Privacy notice

A. Identity of the Data Controller


Servicios Turísticos del Mundo Maya, with RFC STM970206QX7, for the commercialization of the products and/or lodging services it administers and/or distributes through Hotel Plaza Magnolias and Plaza Magnolias Suites (hereinafter, Plaza Magnolias), located at Insurgentes 14, Col. Centro, San Cristóbal de las Casas, Chiapas, is a company committed to protecting your privacy. Our Data Protection Officer is the Personal Data Compliance Area and is located at the same address, you can contact them at the email: magnolias@plazamagnolias.com.mx.


B. Personal Data

For the purposes indicated in this Privacy Notice, Plaza Magnolias may collect your personal data in various ways: when the information is provided directly by you; when you visit Plaza Magnolias’ websites; when you use the services offered by Plaza Magnolias online for the data you authorize Plaza Magnolias to take from your social networks (Facebook, X, Instagram, LinkedIn, Google) or when connecting to the Wi-Fi that Plaza Magnolias may offer; and when we obtain information through other means different from those mentioned above and allowed by applicable laws.

The personal data obtained by the aforementioned means are:

  • Identification: name(s), surname(s), telephone number(s), marital status, email address, age, date of birth, nationality, gender, RFC number, CURP, occupation, preferences related to lodging services and/or travel needs, license plate number and vehicle’s state of origin.
  • Physical location: home address, fiscal address; reservation and/or stay dates and codes, flight number, date and time, destination and hotel name, date and time of arrival and departure from the hotel.
  • Authentication: username and password, handwritten and electronic signature, official identifications, and partner/traveler number.
  • Financial: credit card number, income level, and tax status certificate.
  • Sensitive: credit and/or debit card number and expiration date and/or CVV, family environment, health status, medical reports, and official identifications of minors.
  • Biometric: voice and image recording.

C. Sensitive Personal Data


Sensitive personal data are considered to be those personal data that affect the most intimate sphere of the data subject, or whose misuse could lead to discrimination or pose a serious risk to the data subject. In particular, sensitive data are considered to be those that can reveal aspects such as racial or ethnic origin, current and future health status, genetic information, religious, philosophical and moral beliefs, labor union affiliation, political opinions, sexual preferences. In the event that you require a specific service or product for which you provide this data, Plaza Magnolias will use it only to provide that service, manage reservation cancellations, identify travel needs, and meet your specific needs.


In the event of health emergency(s), Plaza Magnolias, under the applicable regulations, will collect health-related data for the sole purpose of achieving health protection for you and others present in the hotel or any property managed by Plaza Magnolias, information that will only be kept for the time necessary to fulfill that purpose.


D. Purpose and Processing of Personal Information


Purposes that give rise to the legal relationship and are necessary for the provision of the service:


  • The personal information you provide will be used by Plaza Magnolias to provide the services and/or products you request or that are part of a program you have enrolled in or a purchase you have made: reservations, organization of events and social meetings, purchase of tourist products and/or services, customer service, collection management; providing your data, when necessary, to the respective supplier.

  • Plaza Magnolias may use the personal information you provide to offer you better service and, if necessary, to identify your preferences during your stay and make it more enjoyable.

Purposes that require the consent of the data subject as they do not give rise to the legal relationship nor are necessary for the provision of the service and that you consent to carry out:


  • Likewise, the information can be used to offer you promotions and tourist and commercial products, send promotions, special services, newsletters, surveys, prize draws, and other online contests, transferring your personal data to affiliated companies when necessary.

  • Data analysis can be carried out using technologies with the aim of creating profiles related to your stays and travel preferences that allow us to evaluate our service and personalize communication and promotions designed for you.

E. Limitation on the Use or Disclosure of Personal Information


For you to limit the use and disclosure of your Personal Information regarding purposes that do not give rise to the legal relationship, we offer you the following means:

  • If you are a resident of Mexico, you can register in the Public Registry for Avoiding Advertising, which is the responsibility of the Federal Consumer Protection Agency (PROFECO), so that your personal data are not used to receive advertising or promotions from companies offering goods or services. For more information, you can visit the PROFECO website or contact them directly.
  • Request at the email address magnolias@plazamagnolias.com.mx, indicating the email(s) and/or telephone number(s) that require limitation.

F. Exercise of Rights of Access, Rectification, Cancellation, and Opposition


Access, rectification, cancellation, or opposition regarding the information provided to Plaza Magnolias as indicated in the Federal Law on Protection of Personal Data Held by Private Parties, or any applicable regulations, can be done by submitting a written request to the Personal Data Compliance Area at the following address: Insurgentes 14, Col. Centro, San Cristóbal de las Casas, Chiapas, from 9 to 14 hours from Monday to Friday or to the email address magnolias@plazamagnolias.com.mx.


