I. Entity Responsible for the Protection of your Personal Data.

Vacacionando.com S.A. de C.V. (Share The Experience), residing at Boulevard Kukulcán, kilometer 7 MZ 42 LT 13, Local 25-A Benito Juárez, Postal Code 77500, Cancún Quintana Roo Mexico is responsible for the processing of personal data collected from its referrals in terms of what is established by Article 3 fraction XIV of the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) as well as by the provisions contained in Articles 1, 3, and 5 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

II. Purposes of the Processing of Personal Data and type of data collected.

Our premium rewards program denominated Share The Experience allows our guests, clients, partners, to enjoy great economic benefits and special discounts when sharing their “experience” with their loved ones, family, friends, simply by sharing the name and telephone number of referred individuals (with prior authorization from the referred individuals) so that they can enjoy our vacation packages and services.

III. Transfer of personal data.

Personal data collected by Share The Experience may be shared with the goods and services providers who assist us, to provide those required by our guests, partners, and referrals, which are necessary to comply with the provision of contracted services, so for this transfer it will not be necessary to have the express consent of the data owner, in accordance with what is indicated by Article 37, fraction VII of the LFPDPPP, as well as by the provisions of Article 44 of the GDPR.

Except for the cases indicated above and unless one of the scenarios contained in Article 37 of the LFPDPPP and 49 of the GDPR occurs, the data provided by our partners, guests, referrals, and visitors will not be transmitted under any circumstances.

IV. Use of images

On the other hand, Share The Experience may use, print, reproduce, and publish the image(s) captured of partners, referrals, and visitors in printed, electronic media (blogs, social networks such as Facebook, Youtube, Instagram, websites), in all its manifestations, its interpretations or executions, its editions, its phonograms or videograms, and in its broadcasts, with the purpose of journalistically documenting and communicating information related to events held such as: delivery of prizes and rewards, either by itself or through external providers contracted for these activities.

Secondary Purposes

When the image of a guest, family member, partner, referral, or visitor is to be used for advertising purposes, this situation will be notified to the owners, and their express consent will be required in a specific format, to indicate whether they accept the processing of images for these purposes.

V. Means to limit the use or disclosure of personal data.

According to what is indicated in Article 16 fraction III of the LFPDPPP, Article 111 of the Regulations of the LFPDPPP, as well as Article 18 of the GDPR, those individuals who wish to limit the use and disclosure of their personal data; or no longer wish to continue receiving communications in relation to the non-essential purposes detailed in this notice, may at any time send an email to the address: datosvacacionando@mxrru.com requesting to stop being contacted for such purposes.

VI. Exercise of Access, Rectification, Cancellation, and Opposition (ARCO) rights; and revocation of consent.

In accordance with what is indicated in the LFPDPPP, as of January 6, 2012, the owners of personal data collected by Share The Experience may request access, rectification, cancellation (in case it is legally appropriate) or oppose the use of the same, as well as revoke their consent. To exercise these rights, they must follow the following procedure:

1. Send an email to our Privacy Officer at the address: datosvacacionando@mxrru.com requesting the exercise of ARCO rights, in which they must indicate: their full name, as well as the legal relationship they have with Share The Experience, the type of right they wish to exercise, identifying with precision the data regarding which they request access, rectification, cancellation, or opposition, or those in which they decide to revoke their consent, attaching one of the official identification documents: valid voter ID card issued by the National Electoral Institute (INE), corresponding national identification card (in the case of foreigners), professional license, valid passport, or valid immigration document; in order to accredit the identity or personality with which the request is made.
2. In the case of personal data whose owners are minors or incapacitated persons, this request must be formulated by the person who legally represents the rights of the minor or incapacitated person, either through proof of parental authority; or through a legally appointed guardian or curator.
3. Owners must send their request email for the exercise of ARCO rights and may attach the documents that are relevant to their request. For rectification requests, it is necessary to precisely indicate what modification should be made, attaching the documentation that justifies its appropriateness.
4. Requests for the exercise of ARCO rights must be presented during working hours and days, in accordance with what is indicated in the Federal Law of Administrative Procedure.
5. They must send the request to the email indicated in numeral 1) and an acknowledgment of receipt will be sent to them with the corresponding date of receipt. In the event that it does not comply with the legal requirements, they will be required to remedy their request. For this, the applicant will have a term of ten business days, therefore, if the interested party does not correct their request within said period, it will be considered as not presented.
6. In the event that your request has been sent on a Friday or on a non-working day, it may be received starting from the next business day after it was sent.
7. The request will be answered via email within a term of twenty business days counted from the date of acknowledgment of receipt. This period may be extended for an additional twenty business days when there are causes that justify it, this situation will be notified to the owner in accordance with what is established by Article 97 of the Regulations of the LFPDPPP.
8. In the event that the request is appropriate in accordance with the LFPDPPP and other current regulations, access will be granted, data will be rectified or cancelled, the right of opposition will be made effective or consent will be deemed revoked, within fifteen business days following the date on which the request is answered. This period may be extended for an additional fifteen business days when there are causes that justify it, this situation will be notified to the owner in accordance with what is established by Article 97 of the Regulations of the Law (RLFPDPPP).
9. In all cases where the request is appropriate, in terms of what is indicated by Articles 32, 33, 34, and 35 of the LFPDPPP, the delivery of the response will be free of charge through the email address that the data owner indicates for such purposes; in the event that they require the information to be delivered in a different manner, they must cover only the justified shipping expenses and/or the cost of reproduction in copies or other formats that are generated.

