Privacy Notice

Hotel Sierra Inn Ciudad Valles / Privacy Notice

Back to home

HOTEL SIERRA INN CIUDAD VALLES (HOSPITALIDAD HUASTECA S.A. DE C.V.) with address at Blvd. Don Antonio No. 151, Fracc. Lomas Del Yuejat C.P. 79082, Ciudad Valles, San Luis Potosí, phone 481 382 8300, and email reservas@sierrahuasteca.com, hereinafter "THE HOTEL", is responsible for the processing of your personal data, pursuant to the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter the "LAW").

TO ALL OUR GUESTS AND CLIENTS:

This Privacy Notice aims to inform you about how your personal data will be collected, used, protected and, where applicable, transferred, in accordance with the provisions of the "LAW".

For "THE HOTEL", it is essential that the processing of your personal data be carried out in a lawful, safe, controlled and transparent manner, and we therefore commit to safeguarding your privacy and the right to informational self-determination at all times.

How to Contact Us

For any matter related to the processing and protection of your personal data, you may contact our Privacy Officer by email at reservas@sierrahuasteca.com, or submit a written request at "THE HOTEL"'s address, addressed to the "Privacy Officer".

Such request must be accompanied by a copy of a valid official identification of the data subject; in the case of legal representation, the document proving such representation and the corresponding official identification must also be attached.

Purpose of Data Processing

"THE HOTEL" collects your personal data for the following purposes:

Primary purposes (necessary for the legal relationship):

  • Verify your Identity.
  • Manage, register and confirm reservations.
  • Provide accommodation services.
  • Follow up on your stay and attend to requests related to your reservation.

Secondary purposes (not necessary):

  • Manage concierge services, including booking external services such as tours or restaurants on your behalf.
  • Offer products and/or services available within the hotel.
  • Validate and verify the information provided by the data subject.
  • Maintain access and visitor records for security purposes of facilities, guests, clients and staff.
  • Send promotional information, advertising, offers, discounts and marketing communications.

Through this Privacy Notice, "THE HOTEL" informs you that you have the right to express your objection to the processing of your personal data for purposes that are not necessary for the legal relationship.

To do so, you may communicate your objection at the time this Privacy Notice is made available to you, or at any subsequent time, in accordance with the mechanisms established in this document.

The delivery of your personal data implies your consent to its processing under the terms of this Notice; however, you may revoke such consent at any time, as well as exercise your rights of access, rectification, cancellation or objection (ARCO rights), in accordance with applicable legislation.

Collection and Processing of Personal Data

"THE HOTEL" collects personal data from its data subjects through the following means:

  • Directly, when you provide them.
  • Through electronic means, including its website and email.
  • Through authorized third parties.
  • By any other means permitted by applicable legislation.

The personal data collected is processed using appropriate administrative, technical and physical security measures, in order to protect it against damage, loss, alteration, destruction or unauthorized use, access or processing.

The processing of personal data is carried out under strict confidentiality and in accordance with applicable legal provisions.

The data subject is responsible for the accuracy and updating of the personal data provided; therefore, "THE HOTEL" shall not be liable for inaccuracies in the data provided by the data subject.

Personal data that may be collected includes, by way of example and not limitation:

  • Identification data
  • Contact data
  • Patrimonial or financial data
  • Health data (when necessary)
  • Images and/or video recordings

Processing of Sensitive Personal Data

When the provision of services offered by "THE HOTEL" requires the collection of sensitive personal data, including data related to the data subject's state of health, such data will be processed with strict security and confidentiality measures.

In accordance with Article 9 of the Federal Law on Protection of Personal Data Held by Private Parties, "THE HOTEL" will obtain prior express and written consent from the data subject for the processing of such data, except as otherwise provided by applicable legislation.

"THE HOTEL"'s premises are equipped with video surveillance systems. Images and, where applicable, sounds captured will be used exclusively for the security of guests, visitors, suppliers and staff, as well as for the protection of the facilities.

Exercise of Access, Rectification, Cancellation or Objection Rights (ARCO Rights)

The data subject is responsible for the accuracy, truthfulness, authenticity and updating of the information they provide.

You have the right to:

  • Access the personal data held by "THE HOTEL".
  • Request rectification of your data when it is inaccurate, incomplete or outdated.
  • Request the cancellation of your personal data when you consider it is no longer necessary for the purposes stated in this Privacy Notice, provided it is legally applicable.
  • Object to the processing of your personal data for specific purposes, in accordance with applicable legislation.

Revocation of Consent

You may revoke at any time the consent you have granted for the processing of your personal data so that "THE HOTEL" ceases to use it, provided there is no current legal or contractual obligation that requires its retention.

The revocation of consent shall not have retroactive effects. To exercise this right, you must follow the procedure established in this Privacy Notice.

Means and Procedure for Exercising ARCO Rights and Revoking Consent

You may exercise your access, rectification, cancellation or objection (ARCO) rights, as well as revoke your consent for the processing of your personal data, by submitting your request at "THE HOTEL"'s address or through the contact details set out in this Privacy Notice.

