PRIVACY NOTICE
This Privacy Notice is issued in compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter the “Law”), its Regulations (the “Regulations”), and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (known as the “GDPR”).
I. DATA CONTROLLER
The company ACUARIO ARRECIFAL S.A. DE C.V., with address at Avenida Antonio Dovali Jaime No. 70, Tower A, Floor 8, Colonia Lomas de Santa Fe, Álvaro Obregón Borough, Mexico City, C.P. 01219, as well as its subsidiaries, affiliates, or companies within the same corporate group (hereinafter “BLU OCEAN CLUB”), is responsible for the use and protection of your personal data and hereby informs THE DATA SUBJECT about its personal data processing policies and security measures in accordance with this Privacy Notice.
II. PURPOSE OF THIS NOTICE
The purpose of this Privacy Notice is to inform any person who provides their data to BLU OCEAN CLUB (hereinafter “THE DATA SUBJECT”) about the policies followed by BLU OCEAN CLUB for collecting personal data, processing it properly for the primary and secondary purposes established herein, the security measures taken to maintain the confidentiality of personal data, and the mechanisms available to address inquiries related to the rights of access, rectification, cancellation, and opposition (known as “ARCO rights”).
III. METHOD OF PROVIDING THIS NOTICE
This Privacy Notice may be presented to THE DATA SUBJECT through printed, digital, or telephone means, always prior to the collection of personal data.
This Privacy Notice will be permanently available in full on the website:
www.bluoceanclub.com
IV. PERSONAL DATA THAT WILL BE COLLECTED
The personal data we collect includes:
Name
Nationality
Date of birth
Address
City and country of residence
Telephone number(s)
Email address
Photograph
Occupation and company for which you work
Social media usernames (Facebook, Twitter, Instagram, Snapchat, and any current or future social network)
Banking information from debit or credit cards or other payment methods such as PayPal used by THE DATA SUBJECT to purchase products or services offered by BLU OCEAN CLUB.
If THE DATA SUBJECT accesses the website www.bluoceanclub.com or BLU OCEAN CLUB’s social media profiles (Facebook, Twitter, Instagram, TikTok, Snapchat, and any current or future social network), the following information may also be collected:
IP address
Internet browser type
Browsing preferences on our website
Web pages visited
If THE DATA SUBJECT does not agree with this, cookies and web beacons may be disabled as described in section IX. USE OF COOKIES AND WEB BEACONS.
Personal Data of Minors
The protection of minors’ personal data is particularly important for BLU OCEAN CLUB. Therefore, when we become aware that we are processing personal data of minors, such processing will always comply with the guidelines established by the Law and its Regulations.
BLU OCEAN CLUB will only allow minors to purchase products or services when such purchases are made by their parents or legal guardians, who must grant consent for the processing of personal data.
V. PURPOSES OF THE USE OF YOUR PERSONAL DATA
The personal data collected will only be used for the purposes described below.
1) PRIMARY PURPOSES
Personal data collected from you will be used for activities necessary for the services requested by THE DATA SUBJECT, including:
a) Management of reservations, purchases of products or services, event quotations, and general customer service.
b) Identification and access of THE DATA SUBJECT to BLU OCEAN CLUB facilities where services are provided.
c) Customer service through chats, email, telephone, or other means.
d) Collection, use, management, storage, and creation of a database of customers and persons related to BLU OCEAN CLUB, including maintenance and updating activities to provide better service.
e) Billing and collection of products and services offered by BLU OCEAN CLUB.
f) Evaluation of the quality of products and services offered by BLU OCEAN CLUB.
g) Compliance with obligations that BLU OCEAN CLUB has entered into with THE DATA SUBJECT.
2) SECONDARY PURPOSES
a) Conducting contests, promotional events, raffles, sweepstakes, and promotional activities organized by BLU OCEAN CLUB.
b) Sending promotional communications related to any product or service available on www.bluoceanclub.com or BLU OCEAN CLUB social media profiles.
c) Sending promotional communications about special activities organized by BLU OCEAN CLUB.
d) Understanding user interests and offering improvements in products and services.
e) Improving user experience on the website and social media profiles.
If THE DATA SUBJECT does not agree with the use of personal data for any of the secondary purposes, they must indicate this when granting their consent. Refusal for secondary purposes will not affect the provision of services or products offered by BLU OCEAN CLUB.