VII. Online management of Personal Data.

This section sets out the characteristics of the processing of personal data of users of our internet sites:

• www.sharesunset.com
• www.sharecancun.com
• www.shareflorida.net
• www.sharedominicana.com

LinkedIn: Share Sunset
Youtube: YouTube Channel
Institutional WhatsApp

Online Privacy Policy

The portals of Share The Experience register the information of the people who enter and “browse” them, recording: the internet address of the users (this address is, as a general rule, temporary; and is assigned by the internet service provider of the user at the moment they connect), the type of operating system used and the type of browser software used. Additionally, we can track the portal sites they are visiting. The information we obtain is used to help us create a better experience for the users of our Internet portals; all this process is done without us having knowledge of the name or any other information that allows us to identify the users. While they visit any of the portals of Share The Experience they do so anonymously, unless the user explicitly decides to identify themselves with us.

Share The Experience does not require users to provide personal data to use the Internet portals, unless this is necessary to accredit their status as a partner, which will be explained expressly. Some applications may require users to disclose some personal information, such as in contact forms; all this with the purpose of attending to comments, requests, doubts or suggestions, or contacting them if necessary. Within the contact forms, they will not be required to provide financial, patrimonial and/or sensitive data, so their disclosure is their responsibility; without prejudice to the foregoing, in the event that users voluntarily provide personal data classified within these categories, Share The Experience ensures the strictest confidentiality in its handling.

Cookies: A cookie is a short piece of information that the Internet portal sends to the user's computer, which remains stored on the hard drive. The next time the user enters our portals, we can use the information stored in the cookie to facilitate their use of our websites. For example, we can use the cookie to store a password so they do not have to enter it again each time they move to a different section of the portal. A cookie does not allow us to know the personal identity of the user; unless they expressly choose to provide it to us. Most cookies expire after a certain period of time, or they can be deleted by the user on their machine at any time they wish. Likewise, users can set their browser to notify them when they receive a cookie so that they can accept or reject them.

Social Networks

The information that our visitors publish or send via “Inbox” voluntarily or spontaneously through our social networks is subject to the terms and conditions determined by the service provider of the Social Network in question. Share The Experience commits that the information provided by users will only be used to attend to requests and respond to doubts or comments they have, as well as to get in touch with them when requested and generate statistics on the use of the site or social network.

In the case of individuals requesting information about products, packages, and services, the data will be used to provide personalized attention and/or be channeled to the Customer Service Center, who will follow up on the request via telephone or email. Likewise, in the event that the user participates in any of the contests published on the hotel's social networks, the data will be used to report the name and publish the image of the winner as evidence or support of the activities carried out and compliance with the contest rules; as well as for the delivery of prizes.

Data Portability

In accordance with what is established by Article 20 of the GDPR you will have the right to transfer the personal data provided from one controller to another as long as the data processing has been carried out by automated means, Share The Experience ensures the strictest security for this automated data transfer.

VIII. Before whom can you present your complaints and reports for the improper treatment of your personal data?

Those owners who consider that their right to protection of personal data has been injured by any conduct, action or response to their requests, or presume that in the processing of their personal data there is some violation of the provisions provided for in the Federal Law on Protection of Personal Data Held by Private Parties, may file the corresponding complaint or report with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI). Site: www.inai.org.mx

IX. Information.

Those individuals who have any doubt about the content, interpretation or scope of this notice, or require more information regarding the processing that Share The Experience carries out of the personal data it collects, can send an email to the address: datosvacacionando@mxrru.com where they will be attended to.

X. Changes to the Privacy Notice.

This Privacy Notice is effective since January 1, 2012 and may be modified in a discretionary manner by the person responsible.

Date of last update: June 1, 2021.