Organizational Structure

This privacy notice regulates all handling of personal data on behalf of Fibra Inn and its “hotels portfolio” in compliance with the provisions of MEXICO’S FEDERAL LAW ON THE PROTECTION OF PERSONAL DATA HELD BY PRIVATE PARTIES (the Law or LFPDPPP) and all regulation and/or administrative dispositions derived or related to the Law.

Fibra Inn, located on Avenida Ricardo Margáin Zozaya No. 605 Piso 1 Fracc. Santa Engracia, San Pedro Garza García, Nuevo León, México C.P. 66267, is responsible of gathering personal data and the use and protection that is given to them.

I. Information gathered and mechanisms for its collection

Fibra Inn, through its “hotels portfolio” handles your personal data, i.e., information which could reasonably identify you, and can be recorded in several documents, whether printed or data messages. Your personal information will be used to provide lodging services between yourself in your guest capacity and any lodging establishment operated by our group. For the aforementioned purposes, personal information gathered and/or handled include, among others: your name and surname; home, work or tax address; personal or work email; home or work telephone number; your vehicle’s license plate, photocopy of an official identification issued by any authority; credit card number, security code and expiration date; professional information; and any others of akin nature which allow our “hotels portfolio” to operate and fulfill is commercial, administrative and work obligations.

Fibra Inn does not request sensitive personal information such as those which may reveal aspects like ethnic or racial origin, present and future health condition, genetic information, religious, philosophical or moral beliefs, union membership, politic opinions or sexual preference.

Personal information is gathered by means of: i) email use; ii) telephone communication with our authorized personnel; iii) voluntary provision of information and personal data in interviews with authorized personnel; iv) printed or digital format filling; and v) use of public sources and others available in the market.

II. Handling purposes

In the scope of clients and/or guests services, the main purposes of personal data handling are:

Fulfill obligations derived of a legal relationship between the owner of such information (THE CLIENT and/or THE GUEST) and any of the lodging establishments operated by the group, such legal relationship consisting in a lodging contract;
Integrate and maintain updated a database of clients and/or guests;
Confirm the client and/or guest and/or their legal representative’s identity;
Comply with all legal applicable requirements;
Provide information regarding: terms, hiring and use of services and facilities policies and dispositions; payment methods; services and category rates;
Delivery of “hotels portfolio” promotional material;
Manage the entry and exit of guests;
Supervision and physical and logic access control to hotel’s facilities;
Manage food services, room service, rooms’ cleaning and maintenance and telephone attention, among others;
Manage security;
Produce internal statistics which indicate services and products most appreciated by clients and/or guests;
Manage charges and payments via bank cards, credits and cash;
Send invoices;
Manage the reward program;
Use several website services of our “hotels portfolio”;
Any other activity of akin nature to the aforementioned topics.
In the suppliers’ scope, the main purposes of personal data handling are:
Suppliers’ management: including their selection and hiring process, management of requests of hiring and purchase orders;
Receipt and payment of invoices and/or fees’ receipts; and
Any other activity of akin nature to the aforementioned topics.
In the labor scope, the main purposes of personal data handling are:
Personnel selection, recruitment and hiring;
Personnel benefits’ management;
Payroll payment;
Payment of personnel’s fees, taxes and contributions;
Payment of employer’s contributions an obligations;
Training management;
Physical and logical access control to facilities and information assets of our “hotels portfolio”;

control over personnel and assigned resources; and

Any other activity of akin nature to the aforementioned topics.

III. Data transfer

Fibra Inn and its “hotels portfolio” bring to your attention that for the purpose to fulfill its commercial obligations, including the provision of services to its clients and/or guests, suppliers’ hiring, as well as to comply with its work obligations; have held or will hold several contracts with suppliers located in national or international territory to provide different services which enable the group to carry out its activities in Mexico, on the understanding that such suppliers are required to maintain confidentiality of all personal information provided and to abide by Privacy Notices of franchisors hotel companies, national or international, belonging to our “hotels portfolio” for its corporate management, under the confidentiality principle, noting the current notice and subject to the same data protection policies .

