check-out), collections and billing, security and CCTV, fraud prevention, compliance with legal and tax obligations.

  • Secondary (optional): marketing and commercial prospecting, sending promotions, satisfaction surveys, development of consumer profiles.

    • You can object at any time to the use for secondary purposes by sending an email to privacy@hotelhandall.com.

    4) Options to limit use or disclosure

    You can register on our exclusion list or with PROFECO's Public Registry to Avoid Advertising (REPEP). You can also disable cookies in your browser settings or in our Preference Center.

    5) Data transfers and transmissions

  • Referrals to suppliers acting on behalf of the Hotel, under a confidentiality and security agreement (including our PMS Zavia, payment gateways, mailing services, hosting, information protection, accounting and CCTV).

  • National and international transfers to:

  • OTAs (Booking, Expedia, Airbnb, etc.) to manage your booking.

  • Competent authorities when required by law.

  • Companies within the same corporate group, for administrative and compliance purposes.

    • In other cases we will ask for your explicit consent.

    6) Security measures

    We implement administrative, technical, and physical safeguards to protect your data. In the event of a breach that significantly affects your rights, we will notify you immediately.

    7) Conservation

    We will retain your data for as long as necessary to fulfill the purposes and legal requirements. Data relating to breaches of contract will be deleted after 72 months.

    8) ARCO Rights

    You can exercise your rights of Access, Rectification, Cancellation or Opposition by sending a request to privacidad@hotelhandall.com or to the address indicated above.

    The application must contain:

  • Name and address or email for notifications.

  • Documents that prove identity.

  • Clear description of the right to exercise and details about it.

    • Timeframes: response within 20 business days; if applicable, execution within 15 business days.

    9) Revocation of consent

    You can withdraw your consent at any time by sending a request to the same email address. The withdrawal will not have retroactive effect.

    10) Cookies and technologies

    Our site uses cookies for functionality, statistics, and marketing. You can manage them in the cookie banner or in your browser settings.

    11) Changes to the notice

    Any changes will be posted at hotelhandall.com/privacy. For substantial changes, we will notify you by email or at reception.

    12) Consent

  • Financial/asset and sensitive data: require express consent.

  • Secondary purposes and additional transfers: your express acceptance or rejection will be requested.