Privacy Notice

    In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, the Privacy Notice Guidelines in force in Mexico, and the General Data Protection Regulation (GDPR) of the European Union, EON HOSPITALITY GROUP (hereinafter “EON Hospitality” or the “Data Controller”), with offices in Puerto Vallarta, Jalisco, Mexico, recognizes the importance of the lawful, informed, and transparent processing of personal data belonging to its users, clients, suppliers, collaborators, guests, and partners.

    This Privacy Notice aims to inform you of how EON Hospitality Group collects, uses, protects, and, where applicable, shares your personal data, as well as the mechanisms available to exercise your rights of access, rectification, cancellation, and opposition (known as ARCO Rights).

    1. Purposes of Personal Data Processing

    EON Hospitality Group may collect and process your personal data for the following purposes:

    Primary Purposes

    • To identify and validate your relationship with EON Hospitality Group as a client, guest, supplier, collaborator, or strategic partner.
    • To comply with obligations arising from contracts and commercial agreements.
    • To process registration and updates within EON Hospitality Group’s databases for clients, suppliers, guests, or employees.
    • To manage payments, invoicing, quotations, budgets, and technical support.
    • To comply with requirements from competent authorities.
    • To manage digital marketing, communication, and distribution campaigns, as well as activities related to hotel management, revenue management, and guest engagement.

    Secondary Purposes

    • To send commercial information, promotions, and relevant news about EON Hospitality Group’s services.
    • To evaluate service quality and client and guest satisfaction.
    • To conduct internal and statistical analyses to improve commercial and operational processes.

    If you do not wish your personal data to be used for the secondary purposes listed above, you may express your objection at any time by sending a request to gabriela@eonhospitality.group.

    2. Personal Data Collected

    The personal data that EON Hospitality Group may collect, depending on your relationship with the company, include:

    • Identification: name, tax ID (RFC), CURP, address (personal or fiscal), and date of birth.
    • Contact: email, phone number, address.
    • Employment: job title, company, references, résumé.
    • Financial and/or patrimonial: bank account, CLABE number, invoicing details.
    • Digital: IP address, geolocation, browsing habits, cookies, and analytics related to website or platform use.

    EON Hospitality Group does not collect sensitive personal data unless strictly necessary, in which case your explicit written consent will be obtained.

    3. Data Collection Methods

    • Directly from you, when you fill out forms on the website, subscribe to communications, or contact EON Hospitality Group via email or phone.
    • Indirectly, through digital analytics tools, cookies, or social media interactions.

    4. Use of Cookies, Analytics, and CRM Systems

    EON Hospitality Group’s website uses first-party and third-party cookies for the following purposes:

    • To personalize the user experience.
    • To analyze behavioral and navigation metrics.
    • To optimize website functionality and digital services.

    EON Hospitality Group may also use CRM tools and marketing automation platforms to manage communications with users, guests, and prospects. Users can disable cookies in their browser settings; however, this may affect the functionality of certain sections of the website.

    5. Data Retention and Transfers

    Personal data will be retained for the duration of the contractual or commercial relationship with EON Hospitality Group and for up to five (5) years after its conclusion. After this period, data will be securely blocked and deleted.

    EON Hospitality Group may transfer your personal data to:

    • Subsidiaries, affiliates, or strategic partners within the same corporate group.
    • Third-party service providers acting on behalf of EON Hospitality Group (such as hosting, analytics, or marketing management providers).
    • Competent authorities when legally required.

    In all cases, EON Hospitality Group ensures that data transfers are made under confidentiality and security agreements, in accordance with applicable Mexican and European legislation.

    6. ARCO Rights

    You may exercise your rights of Access, Rectification, Cancellation, or Opposition (ARCO), as well as revoke your consent for data processing at any time.

    Requests must be submitted via email to gabriela@eonhospitality.group and must include:

    • The name of the data subject and contact details for response.
    • A copy of identification or proof of legal representation.
    • A clear description of the personal data concerning which the rights are to be exercised.
    • Any additional element that may facilitate data location.

    EON Hospitality Group will respond to requests within the legally established timeframes under both the LFPDPPP and GDPR, unless exceptions apply.

    7. Data Security

    EON Hospitality Group implements administrative, technical, and physical measures to safeguard personal data against loss, damage, alteration, destruction, or unauthorized access.

    All EON Hospitality Group personnel and service providers are bound by confidentiality and are required to protect information in accordance with internal policies and signed agreements.

    8. International Data Transfers

    EON Hospitality Group may transfer personal data to servers located outside of Mexico (for example, in the United States or the European Union) when using international technology platforms. Such transfers are made under the principles of lawfulness, proportionality, and accountability, ensuring adequate protection in line with the GDPR.

    9. Changes to this Privacy Notice

    EON Hospitality Group reserves the right to modify or update this Privacy Notice at any time. Updates will be published on EON Hospitality Group’s official website, including the date of the most recent revision.

    We encourage you to periodically review this Privacy Notice to stay informed about how we handle your data.

    10. Supervisory Authority

    If you believe your data protection rights have been violated, you may contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) at:

    • www.inai.org.mx

    11. Acceptance

    By voluntarily providing your personal data to EON Hospitality Group, you acknowledge that you have read, understood, and accepted the terms of this Privacy Notice, and consent to the processing of your data as described herein.

    Last updated: October 23, 2025