The request must contain, at least:

  • Name of the data subject.
  • Copy of valid official identification.
  • Clear and precise description of the data with respect to which a right is sought to be exercised.
  • Where applicable, documents proving legal representation.

Once the request is received and the identity of the data subject or their legal representative is verified, "THE HOTEL" will issue a response within a maximum period of 20 (twenty) calendar days.

If the request is found to be valid, it will be implemented within 15 (fifteen) calendar days following the date of notification of the response.

The response to the request will be communicated to the data subject in writing or via the email address indicated for receiving notifications. For access requests, personal data may be made available to the data subject through electronic documents, simple copies, digital files or any other means permitted by applicable legislation.

Limitation of Use or Disclosure of Your Personal Data

You may request the limitation of the use or disclosure of your personal data when it is not necessary for the fulfillment of a legal or contractual obligation.

To do so, you must submit the corresponding request in accordance with the procedure described above. If found to be valid, "THE HOTEL" will register you in the corresponding exclusion lists within a maximum period of 20 (twenty) calendar days.

Transfer of Personal Data

"THE HOTEL" may transfer your personal data to third parties, within and outside the national territory, in the following cases:

  • When the data subject contracts products or services from third parties through "THE HOTEL".
  • For the management of charges, payments or related financial services.
  • For the provision of services necessary for the hotel's operation.
  • For the validation and verification of the information provided.
  • When required by a competent authority, through a duly reasoned resolution.
  • In the cases provided for in Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties.

Third-party recipients of personal data may include, by way of example and not limitation:

  • Affiliated or subsidiary companies.
  • Service providers related to hotel operations (including food, beverages, recreation and systems).
  • Financial institutions, insurance companies or bonding companies.
  • Individuals or legal entities with whom a legal or contractual relationship exists.

Transfers of personal data shall have the following purposes:

  • Compliance with legal and contractual obligations.
  • Provision of services requested by the data subject.
  • Protection of the rights and interests of "THE HOTEL" and the data subject.
  • Management of payments and commercial relationships.
  • Sending of commercial and promotional information, where applicable.

Where the transfer requires your consent, it will be obtained in accordance with applicable legislation.

"THE HOTEL" undertakes that third-party recipients assume the same obligations regarding personal data protection, guaranteeing at all times its confidentiality and proper processing.

In the event of international transfers of personal data, "THE HOTEL" will endeavor to ensure that the third-party recipients are subject to confidentiality and personal data protection obligations equivalent to those established in Mexican legislation, either through applicable legal provisions or contractual instruments that guarantee an adequate level of protection.

Transfer Consent

The data subject grants consent for "THE HOTEL" to transfer their personal data under the terms established in this Privacy Notice, when such consent is required by applicable legislation.

In cases where the Law does not require your consent, transfers will be carried out in accordance with its provisions.

Retention of Personal Data

"THE HOTEL" will retain the data subject's personal data only for as long as necessary to fulfill the purposes described in this Privacy Notice, as well as to meet applicable legal, tax, administrative, security and contractual obligations.

Once the personal data is no longer necessary for the fulfillment of said purposes and the corresponding legal retention period has expired, it will be deleted, blocked or anonymized in accordance with applicable legal provisions and "THE HOTEL"'s internal information retention and destruction policies.

Modifications

THE HOTEL reserves the right to make modifications or updates to this Privacy Notice at any time, arising from changes in applicable legislation, internal policies or new requirements for the provision of its services.

Such modifications will be available through the following means:

  • Visible notices at "THE HOTEL"'s facilities.
  • Guest registration and check-in forms.
  • On the official website www.sierrahuasteca.com/valles
  • Via the email address provided by the data subject, where applicable.

Cookies, Analytics Tools and Tracking Technologies

In order to improve the browsing experience of users, optimize the website's performance and obtain statistical information about its use, the Hotel may use cookies, web beacons, pixel tags, Google Analytics and other similar technologies.

These tools may collect information such as:

  • IP address.
  • Browser type and operating system.
  • Pages visited within the website.
  • Date, time and duration of the visit.
  • Approximate geographic location.
  • Referral source and browsing behavior.
  • Interactions with digital advertisements and marketing campaigns.

The information obtained through these technologies is used for statistical purposes, web traffic analysis, service improvement, content personalization and, where applicable, measuring the effectiveness of advertising campaigns.

The Hotel may also use third-party tools, including Google Analytics and advertising platforms such as Google Ads, Meta (Facebook and Instagram) or other similar ones, which may install cookies or pixels to collect information about users' interactions with the website.

Options to limit or disable cookies

Users can configure their browser to reject, block or delete cookies installed on their device. Most browsers allow managing cookie preferences from their settings or privacy options.

Users can also obtain additional information about cookie management at the following links:

  • Google Chrome: https://support.google.com/chrome
  • Mozilla Firefox: https://support.mozilla.org
  • Microsoft Edge: https://support.microsoft.com/edge
  • Safari: https://support.apple.com/safari

Disabling certain cookies may affect the functioning of some sections of the website or limit certain features.

By continuing to browse this website, the user accepts the use of cookies and technologies described in this section, unless they have configured their browser to reject or disable them.

This Privacy Notice comes into effect as of its publication date.
Last updated: 02 de junio de 2026.