Live chat software PRIVACY NOTICE FOR “CLIENTS” (GDPR) | All-Inclusive Caribbean Vacation Packages | Palace Resorts®
x

x

Age:
Age:
Age:
Age:
Age:

PRIVACY NOTICE
FOR “CLIENTS” (GDPR)

In accordance with the provisions of article 3.2 and other applicable provisions of the General Data Protection Regulation of the European Union (hereinafter, GDPR), we present to individuals residing in the specified countries with the following information concerning the processing and protection of the personal data thereof.

This information and the legal effects thereof shall precisely be applicable to individuals residing in the following countries:

Germany

Austria

Belgium

Bulgaria

Cyprus

Croatia

Denmark

Slovakia

Slovenia

Spain

Estonia

Finland

France

Greece

Hungary

Ireland

Italy

Latvia

Lithuania

Luxembourg

Malta

Netherlands

Poland

Portugal

United Kingdom

Czech Republic

Romania

Sweden

 

Identity and contact data of Data Controller
Hotelera Palace Resorts, S.A.P.I. de C.V.
(Hereinafter, “Data Controller”) is responsible for processing personal data to fulfill the purposes specified in section so called “Data Processing Purposes”. Data Controller’s domicile is Carretera Cancún Puerto Morelos km 21, Manzana 01, Lote 1 – 11, Edificio A, Supermanzana 47, Municipio Benito Juárez, Cancún, Quintana Roo, C.P.77506, México.

Interested parties may also contact Data Controller via the following e-mail address: derechosarco@palaceresorts.com.

Identity and Contact Data of Data Controller’s Representative within the European Union Territory
Data Controller has appointed the following person as the representative thereof within the European Union territory, pursuant to article 27 of the GDPR: name: Héctor Efraín Guzmán Rodríguez; domicile: Avenida de Brasil 29 -1, 28020, Madrid, Spain; e-mail address: derechosarco@palaceresorts.com.

Purposes and Legal Basis for the Processing of your Personal Data
Data Controller processes your personal data for the purposes and under the legal basis listed below, including the legitimate interests of Data Controller:

Purpose Legal Basis
To provide information on the characteristics and costs of our services at the express request of the interested party through any of the means of communication enabled by Data Controller. (1) Data processing is necessary for the implementation of the pre-contractual measures requested by you.
(2) Data Controller has a legitimate interest to communicate information concerning the characteristics and costs of the services thereof, and to communicate changes or updates to such information.
To manage the booking of our services by you directly or by means of a third party who has transferred your personal data to Data Controller. (1) Processing your personal data is necessary to enforce an agreement whereto you are a party.
(2) Data processing is necessary to implement the pre-contractual measures requested by you, in your favour, or in favour of your companions.
To provide the services expressly hired, in any of the modalities thereof, for your stay and for that of your companions (if any) in any of the facilities (resorts) of Data Controller. (1) Processing your personal data is necessary to enforce an agreement whereto you are a party.
(2) Data Controller has a legitimate interest to render the services hired by you in favour of your companions, including people under age (if any) who are subject to parental authority or guardianship.
To ensure the functionality and quality of hired services, by issuing identification accessories that guarantee personalized attention to your needs. (1) Processing your personal data is necessary to enforce an agreement whereto you are a party.
(2) Data Controller has a legitimate interest to render the services hired by you in favour of your companions, including people under age (if any) who are subject to parental authority or guardianship.
To ensure the functionality and quality of hired services, by issuing identification accessories that guarantee the security of guests in the resorts of Data Controller. (1) The processing of your personal data is necessary to comply with a legal obligation of Data Controller.
(2) Data processing is required to protect your essential interests or those of your companions, including people under age (if any) who are subject to parental authority or guardianship.
To provide information or to assist the interested party in the engagement of services rendered by Data Controller or by third parties, requested before or during your stay in the resorts of Data Controller. (1) Processing your personal data is necessary to enforce an agreement whereto you are a party.
(2) Data processing is required to implement pre-contractual measures requested by you, in your favour or in favour of your companions.
(3) Data Controller has a legitimate interest to render the services hired by you in favour of your companions, including people under age (if any) who are subject to parental authority or guardianship.
To allow access to our online services should you be eligible and chose to so do expressly. (1) The interested party has given the consent thereof to create a personal account in our websites, electronic services and/or applications.
(2) Processing your personal data is necessary to enforce an agreement whereto you are a party.
(3) Data processing is necessary to implement the pre-contractual measures requested by you, in your favour, or in favour of your companions.