Fibra Inn and its “hotels portfolio” may also transfer personal information held in its databases to any of its holding companies and/or its subsidiaries and/or any associated company from the same group that operate under the same internal processes and policies, unless the respective owners expressly show their opposition.

IV. Measures to protect personal data

All personal data handled by Fibra Inn and its “hotels portfolio” are protected with adequate administrative, technic and physical measures against damage, loss, alteration, destruction or use, unauthorized access or handling, in accordance with LFPDPPP provisions and the administrative regulations derived from it. All personal data stored in electronic format are kept in confidential and safe data banks.

V. Means to enforce ARCO Rights

To exercise ARCO Rights, the Owner of his representative has the right to access, rectify and delete his personal information, as well as to oppose their handling or revoke previous given consent, through a written request in Spanish, which shall be presented in Fibra Inn’s address listed at the beginning of this notice or any of its “hotels portfolio”, or well, deliver it through postal mail, postage prepaid corresponding to the above address. This request for access, rectification, cancelation or opposition must include and attach the following: owner’s name and address or any other mean to communicate his request’s solution; documents to confirm identity or, if applicable, legal representation to his request; clear and accurate description of personal data of which he seeks to exercise the aforementioned rights; and any other element or document that facilitates personal data location, and insert his name and signature. The deadline to meet his request will be a maximum of twenty working days from the date of his request’s receipt

You can submit to Fibra Inn or any of its “hotels portfolio” an access, rectification, cancelation or opposition request for information handling through different means at your disposal:

REQUEST’S RECEIPT

CLIENTS, SUPPLIERS and EMPLOYEES

Telephone: 52 (81) 5000 0200; protecciondedatos@fibrainn.mx

To access the applications’ formats, request them via email.

VI. Department of data protection

For any consultation regarding your personal data protection:

Ricardo Margain Zozaya No. 605 Piso 1 Fracc. Santa Engracia, San Pedro Garza García, Nuevo León, México C.P. 66267 Tel: 52 (81) 5000 0200; protecciondedatos@fibrainn.mx

If you wish to leave or receive promotional messages form us you can request them at: Telephone: 52 (81) 5000 0200; protecciondedatos@fibrainn.mx

VII. Modifications to privacy notices

Fibra Inn and its “hotels portfolio” reserves the right to modify this privacy notice with the purpose to implement improvements, incorporate new measures envisaged by the Law and other regulations; notifying you through visible announcements in our lodging establishments and/or personally through our personnel at the time of you stay in our facilities, notwithstanding any additional means provided by the applicable law.

VIII. Consent declaration

I, PERSONAL DATA OWNER, expressly declare to accept without reservation or any limitation this Privacy Notice’s contents through my signature in the registration form. Likewise, by completing the printed or electronic formats, I completely and expressly accept his Privacy Notice and any amendments and/or update; and accept that Fibra Inn, its “hotels portfolio”, affiliates, subsidiaries and suppliers, located in Mexico or abroad, process my personal information complying with the terms and conditions in this Privacy Notice.

This Privacy Notice was written complying with articles 8, 10, 15, 16, 17, 33 and 36 of MEXICO’S FEDERAL LAW ON THE PROTECTION OF PERSONAL DATA HELD BY PRIVATE PARTIES.

Based on the stipulations of Article 10, Section IV of MEXICO’S FEDERAL LAW ON THE PROTECTION OF PERSONAL DATA HELD BY PRIVATE PARTIES, requested personal data have the purpose to fulfill obligations derived of a legal relationship between the owner of such information (THE GUEST and/or THE SUPPLIER and/or THE EMPLOYEE) and Fibra Inn and/or any of the lodging establishments operated by the group, such legal relationship consisting of an accommodation, services provision or work contract.

IX. Updates to this Privacy Notice

Last review: December, 2013.