PARICUTIN VOLCANO TOURS
Website: www.paricutinvolcano.com
In compliance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP)
Effective Date: [01/01/2025]
1. RESPONSIBLE PARTY
Legal Name: [Raul Beltran M]
Trade Name: Paricutin Volcano Tours
Tax ID (RFC): [BEMR700328583]
Registered Address: [COL. CENTRO]
City: Angahuan / Uruapan, Michoacán, Mexico
Contact for Privacy Matters:
- WhatsApp: +52 4521566744
- Phone: [+52 4521566744]
2. PERSONAL DATA WE COLLECT
When you book tours, contact us, or use our website, we may collect the following personal data:
Identification Data:
- Full name
- Date of birth
- Nationality
- Gender
- Official identification (INE/IFE, passport number for international visitors)
- CURP (for Mexican nationals)
Contact Data:
- Email address
- Mobile phone number
- WhatsApp contact information
- Residential address
- Hotel or accommodation information
Booking and Payment Data:
- Tour booking details and preferences
- Payment information (credit/debit card details, bank transfer information)
- Billing information
- Transaction history
Emergency Contact Information:
- Emergency contact name
- Emergency contact phone number
- Relationship to emergency contact
- Medical conditions relevant to hiking activities
Travel Information:
- Arrival and departure dates
- Transportation preferences
- Group size and composition
- Special requirements (dietary restrictions, accessibility needs)
Website Usage Data:
- IP address
- Browser type and version
- Pages visited on our website
- Time and date of visits
- Referring website addresses
- Cookies and similar tracking technologies
Sensitive Personal Data:
We may collect sensitive data only when necessary for tour safety:
- Health conditions relevant to physical activities
- Dietary restrictions for meal planning
- Disability or accessibility requirements
Your express written consent is required for collection of sensitive data.
3. PURPOSES OF DATA PROCESSING
Primary Purposes (Essential for Service Delivery):
- Process and confirm your tour bookings
- Communicate with you regarding your reservation
- Arrange transportation and guide services
- Process payments and issue invoices
- Ensure safety during hiking activities and tours
- Comply with tourism and safety regulations
- Maintain emergency contact information
- Provide customer support and assistance
- Comply with legal and tax obligations
Secondary Purposes (To Enhance Your Experience):
- Send promotional materials about our tours and special offers
- Conduct satisfaction surveys and collect feedback
- Improve our tour services and customer experience
- Develop new tour routes and adventure packages
- Send newsletters about Paricutin volcano and local tourism
- Create marketing materials and testimonials (with your consent)
- Analyze website usage to improve online experience
- Invite you to share reviews on travel platforms
You may object to secondary purposes at any time by contacting us at [email protected] or clicking “unsubscribe” in our communications. This will not affect the primary tour services.
4. DATA SHARING AND TRANSFERS
Your personal data may be shared with the following parties to provide our services:
Domestic Transfers (within Mexico):
- Tour guides and operators: Local guides in Angahuan and surrounding areas
- Transportation providers: Bus services, taxi services, and vehicle rental companies
- Accommodation providers: Hotels and lodging facilities in the region
- Restaurant and food services: For meal arrangements during tours
- Emergency services: Local medical services and emergency responders when necessary
- Payment processors: Banks and payment gateway providers
- Accounting and legal advisors: For financial and legal compliance
- Tourism authorities: As required by Mexican tourism regulations
International Transfers:
We may transfer your data internationally to:
- Booking platforms: International travel and booking websites
- Payment processors: International payment gateway services (e.g., PayPal, Stripe)
- Cloud service providers: For data storage and website hosting
- Email service providers: For communication management
These transfers are made with adequate security measures and in compliance with LFPDPPP requirements.
Mandatory Disclosures:
We may disclose your data when required by:
- Mexican federal, state, or local laws
- Court orders or legal proceedings
- Government authorities or tourism regulators
- Protection of our rights, property, or safety
- Medical emergencies
All third parties receiving your data are contractually obligated to maintain confidentiality and use your information only for specified purposes.
