TURISMO GOURMET S.A.P.I DE C.V., informs the owners that the personal data to be treated, will be handled confidentially, limiting its use to the purposes described in this Privacy Notice. Also, the databases of TURISMO GOURMET S.A.P.I DE C.V where the Personal Data of customers are contained only be operated by authorized personnel TURISMO GOURMET S.A.P.I DE C.V, whose functions are regulated by the internal policies of the company. Also, TURISMO GOURMET S.A.P.I DE C.V., states that it has implemented policies, procedures and security measures to protect the personal data of customers, employees and suppliers against any damage, loss, alteration, destruction or unauthorized use, access or treatment, so it is prohibited unlawful disclosure, limiting its use to third parties, as provided herein.
We also adhere to the agreement 108 of the Personal Data Protection Regulation of the European Union, complying with the fundamental principles of this regulation in a lawful and transparent manner, specific purposes, only personal data that are necessary to fulfill that purpose should be collected and processed, compatible, not retained longer than necessary and there are technical and organizational guarantees that ensure the security of personal data. (All this within the mechanisms, procedures and administrative legal locks established for greater security and processing of personal data within the company).
1. Identity and address of the person in charge
TURISMO GOURMET S.A.P.I DE C.V, (En adelante “HOTEL CARTESIANO 360”) con domicilio para recibir notificaciones Calle 3 Ote. 610, Centro histórico de Puebla, C.P. 72000, Puebla, Puebla, es responsable del uso y protección de los datos personales que trata y al respecto le informamos.
2. Purposes of the treatment
Your personal data may be processed for the following primary purposes:
Customers: Quote, book and bill the provision of lodging services, food, room rental, SPA, service and medical care.
Employees: To fulfill the obligations established in the labor contract, as well as by the rules and authorities that regulate this line of business.
Students performing professional internships: inform the Educational Institution of compliance with the agreed work program, as well as the control of attendance and student performance.
Suppliers: Request quotation, purchase and receipt of goods and services.
Your personal data may be processed for the following secondary or accessory purposes.
Customer feedback:
1.- To know their opinions about the quality and satisfaction of our service.
2.- To know their preferences during their stay and lodging.
3.- To send promotions and newsletters.
The personal data of employees, students and suppliers will not be processed for other purposes.
3.Mechanisms for refusal of secondary or ancillary purposes
Los clientes podrán manifestar su negativa al tratamiento de datos personales para finalidades secundarias señaladas, al:
Customers may express their refusal to the processing of personal data for secondary purposes indicated, by: Omitting to fill in the data considered in the surveys.
Indicating in the forms in which personal data are collected their opposition to the secondary purposes of receiving quality surveys, promotions, advertising and newsletters.
By exercising your ARCO rights.
The refusal of the use of your personal data for these purposes, will not be a reason to deny you the services you request or contract with us. We reiterate that the personal data of employees, students and suppliers are not processed for secondary or accessory purposes.
Personal data processed
For the aforementioned purposes we may collect your personal data by: Written, telephone or email, opinion surveys, quotation form, reservation and services, job application, internal control forms, video surveillance cameras, authorities’ offices, public access sources.
The personal data collected for the primary purposes are
*From Clients.
Identification and contact information: Name (father’s last name, mother’s last name and first names), Address (street, number, neighborhood, city, state, country, zip code), photos, phone, cell phone, email, company, signatures, video surveillance images.
Billing data::
Company name, address, city, RFC, e-mail.
Service data::
Arrival date, departure date, room number, license plate number, vehicle make and model..
Health Data::
Conditions (services and medical attention).
Agreement data::
Contact name, position, company, line of business, address, city, country, e-mail, company name.
Credit card information:
Name on card, credit card number, expiration date, code.
Students: Who perform professional practices in the company, the mandatory data are:Name, enrollment, name of the study plan or subject, name of the educational institution, autographic signature.
*Employees.
Mandatory data:
Name(s), paternal and maternal surname, address (street, outside number, inside number, neighborhood, zip code), nationality, INE (photo and folio) date of birth, place of birth, sex, height, marital status, CURP, RFC, autograph signature, fingerprint, video surveillance images and health status (conditions) general blood test or blood chemistry.
Optional data:
Last studies, Certificate of Studies or Professional License Number, Telephone, Cellular, Email Account, Age, Photo, INFONAVIT Credit Number, FONACOT Credit Number, Bank Account Number for Payroll, License Type, License Number, License Expiration Date, Social Security Number and Work Experience.
Employment Data:
Bank Payroll Account Number and Salary.
Labor reference:
Employee’s behavior, reason for separation from previous employment, position held, time worked in the company, last salary earned, relationship with colleagues, name of the company for which he/she worked, name of the Human Resources Manager in the previous company.
Personal reference:
Name of the reference, relationship, telephone number and persons with whom the employee lives.
