Rooms & Suites

On the hotel side, as of December 15th, 2023, we are proud to announce our inclusion in the Autograph Collection, a premium brand within the Marriott International portfolio. Our goal is to offer guests a unique experience where exquisite cuisine, warm hospitality, and rich Mexican traditions create unforgettable memories. Make a wish, connect with our heritage, and become part of our story.

The Club Villas

Inspired by Mexican design, this hacienda style villas offers an inviting modern decor and amenities that accentuate your lifestyle, along with lush surroundings and stunning garden views.

1
1
00

Your Privacy Matters to Us

Ensuring Your Information's Security

I. IDENTITY AND CONTACT DETAILS OF THE PERSON RESPONSIBLE.

​Responsible

  • Quinta del Golfo de Cortez S.A. de C.V henceforth "Quinta del Golfo” is the legal entity responsible for the processing of your personal data for the fulfillment of the purposes specified in this notice. 

 

Address of the Responsible

  • Carretera Transpeninsular Km 18.5, Cabo Real, CP 23405 San José del Cabo, BCS, México   

 

Data Protection Officer

  • The person responsible for the protection of his data in accordance with this notice is: Omar Aguilar Medrano with e-mail: olarenadpd@pcga.mx

 

How we collect data?
The way we can collect your information is the following:

  • Directly. Provided by you.
  • Indirectly. Provided by some other company, service or application in which you previously accepted the transfer of your data, through a privacy notice.

 

WHAT IS THE PURPOSE OF THIS PRIVACY NOTICE?

In order to provide our services it is necessary to process some of your personal data, this notice explains how we use your data, under what circumstances we collect it and with whom we can share it.   

 

WHAT DATA DO WE COLLECT?

II a)-Information collected directly.   

Quinta del Golfo and/or any of its affiliates may collect through physical or digital means your personal data, for the purposes of this privacy notice we will divide your personal data into the following categories: 

 

A. 1 Essential personal data: Personal data necessary for the performance of a legal act, contract or legal obligation, as well as for the provision of our service.   

  • Name
  • Lastname
  • Street, number, city, country and postal code of your address
  • Date of birth
  • Telephone
  • Electronic mail
  • Credit or debit card numbers
  • Licence number
  • License expiration date
  • Passport number and a copy
  • IP address (when it comes from services provided or offered online).

 

A. 2. Additional personal data: Personal data related with improving your service experience as well as to respond suggestions and comments, such as:   

  • Personal data provided by you in a free manner on our social networks, digital media and platforms, email.
  • All information on the form you provided in the "contact us" section.
  • Public information that you share on social networks such as profile, aliases, photos, searches, states, stories, which are accessible to the public.
  • Information provided by you, by physical or digital means, to provide you with a better service such as; flight number (s), reservation number, date of arrival, date of departure.
  • Membership numbers, name and identification number of your vacation property you are using for exchange.

 

A. 3.  Optional personal data.  Personal data that you want to provide and will make valid in case of  an accident or an emergency.

  • Insurance company.
  • Insurance policy.
  • Phone number of the insurance company.
  • Fax number of the insurance company.

 

A. 4.  Personal data from video surveillance. When you visit our establishment you will likely be recorded through the video surveillance cameras which can record your:

  • Face
  • Height   
  • Complexion
  • Clothing

 

WHERE DO WE GET YOUR DATA? 

 

Source   

Description   

Data Collected   

Types of data   

Direct and face-to-face interaction.

When you visit our establishment to stay.

When you do business with us by performing a contract.

Name;

lastname;   

street, number, city, country and postal code of your address;   

date of birth;   

telephone;   

electronic mail;   

credit or debit card numbers;   

licence number;   

license expiration date;   

Copy of passport;   

Copy of credit cards

Personal; financial.   

 

Source   

Description   

Data Collected

Types of data   

(1) Through our website.

When you visit our website.

IP address;   

statistical data;   

Mac address;   

analytical data;   

usage data as browser type, browser version, pages of our service you visit, time and date of your visit, time spent on those pages, device identifiers

Personal, digital   

Through our digital platforms and social networks

When you interact with comments, external doubts, generate suggestions, follow up on our publications.

IP Address   

personal data provided by you in a free manner on our social networks, digital media and platforms, email;   

all information on the form you provided in the "contact us" section;   

public information that you share on social networks such as profile, aliases, photos, searches, states, stories, which are accessible to the public;   

information provided by you that allows us to facilitate our service, such as; number (s) of flight, date of arrival, date of departure,

Personal   

When you go through our security cameras.

