Privacy Notice

If you are reading this, it means that you are a responsible user who takes care of your personal data.

In this privacy notice we will explain to you why we request your information, under what circumstances and how we take care of it.

The first obligation we have with you is to inform you of the identity of the person responsible for this site:

Commercial name: Experiencias Xcaret Web S.A.P.I de C.V. (hereinafter Grupo Xcaret).

Commercial address: Road Chetumal – Puerto Juarez Km 282 B, Rancho Xcaret, Solidaridad, Quintana Roo, C.P. 77710

Our activity: We are a business group that has cultural, natural, ecological, adventure parks with a unique hotel, which offers our visitors and guests different ecological, cultural and fun experiences.

Responsible one for the protection of your data: The Department of Information Protection is responsible for ensuring the security of your information.

Email of the responsible one: privacidad@xcaret.com

In addition to the above it is important that you know that this privacy notice is part of the following sites:

• https://www.travesiasagradamaya.com/en/

Now, we will describe the different situations where your data may be required in this site:

• When you register to be a canoeist candidate, we ask you for your name and surname, email, telephone number, state, country of origin, we will ask you some questions about your state of health (family hereditary history, non-pathological personal history, pathological personal history, condition and / or physical state, blood group, recent surgical interventions, pregnancy status in the case of women, cardiopulmonary conditions, COVID-19 detection test results, your vaccination schedule against COVID-19)
• When you sign a response to participate in the Sacred Mayan Journey, we ask for your name, surname and signature
• When you make the payment to be a canoeist, we will request your name, surname, email, telephone, state, country of origin, we will also ask for your bank details and address to be able to make the purchase.
• When you use the virtuagym tool for virtual workouts, we will ask you for the registration to create a username and password, name, goal, physical state (amount of exercise done), biological sex, date of birth, height, weight. If you want to make the Google Fit connection for activity and location recognition to receive distance and speed data. The permissions that the application requires to function properly are: physical activity data, location and body measurements.

• We will never ask for credit or debit card details, unless you are making a purchase.
• We will not ask for your username and password by phone or email.

Registration Form
Register to participate in the Sacred Mayan Journey, your sensitive data will be used to evaluate if you are eligible to participate and have a background clinicians to take the necessary measures during your training and in the event.

Payment Form
Carry out and control the correct fulfillment of the contract and comply with the legal obligations of Grupo Xcaret.

Responsive Format
Grant you participation in the Sacred Mayan Journey.

App virtuagym
Include you in virtual physical conditioning workouts, as well as evaluate your progress.

In addition to the previous ones, there are other purposes:

• To conduct internal studies on statistics.
• To conduct internal studies on demographic and statistical data.
• To know the interests of our users.
• To support and improve the services offered by our sites, in such a way that we can provide you with a more satisfactory experience.
• To inform our users about new products or services that are related to the contracted ones.
• To evaluate the quality of the service.
• To inform about changes to our products or services and provide a better service to the user.
• Other non-identifying data obtained through some cookies that are downloaded to your computer when you browse our sites and that we detail in the cookies policy are also collected.

The above data processing is subject to your consent, we will NEVER use your data for anything else and will NEVER sell your information.

Cookies are text files that are automatically downloaded and stored in the computer's hard drive while navigating in a specific web page, allowing the Web server to recall some facts about the user, including preferences for the display of pages on that server, username and password. In some sections of our site we require that the client have cookies enabled since the functionality requires them to work correctly.

A personal identification number which only the user can access and which only he has knowledge of secures the information provided by the user. We recommend that you do not divulge your password to anyone. In this topic, the team of collaborators of Grupo Xcaret has focused its efforts to offer the latest updated technology in order to provide the highest security possible. You may stop receiving promotional messages by landline or cell phone and stop receiving email or postal mail advertising by asking to unsubscribe the following phone number: +52 (998) 884-9422 Ext.11469.

If you participate in the email promotions service, you can disable the service at any time. Opt-out: In regards to the publicity and promotions sent to you via email, we will inform you in each case how to unsubscribe easily and at no cost.

• To request the access to your personal data.
• To request a correction.
• To request the cancellation.
• To request the limitation of treatment (use and disclosure).
• To oppose to the data processing we are giving you.
• The portability of your data.
• Revocation of consent to the processing of data.

The exercise of these rights is personal, which means that the interested party must request it from the person responsible for the protection of their data, that is, the Department of Information Protection.

To exercise any right of the above, you can download and fill the following form and send it along with the copy of your identification, through:

Email of the responsible person: privacidad@xcaret.com

Business hours: From Monday to Friday from 9:00 a.m. to 7 p.m

We will assist you quickly, within a period no longer than 15 business days. We advise you to keep your data updated so that we can provide a more personalized service.

We will keep your information until you ask us to delete it.

It is important to let you know that, for marketing purposes, we share your information with our affiliate companies: Experiencias Xcaret Loyalty S.A.P.I de C.V., Experiencias Xcaret Hoteles, S.A.P.I de C.V, Naturama Tours Adventures S.A. de C.V. and Naturamaya Ventura S.L. to propose to you the best offers of our Hotel and Vacation Club in the case in which you are subscribed with us.

We also send information to comply with the aforementioned uses and comply with the obligations contracted with you, our customers.

HWe have implemented security measures to take care of your data:

• Use of SSL (Secure Socket Layer) certificates on our sites.
• Security procedures with our staff.
• Limitation of access to the databases where the data is stored.
• Implementation of best practices on servers to keep your information safe.
• Implementation of controls to comply with the LFPDPPP and the RGPD

We are concerned for the safety of our visitors, guests and collaborators, as well for our administrative facilities and parks, it's necessary to communicate that we have internal systems and video recording circuits, which can capture images and, in some cases, sounds which are consider as personal data, which will be treated and protected in the terms provided in this privacy notice.

• The LFPDPPP (Regulation of the Federal Law on Protection of Personal Data Held by Private Individuals) which is the law that is responsible for protecting personal data in Mexico.
• The GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27th, on the protection of natural persons) which is the new regulation of the European Union regarding the regulation of processing the personal data.

If you believe that your rights have been violated regarding the protection of personal data, you have the right to go to the appropriate authority to defend its exercise. The authority is the Federal Institute of Access to Information and Data Protection (IFAI), their website is: www.inai.org.mx/

When you provide us with your information and check the consent box, it means that you agree to have your information processed in the aforementioned terms.

We recommend that you check this PRIVACY NOTICE periodically, since we make updates and changes to adapt it to the laws that apply in terms of the protection of personal data and internal policies.

In case of entering your personal data in any of our purchase forms check the acceptance checkbox, you will be notified about the update.

Last updated on 28/08/2021 (August 28, 2021).