PRIVACY NOTICE.

I.- IDENTITY OF THE PERSON IN CHARGE

In terms of the provisions of Articles 8, 15, 16, 36 and others relating and applicable to the Federal Law on the Protection of Personal Data in Possession of Individuals. (Here in after Hotel Basalto S.A. de C.V.), with address Rinconada Careyeros 112, Punta de Mita, Nayarit, Mexico, informs you that you are responsible for the collection and processing of your personal data obtained due to the relationship you have with us.

II.- PERSONAL DATA

For the purposes of the foregoing, personal data are considered necessary to provide our service, and consist of the following:

a) Identification data: name(s), surname(s), official identification and/or identification, address, telephone number of home, cell phone and/or work, marital status, signature, email, gender, age, date of birth, nationality, name and data of third parties, occupation, name of the place where you work, position and contact details.

b) Financial Data: Method of payment, cardholder name, credit card number, expiration date, security key number, credit card copy.

c)Billing data: Name or company name, RFC, tax domicile.

d) Preference Data: Related to the room, services required and/or reason, travel preferences, hobbies and opinions.

The way we collect your personal data is by the following means:

a) Personally, when you provide them to any of our employees, filling out forms at check-in with us, or at our front desk. Likewise, when you answer questionnaires of satisfaction and opinion of the service.

b) Directly, when you provide them to us by telephone or electronic means, by filling out the booking form on our Website, interacting on our social networks or through cookies or web beacons, (see numeral VII) or by email.

Indirectly, when you provide your personal data to any of our suppliers, such as travel agencies, tour operators or third parties who provide us with databases, which support us during booking and marketing processes.

We also inform you that Hotel Basalto S.A. de C.V., does not obtain personal data that are considered by the Federal Law on the Protection of Personal Data in Possession of Individuals as sensitive personal data. For this purpose, sensitive personal data means personal data that affects the most intimate sphere of its owner, or whose misuse may give rise to discrimination or pose a serious risk to it.