Our facilities have security cameras to prevent the commission of a crime.  It is possible that when you visit us you will be recorded and monitored during your stay.

Face;   

height;   

complexion,   

clothing.

Personal; physical.   

 

When you acquire or book, (face to face, by phone or through our digital platforms) a SPA service, a medical service, or an activity involving intense physical activity.

When you book or purchase such a service.

Name;   

lastname;   

street, number, city, country and postal code of your address;   

date of birth;   

telephone;   

electronic mail;   

credit or debit card numbers;   

Reservation number;   

Medical conditions.   

Allergies.   

Injuries.   

Surgical interventions.   

Phobias.   

In case the service has been provided by digital means, the data indicated in (1) of this table will also be collected.   

 

Personal; financial, digital, some sensitive data.   

 

When you acquire a timeshare-

 

Name;

lastname;

street, number, city, country and postal code of your address;

date of birth;

telephone;

electronic mail;

credit or debit card numbers;

licence number;

license expiration date;

Copy of passport;

Copy of credit cards.

Personal; financial.   

When you make a holiday exchange through one of our trading partners to stay at our properties.

 

Name;

lastname;   

street, number, city, country and postal code of your address;   

date of birth;   

telephone;   

electronic mail;   

credit or debit card numbers;   

Copy of passport;   

Copy of credit cards.   

Name of the hotel where you purchased your shared time;    

Type of unit you purchased;   

Partner number.   

Personal; financial. 

 

 

II.  B) INFORMATION COLLECTED INDIRECTLY.

The personal data obtained indirectly will be subject to the authorization you previously granted to the person who collected them. Quinta del Golfo is required to treat the information under the same purposes that you previously authorized and not to transfer your data without your consent. Quinta del Golfo has previously assured that the information transferred indirectly to us has your consent.

 

Source   

Description   

Data Collected   

Types of data 

Through our partners 

When you have provided your data to timeshare exchange services, travel agents, airlines, or any other where you made a reservation or purchases an hotel or similar service 

 

Those that you have provided to our partners or suppliers and  may include all or some of the essential and optional personal data described in this notice.   

Personal; financial 

 

 

WHY DO WE COLLECT YOUR DATA?

III. Purpose and Main Use of the Data Collected.

a) Personal data collected and reported as "essential personal data" have the following main purposes. 

 

Purpose 

Description

Legal basis  

Does it require consent?   

Pay hotel services   

Make collections related to the hosting service, purchase of packages, insurance, promotions and recreation or relaxation activities.

Conclusion of a contract.

Yes.  

Contact in case of accident

Be able to contact you or your family in case of an emergency or accident.

Legitimate interest.   

Yes.   

Avoid an accident or injury.   

For the provision of medical services, SPA or activities involving a physical activity, requiring certain health conditions or the absence of health problems.

Consent; 

Legitimate Interest.   

Yes.   

 

Respond to complaints, doubts and clarifications.   

We use your personal information that you provide us to answer your questions or to attend to any matter related to our usual way of doing business.

Consent; 

Legitimate Interest.   

Yes.   

Respond to a Legal authority.   

Where the authority requires information as in the case of a crime investigation; or in the case of tax audits; any other case where the authority requires it as long as the cause is legally grounded.

Legal Obligations.   

No   

Prevention of an  illicit conduct.   

To safeguard our business operations; prevent misuse and detect fraud, detect unauthorized activities or access, or any other circumstance that violates our data protection procedures, where we have the  need to investigate, prevent or take legal action concerning suspicions of fraud or any other felony, or any potential threat to our integrity or our rights or any person regarding violations of the terms of the  this Privacy Notice.

Legal Obligations.   

No   

Acquire a time share.

To acquire a timeshare through a contract.

Conclusion of a contract 

Yes.   

Conduct Holiday Exchanges.

Make collections related with a vacation exchange, insurance, promotions and recreation or relaxation activities.

Legitimate interest.   

 

Yes.   

 

 

b) The personal data obtained from the video surveillance inside the physical establishment of Quinta del Golfo de Cortez have the following purposes.   

 

Purpose

Description

Legal basis

Does it require consent?   

Crime prevention at Quinta del Golfo de Cortez´ property. 

Prevent property theft or provide evidence to the competent authority when such offences occur. 

Legitimate Interest 

No 

 

 

c) The sensitive personal data collected exclusively has the following purposes:

 

Purpose

Description

Legal basis

Does it require consent?   

Prevention of an accident or injury. 

Prevent an accident or injury that endangers your physical integrity or life.

Legitimate Interest

No 

 

 

d) Purpose and secondary use of the data collected.   

