Privacy advice
PRIVACY NOTICE
ONE. IDENTITY AND IDENTIFICATION OF THE DATA CONTROLLER
ESTANCIA INN, S.A. DE C.V., with Federal Taxpayer Registry (RFC) number EIN040217BF4, hereinafter referred to in this Privacy Notice as ESTANCIA INN, operating under the trade name ESTANCIA INN, with its principal address at BLVD. BENITO JUÁREZ NO. 1200, EL ENCANTO (BETWEEN AVENIDA D AND 1RA STREET), ZIP CODE 21440, TECATE, BAJA CALIFORNIA, MEXICO.
Hereinafter, the terms “the company,” “this company,” “the data controller,” and “we” shall also refer to ESTANCIA INN.
The policy contained in this Privacy Notice applies to all our operations throughout the Mexican Republic. All our employees, affiliated companies, subsidiaries, subcontractors, and authorized third parties are required to know, understand, promote, and implement the guidelines established herein.
TWO. PERSONAL DATA WE PROCESS
Under this Privacy Notice, we assume responsibility for the collection and processing of your Personal Data, which may be obtained as a result of: (i) your relationship as an employee or staff member; (ii) your relationship as a customer, business partner, supplier, prospective customer, or prospective supplier; and (iii) your visits to our facilities, including all geographical locations where we maintain offices and/or operations.
NOTE: Due to the nature of our operations, we do not collect Personal Data considered sensitive under applicable legislation, except in the case of our employees. Likewise, we do not collect Personal Data from minors or persons legally declared incapacitated unless we have obtained authorization from their corresponding legal representative.
a) Any individual or legal entity that has a direct or indirect relationship with us, visits our facilities, or uses our digital platforms:
Any information concerning an identified or identifiable individual necessary for: (i) browsing our website or (ii) registering visits to our facilities.
b) For our customers and suppliers:
Full name, place and date of birth, address, telephone numbers, email address, age range, Federal Taxpayer Registry (RFC), including the corresponding periodic tax compliance certificates, occupation, financial information, permits or authorizations to conduct business activities, nationality or citizenship, marital status, and, in general, any information concerning an identified or identifiable individual.
For legal entities, such information may include, without limitation, articles of incorporation and amendments recorded in public instruments, powers of attorney granted to legal representatives, Federal Taxpayer Registry (RFC), financial information, permits or authorizations to conduct business activities, and other related documentation.
c) For our employees:
First and last names, date of birth, address, landline and/or mobile telephone numbers, email address, age range, Federal Taxpayer Registry (RFC), nationality or citizenship, marital status, sex, photographs, and information concerning physical characteristics, commonly known as biometric data, such as voice recognition, fingerprints, facial recognition features, and similar information.
Not all of the aforementioned information will necessarily be collected.
We may also collect educational information, immigration information, financial information, reference information, and, in general, any information concerning an identified or identifiable individual working as an employee of an organization, including medical and family information.
Furthermore, the Privacy Notice expressly accepted by our employees upon hiring shall form an integral part of this document.
This company obtains or may obtain your Personal Data through the following means:
(i) In person: When you provide information to one of our employees, complete physical forms or web-based forms made available by ESTANCIA INN to customers, suppliers, and the general public, or register at the reception desk of any of our facilities.
(ii) Directly: When you provide information by telephone or through electronic and digital means.
(iii) Personally: From each employee working at our facilities.
(iv) Indirectly: When Personal Data is transferred to this company by duly authorized third parties in compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties.
However, we hereby disclaim responsibility for any dispute between the Personal Data subject and the third party that transferred such information under its own privacy policies, through which that third party represents that it obtained the data subject’s consent for the processing and transfer of such information.
The Data Controller may request and process official identification information and biometric data belonging to data subjects, including, without limitation, fingerprints, facial images, digitized handwritten signatures, voice recordings, iris information, and other personal characteristics or official documents, such as the Unique Population Registry Code (CURP) or electronic signatures.
Such information shall be processed exclusively for identification, authentication, compliance with legal or contractual obligations, and the prevention of identity theft or impersonation.
This processing shall be carried out in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations, as well as Articles 91, 91 BIS, and 92, and other applicable provisions of the General Population Law, which authorize the competent authorities to establish and verify identity records containing biometric data and personal characteristics.
The Data Controller shall apply appropriate technical and administrative standards to ensure the confidentiality, integrity, and exclusive use of such information for the purposes disclosed.
Furthermore, to protect the safety of individuals, property, and facilities, the Data Controller informs you that upon entering our premises, you may be subject to verification or access control procedures, which may include:
- Visual inspections or inspections using metal detectors.
- Non-intrusive inspection of personal belongings, such as backpacks, handbags, or briefcases.
- Registration of entry and exit.
- Image or video recording through surveillance systems.