To render services whose proper and/or safe provision requires knowing information concerning the health of the interested party or that of the companions thereof, including people under age (if any) who are subject to parental authority or guardianship.

 

Data Controller shall inform the interested parties, in advance and appropriately, of the need to process the health personal data thereof, further communicating the consequences or the impossibility to render the corresponding services should they refuse to provide such data.

(1) The interested party has given the express consent thereof for the processing of the health data thereof and for the provision of the services that require the provision of such information for the proper and/or safe provision of such services.
To bill the products and services provided by Data controller, as well as to judicially or otherwise collect such products and services. (1) Processing your personal data is necessary to enforce an agreement whereto you are a party.
(2) Data controller has a legitimate interest to receive the payment of outstanding debts thereto.
To make statistics and to keep a historical record of users, which includes satisfaction surveys. (1) Data Controller has a legitimate interest to obtain and process information concerning the quality of the services thereof, in order to improve or broaden the service level thereof.
To communicate electronically offers, events, and new products or services, organized and provided by Data Controller in any of the resorts thereof. (1) The interested party has given consent for Data Controller to send thereto electronic communications for marketing and advertisement purposes.
(2) Data Controller has a legitimate interest for the clients thereof to be loyal thereto, so that such clients hire again Data Controller’s services and/or recommend the services thereof to third parties.

 

With whom can we share your information? In what cases?
For the purposes indicated below, we may share your personal data based on your consent or in applicable legal provisions:

Purpose of the Transfer Recipient Category
Rendering to the interested parties of services whose engagement is requested thereby expressly before or during the stay thereof in the resorts of Data Controller Service providers identified by the interested subjects or with regard to whom information is required for the hiring of such services
Health care, prevention, diagnosis, health assistance, medical treatment or health services management during your stay in the resorts of Data Controller People subject to medical secrecy or to an equivalent obligation
Compliance with judicial or administrative requirements related to facts that happen during your stay in the resorts of Data Controller Competent judicial or administrative authorities
Management and administration of files concerning claims or compensations Insurance companies
Centralized protection of information, registration and de-registration control, change in your booking of services and making of statistics with regard to the use of our services Controlling companies, subsidiaries, or affiliates of Data Controller
Delivery of electronic communications on third parties’ products or services Business parties of Data Controller, who have authorized access to the personal data of the interested parties
Judicial or extra-judicial collection of past due credits Collection companies that render the services thereof to Data Controller as processors or as data receivers of your personal data
Booking management Booking engines that provide the services thereof to Data Controller as processors
Delivery of electronic communications on offers, events and new products or services of Data Controller Providers of digital marketing services that render the services thereof to Data Controller as processors
Conduction of satisfaction surveys Providers of statistics, surveys, and survey examination services that render the services thereof to Data controller as processors

 

Retention Periods; Criteria for Determination
Data Controller shall retain the personal data thereof during the term strictly required to achieve the purposes indicated in this Privacy Notices and, if applicable, until the maturity of acts derived from the legal relationship that gave rise to the processing of your data.