Your personal data such as:   

  • Name;
  • Lastname;
  • Street, number, city, country and postal code of your address;
  • Date of birth;
  • Telephone;
  • Electronic mail;
  • And all your "additional data" collected from you may be used for the following purposes: 

 

Purpose 

Description

Legal basis   

Does it require consent?   

Statistics   

Perform marketing studies and be able to collate some of your essential data and/or additional data, with other data from other people.

Consent 

No 

Advertising and marketing purposes.   

You authorize us to occasionally use your information to send you invitations, promotions and discounts, to congratulate you on your anniversaries.

Consent 

No 

 

 

IV. Deadline for the Retention of Your Data.

The essential, optional and additional personal data will be regulated for a period of 5 years per law requirement to be able to comply with the legal obligations outlined in this notice.    

When a timeshare purchase is acquired, by law we shall retain the data relating to your purchase and until the end of the duration stipulated in your contract.   

In the case of data obtained through video surveillance, the information will be deleted within 60 days of being obtained.   

 

 

V. Transfer of Your Information

 

Manager (Processor)   

Purpose

Legal basis

Does it require consent?   

Software or platform service providers that comply with the requirements of the General Data Protection Regulation of the European Union.   

In some cases all the essential personal data obtained physically and/or electronically will be transcribed and transferred to different companies that provide Software as a service (SAAS) or platform as a service (PAAS). The purpose is to speed up services such as reservations, payments and to facilitate access to your information in order to provide you with a better service.   

Legitimate Interest, Consent.   

Yes 

 

 

1. Associated entities.   

Quinta del Golfo may transfer the following data: 

  • Name;
  • Lastname;
  • Street, number, city, country and postal code of your address;
  • Date of birth;
  • Telephone;
  • Electronic mail;
  • and all of its "additional data" to the following associated entities who will be governed by the principles of this privacy notice: 

 

Manager (Processor)

Purpose

Legal basis

Does it require consent?   

Quinta del Golfo de Cortez S.A. de C.V; Operadora Hacienda del Mar S.A. de C.V.; Operadora Solaz S.A. de C.V.; CLK Estrategia SAPI de C.V. Impulsora del Golfo de Cortez S.A de C.V.  

Offer to the client advertising packages, promotions, courtesies, as well as to obtain statistics related to the products acquired in any of the properties of the Group.   

Consent.   

Yes 

RCI

Performing Vacational Exchanges

Legitimate Interest.   

Yes 

 

 

2. Other entities. In addition, we will be able to share all your data, under the circumstances and objectives mentioned, with the following natural or moral persons: 

 

Manager (Processor)   

Purpose

Legal basis   

Does it require consent?   

Professional advisers, external lawyers accountants, forensic experts.   

Safeguard our business operations; prevent misuse and detect fraud, detect unauthorized activities and access, or any other form that goes against our data protection procedures, where we need  to investigate, prevent or take legal action concerning suspicions of fraud, or any potential threat to our integrity or rights of our or any person involving violations of the terms of this Notice  Privacy.  When we consider it necessary to respond to accusations against us, to comply with legal processes, or to administer our agreements and terms, or when necessary for the prevention of fraud, to reduce regulatory risks; to protect the  Quinta del Golfo de Cortez rights of our customers or others who could potentially be affected.

Legitimate Interest.   

No 

Manager (Processor)   

Purpose

Legal basis 

Does it require consent?   

Government and regulatory authorities.   

By law and/or authority.

Legal Obligations.  

No 

Companies when mergers and acquisitions are made.   

As part of any merger sale or transfer of our assets, as well as acquisition or restructuring of our business, liquidation or any similar event, including those related to a necessary statutory audit for the fulfilment of our obligations.   

Consent;

Legal Obligations. 

No 

 

VI. Data Storage.

Quinta del Golfo de Cortez email servers are located in ----    

Our website server is located in Mexico but complying with the requirements of the GDPR and certainly with Ley Federal de Protección de Datos en Posesión de Particulares.

If you have doubts about where your information is stored, do not hesitate to contact data protection officer, Omar Aguilar Medrano, via email olarenadpd@pcga.mx.

 

HOW DO WE PROTECT YOUR DATA?

VII. Security Measures.

Quinta del Golfo uses procedures and technical security measures for the protection of your personal data through Binding Corporate Rules and an Integral Data Protection Program. If you want to know thoroughly how we will be able to comply with the protection of your persona data, you may request a copy of the BCR’s to the following email olarenadpd@pcga.mx

 

WHAT TECHNOLOGY DO WE USE ON OUR INTERNET PAGE?