VI. DATA RETENTION PERIOD
Due to the nature of the services offered by BLU OCEAN CLUB, personal data will be stored until the date on which THE DATA SUBJECT requests its deletion, or when BLU OCEAN CLUB determines that such information should be removed from its database because it is no longer necessary for the purposes established in this notice.
VII. TRANSFER OF PERSONAL DATA TO THIRD PARTIES
The personal data collected will not be commercialized, sold, assigned, or transferred for profit to any third party.
Transfers made by BLU OCEAN CLUB will only occur:
With prior consent of THE DATA SUBJECT; or
Without consent in cases permitted by law, such as transfers to subsidiaries, affiliates, or companies within the same corporate group, or when necessary to comply with legal obligations, including transfers to Mexican or foreign authorities under applicable laws or international treaties.
If BLU OCEAN CLUB intends to make any additional transfer requiring consent, such consent will be requested beforehand.
VIII. THIRD-PARTY WEBSITES OR LINKS
THE DATA SUBJECT is informed that any link accessed outside www.bluoceanclub.com is unrelated to BLU OCEAN CLUB. Therefore, THE DATA SUBJECT assumes full responsibility for reviewing the data protection and privacy policies of such external websites, including but not limited to:
Payment gateways
Third-party websites related to services offered by BLU OCEAN CLUB
External advertising
Any other window or link outside www.bluoceanclub.com
IX. USE OF COOKIES AND WEB BEACONS
THE DATA SUBJECT is informed that the website www.bluoceanclub.com uses cookies and web beacons.
Cookies are files automatically downloaded and stored on your device when browsing a website, allowing the server to remember information about the user and browsing preferences.
Web beacons are images embedded in websites or emails used to collect certain information and monitor user behavior or store the IP address.
Their purpose is to:
Provide a better browsing experience
Improve account security
Define content preferences
Personalize information based on user interests
Track online purchases
Users may disable cookies and web beacons using the help option in their browser toolbar.
X. DATA PROCESSING CONTACT
BLU OCEAN CLUB has a department responsible for handling inquiries related to the processing of personal data and ARCO rights.
The person responsible is:
Franco Martinez Sanchez
Address:
Avenida Antonio Dovali Jaime No. 70, Torre A Piso 8
Colonia Lomas de Santa Fe
Álvaro Obregón, Mexico City
C.P. 01219
Email:
XI. EXERCISE OF ARCO RIGHTS
THE DATA SUBJECT has the following rights:
Access: Request information about the personal data collected and how it is used.
Rectification: Request correction of inaccurate or outdated information.
Cancellation: Request deletion of personal data when it is no longer necessary for its purpose.
Opposition: Request that personal data not be used for specific purposes.
Requests must include:
Name and contact information of THE DATA SUBJECT
Documents proving identity or legal representation
Clear description of the data concerned
Any element facilitating the identification of the data
Documentation supporting rectification requests
Requests will be resolved within 20 business days, and if approved, implemented within 15 business days thereafter.
XII. REVOCATION OF CONSENT
THE DATA SUBJECT may revoke consent for the processing of personal data by submitting a request under the procedure described for ARCO rights.
XIII. COMPLIANCE WITH THE GDPR
If THE DATA SUBJECT is a national or resident of the European Union, BLU OCEAN CLUB recognizes additional rights under the GDPR, including:
Right to restriction of processing
Right to data portability
Right not to be subject to automated decision-making
XIV. SUPERVISORY AUTHORITY
If complaints are not properly addressed by BLU OCEAN CLUB, THE DATA SUBJECT may contact:
National Institute for Transparency, Access to Information and Personal Data Protection (INAI)
Phone: 018008354324
Email: [email protected]
Address: Av. Insurgentes Sur 3211, Ground Floor, Col. Insurgentes Cuicuilco, Coyoacán, Mexico City.
XV. SECURITY MEASURES
BLU OCEAN CLUB implements reasonable organizational and technical security measures to prevent loss, misuse, alteration, or unauthorized disclosure of personal data, including:
Restricted access to databases
Passwords, encryption, and secure storage
Antivirus and firewall protection
Additional security measures deemed necessary
XVI. MODIFICATIONS TO THIS PRIVACY NOTICE
BLU OCEAN CLUB may update this Privacy Notice at any time. Updates will be published on:
www.bluoceanclub.com
XVII. CONSENT
By providing your personal data, you acknowledge and consent to the processing of your information in accordance with this Privacy Notice, except for any reservations you expressly state.
Last updated: September 2024
