Privacy Notice

OM PROYECT, S.A DE C.V. (hereinafter “Grand Isla Navidad Resort”), located at Circuito de los Marinos S/N Fraccionamiento Isla Navidad, Manzanillo, Colima, Mexico, website https://www.islanavidad.com.mx, is responsible for the use and protection of your personal data, and we hereby inform you of the following:

Who is our data protection coordinator and how can you contact them?

Our data protection coordinator is the person within Grand Isla Navidad Resort who has been formally appointed by our general director to promote and safeguard the protection of the personal data in our possession, as well as to address the rights of data subjects.

For all matters related to the processing and protection of your personal data, you may contact our data protection coordinator by sending an email to the following address: reservations@islaresort.com.mx

For what purposes will we use your personal data?

The personal data we collect from you will be used for the following purposes, which are necessary to provide you with our services:

• To reserve and/or register you and provide the services you request or contract.
• To provide lodging and/or food and beverage services.
• To provide our facilities and services for meetings, weddings, banquets, or events.
• To grant memberships or day passes for exclusive use of our facilities.
• To provide free safe deposit box service.
• To provide parking services.
• To assist you in requesting taxi services.
• To address special needs you may have due to health conditions or disabilities.
• If you wish, to enroll you in our rewards programs and apply points to your account.
• If applicable, to provide immediate cash loans for extraordinary payments to third parties, charged to your account (“paid out”).
• To respond to lost and found requests.
• To monitor and charge for services and consumption.
• To create and maintain an up-to-date customer database.
• To issue invoices and/or payment receipts.
• To send account statements.
• To address clarifications, complaints, and inquiries.
• To process refunds or reimbursements.
• To conduct financial analysis of accounts receivable.
• In case of debt, to carry out collection efforts.
• If applicable, to prepare contracts or agreements for negotiated rates with deferred payments or billing dates.

Additionally, we will use your personal information for the following secondary purposes, which are not necessary to provide the requested services but allow us to offer better service and promote our offerings:

• To send you information about Grand Isla Navidad Resort and seasonal offers.
• To conduct surveys to evaluate your satisfaction and the quality of our services.
• Marketing, advertising, commercial prospecting.

If you do not wish your personal data to be processed for the aforementioned secondary purposes, or any of them, you may inform us by sending an email to our data protection coordinator.

Refusal to use your personal data for these purposes will not be a reason for us to deny the services you request or contract with us, and you have five business days to notify us, without prejudice to your right to later exercise revocation or objection.

What personal data will we use for these purposes?

To carry out the purposes described in this privacy notice, we will use the following categories of personal data: Identification; contact; financial and/or asset-related; employment; health data, which are considered sensitive personal data. We inform you that prior to collecting your sensitive personal data, we will request your express written consent to this privacy notice.que recabemos sus datos personales sensibles, solicitaremos su consentimiento expreso y por escrito del presente aviso de privacidad.

With whom do we share your personal information and for what purposes?

We inform you that your personal data may be transferred within the country to the following individuals or entities, without requiring your legal consent:

• Authorities to whom we must disclose data under law, to comply with applicable regulations.
• Authorities, when the transfer is necessary for the recognition, exercise, or defense of a right in a judicial process.
• Doctors, paramedics, or healthcare providers, in case of an accident, medical emergency, or health situation, to assist you.

Additionally, we may transfer your identification and contact personal data to the following individuals or entities, for which we do require your consent:

• Credit card payment processors, E-global and Prosa, if they request data regarding your transactions for charge clarifications. The purpose of the transfer is to assist these processors in resolving the issue.
• Nearby hotels, to assist you in securing accommodation if, due to circumstances beyond our control, we are unable to honor your reservation (only your name is transferred).
• Electronic mailing companies, to send you information about our services and promotions via email.
• Companies in the hotel and marketing sectors to promote our services.

If you do not express your refusal for these transfers, which you may do by sending an email to our data protection coordinator, we will understand that you have granted us your consent.

How can you access, rectify, or cancel your personal data, or object to its use?

You have the right to know what personal data we hold about you, what we use it for, and the conditions of its use (Access). You also have the right to request correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to have it deleted from our records or databases if you believe it is not being used properly (Cancellation); and to object to the use of your personal data for specific purposes (Objection), as permitted by applicable regulations. These rights are known as ARCO rights.

To exercise any of the ARCO rights, you may submit the corresponding request via email to our data protection coordinator, who will inform you of the procedure and requirements for exercising these rights and address any questions or comments you may have. You may also exercise your ARCO rights by requesting and completing the corresponding form at the reception of Grand Isla Navidad Resort, titled “ARCO Rights Request.” Our data protection coordinator will then follow up on your request in compliance with applicable regulations.

You may revoke the consent you have granted us. However, please note that not all requests will be applicable or we may not be able to immediately cease use, as we may be legally required to continue processing your personal data. You should consider that for certain purposes, revoking your consent may mean we can no longer provide the requested service or that your relationship with us may end.

To revoke your consent, you must submit your request via email to our data protection coordinator, who will inform you of the procedure and requirements for exercising this right and address any questions or comments you may have. You may also exercise your right of revocation by requesting and completing the corresponding form at the reception of Grand Isla Navidad Resort, titled “ARCO Rights Request.” Our data protection coordinator will then follow up on your request in compliance with applicable regulations.

How can you limit the use or disclosure of your personal information?

In addition to the procedure outlined in the previous section, you may limit the use or disclosure of your personal data in the following ways:

• Register with the Public Registry to Avoid Advertising of the Federal Consumer Protection Agency. For more information on this option, you may contact PROFECO directly or visit the following link: http://rpc.profeco.gob.mx.
• Send an email to our data protection coordinator requesting your inclusion in the “Operadora Badi Advertising Exclusion List,” to avoid receiving promotional information about our products and services.

Which authority is responsible for safeguarding personal data protection?

The Federal Institute for Access to Information and Data Protection (IFAI) is the authority responsible for ensuring compliance with legal provisions regarding personal data protection. For more information, you may visit the following website: www.ifai.gob.mx.

How can you learn about changes to this privacy notice

This privacy notice may undergo modifications, changes, or updates resulting from new legal requirements; from our own needs regarding the products or services we offer; from our privacy practices; from changes in our business model; or for other reasons.

We are committed to keeping you informed about any changes to this privacy notice through our website, which we kindly ask you to visit frequently to stay informed of any updates.

The procedure through which notifications about changes or updates to this privacy notice will be carried out is as follows: The current version of the privacy notice will be published on our website, including the date of the most recent update. You may consult this updated version by accessing the following link: https://www.islanavidad.com.mx

Date of most recent update: 16-06-2022.