PRIVACY NOTICE

Who is and how to contact our data protection officer?

The data protection officer is the person formally designated by the General Management of Hotel Misión del Sol Resort & Spa, responsible for promoting and ensuring the protection of personal data in our custody, as well as attending to the rights of data subjects.

For everything related to the treatment and protection of your personal data, you can contact us by sending an email to:

gm@misionsoldelsol.com

For what purposes will we use your personal data?

The personal data we collect from you will be used for the following primary purposes, necessary for the provision of our services:

• Complete reservations or information requests.
• Purchase products or services.
• Guest and visitor registration.
• Submit job applications.
• Respond to communications (reservation confirmations, surveys, requests).
• Satisfy personal accommodation and service preferences.
• Complete special service requests or recommendations.
• Collaborate with third parties to provide personalized service.
• Use of hotel digital applications or platforms.
• Facilitate sending messages to third parties, when requested by the data subject.

Additionally, we will use your personal information for the following secondary purposes, which are not essential for the provision of the service:

• Sending information about Hotel Misión del Sol Resort & Spa.
• Sending promotions, benefits and loyalty programs.
• Satisfaction surveys and quality evaluation.
• Marketing, advertising and commercial prospecting activities.

If you do not wish your personal data to be processed for these secondary purposes, you may communicate this by sending an email to gm@misionsoldelsol.com within five business days after providing your data.

Refusal will not be a reason to deny you the services you contract with us.

What personal data do we collect?

We may collect the following personal data:

• Full name.
• Personal and/or work address.
• Email address.
• Phone numbers.
• Credit or debit card information.
• Date of birth and gender.
• Personal preferences (rooms, food, activities).
• Information necessary for special requests, including health data considered sensitive personal data, when required.

We may also collect non-personally identifiable information, such as browsing habits on our websites, communication preferences, accommodation history and responses to surveys or promotions.

With whom do we share your personal information?

Your personal data may be transferred within the country without requiring your consent when:

• It is necessary to provide you with the requested products or services.
• Service providers (payment processors, reservation systems, market studies) require it.
• There is a merger or acquisition of the company.
• It is required by competent authority or legal obligation.
• There are emergency situations that put the life, health or property of a person at risk.

In all cases, we will try to limit the use of information to what is strictly necessary and require third parties to comply with applicable personal data protection regulations.

If you do not express your refusal to these transfers, it will be understood that you give your consent.

ARCO Rights (Access, Rectification, Cancellation and Opposition)

You have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Cancel your data when you consider it is not being used properly.
• Oppose the use of your data for specific purposes.

To exercise these rights, you must send a request to gm@misionsoldelsol.com or request the corresponding form at the hotel reception.

Revocation of consent

You may revoke the consent granted for the processing of your personal data by sending a request to the email mentioned above. However, you should consider that in some cases the revocation will not be immediate due to current legal obligations.

How to limit the use or disclosure of your data?

You can:

• Register in the Public Registry to Avoid Advertising (PROFECO).
• Request your registration in the Advertising Exclusion List of Hotel Misión del Sol Resort & Spa, by sending an email to our data protection officer.

Authority on data protection

The authority responsible for the protection of personal data in Mexico is the National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

More information at: www.inai.org.mx

Use of cookies and tracking technologies

Our website may use cookies and web beacons to improve your browsing experience, personalize content and facilitate access to our services. You can configure your browser to accept or reject the use of cookies.

Links to third-party sites

Our website may contain links to external sites. Hotel Misión del Sol Resort & Spa is not responsible for the privacy policies or content of such sites, so we recommend reviewing their privacy notices before providing personal information.

Changes to the privacy notice

This privacy notice may be modified at any time due to legal, operational or administrative changes. Updates will be available on our official website:

www.misionsoldelsol.com/privacidad