A. Data Controller Identity

Stain Loft & Suites, for the purpose of marketing the products and/or services managed and/or distributed by our accommodation (hereinafter referred to as Stain), is committed to protecting your privacy.
Our Personal Data Compliance Department is responsible for data protection and is located at Paseo del Atardecer 152, Irapuato, GTO, 36670, Mexico. You may contact them via email at datos.personales@stainloftandsuites.com.

B. Personal Data

To fulfill the purposes outlined in this Privacy Policy, Stain may collect your personal data in different ways:

• When you provide the information directly.
• When you visit the Stain website.
• When you use Stain’s online services, including data obtained through your social media accounts (Facebook, Twitter, LinkedIn, Google) or when connecting to the Wi-Fi provided by our establishment.
• Through other means permitted by applicable law.

The personal data we may collect includes:

Identification Data:

• Full name, phone number(s), marital status, email address, age, date of birth, nationality, gender, tax ID number (RFC), occupation, and preferences related to accommodation and travel needs.

Location Data:

• Residential address, tax address, reservation dates and codes, flight number, date and time, travel destination, hotel name, check-in and check-out dates.

Authentication Data:

• Username and password, handwritten and electronic signature, official identifications, and membership/travel program numbers.

Financial Data:

• Bank card number, income level, and tax status certificate.

Sensitive Data:

• Bank card number (credit/debit), expiration date, and CVV.
• Family background, health status, and medical reports.

Biometric Data:

• Voice recordings.

C. Sensitive Personal Data

Sensitive personal data refers to any information that could affect the privacy of its owner or lead to discrimination, such as racial or ethnic origin, health conditions, genetic information, religious, philosophical, or moral beliefs, union affiliations, political opinions, and sexual preferences.

If you require a specific service that involves sharing this type of data, Stain will use it only to provide the requested service, manage cancellations, identify travel needs, and meet your specific requirements.

In case of health emergencies, Stain may collect health-related data solely for sanitary protection purposes for you and others staying in the hotel or in any Stain-managed property. This information will only be stored for as long as necessary to fulfill its purpose.

D. Purpose and Processing of Personal Data

Primary Purposes (Necessary for Service Provision)

Your personal data will be used to provide the services and/or products you request, including:

• Reservations, vacation package purchases, loyalty program membership, referral program enrollment, event organization, and social gatherings.
• Billing, collection management, and coordination with service providers.
• Enhancing your experience by identifying your preferences during your stay.

Secondary Purposes (Optional Use)

Additionally, your data may be used to:

• Send promotions, offers, newsletters, surveys, and participate in raffles or contests.
• Analyze user data to personalize communications and promotional offers.
• Share your data with affiliated companies for commercial purposes.

E. Limiting the Use or Disclosure of Personal Data for Secondary Purposes

To limit the use or disclosure of your personal data for secondary purposes, you may:

• Register in the Public Registry to Avoid Advertising (for Mexican residents) managed by PROFECO to avoid receiving marketing materials.
• Send an email to datos.personales@stainloftandsuites.com, requesting to opt-out of promotional communications, specifying the email(s) and/or phone number(s) to be restricted.

F. Rights of Access, Rectification, Cancellation, and Opposition (ARCO Rights)

You may access, correct, cancel, or oppose the use of your personal data as stipulated by the Mexican Federal Law on Protection of Personal Data or any applicable law.

To exercise these rights, send a written request to the Personal Data Compliance Department at Paseo del Atardecer 152, Irapuato, GTO, 36670, Monday to Friday from 9 AM to 2 PM, or email datos.personales@stainloftandsuites.com.

The request must include:

1. Full Name of the data subject.
2. Email Address for notifications.
3. Proof of Identity or legal representation.
4. Description of the data and the right you wish to exercise.
5. Any additional documents to facilitate locating your data.

G. Revocation of Consent for Personal Data Use

You may revoke your consent for Stain to process your personal data. However, this may result in the termination of services that require your data.

Requests must be submitted in writing to the Personal Data Compliance Department at the address or email provided above.

H. Data Security Measures

Stain takes security measures to protect your personal data, including:

• Restricted access to personal data.
• Secure servers located in controlled-access data centers.
• SSL encryption for online transactions.

However, no system is completely secure, and Stain cannot guarantee absolute security against external threats.

I. Use of Image

For security and service quality, Stain may record video footage or take photographs within its premises. Your image may be used for security purposes and crime prevention.

J. Electronic Media & Cookies

Our website uses cookies to enhance user experience, track website activity, and personalize services.

Cookies help us:

• Recognize returning visitors and provide a personalized experience.
• Analyze website traffic and optimize content.
• Remember user preferences to improve navigation.

You can manage cookies through your browser settings. However, disabling them may affect some website functionalities.

K. Data Transfers

Stain only transfers personal data in the following cases:

• When required by law (Article 37 of the Mexican Federal Data Protection Law).
• When necessary for contracted services (e.g., sharing data with travel agencies).
• When explicit consent is given (e.g., data sharing via “Google Signals”).

L. Data Retention Period

Your personal data will be stored as long as necessary to maintain a legal or service relationship. Once no longer needed, Stain will block access to your data and delete it according to legal retention periods.

M. Updates to This Privacy Policy

Stain may update this Privacy Policy at any time. Any substantial changes will be announced on our website.

Last update: February 20, 2025.

By using our services, you acknowledge that you have read and accepted this Privacy Policy. If you do not agree, you may contact us as described in sections E, F, and G.

For complaints regarding the handling of your personal data, you may also contact the Mexican National Institute of Transparency, Access to Information, and Personal Data Protection (INAI) or the appropriate regulatory body.