Full Privacy Notice Volunteers
A. Identity and address of the Data Controller
Pursuant to the provisions of the Ley federal de Protección de Datos Personales en Posesión de los Particulares, (LFPD – Mexican acronym) and other applicable regulations, Fundación Palace Resorts, I.A.P., (hereinafter commonly referred to as, “Fundación Palace®” or the “Data Controller") whose domicile for hearing and receiving notices is: Carretera Cancún Puerto Morelos km 21, Manzana 01, Lote 1 – 11, Edificio A, Supermanzana 47, Municipio Benito Juárez, Cancún, Quintana Roo, C.P. 77506, expressly states:
B. Personal information collected and processed
For the purposes described in this Privacy Notice we collect the following types of personal information:
1. Identification data;
2. Academic and educational data, and
3. Contact data.
You, in your capacity as volunteer, have the responsibility to inform the people you have provided as references (for example, family members) about the existence of your volunteering and about the processing of the contact personal information you have provided for the purposes stated in this Privacy Notice. Where appropriate, you must inform them about the means through which they may know the full version of this Notice.
The acceptance of this Privacy Notice entails the authorization that you, in your capacity as volunteer, grant the Data Controller to contact the references that you have provided.
C. Processing of sensitive personal information
Fundación Palace® does not collect sensitive personal information for the purposes described in the following section.
D. Processing purposes
a) Relevant and necessary purposes
1. Management, control and administration of the assistance of volunteers.
2. Management, control and administration of the activities assigned to the volunteers.
3. Communication of information related to volunteer activities.
4. Ensure compliance with the procedures established by Data Controller.
5. Contact in case of emergency.
6. Statistics and historical record of volunteers.
b) Additional purposes
- Communication of activities and events related to the activities of our volunteers.
E. Transfers of personal information
For the purposes indicated in the previous section, no data transfers are made to third parties.
Your personal information will not be transfer to third parties without your consent except under the circumstances described in Article 37 of the LFPD, and in all cases such transfer will be performed in strict compliance with Article 17 of the LFPD Regulations.
F. Exercise of ARCO Rights before the Data Controller
Under all legal circumstances you may exercise your rights of access, rectification, cancellation and opposition (ARCO Rights) using the legal procedures we have set up.
All such requests should be sent in writing to the address indicated in paragraph A of this Notice, addressed to our Data Protection Officer and comply with the applicable legal requirements.
Information requests should contain the following:
I. Your name and address or other means of providing you with a response;
II. Valid identification documents or power of attorney, as the case may be;
III. A clear and precise description of the personal information on which you wish
IV. to exercise your ARCO Rights, and
V. Any other element or document that could facilitate locating your personal
VI. information.
The Data Controller will answer you with a decision within twenty business days counted from the date on which your request is received. If the request is admissible it will be put into effect within fifteen business days following the date on which the Data Controller advises you of the decision. In the event that the information you provide is incorrect or insufficient, or if you fail to send the necessary identity documents or power of attorney, the Data Controller will ask that you correct such deficiencies within five business days after receiving your request and you will have ten business days to comply, counted from the day after you receive such notice. The process will be terminated if you do not answer within the required time. You may obtain the requested personal information in the form of plain copies or electronic documents in common formats (Word, PDF, etc.), by means of authorized restricted access to the systems (access) containing your personal information or by any other legal means that guarantee and evidence the exercise of the requested right.
Alternatively, after fulfilling all the above-mentioned requirements, Data Subject may submit his/her request by e-mail to derechosarco@palaceresorts.com, indicating “ARCO Rights” and/or “Consent withdrawal” in the Subject line. Response times will remain the same as those mentioned in the immediately preceding paragraph. The use of electronic means in the exercise of ARCO rights authorizes the Data Controller to answer the request using the same means unless Data Subject specifically requests another format.
You will be responsible for maintaining your personal information in possession of the Data Controller updated. Therefore, under all circumstances you are responsible for the truth, accuracy, validity and quality of the personal information you provide, and you hereby undertake to keep such information updated by informing the Data Controller of any changes.
G. Exercise of ARCO Rights before social network service providers
The exercise of ARCO Rights before social network service providers in which the Data Subjects-users of such networks have created a profile shall be governed in accordance with the applicable legislation, under the terms and conditions set forth in the Privacy Notices, Privacy Policies and/or Legal Notices that each service provider has established in the social networks that they operate and manage.
H. Consent withdrawal
You may withdraw your consent to have your personal information processed, without retroactive effect, in all cases in which such withdrawal does not make it impossible to comply with the legal obligations derived from a current legal relationship between you and the Data Controller. The procedure for consent withdrawal, if applicable, will be the same as the one established in the immediately preceding section for the exercise of ARCO Rights.
I. Use and disclosure limitations of your personal information
You may limit the use or disclosure of your personal information by sending to our Data Protection Officer a request to that effect. The requirements for personal identification and the procedure for answering your request remain the same as those indicated in section “Exercise of ARCO Rights”. The Data Controller has the means and procedures to ensure the inclusion of some of your information into its own exclusion lists when you expressly request your inclusion on it. The Data Controller will grant the corresponding enrollment constancy to the Data Subjects requesting their registration.
J. Amendments or updates to this Full Privacy Notice
The Data Controller may amend, update, extend, or otherwise change the content and scope of this Full Privacy Notice at any moment and at its own discretion. In such cases, Fundación Palace® will publish the changes on the “Privacy Notices” section of the website www.fundacionpalace.org. Changes to this Privacy Notice can also be communicated by e-mail when such mean of communication had been stablished as a communication channel between you and the Data Controller, during the term of a legal relationship.
Last updated: October 25th, 2020.