- Identity verification using official identification documents or biometric information, when applicable.
Any information collected through these measures shall be processed exclusively for security purposes, loss prevention, access control, and compliance with internal policies, in strict accordance with the principles of lawfulness, proportionality, and purpose limitation established by the Federal Law on the Protection of Personal Data Held by Private Parties.
The Data Controller informs you that, for purposes of identity verification, updating records, access control, monitoring the delivery of assets, regulatory compliance, risk prevention, and protection of property or legal interests, it may periodically or repeatedly request that data subjects present official documents and identification.
Such documents may be photographed, scanned, or photocopied by the Data Controller and its employees and stored in physical and/or electronic formats exclusively for the purposes described above.
THREE. PURPOSES OF PROCESSING YOUR PERSONAL DATA
The collection and processing of the aforementioned Personal Data are carried out for the following purposes:
(i) Maintaining records of employees working at our facilities, as well as visitors, including customers, suppliers, and other third parties entering facilities where we conduct operations.
(ii) Ensuring appropriate access control and security at our facilities, including obtaining contact information.
(iv) Properly directing requested information to provide the best possible information services.
(v) Complying with all legal provisions applicable to ESTANCIA INN within the framework of its business relationship with you.
(vi) Protecting the interests and rights of ESTANCIA INN in accordance with applicable legal provisions.
(vii) Pursuing any commercial purpose deemed appropriate by this company, provided it does not violate applicable laws.
FOUR. TRANSFERS OF PERSONAL DATA
ESTANCIA INN may transfer your Personal Data to third parties to fulfill the purposes established in this Privacy Notice, including commercial purposes and any other purposes not prohibited by law.
The Personal Data described above may also be disclosed to competent authorities in accordance with applicable legislation.
Such transfers may be domestic or international. By making this Privacy Notice available to you, you are deemed informed of these transfers, and if you do not express any objection, you are understood to grant your unrestricted consent thereto.
You are hereby informed that by accepting this Privacy Notice, the Data Subject authorizes us, in our capacity as Data Controller, to transfer Personal Data to third parties, whether Mexican or foreign, without the need to obtain consent again, whenever the transfer falls within any of the following circumstances:
(i) The transfer is provided for under a law or treaty to which Mexico is a party.
(ii) The transfer is necessary to protect the Data Subject’s health, including medical prevention or diagnosis, the provision of healthcare, medical treatment, or the management of medical services.
(iii) The transfer is made to subsidiaries or affiliates under the common control of the Data Controller, to a parent company, or to any company within the same corporate group operating under the same internal processes and policies.
(iv) The transfer is necessary under a contract entered into or to be entered into in the interest of the Data Subject.
(v) The transfer is necessary or legally required to safeguard a public interest or for the administration or enforcement of justice.
(vi) The transfer is necessary for the recognition, exercise, or defense of a right in judicial proceedings.
(vii) The transfer is necessary to maintain or fulfill a legal relationship between the Data Subject and the Data Controller.
FIVE. WEBSITES
To improve the user experience on our company’s website or websites, we may use “cookies” and “web beacons,” although this does not constitute confirmation that such technologies are currently being used or will be used.
For the purposes of this Privacy Notice, cookies are text files containing information that a website transfers to a user’s computer hard drive to store certain records and preferences.
We may use cookies to better understand how users interact with our website and the services provided.
Our website may allow advertising or third-party features that send cookies to users’ computers.
Cookies do not personally identify users; they identify their computers.
Likewise, web beacons are images embedded in a website or email that may be used to monitor visitor behavior, including collecting information such as the user’s IP address, browsing times, duration of interactions with the website, sections visited, websites accessed before ours, and browser type.
Users may modify their computer and/or browser settings to stop accepting cookies and/or web beacons or to confirm whether they wish to accept them.
Additionally, we may collect personal information such as browser type, operating system, IP address, and website activity data, although this does not constitute confirmation that such information is currently being collected or will be collected.
Such information may allow us to monitor your behavior as an internet user, create personalized content, and provide improved services and a better browsing experience on our website.
Regarding mobile applications, this company may use them to facilitate its relationships with employees, customers, suppliers, business partners, and the general public.
Accordingly, this Privacy Notice shall also apply to the use of such mobile applications and shall be understood as incorporated into the terms and conditions displayed in their respective sections.
If you do not agree with the privacy policy contained in this notice, please refrain from using such mobile applications or websites.
SIX. VIDEO RECORDINGS AND PHOTOGRAPHS AT OUR FACILITIES
If deemed appropriate, we may currently operate or may implement video recording systems in the future.
Accordingly, you are hereby notified that you may be recorded by security or surveillance cameras, which may record images and video, with or without sound, 24 hours a day, 7 days a week.