Health data:
Health status (only for those who work in food areas).
Documents submitted for verification:
Birth certificate, proof of address, proof of studies, official identification, driver’s license, CURP, IMSS, RFC, medical certificate, proof of non-credit or statement of account INFONAVIT and FONACOT.
Of the suppliers (individuals and companies) with whom a commercial or professional relationship is maintained for the primary purposes, are the minimum established by other laws of the Mexican State, so they will not be considered as personal data, according to Article 5 of the Regulations of the Federal Law on Protection of Personal Data Held by Private Parties.
The images taken by the video surveillance circuit, are only available to the general manager of the hotel and the authorities in matters of administration and prosecution of justice that require it by means of an official mandate within a period not exceeding 10 calendar days from the date of the shots provided the CARTESIANO BOUTIQUE & WELLNESS HOTEL does not process personal data for secondary or ancillary purposes.
5. Sensitive personal data processed CARTESIANO BOUTIQUE & WELLNESS HOTEL does not process sensitive personal data of its customers at the time of registration unless the customer has a medical condition and it is necessary to consult the CARTESIANO BOUTIQUE & WELLNESS HOTEL’s doctor and/or for the treatment and use of the SPA, we also collect health data from our employees at the time of hiring to know of any chronic condition of which the company should know in case of any extraordinary situation of which we have to take special attention and that we are required by any authority in case of a pandemic or other situations.
Of the data collected from customers for primary purposes, are considered sensitive health data: ailments, allergies and any other data that is necessary for their care.
Of the data collected from employees for primary purposes, are considered sensitive health data: health status (diseases) and blood results.
In order to comply with the legislation and authorities in health matters, we will perform periodic examinations to its staff that are relevant or determined by the competent authorities, for the prevention and control of diseases, whose results will be collected and stored in the personnel file, adopting all security measures for their safekeeping.
6. HOW LONG WILL WE KEEP YOUR DATA?
The data processed for commercial purposes are kept active as long as the interested party does not revoke his consent or request their deletion or in any case the contracted service has been concluded in its entirety, as well as in any case, during the periods provided for in the applicable legal provisions and for the time necessary to meet possible liabilities arising from the processing of the same.
7.Transfer of personal data
CARTESIANO BOUTIQUE & WELLNESS HOTEL does not transfer personal data of customers and suppliers. In the case of employees, it will make the necessary transfers to comply with obligations under other laws and authorities of the Mexican State, in the case of students to comply with the purposes already established.Clause in which the transfer of personal data is accepted or not.
8. Clause in which the transfer of personal data is accepted or not.
There is no clause of refusal of transfer of personal data, since CARTESIANO BOUTIQUE & WELLNESS HOTEL only performs this treatment for compliance with obligations under other laws and authorities of the Mexican State, as well as for teramites of the contracted service.
9. Means and procedure to exercise ARCO rights
To access, rectify and cancel or oppose the processing of your personal data, please present yourself at our address with:
*Written request (original and copy)
*Official identification (original and copy)
To learn more about the procedures and requirements for the exercise of your ARCO rights, make an appointment with C.P. Myrna de Florencio. At aviso.privacidad@cartesino360.com in charge of Personal Data Protection or by phone (222)4786900.
It is important to note that not in all cases we will be able to respond to your cancellation request immediately, since it is possible that for some legal obligation we require to continue processing your personal data, in such cases the corresponding block will be applied.
10.Mechanisms and procedures to revoke consent to the processing of your personal data
We inform you that to revoke the consent granted for the processing of your personal data, please present yourself at CARTESIANO BOUTIQUE & WELLNESS HOTEL with:
1.-Written application (original and copy)
2.-Official identification (original and copy)
3.-Options and means to limit the use or disclosure of your personal information
In order for you to limit the use or disclosure of your personal information, we suggest you:
* Register in the Public Registry to Avoid Advertising, which is in charge of PROFECO, in order to prevent your personal data from being used to receive advertising or promotions of goods or services companies. For more information, please visit the PROFECO website.Use of cookies, web beacons or similar technology
12. Use of cookies, web beacons or similar technology
CARTESIANO BOUTIQUE & WELLNESS HOTEL informs you that our website https://cartesiano360.com/ uses cookies, web beacons or similar technologies that collect personal data that allow us to consult statistics on cities, states or countries from which it is accessed, time spent browsing our site, sections and pages viewed. To limit the use of these technologies, please consult the privacy preferences set in your web browser.
13. Procedures and means by which the responsible will communicate changes in the privacy notice.
This privacy notice may be modified, changed or updated due to new legal requirements; our own needs for the products or services we offer; our privacy practices; changes in our business model, or for other reasons.
We are committed to inform you about the changes that this privacy notice, which is displayed in our facilities or in our web page https://cartesiano360.com/, may undergo.
This notice was updated and published in the aforementioned media on November 30, 2023.