OPERADORA DECORI BINNIGUENDA S.A. DE C.V. (hereinafter “Nirú Suites Huatulco”), part of the group of companies known as Decori, located at Blvd. Santa Cruz 201, Santa Cruz Huatulco, Bahías de Huatulco, in the municipality of Santa María Huatulco, Postal Code 70989, State of Oaxaca, Oaxaca, Mexico, website: https://www.nirusuiteshuatulco.com, is responsible for the use and protection of your personal data. We hereby provide you with the following information:

Our Data Protection Coordinator is the individual within Nirú Suites Huatulco who has been officially appointed by our General Manager to promote and ensure the protection of the personal data in our possession, as well as to address the rights of the data owners.

For any matters related to the processing and protection of your personal data, you may contact our Data Protection Coordinator by sending an email to: privacidaddatos@binniguendahuatulco.com.mx.

Nirú Suites Huatulco reserves the right to modify its Privacy Policies at any time. The hotel will publish notices about any such changes on its website.

Nirú Suites Huatulco is committed to the security of all its guests’ information. Your personal information is treated confidentially to ensure it is not used without your knowledge or in ways with which you do not agree. The data you provide to Nirú Suites Huatulco, such as your name, email address, and phone number, will only be used for the purpose indicated by you at the end of the information request. The personal data we collect from you will be used for the following purposes necessary to provide our services:

• To reserve and/or register you and provide you with the services you request or contract.
• To provide you with accommodation and/or food and beverage services.
• To make our facilities and services available to you for meetings, weddings, banquets, or events.
• To issue day passes for the exclusive use of our facilities.
• To provide a complimentary safe deposit service.
• To assist you in requesting taxi services.
• To address any special needs you may have due to your health condition or disabilities.
• To enroll you in our promotional programs, should you so desire.
• Where applicable, to provide immediate cash advances for extraordinary payments to third parties, charged to your account (“paid out”).
• To handle any requests for lost-and-found items.
• To track and bill the services and consumptions you incur.
• To develop and keep our client database up to date.
• To prepare your invoices and/or payment receipts.
• To send you account statements.
• To address clarifications, complaints, or inquiries.
• To process refunds or returns.
• To conduct financial analysis of outstanding accounts.
• In the event of unpaid balances, to carry out collection procedures.
• Where applicable, to draw up contracts or agreements for negotiated rates with deferred payments or a set payment date.
• To implement video surveillance for security purposes.

Additionally, we may use your personal information for the following secondary purposes, which are not necessary to provide the requested services but allow us to offer you better service and to promote our services:

• To send you information about Nirú Suites Huatulco and/or other hotels belonging to the Decori Group, as well as various seasonal offers.
• To send you promotions for our packages.
• To conduct surveys to evaluate your satisfaction and the quality of our services.
• Marketing, advertising, and commercial prospecting.

Nirú Suites Huatulco does not sell, rent, or share your personal information with third parties. Nor is it used for unauthorized commercial purposes. You may request to be removed from our database at any time.

If you do not wish your personal data to be processed for the aforementioned secondary purposes, in whole or in part, you can let us know by sending an email to our Data Protection Coordinator.

Refusing the use of your personal data for these purposes cannot be used as a reason to deny you the services you request or contract with us. You have five business days to inform us of your decision, without prejudice to your subsequent right to revoke or object to the use of your data.

Which personal data do we use for these purposes?

In order to carry out the objectives described in this privacy notice, we may collect the following categories of personal data: identification; contact; financial and/or property data; employment data; and health data, which are considered sensitive information. Please note that prior to collecting your sensitive data, we will request your explicit, written consent in accordance with this privacy notice.

With whom do we share your personal data, and for what purposes?

We would like to inform you that your personal data may be transferred within the country to the following individuals or entities, without requiring your legal consent:

• Authorities to which we must disclose such information by law, in order to comply with the relevant regulations.
• Authorities when the transfer is necessary for the recognition, exercise, or defense of a right in judicial proceedings.
• Physicians, paramedics, or healthcare providers in the event of any accident, medical emergency, or health situation, so that you can receive assistance.
• Companies within our corporate group (Decori Group), which protect your personal data under the same internal policies and procedures, for the following purposes: (i) to provide you with the requested services; (ii) to compile statistical information; (iii) for commercial prospecting, advertising, and marketing.

