Privacy policy Privacy policy
text
In compliance with the Federal Law for the Protection of Personal Data in Possession of Individuals (hereinafter, the “Law”) and its Regulations, we provide below, in a clear, simplified and accessible manner, the Comprehensive Privacy Notice (hereinafter, the “Notice” or “Privacy Policy”).
Which is addressed to the User(s) (hereinafter, indistinctly the “Holder”, “User” or “You”) of the services provided by Best In Tulum.
(Hereinafter, indistinctly “Best In Tulum” or “Responsible”). Through a digital platform accessible by mobile devices through computer applications, desktop computers and through Internet browsers.
As well as to persons who access and provide information through the internet domain http://www.bestintulum.com/ (indistinctly, “Platform” and “Software”). In the United Mexican States (“Mexico”).
In this Privacy Policy. You can verify the way in which your data is treated by the Responsible.
Likewise, you are informed that all Personal Data will be managed in accordance with the principles of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility contained in the Federal Law for the Protection of Personal Data in Possession of Individuals.
By accessing, registering and providing information to Best In Tulum, the User accepts the provisions of this Privacy Policy.
Therefore, you are advised to read carefully the terms set forth herein. And in case of disagreement with the clauses and provisions contained in this document, the User should not access or register their data in the Software.
It is recommended to the Holder to read the Terms and Conditions of Best In Tulum in order to know the use and scope of the Platform.
“Notice”.
Refers to this privacy notice, whether issued in physical, electronic or any other format generated by the Controller, which is made available to the Data Subject, prior to the processing of his/her Personal Data in order to comply with the information principle.
Its purpose is to delimit the scope and general conditions of the processing. As well as to inform the Data Controllers, so that they are able to make informed decisions about the use of their Personal Data.
And to maintain control and disposition over them, highlighting the identity of the individual or legal entity that decides to carry out the same. The purposes or actions that motivate the collection, use and custody of personal information.
The third parties to whom the Personal Data will be transferred. The mechanisms for the Data Subject to exercise the rights related to the protection of Personal Data (in particular, the ARCO rights), among other issues.
Likewise, the Notice allows the Data Controller to make such Processing transparent, thus strengthening the level of trust of the Data Subjects.
“Database”.
It is the ordered set of Personal Data referring to an identified or identifiable person.
“Cloud Computing”.
Model of external provision of computing services on demand, which involves the provision of infrastructure, Platform or Software, which are distributed in a flexible way, through virtualization procedures, in dynamically shared resources.
“Personal Data”.
Any information concerning an identified or identifiable natural person.
“Sensitive Personal Data”.
Those Personal Data that affect the most intimate sphere of the Data Subject. Or whose improper use may give rise to discrimination or entail a serious risk to the Data Subject.
In particular, are considered sensitive those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions or sexual preference.
ARCO” Rights.
The rights that the Data Subject has against the Controller, in relation to his/her Personal Data. Which include the following:
The right to access his/her Personal Data and the details of the processing thereof, as well as to rectify them in case they are inaccurate or cancel them when he/she considers that they are excessive or unnecessary for the purposes that justified their collection or to oppose the Processing thereof for specific purposes.
Exercise of ARCO Rights of this Notice.
“Disassociation”.
It is the procedure by which Personal Data cannot be associated to the Data Subject or allow, due to its structure, content or degree of disaggregation, the identification of the Data Subject.
“Processor”.
The individual or legal entity that alone or jointly with others processes Personal Data on behalf of the Controller.
“Controller”.
Individual or legal entity of a private nature that carries out the processing of Personal Data. Which for purposes of this Notice shall be Best In Tulum.
“Third Party”.
The individual or legal entity, national or foreign, other than the Data Subject or the Controller of the Personal Data.
“Processing”.
The collection, use, disclosure or storage of Personal Data, by any means.
Use encompasses any action of access, handling, use, exploitation, transfer or disposal of the Personal Data.
“Transfer”.
Any communication of Personal Data made to a person other than the Controller or Processor.
For purposes of the Notice, as well as for all legal effects that may apply. The Responsible will be Best In Tulum. With address at Julio Verne 10, Polanco III Secc Miguel Hidalgo 11550 CDMX. Who will be responsible for obtaining, using, accessing, handling, using, transferring, disseminating, disposing, disclosing and/or storing the Personal Data specified in this Privacy Policy.
The Responsible Party may be assisted by one or more Agents. They will act in the name and on behalf of the Controller, in order to provide a more efficient Processing of the Personal Data.
