At Hotel Domani we recognize the importance of protecting the privacy and personal data of our guests, customers, visitors, suppliers and users.
This Privacy Notice sets out how Hotel Domani collects, uses, stores, protects and, where applicable, shares personal data, as well as the rights of the data subjects.
By providing their personal data to Hotel Domani, the data subject acknowledges having read this Privacy Notice and, where applicable, consents to the processing of their data for the purposes described herein.
1. Data controller
Hotel Domani is responsible for the processing, protection and proper use of the personal data provided to it by its guests, customers, visitors, suppliers and users.
Hotel Domani undertakes to process personal data in accordance with this Privacy Notice and with the applicable personal data protection legislation.
Hotel Domani will also implement reasonable administrative, technical and physical measures to safeguard the security, confidentiality and proper processing of the personal data under its responsibility.
2. Personal data we may collect
Depending on the service requested and the nature of the relationship with Hotel Domani, we may collect different categories of personal data.
Identification data
- Full name.
- Nationality.
- Date of birth, where necessary.
- Official identification and the data it contains.
- Information about companions, where necessary to manage the stay.
Contact data
- Telephone number.
- Email address.
- Home address.
- City, state and country of residence.
Reservation and stay data
- Arrival and departure dates.
- Number of guests.
- Room type.
- Preferences related to the stay.
- Special requests.
- Reservation and stay history.
- Information related to consumption, charges or additional services.
Tax data
When the guest requests an invoice, we may collect:
- RFC (Mexican taxpayer ID).
- Name or company name.
- Tax regime.
- Tax postal code.
- CFDI use (Mexican electronic invoice).
- Data required to issue the tax receipt.
Payment data
We may collect information related to transactions carried out with Hotel Domani, including:
- Payment method.
- Payment references.
- Proof of payment.
- Information required to identify a transaction.
When a payment is processed through a bank, booking platform or external payment processor, those third parties may process the corresponding information in accordance with their own privacy notices.
Hotel Domani will endeavor not to store full bank card details when these are processed directly by specialized third parties.
Data from communications
We may retain information related to communications made through our customer service channels, including:
- WhatsApp.
- Email.
- Phone calls.
- Social media.
- Booking platforms.
- Websites.
- Other official communication channels.
3. Sensitive personal data
Hotel Domani will endeavor not to collect sensitive personal data.
Should it be strictly necessary to obtain information of this nature in order to provide a service, respond to an emergency, protect a person’s safety or comply with a legal obligation, the corresponding protection measures will be applied and, where necessary, the corresponding consent will be requested.
4. Primary purposes
Personal data may be used for the following purposes:
- Managing and administering reservations.
- Confirming, modifying or canceling reservations.
- Carrying out check-in and check-out procedures.
- Providing the lodging services booked.
- Identifying guests and visitors when necessary.
- Handling requests, questions, comments and complaints.
- Maintaining communication related to the reservation and stay.
- Processing payments and charges related to the services contracted.
- Managing invoicing and tax receipts.
- Complying with legal, tax, administrative and regulatory obligations.
- Preventing fraud, misuse and unlawful activities.
- Protecting the safety of guests, staff, visitors and facilities.
- Responding to emergencies.
- Managing lost property.
- Recording and managing damage, consumption or additional charges.
- Keeping administrative and operational records related to the provision of the service.
- Responding to requests from competent authorities.
These purposes are necessary for the proper provision of Hotel Domani’s services.
5. Secondary purposes
Additionally, Hotel Domani may use certain personal data to:
- Send promotions, offers and benefits.
- Provide information about new services.
- Conduct satisfaction surveys.
- Request reviews and feedback on the lodging experience.
- Analyze our guests’ trends and preferences.
- Improve our services and processes.
- Carry out marketing and commercial communication activities.
- Produce internal statistics and business analyses.
The data subject may refuse the processing of their data for secondary purposes.
Refusing these purposes shall not affect the provision of the services contracted, where legally applicable.
6. Video surveillance
Hotel Domani may use video surveillance systems in certain areas of its premises in order to protect guests, visitors, staff and property.
The footage may be used for:
- Incident prevention.
- Protection of guests and staff.
- Security of the facilities.
- Incident investigation.
- Prevention of unlawful activities.
- Responding to requests from competent authorities.
Video surveillance will be limited to areas where it is reasonable and necessary for security reasons.
No cameras will be installed in rooms, bathrooms or any other spaces where there is a reasonable expectation of privacy.
Footage will be kept for as long as necessary in accordance with security and operational needs and the applicable legal obligations.
8. Transfers of personal data
Hotel Domani may share certain personal data with third parties when necessary for the provision of services, compliance with legal obligations or the operation of the hotel.
These third parties may include:
- Booking platforms.
- Travel agencies.
- Hotel system providers.
- Payment processors.
- Financial institutions.
- Invoicing providers.
- Technology providers.
- Contracted service providers.
- Messaging and communication companies.
- Competent authorities.