We may also transfer your identification and contact data to the following individuals or entities, for which we do need your consent:

• Credit card payment processors (E-global and Prosa), in the event they request data about your charges due to a dispute about your charges. The purpose of this transfer is to assist them in resolving the dispute.
• Nearby hotels, in order to help you find accommodations in case we are unable to honor your reservation for reasons beyond our control (only your name is transferred).
• Email service providers, so that we can send you information about our services and promotions by email.
• Companies in the hotel and marketing industries, in order to promote our services.

If you do not indicate your refusal to allow such transfers—which you can do by sending an email to our Data Protection Coordinator—we will assume that you have granted your consent.

How can you access, correct, or delete your personal data, or object to its use?

You have the right to know which personal data we hold about you, how we use it, and under what conditions (right of Access). You also have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to request its deletion from our records or databases when you believe it is being improperly used (Deletion); and to object to the use of your personal data for specific purposes (Objection), as permitted by applicable law. These are known as “ARCO” rights.

To exercise any of these ARCO rights, you may submit a request by email to our Data Protection Coordinator, who will inform you about the procedure and requirements for exercising these rights, and will address any questions or comments you may have. Similarly, you can exercise your ARCO rights by requesting and filling out the corresponding form at the reception desk of Nirú Suites Huatulco, called the “ARCO Rights Request.” Our Data Protection Coordinator will then follow up on your request in accordance with applicable regulations.

You may revoke the consent you have given us. However, please be aware that your request may not always be feasible or that we may not be able to immediately end the use of your data if a legal obligation requires us to continue processing it. Also note that, for certain purposes, revoking your consent will mean we can no longer provide the service you requested, effectively ending your relationship with us.

To revoke your consent, you must submit your request via email to our Data Protection Coordinator, who will inform you of the procedure and requirements for exercising this right, and will address any questions or comments you may have. You can also exercise your right of revocation by requesting and completing the corresponding form at the reception desk (referred to as the “ARCO Rights Request”). Our Data Protection Coordinator will then process your request in compliance with applicable regulations.

How can you limit the use or disclosure of your personal information?

In addition to the procedure outlined in the previous section, you can limit the use or disclosure of your personal data in the following ways:

• Register with the Public Registry to Avoid Advertising (Registro Público para Evitar Publicidad) of the Federal Consumer Protection Agency (PROFECO). For more information regarding this option, you can contact PROFECO directly or visit: https://www.gob.mx/profeco.
• Send an email to our Data Protection Coordinator requesting your inclusion in the “Nirú Suites Huatulco Advertising Exclusion List,” to stop receiving promotional information about our products and services.

Which authority is responsible for personal data protection?

The Federal Institute for Information Access and Data Protection (IFAI) is the authority responsible for ensuring compliance with the legal provisions on personal data protection. For more information, you can visit: https://home.inai.org.mx/.

How can you learn of changes to this privacy notice?

This privacy notice may undergo modifications, changes, or updates due to new legal requirements; our own needs for the products or services we offer; our privacy practices; changes in our business model; or other reasons.

We are committed to keeping you informed about any changes to this privacy notice through our website, which we encourage you to visit frequently to see the latest updates to the privacy notice.

The procedure for notifying changes or updates to this privacy notice is as follows: we will post the current version of the privacy notice on our website, with the date of the most recent update. You can access the updated version at the following link: https://www.nirusuiteshuatulco.com/terminos

Secure Reservations

To make an online reservation through the official website www.NiruSuitesHuatulco.com, you will be redirected to a reservation interface. All information you submit to this site is protected and encrypted by specialized software to prevent disclosure to third parties.

All guest information is restricted within our offices and to the staff of the appropriate department. Only personnel who need this information to perform their duties have access to our guests’ personally identifiable information.

Links to Other Websites

Nirú Suites Huatulco may provide links to other websites that may offer information and services of interest to our guests. However, those sites may not have the same privacy policies as our hotel. Therefore, we are not responsible for the privacy policies or actions of third parties.

We encourage you to review the online policies of any websites linked from the official Nirú Suites Huatulco page to understand their data collection practices before submitting any personal information or other data.