The Processors will be informed of the due treatment that they must provide to the Personal Data in accordance with this Notice and the applicable legislation.
The Controller may also carry out the Processing of Personal Data using the Cloud Computing system, for which the provider of such services shall be obliged to subscribe to the Notice.
And comply with the protection mechanisms and security measures designed to protect the information contained in the Personal Data, in accordance with the Law. The Regulations of the Federal Law for the Protection of Personal Data in Possession of Individuals and other applicable legal provisions.
Likewise, the Personal Data may be shared via referral with affiliated or related third parties for commercial purposes. Third party entities not affiliated or not related to commercial purposes.
Or with any duly contracted Third Party, or with any company with which the Controller has any commercial relationship.
As long as the referred Third Parties have the due privacy controls, know and subscribe to the present Notice and only use the Personal Data for the fulfillment of the purposes referred to in the present Notice.
(A) Data Provided by You:
We collect information about You when You register on our Platform, place or fulfill a delivery order, or interact with our Platform during the delivery process.
When you register on our Platform, you may be asked to provide certain information, namely:
(i) your first name;
(ii) paternal last name;
(iii) cell phone number;
(iv) e-mail address;
(v) the name of the Users qualified to use the Platform;
(vi) city of residence;
(vii) bank card number;
(viii) name of the bank card holder;
(ix) bank card expiration; and,
(x) Bank Card Security Code (generally known as “CVC”).
On the other hand, You will be able to log in through the following services:
(i) Facebook account login; and.
(ii) Google account login (only available on Android).
In addition, in the event that You are a Driver, You may also be asked for the following Personal Data:
(i) driver’s license;
(ii) CLABE Interbancaria;
(iii) profile picture.
When you place or accept a delivery order, this data may include:
(i) cargo data;
(ii) destination origin address; (iii) delivery time
(iii) delivery time;
(iv) method of payment requested;
(v) communication maintained during delivery. Even from time to time, we may ask you for additional delivery location reference information, and you will always have the option to provide it or not.
In this regard, it should be noted that Best In Tulum does not collect Sensitive Personal Data.
(B) Access Data
When accessing the Software and or Platform, the following data will also be collected:
(i) date and time of access;
(ii) IP (Internet Protocol) address;
(iii) source of access;
(iv) browser data [browser name and version];
(v) access device data; and
(vi) geolocation data.
(C) Cookies
In section “6. How do we protect your information? Of this Notice provides information about the collection of cookies.
(D) Communication data with Best In Tulum
If you use the tools provided by Best In Tulum or any other form of communication with us. We may keep a record of these to help you eventually resolve any future problems you may have.
Any information we collect may be used in the following ways:
A) Primary Purposes:
(i) To personalize your experience (your information helps us to better respond to your individual needs);
(ii) to process transactions;
(iii) to perform the services provided on the Platform;
(iv) to broker deliveries and freight between customers and drivers through emails and messages on the App;
(v) to process orders, shipments or any requirement that may be made by the User through any form of contact provided by Best In Tulum;
(vi) notify the User about maintenance or updates to the Software, the Privacy Policy or the Terms and Conditions;
(vii) For purposes of identification of the Holder for the proper provision of the service; and,
(viii) To contact the Data Subject in case there has been any security breach occurred at any stage of the Processing.
B) Secondary Purposes:
Personal Data may be used for the following secondary purposes:
(i) Statistical and information purposes for the Controller;
(ii) Marketing and promotional purposes;
(iii) For sporadic and/or occasional contact with the User, in order to provide information related to products, promotions, contests and/or services provided by the Responsible Party, as well as other products for marketing, advertising or commercial prospecting purposes;
(iv) to improve our website and/or Platform (we strive to improve the offerings on our website based on the information and feedback we receive from you);
(v) to improve customer service. (Your information helps us to respond more effectively to your service requests and support needs);
(vi) to administer a contest, promotion, survey or other site feature;
(vii) to conduct general User behavior analysis and other important measures so that we can always provide quality service.
Notwithstanding the foregoing, the aforementioned secondary purposes shall not be considered indispensable for any reason.
We have implemented a variety of measures to maintain the security of your information when you enter, submit or access your information on the Software. However, Best In Tulum in no way guarantees that such security measures are error-free, or that they are not subject to interference by Third Parties (hackers, among others).
By its nature, despite Best In Tulum’s best efforts. Any security measures may fail and any data may become public.