VIII. Cookies and Similar Measures.

Our online services use cookies, pixels, log files, web beacons and other mechanisms to collect information about the use of our sites.   

 Cookies.

  • Cookies are alphanumeric identifiers that we transfer to your computer's hard drive through your search engines to facilitate your browsing through the collection of your information.   
  • We use cookies to facilitate access to our site, and we collect data such as your IP and sometimes your Mac address, only for the purpose of your access to our page.   
  • Most browsers automatically accept cookies but if you prefer, you can change your browser preferences to block cookies in the future.  In the help menu for almost all browsers, you will be able to assist you to change your settings with respect to this topic, either to remove, change or disable them.   

For more information visit our Cookies Policy. 

 

Gif, web beacons and other technologies.

  • The GIFs are small graphics that allow you to identify certain functions similar to cookies, these elements are also stored on your hard disk, and are sometimes invisible in browsers (Web beacons). We will occasionally use GIFS in connection with our services in order to track the activities of users on our digital platforms, these elements help us to manage content and establish statistical data  the use of our digital services.  We and the third-party contractors also use GIFS in their HTML language, mails, our customers, answers, and provide us with the identification as when you receive, forward or reply an e-mail of ours.   

 

Log files.

  • Most of our browsers collect certain information such as your IP address, type of equipment, screen resolution, operating system, as well as the installed versions of your search, this data is stored directly in log files.   

 

Third-party analytics.

  • Quinta del Golfo uses automated applications such as Google Analytics to evaluate our services.  We use these applications to store non-personal information of users that will serve us in order to improve our services and the user experience. These providers may use cookies and other technologies to carry out their services and may combine that information that they collect from you for their own purposes. Such non-personal data in this section will be subject to the privacy policies of those companies.

For more information on this topic you can manage some of these permissions by disabling cookies or consulting our Cookies Policy.

 

Do not track signals.

  • Our platforms do not respond to "do not track signals". We and certain third-party services may use cookies and similar tracking technologies while providing our services. These technologies are used primarily for stability, security, functionality, performance and advertising purposes, in the latter case it will depend on the settings you have in your browser.

For more information on this topic you can manage some of these permissions by disabling cookies or consulting our Cookies Policy.

 

Mail Tools.

  • On some occasions Quinta del Golfo will use external mail tools for e-mail delivery and  distribution, these deliveries will only happen when there is consent and an “opt in” acceptance of the interested party.

 

IX. Rights

Right to Be Forgotten.

  • You have the right to be forgotten, apply for your right when you consider it relevant. Communicating it to email olarenadpd@pcga.mx.

 

ARCO rights.

You or your legal representative may exercise any of the following rights:

  • Access, rectification, cancellation or opposition (hereinafter "ARCO Rights"), as well as revoke your consent for the processing of your personal data by sending an email to olarenadpd@pcga.mx. Application to exercise ARCO rights (hereinafter "Request") it is at your disposal  here   and that it contains all the elements to be able to attend to the exercise of your rights and/or revocation of the consent according to the normativity.

In order to be able to follow up with your request, you or your legal representative must  identify in order to complete all the fields indicated in the application and submit  a copy of any of the official identifications mentioned below:

  • Passport.
  • Migration document that establishes the legal residence in Mexico.
  • In case the application does not satisfy any of the above requirements, the data protection officer data may require you within 5 days of the request to the provide more elements or documents  necessary to process your request. You will have 10 days to attend the request, if no reply is given within that period, the corresponding application will be rejected.

The answer to your request via e-mail will be within the 20-day term from your receipt.

 

Complaints

  • If at any time you believe that the Officer is not complying with the provisions of this Privacy Notice, you may send your complaint to olarenadpd@pcga.mx, in case the answer is not satisfied by you or you may be able to  rights vis-à-vis the data protection authority.

 

Legislation

  • If you are a citizen of the state of California in the United States you will be able to request that your data may not be sold through an email to olarenadpd@pcga.mx.
  • This privacy notice complies with the requirements of the General Data Protection Regulation, as well as those of Mexico's Federal Data Protection Law in the Possession of Private Individuals.

 

X. Amendments to the Privacy Notice.

We reserve the right to make at any time modifications or updates to this privacy notice in order to comply with new legal obligations, internal policies or new requirements needed for the provision or improvement of our services or products. These changes will be made available to the public and delivered to the last email that was provided to us.

 

XI. Acceptance

By contacting us by any means or by acquiring any of our services you agree to the terms of this privacy notice. Last updated date: 03/06/2021