 

Purpose Criteria to Determine the Term of Retention
To provide information on the characteristics and costs of our services at the express request of the interested party through any of the means of communication enabled by Data Controller. Indefinitely or when the interested party requests your personal data related to this purpose be cancelled.
To manage the booking of our services by you directly or by means of a third party who has transferred your personal data to Data Controller. Up to10 years from the conclusion of the provision of the services engaged by the interested party, except in the case of an interruption to the maximum maturity date set forth in the regulations on consumer protection.
To provide the services expressly hired, in any of the modalities thereof, for your stay and for that of your companions (if any) in any of the facilities (resorts) of Data Controller. Up to10 years from the conclusion of the provision of the services engaged by the interested party, except in the case of an interruption to the maximum maturity date set forth in the regulations on consumer protection.
To ensure the functionality and quality of hired services, by issuing identification accessories that guarantee personalized attention to your needs. Up to10 years from the conclusion of the provision of the services engaged by the interested party, except in the case of an interruption to the maximum maturity date set forth in the regulations on consumer protection.
To ensure the functionality and quality of hired services, by issuing identification accessories that guarantee the security of guests in the resorts of Data Controller. Up to10 years from the conclusion of the provision of the services engaged by the interested party, except in the case of an interruption to the maximum maturity date set forth in the regulations on consumer protection.
To provide information or to assist the interested party in the engagement of services rendered by Data Controller or by third parties, requested before or during your stay in the resorts of Data Controller. Up to 1 year from the communication of data to the interested party or when the interested party requests the cancellation of the personal data thereof for said purpose.
To allow access to our online services should you be eligible and chose to so do expressly. Up to10 years from the conclusion of the provision of the services engaged by the interested party, except in the case of an interruption to the maximum maturity date set forth in the regulations on consumer protection.

To render services whose proper and/or safe provision requires knowing information concerning the health of the interested party or that of the companions thereof, including people under age (if any) who are subject to parental authority or guardianship.

 

Data Controller shall inform the interested parties, in advance and appropriately, of the need to process the health personal data thereof, further communicating the consequences or the impossibility to render the corresponding services should they refuse to provide such data.
 

Up to10 years from the conclusion of the provision of the services engaged by the interested party, except in the case of an interruption to the maximum maturity date set forth in the regulations on consumer protection.
To bill the products and services provided by Data controller, as well as to judicially or otherwise collect such products and services. Up to 5 years from the conclusion of the provision of the services engaged by the interested party, except for an interruption of the maximum maturity date established in the consumer protection regulations.
To make statistics and to keep a historical record of users, which includes satisfaction surveys. Up to 1 year from the performance of the corresponding statistics.
To communicate electronically offers, events, and new products or services, organized and provided by Data Controller in any of the resorts thereof. Indefinitely or when the interested party requests your personal data related to this purpose be canceled.

 

Rights of Data Subjects; Means for the Exercise of such Rights
In all legally applicable cases, you may, at any time, exercise your access, rectification, cancellation, and opposition rights by means of a request addressed to the following e-mail address: derechosarco@palaceresorts.com
 

The request shall contain:
a)    Your name and domicile or another means to communicate the response to your request.
b)    Documents that prove your identity or, if applicable, the corresponding legal representation.
c)    A clear and precise description of personal data with respect to which any of the rights related to the processing of your data are intended to be exercised; and
d)    Any other element or document that facilitates the localization of personal data.

Data Controller shall communicate the decision made in connection to your request, within a month from the date when we receive your request. Exceptionally, Data controller may extend such term up to two months, considering the complexity and the number of requests issued. In the event your request be inapplicable, Data Controller shall inform you about the reasons for the decision thereof not after the month following the receipt of your request.

In the event data provided in your request be mistake or insufficient or in case the documents required to prove your identity, or the corresponding legal representation be not attached, Data Controller shall require that you cure such deficiencies to process your request. 

You may withdraw your consent for the processing of your personal data without retroactive effects, in all cases in which such a revocation shall not result in the impossibility to comply with obligations derived from an effective legal relationship between you and Data Controller; you may also limit the processing of your personal data in the cases expressly provided under the GDPR.

You shall be responsible for updating your personal data held by Data Controller Consequently, you guarantee and shall be liable, in any case, for the truthfulness, accuracy, effectiveness, and authenticity of the personal data provided, and you undertake to update your personal data and to communicate any changes thereto to Data Controller.
In the event you disagree with the decision made by Data Controller in response to a request for the exercise of your rights as an interested party you may file a complaint before the control authority of your country of residence.