Transfers will only be made where there is a legitimate purpose and in accordance with the applicable legislation.
Where the law requires the data subject’s consent for a transfer, Hotel Domani will request that consent.
9. Booking platforms
When a reservation is made through an external platform, that platform may collect and process personal data in accordance with its own terms and privacy notices.
Hotel Domani will process the information it receives from such platforms solely to manage the reservation, provide the service booked and comply with the corresponding obligations.
Guests should consult the privacy policy of the platform used to learn how that platform processes their personal data.
10. Information protection and security
Hotel Domani will implement reasonable administrative, technical and physical measures to protect personal data against:
- Unauthorized access.
- Misuse.
- Alteration.
- Loss.
- Destruction.
- Unauthorized disclosure.
Access to personal data will be limited to the people who need to use it to fulfill the purposes set out in this Notice.
11. Retention of personal data
Hotel Domani will retain personal data for as long as necessary to fulfill the purposes for which it was collected and for the periods established by the applicable legal, tax, administrative or contractual obligations.
Once personal data is no longer necessary, it will be deleted, blocked or anonymized in accordance with the corresponding procedures.
12. ARCO rights
The data subject has the right to:
- Access
- Request information about the personal data Hotel Domani holds about them and learn the conditions of its processing.
- Rectification
- Request the correction of their personal data when it is inaccurate, incomplete or out of date.
- Cancellation
- Request the deletion of their personal data when they consider that it is not being processed in accordance with the applicable legislation.
- Opposition
- Object to the processing of their personal data for certain purposes, where legally appropriate.
13. Exercising ARCO rights
The data subject may exercise their ARCO rights by submitting a request directly to Hotel Domani.
The request must contain enough information to identify the data subject and locate the relevant personal data, and must clearly state the right they wish to exercise.
Hotel Domani may request the documentation needed to verify the identity of the requester or, where applicable, their legal representation.
Requests will be handled within the time limits and following the procedures established by the applicable legislation.
14. Withdrawal of consent
Where the processing of personal data is subject to the data subject’s consent, they may request its withdrawal where legally applicable.
Withdrawal of consent will not have retroactive effect.
Withdrawal may also be limited when the processing is necessary to comply with legal or contractual obligations or any other purpose permitted by the applicable legislation.
15. Limiting use or disclosure
The data subject may request that the use or disclosure of their personal data be limited, particularly with regard to promotional or commercial communications.
Hotel Domani will implement reasonable mechanisms to handle such requests in accordance with the applicable legislation.
16. Minors
Hotel Domani recognizes the importance of protecting the privacy of children and adolescents.
Minors’ personal data will be processed only when necessary for the provision of services, lodging procedures, safety or compliance with legal obligations.
Where applicable, processing will be carried out with the involvement and authorization of the person exercising parental authority, guardianship or legal representation.
17. Lost property
When a guest reports a lost item, or an item is found on the premises, Hotel Domani may record information about the item and about the person who claims it.
This information will be used solely to manage the item’s recovery, return and corresponding record.
18. Third-party information
When a guest provides personal data of companions, relatives, visitors or other people, they must have the corresponding authorizations where required.
The guest is responsible for providing information that is accurate and lawfully obtained.
19. Data provided through third parties
When personal data is provided to Hotel Domani by a travel agency, booking platform, company, event organizer or other third party, Hotel Domani may process that data to manage and provide the corresponding services.
Processing carried out by the third party is subject to its own privacy notice.
20. Communications with guests
Hotel Domani may use the contact details provided by the guest to send communications related to:
- Reservation confirmations.
- Changes to the reservation.
- Arrival instructions.
- Check-in and check-out information.
- Information related to the stay.
- Guest requests.
- Operational notices.
- Invoicing.
- Security.
- Incident handling.
Commercial communications are subject to the data subject’s preferences and rights.
21. Changes to this Privacy Notice
Hotel Domani may modify or update this Privacy Notice when necessary due to legal, regulatory, technological or operational changes, or changes in the services provided.
Changes may be communicated through the official channels used by Hotel Domani.
The version of the Privacy Notice in force is the one published or made available to data subjects.
22. Acceptance
By providing their personal data to Hotel Domani, whether through a reservation, form, phone call, email, WhatsApp, website, booking platform, the front desk or any other authorized channel, the data subject acknowledges having had access to this Privacy Notice.
Where the data subject’s consent is legally required, it will be requested through the corresponding mechanisms.
Using Hotel Domani’s services does not necessarily imply consent to secondary purposes where such consent is not legally applicable or has been expressly refused by the data subject.
23. Privacy contact
For any inquiry regarding the processing of their personal data, the exercise of ARCO rights, the withdrawal of consent or the limitation of the use of their data, the data subject may get in touch directly with:
Hotel Domani
Requests will be received and handled through Hotel Domani’s official communication channels.
Hotel Domani
Your stay. Your privacy. Our responsibility.
This Privacy Notice takes effect as of September 2026.