Skip to content

Privacy Policy

To comply with the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and applicable guidelines, we inform you that, in order to fulfill our objectives and improve our services, we will collect the information detailed in the “Data to Be Collected” section. This information will be gathered through various means, such as call centers, phone calls, text messages, digital applications, official social media channels, emails, websites, interviews, surveys, and forms completed at SALARA facilities or points of sale. Additionally, we may collect data through the companies we hire for client acquisition, as specified in the “Associated Companies” section.

SALARA also informs you that the “Data to Be Collected” will be used solely and exclusively for the following purposes: (a) To identify clients and potential clients;

In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and applicable guidelines, SALARA informs you that the “Data to Be Collected” will be obtained for the following “Penalties”:

i) From each client or potential client: full name, official identification, date of birth, full address, contact phone numbers, and email address. In cases of reservations and/or the contracting of services or the purchase of products at SALARA, the banking information collected will include the credit or debit card number, full name of the cardholder, expiration date, and security code. Additionally, for invoicing purposes, we will collect the full Federal Taxpayer Registry (RFC), name or business name, tax address, and email address for billing purposes.

ii) Data necessary to complete and manage reservations and/or provide the requested services or products, including information related to third parties.

iii) If you wish to create an account on the SALARA website for lodging reservations, service bookings, or product purchases, we will require a username and a password. These will remain confidential.

DURING YOUR VISIT TO THE SALARA WEBSITE:

The SALARA website uses cookies, web beacons, and similar technologies—custom identifiers that transfer or generate information on the devices you use to access the site. These technologies allow the site to recognize you and optimize your interaction, making it more efficient and user-friendly. They also track your interaction with the site to provide purchase recommendations, special offers, and advertisements aimed at enhancing your experience.

If you do not agree with the use of cookies, web beacons, or similar technologies, you may disable them by adjusting your browser settings to reject them.

SALARA informs you that, in order to fulfill the “Purposes” for which the “Collected Data” is obtained, SALARA may transfer this information to the following companies. These entities are required to use the information exclusively for the same “Purposes” specified in this Privacy Notice and in accordance with its terms:

By clicking “ACCEPT,” you confirm that you have read and understood the privacy notice. I agree to the collection, use, and sharing of my personal information by SALARA, including its transfer to third parties for the purposes described in this notice. I acknowledge that if I do not accept these terms, I will not be able to access the hotel’s services or purchase its products.

Privacy Policy

This Privacy Policy explains how SALARA collects and processes your personal information through your interactions with our websites, including any information provided when registering to receive our newsletter, using our applications, interacting with third parties, making a reservation, or participating in a contest.

SALARA’s websites are not intended for minors, and we do not knowingly collect personal data from individuals under 18 years of age.

We recommend that you read this Privacy Policy together with any other privacy or fair-processing notices we may provide at specific times when collecting or processing your personal information. These additional notices are intended to give you full transparency about how and why your information is used, and this Privacy Policy is designed to complement those notices, not replace them.

What Personal Information Do We Collect?

Personal information refers to any data that can identify you or be associated with you as an individual. The personal information we collect or receive about you can be classified into the following categories:

  • Identity Information: This includes your name, age, gender, passport details, information from government-issued identification documents, or details from accounts created on our websites.
  • Contact Information: This includes your home address, postal code, email address, and phone number.
  • Images: Such as CCTV recordings, publicly available photographs, and images taken at events or during your stay.
  • Financial and Payment Information: This includes credit card details, billing address, transaction history, and detailed expenses.
  • Reservation Information: This includes the type and location of rooms booked, restaurant and spa reservations, booked experiences, other guests linked to your reservation, and the dates of your stay.
  • Health Information: When relevant and provided by you, especially in relation to the services we offer (see the “Additional Notice on Health Information” below for more details).
  • Preference Information: This includes your preferences, such as pillow type, mattress firmness, special requests, interests, and data related to past service experiences.
  • Purchase History: Information about purchases made at our properties or through our websites, including delivery details and purchases made in our online store.
  • Public Information: Information available on public platforms, which may include details about you or comments about us or the hospitality industry.
  • Technical Information: Data about the device you use to interact with us, such as hardware model, IP address, geolocation, operating system, mobile network information, and unique device identifiers.
  • Correspondence Information: Any communication you have with us, such as inquiries or requests, may be stored, and relevant information from that correspondence may be added to your personal data.

How Do We Protect Personal Information?

We implement a range of physical, technical, and organizational security measures to help protect the integrity and security of your personal information in accordance with applicable data protection and privacy laws. These measures include, but are not limited to:

Adopting comprehensive monitoring and governance policies and processes,
Implementing technical and physical access controls,
Using encryption technologies,
Regular employee training on data protection, and
Conducting audits and routine maintenance of our systems to ensure ongoing security.
While we strive to protect your online account, internal profiles, and the personal information stored in our records, we cannot guarantee absolute security. Unforeseen factors such as unauthorized access, hardware or software failures, or other risks may compromise the protection of user information. Additionally, although we make efforts to ensure appropriate contractual safeguards, we cannot fully guarantee the security of personal information stored in databases managed by external providers.

It is important to note that any communication via email is not secure. This is an inherent risk of using email. Please keep this in mind when requesting information or sending forms through this channel.

