Privacy notice for video surveillance

A. Responsible Identity


World Maya Tourist Services, with RFC STM970206QX7, operator of Hotel Plaza Magnolias and Plaza Magnolias Suites (hereinafter, Plaza Magnolias), located at Insurgentes 14, Col. Centro, San Cristóbal de las Casas, Chiapas, is a company committed to protecting your privacy. Our Data Protection Officer is the Personal Data Compliance Area and is located at the same address, you can contact them at the email: magnolias@plazamagnolias.com.mx.

B. Personal Data

Plaza Magnolias may collect your personal data as follows:
  • Identification: Name(s), surname(s).
  • Authentication: Signature.
  • Biometrics: Capture of your image with or without sound through a video camera; or any other technical means of capturing or recording images; placed in public areas of the facilities according to the purposes established in this Privacy Notice.
  • Physical location: Date of entry, time of entry and exit of the facilities.

C. Use of Sensitive Personal Data

Sensitive personal data are considered to be those personal data that affect the most intimate sphere of the data subject, or whose misuse could give rise to discrimination or entail a serious risk to the data subject[cite: 3]. Plaza Magnolias does not collect sensitive personal data through its video surveillance systems.

D. Purpose and Treatment of Personal Information

Purposes that require the consent of the data subject: The personal information you provide us and the capture of your image will be used by Plaza Magnolias for control and security measures, prevention of crimes in general, and especially with regard to the property, its contents, and the people within it.

E. Limitation on the Use or Disclosure of Personal Information

At any time, you may express your refusal to the treatment of purposes that do not give rise to the legal relationship, for which you may request it from the email magnolias@plazamagnolias.com.mx.

F. Exercise of the Rights of Access, Rectification, Cancellation, and Opposition

Access, rectification, cancellation or opposition regarding the information provided to Plaza Magnolias indicated in the Federal Law on the Protection of Personal Data Held by Private Parties, or in any other applicable regulation, or the revocation of the consent given to us for the treatment of your personal data, may be carried out by delivering the request in writing to the Personal Data Compliance Area at the following address: Insurgentes 14, Col. Centro, San Cristóbal de las Casas, Chiapas, from 9 am to 2 pm, Monday to Friday or by email to magnolias@plazamagnolias.com.mx. This request must contain at least the following:
  1. Name of the Personal Data Holder[cite: 3].
  2. Email for receiving notifications[cite: 3].
  3. Documents proving your identity or, where applicable, the legal representation of the data subject[cite: 3].
  4. Clear and precise description of the personal data concerning which the right is exercised and the right being exercised[cite: 3].
  5. Any other element or document that facilitates the location of the personal data.
If the request does not meet any of the requirements mentioned above, the Personal Data Compliance Area may request within 5 days of receiving the request to provide the necessary elements or documents to process it[cite: 3]. You will have 10 days to respond to the request, and if you do not respond within that period, the corresponding request will be deemed not submitted.
Attention periods, unless the applicable regulations indicate otherwise, will be a maximum of 20 days from the date of receipt of the request to communicate the determination adopted, so that, if applicable, it becomes effective within 15 days following the issuance of the response[cite: 3]. The aforementioned periods may be extended only once for an equal period, provided that the circumstances justify it.
In order to protect your confidentiality, Plaza Magnolias will send the response to your request to the email address you have provided for this purpose and will keep it available to the applicant at the address indicated in the previous paragraph. Likewise, you may request information related to the conditions and generalities of the processing of your personal data by requesting it at the aforementioned email address.

G. Revocation of Consent for the Use of Your Personal Data

You may revoke the consent you have granted us for the treatment of your personal data[cite: 3]. It is important to note that Plaza Magnolias may not be able to attend to your request or conclude it immediately in all cases, as it may be necessary to continue processing your personal data due to a legal obligation[cite: 3]. Likewise, you must consider that, for certain purposes, the revocation of your consent may imply that we cannot continue offering you the service you requested, or the termination of your relationship with Plaza Magnolias.
To revoke your consent, you must submit your request in writing to the Personal Data Compliance Area at the following address: Insurgentes 14, Col. Centro, San Cristóbal de las Casas, Chiapas, from 9 am to 2 pm, Monday to Friday or by email to magnolias@plazamagnolias.com.mx[cite: 3]. The processing of such request and its attention will be carried out in accordance with the provisions of the previous Section F.

H. Control and Security of Personal Information

Plaza Magnolias undertakes to take the necessary measures to protect the information collected, using security technologies and control procedures in the access, use, or disclosure of your personal information[cite: 3]. However, no security system or data transmission over which the company does not have absolute control and/or depends on the internet can guarantee to be completely secure.

I. Transfers

Plaza Magnolias only transfers personal data in the cases established in Article 36 of the Federal Law on the Protection of Personal Data Held by Private Parties.

J. Term of Conservation of Personal Data

Your personal data will be kept as long as the purpose for which they were collected remains. In this case, the period of conservation of personal data will be restricted to the minimum necessary. When their conservation is no longer necessary, Plaza Magnolias will keep those data that may be necessary to address any issues related to their processing. After the deadline, personal data will be deleted by adopting appropriate security measures to ensure their total destruction.

K. Changes to this Privacy Notice

Plaza Magnolias may update this Privacy Notice at any time. In the event of substantial changes to this Notice, we will notify you through our website or visible announcements in our facilities. Therefore, we suggest you periodically visit this privacy notice to be aware of any update. I acknowledge and accept the terms and conditions set forth in this Privacy Notice, and if not, I will communicate it to Plaza Magnolias as stated in Sections E, F, and G of this Privacy Notice. In case of any dissatisfaction or complaint regarding the processing of your personal data, in addition to contacting the person responsible as per this notice, you can contact the National Institute of Transparency, Access to Information and Personal Data Protection in Mexico, or the competent authority in case a different regulation applies than Mexican law. Date of last update: July 27, 2026.