This request must contain at least the following:

  1. Name of the Data Subject.
  2. Email address for notifications.
  3. Documents proving your identity or, if applicable, the legal representation of the data subject.
  4. Clear and precise description of the personal data regarding which the right is to be exercised and the right to be exercised.
  5. Any other element or document that facilitates the location of the personal data.

If the request does not meet any of the requirements mentioned above, the Personal Data Compliance Area may request within 5 days of receiving the request that you provide the necessary elements, documents, and/or forms to process it. You will have 10 days to comply with the request, if no response is received within that period, the corresponding request will be deemed not submitted.


The processing times, unless otherwise specified by applicable laws, shall be a maximum of 20 days from the date the request is received to notify the determination made, so that if it is deemed appropriate, it can be implemented within 15 days following the issuance of the response. The aforementioned deadlines may be extended once for an equal period, provided that the circumstances of the case justify it.


In order to protect your confidentiality, Plaza Magnolias will send the response to your request to the email address you provided for this purpose and will keep it available to the applicant at the address indicated in the previous paragraph. You can also request information related to the conditions and generalities of the processing of your personal data by requesting it from the email address mentioned above.


G. Revocation of Consent for the Use of your Personal Data


You can revoke the consent you have given us for the processing of your personal data. It is important to note that in not all cases Plaza Magnolias will be able to comply with your request immediately, as legal obligations may require us to continue processing your personal data. You should also consider that, for certain purposes, the revocation of your consent may imply that we cannot continue providing the service you requested, or end your relationship with Plaza Magnolias.


To revoke your consent, you must submit your written request to the Personal Data Compliance Area at the following address: Insurgentes 14, Col. Centro, San Cristóbal de las Casas, Chiapas, from 9 to 14 hours from Monday to Friday or to the email address magnolias@plazamagnolias.com.mx. The processing of such request and its handling will be carried out in accordance with the provisions of Section F above.


H. Control and Security of Personal Information


Plaza Magnolias is committed to taking the necessary measures to protect the information collected, using security technologies and control procedures for access, use, or disclosure of your personal information without authorization, for example, storing the personal information provided on servers located in Data Centers with limited access controls. For online transactions, we also use security technologies to protect the personal information transmitted to us through various electronic means, such as using a secure server under the Secure Socket Layer (SSL) protocol. However, no security system or data transmission system over which the company does not have absolute control and/or depends on the internet can guarantee complete security.


    I. Use of Image Plaza Magnolias may make recordings or take photographs for security and service quality purposes. Capturing your image will be used by Plaza Magnolias for control and security measures, prevention of offenses in general, and especially regarding the property, its contents, and the people in it.

J. Electronic Means and Cookies


If you use electronic means in relation to your personal data, cookies will be generated to provide you with a better service. Cookies are small pieces of information sent by the website to your browser. Cookies are stored on your computer’s hard drive and are used to determine your preferences when connecting to our site’s services, as well as to track certain behaviors or activities carried out by you within our sites. In some sections of our site, we require that customers have cookies enabled, as some functionalities require them to work.

Cookies allow us to:

  1. Recognize you when you enter our sites and offer you a personalized experience.
  2. Know the specific site settings specified by you.
  3. Calculate our audience size and measure some traffic parameters.

The “help” button in the toolbar of most browsers will tell you how to avoid accepting new cookies, how to make the browser notify you when you receive a new cookie, or how to disable all cookies.


K. Transfers

Plaza Magnolias only transfers personal data in the following cases:

  • In cases established in Article 36 of the Federal Law on Protection of Personal Data Held by Private Parties.
  • In cases where another international standard applies, transfers will only be made in the cases specified therein.
  • In cases where it is necessary to provide them to third-party providers regarding the services or products you are contracting.
  • In cases where you authorize the transmission of your data by physical or electronic means such as “Google Signals”.

L. Term of Personal Data Retention

Your personal data will be kept for as long as the legal relationship with you is maintained, until it is successfully concluded, and you do not exercise your right to deletion or until you revoke your consent. In any case, the retention period of personal data will be restricted to the minimum necessary, so that they will only be kept as long as the purpose for which they were collected remains.


M. Changes to this Privacy Notice

Plaza Magnolias may update this privacy notice at any time. In the event of substantial changes to this notice, we will communicate them through our websites indicated in Section A of this Privacy Notice.

I acknowledge and accept the terms and conditions set forth in this Privacy Notice, and if not, I will notify Plaza Magnolias as indicated in Sections E, F, and G of this Privacy Notice. In case of any dissatisfaction or complaint about the processing of your personal data, you can contact the National Institute for Transparency, Access to Information, and Personal Data Protection (INAI) in Mexico.


Last update date: July 27, 2026.