PRIVACY NOTICE

If you are reading this, it means that you are a responsible user who takes care of your personal data.

In this privacy notice we will explain to you why we request your information, under what circumstances and how we take care of it.

About the responsible one

The first obligation we have with you is to inform you of the identity of the person responsible for this site:

Commercial name: Experiencias Xcaret Web S.A.P.I de C.V. (hereinafter Grupo Xcaret).

Commercial address: Tulum Avenue, Number 290 Manzana 3, Lote 2, Colonia SM 8, Cancún, Benito Juarez, Quintana Roo, C.P. 77500.

Our activity: We are a business group that has cultural, natural, ecological, adventure parks with unique hotels, which offers our visitors and guests different ecological, cultural, and fun experiences.

Our phone number: +52 (998) 884-9422 Ext. 11469.

Responsible one for the protection of your data: The Department of Information Protection is responsible for ensuring the security of your information.

Email of the responsible one: privacidad@xcaret.com

The information that we request and when we request it.

Now, we will describe the different situations where your data may be required in this site:

• To register for the triathlon through the form, we will request the following information: your full name, age, gender, prefix, date of birth, email address, telephone number (landline and mobile), state, and country.
• As part of the conditions for your participation in the event, it is important to know certain health information, such as your blood type, allergies, and any medical conditions you may have. This is to ensure your safety during the event and to provide timely medical assistance if needed. The information collected in the registration database is strictly for the exclusive use of the “Triatlón Xel-Há” Organizing Committee.
• Additionally, for registration purposes, we need to know your classification, chosen category, the number of times you have participated in the Triatlón Xel-Há, and your affiliation number with the Mexican Triathlon Federation (FMTRI). This is to create a participation database for Triatlón Xel-Há and to validate the status of affiliations with FMTRI to ensure a safe competition at the event.
• Photographs and videos will be taken during the event.

Very important!

• We will never request any information from you over the phone or via email.
• We never ask for credit or debit card information unless you are making a payment for the registration.

Purpose of Data Processing

One of our responsibilities is to explain the purposes for which we use, store, and process your personal data:

When you register for the triathlon on the website, we request your personal information, including name, last name, alias, phone number, email, date of birth, gender, blood type, allergies, city, state of origin, and FMTRI affiliation number. This is done to properly register you for the sports event and create a database that allows us to organize the event, including kit distribution for triathletes, allocation of swim wave categories, bike rack assignments, and customization of race numbers, bike numbers, and helmet numbers. Additionally, this information helps us accurately record and generate certificates for your race times and results.

Knowing your health status, allergies, and blood type enables us to provide timely medical attention in case of any incidents during the sports event.

Medical Emergencies: In the event of accidents or serious injuries during the competition, medical personnel may need to know the athlete's blood type to provide the appropriate blood transfusion in emergency situations. This is particularly relevant in high-risk sports or outdoor activities where injuries may be more common.

Blood Transfusions: In extreme endurance sports or ultra-marathon competitions, where athletes may face situations of extreme exhaustion and dehydration, there is a possibility that they may need blood transfusions after the competition to accelerate their recovery. Knowing their blood type is essential to ensure a smooth process.

In addition to the above, there are other purposes:

The processing is subject to your consent, and your data will NEVER be used for a purpose other than what is mentioned in this notice, and we will NEVER sell your information.

We need a participant database to generate a participation history in our event and to provide you with relevant information about the content or activities of “Triatlón Xel-Há 2023”, as well as to invite you to “Triatlón Xel-Há 2024”.

During the event, photographs and videos will be taken for advertising purposes related to the event. By participating, you give your consent for this use. If you prefer that your information, not be used for this purpose, you can request the exercise of your rights as mentioned in this notice.

What are cookies and how are they used?

Cookies are text files that are automatically downloaded and stored in the computer's hard drive while navigating in a specific web page, allowing the Web server to recall some facts about the user, including preferences for the display of pages on that server, username, and password. In some sections of our site, we require that the client have cookies enabled since the functionality requires them to work correctly.

In the case of the use of cookies, the 'help' button found in the toolbar of most browsers will tell you how to avoid accepting new cookies, how to have the browser notify you when it receives a new cookie or how to disable all cookies.

Limitation of Use and Disclosure of Information

The information provided by the user is secured by a personal identification number to which only the user can access and of which only he has knowledge. 

We recommend that you do not share the information with anyone. On this issue, the Grupo Xcaret team has focused its efforts to offer the most modern and updated technology to offer you the greatest possible security. 

The rights you have when you provide us with your data.

• To request the access to your personal data.
• To request a correction.
• To request the cancellation.
• To request the limitation of treatment (use and disclosure).
• To oppose to the data processing, we are giving.
• The portability of your data.
• Revocation of consent to the processing of data.

The exercise of these rights is personal, which means that the interested party must request it from the person responsible for the protection of their data, that is, the Department of Information Protection.

To exercise any right of the above, you can download and fill the following form and send it along with the copy of your identification, through:

Email of the responsible person: privacidad@xcaret.com

Our phone number: +52 (998) 884-9422 Ext. 11469.

Business hours: From Monday to Friday from 9:00 a.m. to 7 p.m.

We will assist you quickly, within a period no longer than 15 business days. We advise you to keep your data updated so that we can provide a more personalized service.

Data Retention Period

The information we collect will be securely retained for a maximum of two years from the date of collection unless you request its deletion or there is a legal obligation to retain it for a longer period. After that timeframe, we will securely delete the data.

Data Transfer

It is important to note that for validation purposes before your competition, we share your name, surname, and affiliation number with the Mexican Triathlon Federation (FMTRI) to verify your current affiliation status.

The protection of your information

We have implemented security measures to take care of your data:

• Use of SSL (Secure Socket Layer) certificates on our sites.
• Security procedures with our staff.
• Limitation of access to the databases where the data is stored.
• Implementation of best practices on servers to keep your information safe.
• Implementation of controls to comply with the LFPDPPP and the RGPD.

Use of images and sounds collected through our internal video surveillance systems

We are concerned for the safety of our visitors, guests, and collaborators, as well for our administrative facilities, hotels, and parks, it's necessary to communicate that we have internal systems and video recording circuits, which can capture images and, in some cases, sounds which are consider as personal data, which will be treated and protected in the terms provided in this privacy notice.

Laws that are incorporated in this privacy notice.

• The LFPDPPP (Regulation of the Federal Law on Protection of Personal Data Held by Private Individuals) which is the law that is responsible for protecting personal data in Mexico.
• The GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27th, on the protection of natural persons) which is the new regulation of the European Union regarding the regulation of processing the personal data.