Privacy Notice
In compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter the "Law"), its corresponding Regulation and the Privacy Notice Guidelines, published in the Official Gazette of the Federation on January 17, 2013 (hereinafter the "Guidelines"), the present privacy notice of PARQUE QUETZALCÓATL, S. DE R.L. DE C.V. (hereinafter the "Controller") is issued.
When reading this Privacy Notice, please take into account the following definitions:
• Personal data: Any information concerning an identified or identifiable natural person.
I. Identity and Address of the Person Responsible for Collecting the Personal Data of the Holders.
-
The entity responsible for collecting and processing the personal data of the data subject is Parque Quetzalcóatl, S. DE RL DE CV, with address located at Calle Vito Alessio Robles 51, interior 203, Col. Exhacienda de Guadalupe Chimalistac, Alcaldía Álvaro Obregón, CP 01050, Mexico City.
II. Purposes of Data Processing and Transfer.
The personal data collected by the Controller will be used solely and exclusively for the purposes for which they were provided, and will be registered in the Controller's database.
The primary purposes, understood as those that gave rise to and are necessary for the relationship between the data subject and the Controller, are the following:
• Processing reservations and tickets for access to Parque Quetzalcóatl.
• Providing the services offered by Parque Quetzalcóatl.
• Sending information about events, promotions, and news related to Parque Quetzalcóatl.
• Responding to inquiries, comments, or complaints from data subjects.
III. Means for Obtaining Personal Data.
Data subjects are informed that their data will be obtained through one of the following methods:
-
Personally: When visiting the facilities of the properties managed by the Responsible Party or when attending events organized by the Responsible Party where the completion of forms is requested.
-
Direct: When data subjects provide personal data through emails, social media contact, the controller's website, or electronic forms.
-
Indirect: When the data is available from any other commercial source or is permitted by law. When data is obtained through this method, the data controller is not obligated to notify changes made to this Privacy Notice.
IV. Categories of Personal Data Collected.
The categories of personal data to be collected and processed are:
-
Identification and contact information, including full name, current address, contact email address, cell phone number, nationality, information contained in official identification documents, emergency contact information, Federal Taxpayer Registry, tax address and tax regime.
-
Data relating to the image.
-
Financial data, including interbank CLABE, credit or debit card.
V. Exceptions to the Consent for the Processing of Personal Data.
In accordance with the provisions of Article 10 and other relevant articles of the Law and its Regulations, the data subject is informed that there is an exception to the obligation to obtain consent for the processing of personal data in the following cases:
i) When its acquisition is provided for in a law.
ii) Personal data is found in publicly accessible sources.
iii) Personal data is subject to a prior dissociation procedure.
iv) When the collection of personal data has the purpose of fulfilling obligations arising from a legal relationship between the data subject and the Data Controller.
v) There is an emergency situation that could potentially harm an individual or their property.
vi) They are indispensable for medical care, prevention, diagnosis, the provision of health care, medical treatments or the management of health services, while the holder is not in a position to give consent, under the terms established by the General Health Law and other applicable legal provisions and that said data processing is carried out by a person subject to professional secrecy or equivalent obligation.
vii) A decision is issued by the competent authority.
VI. Means to Limit the Use or Disclosure of Personal Data.
To revoke the consent granted to the Data Controller by the data subjects or to limit the disclosure of the personal data provided, a request must be submitted via email to the following address: avisodeprivacidad@parquequetzalcoatl.com
VII. Temporality.
The processing of personal data provided by the owners will be for the time necessary to fulfill the aforementioned purposes, starting from the date on which they are provided.
VIII. Transfers of Personal Data.
The personal data of the data subjects may be transferred to the following natural or legal persons:
-
Authorities to whom the responsible party is obliged to report, in order to comply with applicable regulations.
-
Employees of the Responsible Party, for the purpose of developing the activities of the responsible party (guided tours, private events and photo sessions).
-
Natural or legal persons who, alone or jointly with others, process personal data on behalf of the Controller.
IX. Exceptions to the Consent for Transfer of Personal Data.
In accordance with the provisions of Article 37 and other relevant articles of the Law and its Regulations, the data subject is informed that there is an exception to the obligation to obtain consent for the transmission of data in the following cases:
i) When the transfer is provided for in a Law or Treaty to which Mexico is a party.
ii) When the transfer is necessary for medical prevention or diagnosis, the provision of health care, medical treatment or the management of health services.
iii) When the transfer is made to controlling companies, subsidiaries or affiliates under the common control of the Controller, or to a parent company or to any company of the same group as the Controller that operates under the same internal processes and policies.
iv) When the transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the holder, by the Controller and a third party.
v) When the transfer is necessary or legally required for the safeguarding of a public interest, or for the administration of justice.
vi) When the transfer is necessary for the recognition, exercise or defense of a right in a judicial process.
vii) When the transfer is necessary for the maintenance or fulfillment of a legal relationship between the Controller and the holder.
X. Modifications to the Privacy Notice.
In the event that any modification is made to this Privacy Notice, the Responsible Party is obliged to make the data subject aware of said modification, by any means, whether printed, electronic, including the Responsible Party's website, or by any other optical means.
XI. Requests to Exercise ARCO Rights.
In accordance with the provisions of Articles 28, 29, 30, 31, 32 and other related articles of the Law and its corresponding Regulation, the data subject shall have the right to exercise the rights of access, rectification, cancellation or opposition of their personal data.
The contact details of the person in charge of responding to requests to exercise ARCO rights are:
Name: Parque Quetzalcóatl, S. DE R.L. DE C.V.
Email: avisodeprivacidad@parquequetzalcoatl.com
Address: Calle Vito Alessio Robles 51, interior 203, Col. Exhacienda de Guadalupe Chimalistac, Alcaldía Álvaro Obregón, C.P. 01050, Ciudad de México.
XII. Acceptance and Recognition
The data subject acknowledges having read this Privacy Notice and understands that the processing of their personal data is necessary to establish and maintain the relationship with the data controller. Therefore, they authorize the processing, use, and transfer of their data in accordance with this Privacy Notice, during the period of the relationship, and subsequently, in accordance with applicable laws, considering that such processing is necessary for the continuity of the data controller's activities.