By this notice, YOU AUTHORIZE this company to capture such videos and photographic images for non-profit purposes and without commercial distribution during your stay at any of our facilities.
SEVEN. ACCEPTANCE AND CONSENT OF THE DATA SUBJECT
Failure to object to this Privacy Notice shall be interpreted as an expression of consent by the Data Subject for the Personal Data provided to ESTANCIA INN, directly or indirectly, to be processed by this company in accordance with applicable legislation.
Therefore, we understand that you grant your acceptance and consent, without reservation, to the processing of your Personal Data.
The Data Subject declares that the information provided is truthful and up to date and agrees to notify us of any changes to the Personal Data provided as soon as reasonably possible.
In accordance with the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations, the Data Controller informs you that the Data Subject’s consent shall not be required for the processing of Personal Data when:
(i) Such processing is provided for by law.
(ii) The Personal Data is contained in publicly accessible sources.
(iii) The Personal Data has undergone a prior dissociation or de-identification procedure.
(iv) Processing is intended to fulfill obligations arising from a legal relationship between the Data Subject and the Data Controller.
(v) An emergency situation exists that could potentially cause harm to an individual’s person or property.
(vi) Processing is essential for medical care, prevention, diagnosis, healthcare services, medical treatment, or management of healthcare services, when the Data Subject is unable to grant consent, under the terms established by the General Health Law and other applicable legal provisions, provided that such processing is performed by a person subject to professional confidentiality or an equivalent obligation.
(vii) A resolution has been issued by a competent authority.
EIGHT. ARCO RIGHTS
In accordance with the Federal Law on the Protection of Personal Data Held by Private Parties, you have the rights of Access, Rectification, Cancellation, and Opposition regarding the processing of your Personal Data, commonly known as ARCO Rights.
These rights are briefly explained below:
1. Access: The right to access the Personal Data we maintain about you and obtain information concerning the conditions under which your data is processed.
2. Rectification: The right to request correction of your Personal Data when it is inaccurate or incomplete.
3. Cancellation: The right to request the cancellation of Personal Data we hold about you when you believe it is not being processed in accordance with the principles and obligations established by the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations.
4. Opposition: The right to object to the processing of your Personal Data when there is a legitimate reason or to prevent your data from being processed for specific purposes.
The Federal Law on the Protection of Personal Data Held by Private Parties also grants you the right to revoke previously granted consent for the processing of your Personal Data at any time. The Data Subject may freely express disagreement with the provisions of this Privacy Notice.
To exercise your ARCO Rights, request or revoke previously granted consent, submit questions or complaints concerning the processing of your Personal Data, or inquire about additional options available to limit the use or disclosure of your information, please contact our Personal Data Department (“DDP”).
Requests for cancellation, revocation, and opposition shall be evaluated under the terms established by the Federal Law on the Protection of Personal Data Held by Private Parties.
Whether such requests are granted or denied shall be determined in consideration of the provisions of that law and other obligations applicable to this company, including tax, commercial, consumer protection, public security, and health regulations.
Please note that your requests may not be granted when processing is necessary to comply with a legal obligation imposed upon or assumed by ESTANCIA INN.
In all such cases, a written request must be submitted as described above.
Our Personal Data Department will inform you of:
(i) The information required to verify your identity and the documents you must submit with your request.
(ii) The timeframes within which you will receive a response.
(iii) The procedure for submitting your request, including any available forms.
(iv) The method or means through which the requested information will be provided to you.
NINE. PERSONAL DATA DEPARTMENT (“DDP”)
Our Personal Data Department may be contacted through the following channels.
In all cases, please include your full name and contact information.
Email: recepcion@estanciainn.com.mx
Telephone: +52 665 655 9184
Main Address:
BLVD. BENITO JUÁREZ NO. 1200, EL ENCANTO
(BETWEEN AVENIDA D AND 1RA STREET)
ZIP CODE 21440
TECATE, BAJA CALIFORNIA, MEXICO.
TEN. MODIFICATIONS TO THE PRIVACY NOTICE
The Data Controller reserves the right to make changes to this Privacy Notice.
Any modifications shall be communicated through publication on the website https://estanciainn.com.mx and/or any website that may replace it.
ELEVEN. COMPETENT AUTHORITY FOR PERSONAL DATA DISPUTES
This Privacy Notice is provided to you as the Data Subject in accordance with Articles 7, 14, 15, 35, and other applicable provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, as well as the applicable provisions of its Regulations.
It also takes into consideration the international treaties and agreements concerning personal data protection to which the Mexican State is a party, as well as any other international agreements that, by their nature, are binding upon ESTANCIA INN.
We inform you that the competent authority for resolving disputes arising from the application of the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations is the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).
You may obtain further information through its official website:
You may contact this institution to file a complaint.
Last updated: March 30, 2026.
