Fundación Palace Resorts, I.A.P. (hereinafter, “Refettorio Mérida” or “we”) is the Data Controller of your personal data. Our domicile for hearing and receiving notifications is Carretera Cancún Puerto Morelos km 21, Manzana 01, Lote 1 – 11, Edificio A, Supermanzana 47, Municipio Benito Juárez, Cancún, Quintana Roo, C.P.77506.
To fulfill the purposes indicated in this Privacy Notice, we must collect certain personal data:
If you provide information from third parties as reference (for example, family members), you must inform them of the existence of your volunteering and about the processing of the personal contact data that you have provided for the purposes stated in this Privacy Notice. In such case, you must communicate the means through which they can get to know the full content of this Notice.
The acceptance of this Privacy Notice implies the authorization that you as a volunteer grant to Refettorio Mérida so that it contacts the family references that you have provided.
We also inform you that for the purposes indicated in the following section, Refettorio Mérida does not process sensitive personal data.
We may process your personal data for the following main purposes:
We do not use your personal data for additional or secondary purposes.
Refettorio Mérida does not make data transfers to third parties for the purposes indicated in the previous section.
When it is legally required or Data Controller deems necessary, we will request your consent prior to making any transfer. The aforementioned consent may be obtained by any physical or electronic means that proves its granting, such as: forms, service formats, orders or letters of authorization.
In all cases legally applicable, at all times, you may exercise your access, rectification, cancellation and opposition rights (ARCO rights) by means of the procedures we have implemented. The relevant request shall meet the requirements of the effective legislation, by means of a document addressed to our Personal Data Responsible at the domicile indicated in section “Identity and domicile of Data Controller”.
The request shall contain the following:
Refettorio Mérida shall inform to you, within a maximum term of twenty business days, from the date when Data Controller receives the relevant request, the resolution thereof. In case the request was accepted, the request shall become effective within the fifteen business days after the date when Data Controller communicates the resolution. In the event the information provided at your requests turns out to be untrue or insufficient or in the event they are not included the documents required to prove your identity or the relevant legal powers, the Data Controller, within the five business days after the receipt of the request, shall require that deficiencies be corrected in order to process the request. In such cases, you shall have ten business days to fulfill the correction requirement, from the day after receipt thereof. The relevant request shall be deemed as not presented in case you fail to conduct the correction within said term.
Alternatively, you may address your request through the following address firstname.lastname@example.org, complying with all the aforesaid requirements, establishing as Subject to the communication “ARCO Rights and/or Consent Revocation”. The terms for the proceeding shall be the same as the ones mentioned in the foregoing paragraph. The use of the electronic means for the enforcement of the ARCO rights authorizes Refettorio Mérida to answer the relevant request through the same means, unless data subject himself expressly and clearly indicates otherwise.
You can obtain the requested personal information in the form of plain copies or electronic documents in common formats (Word, PDF, etc.), or by any other legal means that guarantee and evidence the exercise of the requested right.
You shall be responsible for the updating of your personal data possessed by the Data Controller. Therefore, you guarantee and shall bear the cost, at any time, for the truthfulness, accuracy, effectiveness and authenticity of the personal data provided. You commit to duly update them and to notify so to the Refettorio Mérida.
You may revoke your consent for the processing of your personal data, without any retroactive effects, in case such a revocation does not entail that it is not possible to fulfill the obligations arising from an effective legal relation between you and the Refettorio Mérida or supposes the breach of general provisions of public order that establish the obligation to maintain the processing of your personal data for a certain period of time.
The procedure for the revocation of the consent, if applicable, shall be the same as the established in section above for the exercise of the ARCO rights.
You may limit the usage or disclosure of your personal data by addressing the relevant request to our Personal Data Department. The requirements for accrediting your identity, as well as the procedure for processing your request shall be the same as the ones indicated at section “ARCO rights exercise”.
Refettorio Mérida has the means and procedures to ensure the inclusion of some of your data in its own exclusion lists, when you expressly request its inclusion in them. Refettorio Mérida will grant the data subjects the corresponding proof of registration.
Data Controller may amend, update, extend or otherwise change the form, content and scope of this Privacy Notice at any time and at its sole discretion. In such cases, we shall publish said amendments in the website www.refettoriomerida.com, section “Privacy Notices”.
April 24th, 2020