Privacy notice
1. Who is responsible for your data
[Name or company name of the data controller], which operates the hotel, restaurant and spa Xanthe by Atrio, located at Camino Antigua Vía del Ferrocarril 21, Cortijo, San Miguel de Allende, Guanajuato, Mexico, is responsible for processing your personal data in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and other applicable regulations.
For any matter related to your data, write to us at ventas@hotelnirvana.mx or call +52 (415) 185 2194.
2. Data we collect
a) “Booking request” form
Name, phone or WhatsApp, email, the type of service you are interested in, room or package, check-in and check-out dates, number of guests and any message you choose to write.
b) Guest registration, online check-in and visits to the hotel
When you stay with us or visit our facilities, or when you fill out the online check-in form we send you by WhatsApp before your arrival, we record your name, phone, email, home city, dates of stay, approximate arrival time, room, number and names of your companions, special occasion, requests, amount paid and booking channel.
If you share allergies or dietary restrictions with us, which may be considered health data, we will use them only to serve you safely, and only the staff who need them will know them. By submitting them in the form you give your express consent for that use.
c) Billing information
Only if you tell us you need a Mexican tax invoice (factura): RFC, name or company name, tax regime, tax postal code, CFDI use and the email where you want to receive the invoice.
d) Visits to this website
We keep anonymous website statistics: page visited, the site you came from (for example Google, Facebook or WhatsApp), device type (phone, tablet or computer), browser language, date and time. We do not use tracking cookies or store your IP address: we generate an anonymous identifier that changes every day and cannot identify you. If your browser has “Do Not Track” or Global Privacy Control enabled, we do not record your visit.
We do not collect financial data (cards or accounts) through this website.
3. How do we use your data?
Necessary purposes for the service you request:
- Answering your request, confirming availability, quoting and managing your booking.
- Registering your stay or visit, serving you during your stay and keeping a history of your visits.
- Preparing for your arrival with the information from your online check-in (arrival time, special occasion, requests and allergies).
- Meeting tax and legal obligations, and issuing your electronic invoice (CFDI) when you request it.
- Handling complaints, clarifications or requests related to your stay.
Additional purposes (you may opt out without affecting your booking):
- Sending you promotions, packages and hotel news.
- Asking for your feedback on our service.
- Producing statistics to improve the website and our services (website statistics are anonymous).
If you do not want us to use your data for the additional purposes, write to us at ventas@hotelnirvana.mx at any time.
4. Who do we share your data with?
We do not sell or rent your data. We only share it when necessary with: authorities that require it by law; Mexico's Tax Administration Service (SAT) and the authorized certification provider (PAC) that stamps your invoices, only when you request an invoice; our web hosting provider, which stores the information on our behalf; and, if you booked through an external platform (Booking, Airbnb, Expedia or others), that platform in order to manage your booking. These transfers do not require your consent under the law.
5. Third-party services on this website
This website displays Google Maps, uses Google Fonts, lets you watch YouTube videos (the video only loads when you press play, in YouTube's privacy-enhanced mode) and offers links to WhatsApp and Instagram. When you use those services, their providers may collect data under their own privacy notices.
6. How long do we keep your data?
- Requests that do not become bookings: up to 2 years.
- Guest records, stays and billing information: for as long as the relationship exists and for the periods required by tax law (generally 5 years).
- Anonymous website visit statistics: 13 months.
7. Your rights (ARCO) and how to withdraw your consent
You have the right to Access your data, Rectify it if it is incomplete or inaccurate, Cancel it, and Object to its use for specific purposes. You may also withdraw your consent or limit the use of your data.
Send your request to ventas@hotelnirvana.mx stating your name, a way to reply to you, the right you wish to exercise and the data it refers to, together with a copy of your ID. We will reply within a maximum of 20 business days and, if applicable, carry it out within the following 15 business days.
8. Security
We protect your data with administrative, technical and physical measures: the system where it is stored is password-protected, the website connection is encrypted (HTTPS) and only authorized staff have access.
9. Changes to this notice
We may update this notice. The current version will always be published on this page with its update date.