Third-Party Services

This Privacy Policy does not cover, and we are not responsible for, the privacy practices, information handling, or other activities of any third-party websites or services, including those linked to our services. Links to third-party sites are provided for your convenience, and their inclusion does not constitute an endorsement by us or our affiliates. Access to these linked sites is at your own risk, and by doing so, you will be leaving our website.

We are not responsible for the collection, use, or disclosure of information (including data security practices) by third-party organizations such as social media platforms (e.g., Facebook, Instagram), application providers (e.g., Apple, Google, Microsoft), operating system providers, wireless service providers, device manufacturers, or other third parties. We encourage you to review the privacy policies of these third parties to understand how they may handle your personal information.

Security

We employ a range of organizational, technical, and administrative measures to protect personal information within our organization. These efforts include:

(a) Maintaining the confidentiality, integrity, availability, and resilience of our processing systems and services; and

(b) Ensuring the timely recovery of personal information in the event of a physical or technical incident.

While we strive to ensure the highest level of security, no data transmission or storage system can be guaranteed to be completely secure. We cannot fully guarantee the protection of any information you transmit to us. If you suspect that your interaction with us is no longer secure, please contact us immediately as detailed in the “Contact Us” section.

Use of Services by Minors

Our services are not designed for individuals under thirteen (13) years of age. We strongly encourage parents and guardians to supervise minors’ online activities and ensure they do not provide personal information through our services.

Commitment to Data Protection

We are committed to complying with all applicable laws, regulations, and mandatory governmental standards relating to the protection of personal information. The personal information you provide may be used in connection with employment and business processes within SALARA Hotels, as well as in our communications with clients. As a result, your personal information may be transferred to other SALARA entities, where it will be processed in accordance with this Privacy Policy and the relevant laws of each jurisdiction.

Please note that the countries in which we process data may have different legal standards that may not offer the same level of protection as those in your home country. If we transfer your personal information outside your jurisdiction, we will implement appropriate safeguards or rely on legally established mechanisms to ensure the lawful transfer of data across borders, thereby protecting your personal information.

Your Legal Rights

You have certain rights under data protection laws regarding your personal information. These rights include:

  • Request Access: You may request access to your personal information (commonly known as a “data subject access request”). This allows you to obtain a copy of the personal information we hold about you and verify that we are processing it lawfully.
  • Request Correction: You have the right to request the correction of any incomplete or inaccurate personal information we hold about you. We may need to verify the accuracy of the new information you provide to us.
  • Request Erasure: You may request the deletion or removal of your personal information when there is no valid reason for us to continue processing it. You also have the right to request deletion if you have successfully objected to the processing (see below), if we have processed your information unlawfully, or if we are required to erase your personal information to comply with local law. Please note that we may not always be able to comply with your request for specific legal reasons, which will be communicated to you when applicable.
  • Object to Processing: You may object to the processing of your personal information when we rely on legitimate interests (or those of a third party) and there is something about your particular situation that makes you object to the processing, especially if you believe it impacts your fundamental rights and freedoms. You also have the right to object to the processing of your personal information for direct marketing purposes. In certain circumstances, we may demonstrate compelling legitimate grounds for continuing to process your information, which override your rights and freedoms.
  • Request Restriction: You may request that we restrict the processing of your personal information in the following situations: (a) if you want us to verify the accuracy of the data; (b) if our processing is unlawful but you do not want us to delete the data; (c) if you need us to retain the data for legal claims; or (d) if you have objected to our use of your data and we need to verify whether we have overriding legitimate grounds to continue processing it.
  • Request Data Transfer: You have the right to request the transfer of your personal information to you or to a third party. We will provide your personal information in a structured, commonly used, and machine-readable format. This right applies only to automated information that you originally consented to provide or that we used to perform a contract with you.
  • Withdraw Consent: You may withdraw your consent at any time when we rely on consent to process your personal information. This will not affect the lawfulness of any processing carried out before your withdrawal. If you withdraw your consent, we may not be able to provide you with certain products or services, and we will inform you of this at the time of your withdrawal.

Regarding the Exercise of Your Rights:

No Fee Required: You will generally not have to pay a fee to access your personal information or to exercise any of your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in such circumstances.

What We Need From You:

To help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights), we may ask you to provide specific information. This is a security measure designed to prevent unauthorized disclosure of personal information. Additionally, we may contact you to request further details regarding your request in order to expedite our response.

We aim to respond to all legitimate requests within one month. However, if your request is particularly complex or if you have submitted multiple requests, it may take us longer to respond. In such cases, we will notify you and keep you informed of the status of your request.

Sensitive Information

We ask that you refrain from sending or disclosing any sensitive personal information to us, such as Social Security numbers, details concerning racial or ethnic origin, political opinions, religious or other beliefs, health information, biometric or genetic characteristics, criminal history, or trade union membership, whether through our services or by any other means.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page reflects the most recent revision. If we make significant changes to this Privacy Policy or to our information practices, we will notify you by posting the updated policy on our website. The changes will take effect once the revised Privacy Policy is published on our services. Your continued use of our services after these changes indicates your acceptance of the updated Privacy Policy.

Last Updated: October 11, 2024.