5. YOUR ARCO RIGHTS
Under the Federal Law on Protection of Personal Data Held by Private Parties, you have the right to:
- Access (Acceso): Request information about what personal data we hold about you
- Rectification (Rectificación): Correct inaccurate, incomplete, or outdated data
- Cancellation (Cancelación): Request deletion of your data when appropriate
- Opposition (Oposición): Object to specific uses of your data, particularly for secondary purposes
How to Exercise Your ARCO Rights:
- Submit a written request to:
- Email: [email protected]
- Mail: [Complete address for ARCO requests]
- In person: [Physical office address if available]
- Your request must include:
- Full name and contact information
- Copy of official identification (INE/IFE, passport)
- Clear description of which right you wish to exercise
- Specific data you want to access, rectify, cancel, or oppose
- Supporting documents for your request (if applicable)
- Preferred method of response
- Response Timeline:
- We will acknowledge receipt within 5 business days
- We will respond to your request within 20 business days
- If approved, changes will be implemented within 15 business days
- We may request additional information if needed to verify your identity
- Request Form: Download our ARCO Rights Request Form at: www.paricutinvolcano.com/privacy-form
Limitations on ARCO Rights:
We may deny or limit ARCO rights when:
- Legal obligations require us to retain data
- Data is necessary for ongoing legal proceedings
- Your identity cannot be verified
- The request infringes on third-party rights
6. REVOCATION OF CONSENT
You may revoke your consent for data processing at any time:
How to Revoke Consent:
- Send a written request to [email protected]
- Follow the same procedure as ARCO rights requests
- Specify which consent you wish to revoke (e.g., marketing communications, sensitive data processing)
- Include your identification documents
Important Notes:
- Revocation is not retroactive
- Revoking consent for primary purposes may prevent us from providing tour services
- Revoking consent for secondary purposes (marketing) will not affect your ability to book tours
- We will process revocation requests within 20 business days
7. COOKIES AND TRACKING TECHNOLOGIES
Our website www.paricutinvolcano.com uses cookies and similar technologies to enhance your browsing experience.
Types of Cookies We Use:
Essential Cookies:
- Session management
- Security features
- Basic website functionality
Performance Cookies:
- Google Analytics (to understand visitor behavior)
- Website traffic analysis
- Page load performance monitoring
Functionality Cookies:
- Language preferences
- Booking form information (temporary storage)
- User interface customization
Marketing Cookies:
- Facebook Pixel (for targeted advertising)
- Google Ads remarketing
- Social media integration
Managing Cookies:
You can control cookies through your browser settings:
- Chrome: Settings > Privacy and Security > Cookies
- Firefox: Options > Privacy & Security
- Safari: Preferences > Privacy
- Edge: Settings > Privacy, search, and services
Note: Disabling essential cookies may affect website functionality and your ability to make bookings.
For detailed information, visit our Cookie Policy at: www.paricutinvolcano.com/cookie-policy
8. DATA SECURITY MEASURES
We implement comprehensive security measures to protect your personal data:
Physical Security:
- Secure office facilities with access control
- Locked filing cabinets for physical documents
- Restricted access to sensitive information
Technical Security:
- SSL/TLS encryption for website transactions
- Secure payment processing systems
- Encrypted data storage
- Regular security updates and patches
- Firewall protection
- Secure backup systems
Administrative Security:
- Staff training on data protection
- Confidentiality agreements with employees and partners
- Access controls based on role and necessity
- Regular security audits and assessments
- Incident response procedures
Breach Notification:
In the event of a data breach, we will:
- Notify affected individuals within 72 hours
- Report to INAI as required by law
- Take immediate corrective action
- Provide information on protective measures you can take
While we implement robust security measures, no system can be 100% secure. We commit to continuous improvement and prompt response to any security incidents.
9. DATA RETENTION PERIOD
We retain your personal data for the following periods:
Active Customers:
- Booking information: Duration of service plus 2 years
- Payment records: 5 years (as required by Mexican tax law)
- Communication records: 2 years after last interaction
Marketing Data:
- Until you unsubscribe or request deletion
- Maximum of 5 years of inactivity
Legal Requirements:
- Tax and accounting records: 5 years minimum
- Legal claims: Until resolution plus applicable statute of limitations
After Retention Period:
- Data will be securely deleted or anonymized
- Backups will be purged according to our backup retention schedule
- Physical documents will be shredded
You may request early deletion by exercising your ARCO cancellation rights, subject to legal retention requirements.
10. MINORS’ PERSONAL DATA
Protection of Minors:
We do not knowingly collect personal data from individuals under 18 years of age without parental or guardian consent.
