I. RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA.

Jewel Luxury Boutique Hotels, S. de R.L. de C.V. (hereinafter, RUBI), with address at Calle 16 Sur, Región 015, Manzana 162, Lote 002, Colonia La Veleta, Tulum, Quintana Roo, C.P. 77760, México, Tulum, Quintana Roo, is responsible for the use and protection of your personal data, and we hereby inform you of the following:

Il. DATA COLLECTED BY US.

The data we collect from you are the following:

1. Identification: name(s), last name(s), home, and tax address (if applicable), telephone number(s), marital status, email address, age, date of birth, gender, company name and, if applicable, Federal Taxpayers Registry Code (RFC).

2. Preferences related to lodging service and/or travel needs.

3. Dates of reservation and/or stay, hotel, date and time of flight.

4. Personal information such as bank card number, expiration date and security code, level of income and occupation.

5. RUBI may collect data relating to your state of health for the sole purpose of taking the necessary measures for your protection and other guests of the hotel and if there is any legal provision that or by order of the competent health authorities.

RUBI will not collect sensitive personal data, unless you require a specific service for which you provide such data, provided that such data will be used only to provide the service and meet your specific needs.

Sensitive personal data are considered that affecting the most intimate sphere of its owner, or whose improper use may give rise to discrimination or entail a serious risk to it. In particular, sensitive data are considered those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions, sexual preferences.

III. PURPOSE AND PROCESSING OF PERSONAL DATA.

The personal data we collect from you is collected for the following purposes:

1. To provide the services you request from us such as reservations, events, social gatherings, purchase of tourist products or services, among others.
2. Billing and collection of services you request from us.
3. To offer you promotions and tourist and commercial products.
4. Sending news, newsletters and / or satisfaction surveys.
5. Generate a customer database.
6. Conduct satisfaction surveys of your stay with us.
7. Attend to questions, complaints and recommendations.
8. Transfer information of your charges to banks in case of any eventual clarification and / or complaint.

IV. COLLECTION OF PERSONAL DATA.

For the purposes outlined in this Privacy Notice, RUBI may collect your personal data:

1. a) When you provide us with the information directly either by telephone or when you visit our website https://rubitulum.com/ or our social media.
2. b) When you authorize us to take data from your social media accounts (Facebook, Twitter, LinkedIn, Google, etc.).
3. c) When we obtain information through other means other than those mentioned above and that are permitted by applicable laws.
4. d) When you provide your personal data to any of our suppliers, such as travel agencies or third parties that provide us with databases and support us during the reservation and marketing processes.

V. TRANSFER OF PERSONAL DATA.

RUBI may transfer all or part of the referred personal data to support service providers of the website https://rubitulum.com/ in order to provide data such as your IP address, statistical services and analysis of information on the use of our website. These transfers may be national or international.

RUBI may also send your personal data to our marketing and advertising service providers.

However, you may object to these transfers of your personal data by sending an email to the following address: [email protected]

RUBI has implemented and maintains the necessary physical, organizational, administrative, and technical information security measures to prevent the loss, misuse, alteration or unlawful disclosure of information and to protect the personal data you provide us against damage, loss, alteration, destruction or unauthorized use, access or processing. Third parties to whom we send your personal data will be subject to privacy policies similar to those set forth herein.

VI. LIMITING THE USE OR DISCLOSURE OF PERSONAL INFORMATION.

For you to limit the use and disclosure of your personal information, we offer you the following means:

– Your registration in the Public Registry to Avoid Advertising, in charge of the Federal Consumer Protection Agency (PROFECO), in order that your personal information will not be used to receive advertising or promotions of goods or services companies. For more information about this registry, you may consult the PROFECO’s website https://repep.profeco.gob.mx/.

VII. RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION OR OPPOSITION (ARCO RIGHTS).

You have the right to know what personal information we have about you, what we use it for and the conditions of the use we make of it (Access). Likewise, it is your right to request the correction of your personal information in case it is outdated, inaccurate or incomplete (Rectification); that we remove it from our records or databases when you consider that it is not being used in accordance with the principles, duties and obligations under the regulations (Cancellation); as well as oppose the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights.

To exercise any of the ARCO rights, you must submit the respective request by sending an email to: [email protected]

To know the procedure and requirements for the exercise of the ARCO rights, you may submit the respective request by sending an email to [email protected]

The contact details of the Privacy Department are as follows:

Responsible: General Manager

Address: Calle 16 Sur, Región 015, Manzana 162, Lote 002, Colonia La Veleta, Tulum, Quintana Roo, C.P. 77760, México.

E-mail address: [email protected]

You may revoke the consent, if any, you have given us for the processing of your personal data. However, it is important to note that not in all cases we will be able to respond to your request or terminate the use immediately, since it is possible that for some legal obligation, we may need to continue processing your personal data.

To revoke your consent, you must submit your request by sending an email to: [email protected]

To learn about the procedure and requirements for the revocation of consent, you may send an email to: [email protected]

VIII. USE OF COOKIES.

We inform you that our website https://rubitulum.com/ uses Cookies, through these mechanisms data are collected automatically and simultaneously, to monitor your behavior as a user and improve your browsing experience to provide a better service.

It is possible to disable the use of these mechanisms by following the procedure for deactivation, established for the Internet browser with which you are accessing.

For more information about the use or disabling of these technologies, please contact our Privacy Department which information appears hereto.

lX. AMENDMENTS TO THE PRIVACY NOTICE.

This privacy notice may be amended, changed or updated as a result of new legal requirements; our own needs for the products or services we offer; our privacy practices; changes in our business model, or for other reasons.

We commit to keep you informed about the changes that this privacy notice may undergo, through an e-mail to the address provided by you.

The procedure by which notifications will be carried out is as follows: the notice will be attached, or it will be published on our web page https://rubitulum.com/

Last update April 1^st, 2023.