Automatic Means to Collect Personal Data
Data Controller uses cookies to facilitate navigation in the website www.palaceresorts.com. Cookies constitute a tool used be web servers to keep and retrieve information stored in the browser used by the users or visitors of the web site, which allows saving the personal preferences thereof to provide a better navigation experience.

Cookies have an expiry date, which may vary between the time a session or web site visit lasts up to a given dated from which such cookies cease to operate. Most cookies used at www.palaceresorts.com are solely related to an anonymous User and the computer equipment thereof; cookies may not provide any references that allow deducting the name and last name of a User or read any data from a hard disk or include any viruses in your texts.

We may also collect information by using “web beacons”, “pixel tags”, “clear gifs” of similar means (generically called “web beacons”), which allow us to obtain non-personal or aggregated data, such as domain names, the parts of a web site you visit, your operating system, the version of the operating system you use, the version of the browser you use and the URL previous to your visit. This information is used to improve your experience in the site and to understand traffic patterns. We may also use third parties’ advertisement in our websites. Such advertisers may also use cookies and pixel tags to identify, among other things, the advertisements that have been shown to you and the pages wherein they have been shown.

Data Controller does not have the usage control of such a technology of third parties and hence each such third party shall be responsible for the processing of the information obtained through automatic means.

You may configure your browser to accept or reject automatically all cookies or to receive a notice on screen upon the receipt of each cookie and then decide if said cookie shall be implanted or not in your hard disk. We suggest you consult the help section of your browser, to know how to change the configuration to accept or reject cookies. Even when you configure your browser to reject all cookies or even when you expressly reject cookies from www.palaceresorts.com, you may continue navigating the web site with the sole inconvenient of not being able to enjoy the functionalities of the site that require their installation. In any case, you may eliminate cookies from www.palaceresorts.com that have been implanted in your hard disk at any time by following the procedure established in the help section of your browser.

Amendments or Updates to this Privacy Notice (GDPR)
Data Controller may amend, update, extend or otherwise change the contents and scope hereof at any time and at Data controller’s own discretion. In such cases, Data controller shall publish those changes in the website thereof www.palaceresorts.com, under section so called  “EU Privacy”. 
Changes hereto may also be notified by e-mail, should such means of communication had been established as a communication channel between the interested parties and data controller, during the term of the legal relationship.

Last update:
May 25, 2018




tripadvisor

Ranks among the best resorts in all destinations

PALACE
RESORTS

  • BJRD

    Wilmington, North Carolina

    Excellent entertainment staff

    We spent a week at Beach Palace, Cancun with our family. The entertainment staff kept us busy and entertained all week. Pool volleyball, Zumba and yoga. Trivia games every day and lots of nightly entertainment. Fun for kids and adults.

  • Tahira R

    Bradford, United Kingdom

    Fantastic Hotel

    It’s the first time we have visited Cancun and stayed at the Sun Palace Hotel, we will definitely be going back again. I couldn’t have asked for a better hotel. It was just truly amazing. The food was great. The hotel staff were so polite and friendly.

  • Art H

    Bluffton, South Carolina

    Moon Palace All Inclusive

    Wow! What a week this Is truly a five star resort. If I heard it from one, I heard it from all servers, "Its my pleasure to serve you". The resort's rooms were upscale and the food and food service was five star. We will definitely go back next year.

  • Lizzieoneill

    Altinkum, Turkey

    Wow! What a hotel

    Amazing, staff are wonderful and the beds are so so comfortable, I'm trying to find out what the mattress is so I buy one! I will definitely be back! Oh and try the Bob Marley cocktails (yeah man).

  • Harry S

    Lee's Summit, Missouri

    Amazing Resort!

    I have stayed at many very nice hotels, but the Le Blanc Spa Resort is my new favorite. This hotel is indeed worthy of their Five Diamond rating! The overall service at the Le Blanc is EXTRAORDINARY! From the pool servers to the butlers, we never waited for anything!