BY ACCEPTING THE TERMS OF USE, PRIVACY POLICY / OR USING BEST IN TULUM.= YOU EXPRESSLY UNDERSTAND AND ASSUME THE RISK AND AGREE THAT BEST IN TULUM WILL NOT BE LIABLE FOR ANY SUCH DATA LEAKS RESULTING FROM FORCE MAJEURE CAUSES.
Understanding by “Force Majeure Causes”. Any events, events or occurrences, which are unforeseeable, general and irresistible, arising from the forces of nature, acts of man or acts of any government authority that absolutely and definitively prevent the affected party to carry out its obligations in accordance with the provisions of this Notice.
Best In Tulum uses information security techniques and measures, regularly accepted in the business environment, such as firewalls, procedures and encrypted access control mechanisms, always in order to prevent unauthorized access to data.
The information collected by Best In Tulum may be stored on servers located in Mexico or abroad. Ensuring that other countries may have different levels of data protection than Mexico.
In any case, data processing carried out in other countries will be subject to security measures equivalent to those described above.
Do we use cookies?
Best In Tulum uses cookies and similar technologies. Such as pixels and tags, to ensure that the services provided are in accordance with the best expected standard. Cookies collected by Best In Tulum provide statistics only and will not be used for different purposes expressly provided for in this Privacy Policy.
What is a Cookie?
Cookie is a small file added to your device or computer to provide a personalized experience of accessing the Best In Tulum Platform.
What Cookies do we use?
Best In Tulum uses Google cookies to display ads on the Platform.
Google’s use of the DART cookie. Allows the serving of ads to our Users based on their Best In Tulum uses Google cookies to display ads on the Platform.
The Use of Google’s DART cookie. Allows us to serve ads to our Users based on their visits, their sites and other sites on the Internet.
Users can disable the use of the DART cookie. By visiting the Google content and advertising Privacy Policy.
Unfortunately, the Best In Tulum Platform may not function as desired if cookie collection is disabled.
We may include or offer Third Party products or services on our website.
These Third Party sites have separate and independent privacy policies. Therefore, we have no responsibility or liability for the content and activities of these linked sites; however, we seek to protect the integrity of our website and welcome any feedback.
We remind you that, although Best In Tulum keeps your data confidential. According to the terms of this Privacy Policy. It will be your responsibility to keep your login and password to access your account at Best In Tulum, as a customer or controller, secure, and, therefore, you should not provide those to anyone.
If you have any reason to believe that your login and/or password to access Best In Tulum has been stolen or is known to others. You should immediately contact us via email:
contacto@thebestintulum.net
Subject to immediate change of password and / or login.
The Data Subject may indicate to the Controller that he/she wishes to limit or stop receiving advertising messages, whether by landline or cell phone, as well as by e-mail.
Likewise, the Data Subject may limit the purpose of the Processing.
To do so, the Data Subject must send a request to disable the secondary purposes. As well as the purposes that are not indispensable, the messages and/or advertising mails to any of the contact means indicated in section 12 of Contact.
For such purpose, the Data Subject shall send a request with, at least, the following requirements:
a) The Holder’s full name;
b) The Card Holder’s handwritten signature;
c) Address or other means to communicate the answer to the request;
d) Official documents proving the identity of the Data Subject; and,
e) A clear and precise description of whether he/she wishes to limit or stop receiving advertising messages, whether by landline or cell phone, as well as by e-mail.
On the other hand, you may also limit or stop receiving advertising messages by registering the Holder in the Public Registry of Consumers provided for in the Federal Consumer Protection Law.
Today Public Registry to Avoid Advertising and in the Public Registry of Users (REUS). Pursuant to the Law for the Protection and Defense of Financial Services Users, in terms of Article 111 of the Regulation of the Federal Law for the Protection of Personal Data in Possession of Individuals.
Once the request is received, the Controller will have a term of 20 (twenty) calendar days to respond to the Personal Data Holder, which will be sent through the contact means indicated by the Data Holder or, failing that, to the e-mail address registered.
Regarding the Public Registry to Avoid Publicity, 1 (one) day after the registration is made, it will become effective 30 (thirty) calendar days after the date of registration.
Regarding the Public Registry of Users. It will become effective 45 (forty-five) calendar days after its registration and will be valid for 2 (two) years, after which time it will be automatically cancelled.
Best In Tulum will delete, destroy and remove all User data. So that the rest of the data will be anonymized, that is, no information will remain in Best In Tulum that may indicate the identity of the User or the Company.
It is important to note that when complying with possible requests for exclusion. Best In Tulum will cease to function for the proposed purposes.
Therefore, the opt-out request will result in the immediate deactivation of the Best In Tulum account, with permanent loss of any such data entered therein.
To return to use Best In Tulum. User must initiate the necessary procedures to create a new Best In Tulum account.
After deletion of such data. Best In Tulum may continue to use the data anonymously, that is, without any personal identification of the User or the Company, for the purposes provided in this Notice.
In compliance with any order of public authority. Best In Tulum will retain data of certain Users and / or Companies for a longer period than legal custody.
By means of court decision or request of an authorized legal body. Best In Tulum may still have to make available to a requester the data collected from Users.
ARCO Rights are an acronym that groups four rights that the Data Subject may exercise in relation to his or her Personal Data:
Access to Personal Data that is subject to Processing. That is to say, to request the Controller to allow the Data Subject to know what data he/she has in his/her possession.
Rectify any of the Personal Data, subject to Processing and in possession of the Controller, which are inaccurate, incomplete, erroneous and/or imprecise.
Cancel any of the Personal Data in possession of the Controller. To legitimately consider that they are not being used to fulfill any of the purposes of the Processing and/or that they are being used in contravention of the Law, the Regulations of the Federal Law for the Protection of Personal Data in Possession of Individuals or any other applicable legal provision.
To object to the Processing carried out by the Controller, with a justified cause, provided that the same may cause any damage and/or harm, or that it is contrary to the Law, the Regulations of the Federal Law for the Protection of Personal Data in Possession of Individuals or any other applicable legal provision.
For such purpose, the Holder shall send a request with, at least, the following requirements:
1) The Holder’s full name;
2) The Card Holder’s autograph signature;
3) Address or other means to communicate the response to the request;
4) Official documents that prove the identity of the Data Subject;
5) A clear and precise description of the Personal Data with respect to which the rights conferred by the Law will be exercised;
6) Any element or document that facilitates the location of the Personal Data in question.
In case the Data Subject makes a rectification request. The Data Subject shall also indicate the modifications to be made and provide the documentation supporting his request.
In the event that the request is granted, the response will be communicated within 15 (fifteen) calendar days following the date on which the request was received.
This term may be extended upon prior notice only once for an equal period. As long as the extension is justified.
In the case of the exercise of the Right of Access, the modality through which the Data Subject may obtain the requested information or Personal Data is through electronic documents, or in its absence, simple copies.
Notwithstanding the foregoing, if necessary, upon prior agreement with the Data Subject, the Controller may make use of means of reproduction of the information other than those informed in the Notice.
The Data Controller may deny access to the Personal Data or make the rectification or cancellation or grant the opposition to the Processing thereof, in the following cases:
In the event that the applicant is not the Owner of the Personal Data, or the legal representative is not duly accredited to do so.
When the applicant’s Personal Data is not found in its database.
If the rights of a Third Party are harmed.
When there is a legal impediment, or the resolution of a competent authority, which restricts access to personal data, or does not allow the rectification, cancellation or opposition of the same.
And when the rectification, cancellation or opposition has been previously made.
The refusal may be partial, in which case the Controller will carry out the access, rectification, cancellation or opposition required by the Data Subject only with respect to the appropriate part.
Notwithstanding the foregoing, you also have the right to request Best In Tulum to send you an ARCO Rights Form that is easy to fill out, in order to exercise any of the prerogatives provided herein.
If you wish to obtain more information, resolve a doubt, exercise your ARCO Rights and/or clarify any question about the exercise of any right over your Personal Data, you can communicate or by telephone.
Below, we provide you with the contact information:
This Privacy Policy shall be governed and interpreted in accordance with the Federal Law for the Protection of Personal Data in Possession of Private Parties, its Regulations and other general provisions that emanate from such laws.
This Privacy Policy may change from time to time. When this occurs, Best In Tulum will make the latest version available at:
http://www.bestintulum.com/política-de-privacidad
With the date of the last update. As well as send it to the email that the Holder has registered.
The Holder will be responsible for keeping both your email account updated as the mobile application and to ensure that notifications are received in a mailbox that is constantly reviewed.
If no response is received by the Holder within 72 (seventy-two) hours, it will be understood that he/she accepts in accordance with the changes that this Notice may undergo.
Privacy Policy
Terms & Conditions
Experience your life through all your senses & let us guide you to unforgettable experiences.
Privacy policy
USD United States (US) dollar