For Tours Involving Minors:
- Parent or legal guardian must make the booking
- Parent/guardian consent required for processing minor’s data
- Emergency contact information for guardian is mandatory
- Special safety protocols apply to minors on tours
If you believe we have inadvertently collected data from a minor without proper consent, please contact us immediately at [email protected] so we can delete the information.
11. PHOTOGRAPHY AND VIDEO RECORDING
During tours, we may take photographs and videos for:
- Safety documentation
- Marketing and promotional materials
- Social media posts
- Website content
Your Rights Regarding Images:
- You will be informed when photography/video recording occurs
- You may request not to be photographed
- We will obtain separate consent before using your image publicly
- You may request removal of your image from our marketing materials
12. THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to third-party websites (e.g., booking platforms, social media, travel review sites).
Important Notice:
- We are not responsible for the privacy practices of third-party websites
- Third-party sites have their own privacy policies
- We encourage you to review their policies before providing personal data
- This Privacy Policy applies only to www.paricutinvolcano.com
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect:
- Changes in our business practices
- New legal or regulatory requirements
- Introduction of new services or technologies
- Feedback from customers or authorities
Notice of Changes:
For Minor Changes:
- Updates will be posted on our website with a new “Last Updated” date
- Continued use of our services constitutes acceptance
For Material Changes:
- Email notification to registered users
- Prominent notice on our website homepage
- 30-day notice period before implementation
- Option to object or cancel bookings without penalty
Last Updated: [Insert Date]
Version: 1.0
14. NATIONAL INSTITUTE FOR TRANSPARENCY, ACCESS TO INFORMATION AND PERSONAL DATA PROTECTION (INAI)
If you believe your data protection rights have been violated or if you are not satisfied with our response to your ARCO rights request, you may file a complaint with INAI:
Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI)
Website: www.inai.org.mx
Toll-Free Phone: 01 800 835 4324
Email: [email protected]
Physical Address:
Insurgentes Sur 3211, Col. Insurgentes Cuicuilco
Coyoacán, 04530
Mexico City, CDMX
Business Hours: Monday to Friday, 9:00 AM – 6:00 PM
15. CONTACT US
For questions, concerns, or requests regarding this Privacy Policy or your personal data:
Data Protection Officer / Privacy Department
Paricutin Volcano Tours
Email: [email protected]
Phone: [Insert Phone Number]
WhatsApp: [Insert WhatsApp Number]
Mailing Address: [Insert Complete Address]
Office Location: [Insert Physical Address if applicable]
Business Hours:
Monday to Sunday: [Insert Hours]
Emergency Contact: [Insert Emergency Phone Number]
Alternative Contact Methods:
- Contact form: www.paricutinvolcano.com/contact
- Social media: [Insert social media handles if applicable]
16. CONSENT ACKNOWLEDGMENT
By using our website, booking our tours, or providing your personal data to Paricutin Volcano Tours, you acknowledge that:
- You have read and understood this Privacy Policy
- You consent to the collection and processing of your personal data as described
- You understand your ARCO rights and how to exercise them
- You agree to receive communications related to your bookings (primary purposes)
For sensitive personal data (health information, dietary restrictions, etc.), we will obtain your separate express written consent through our booking forms.
For secondary purposes (marketing communications), you may opt out at any time without affecting the tour services.
17. SPECIAL PROVISIONS FOR INTERNATIONAL VISITORS
For Visitors from the United States: While this policy is designed to comply with Mexican law (LFPDPPP), we recognize your privacy rights under applicable U.S. state laws. Please contact us if you have specific concerns.
For European Union Visitors: While our primary compliance is with Mexican law, we respect GDPR principles. EU visitors may exercise rights similar to ARCO rights by contacting us.
For Other International Visitors: We will work with you to accommodate privacy rights recognized in your home jurisdiction where compatible with Mexican law.
18. LANGUAGE
This Privacy Policy is provided in English. In case of any discrepancy between the English version and any translated version, the Spanish version (if provided) shall prevail for legal purposes in Mexico.
Spanish version available at: www.paricutinvolcano.com/privacidad
19. LEGAL COMPLIANCE
This Privacy Policy complies with:
- Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares)
- Regulations of the Federal Law on Protection of Personal Data Held by Private Parties
- Guidelines and recommendations issued by INAI
- Mexican Federal Consumer Protection Law (in matters related to tourism services)
- Applicable Mexican tourism regulations
20. ACCEPTANCE AND AGREEMENT
By proceeding with a booking or using our services, you confirm that:
✓ You are at least 18 years old or have parental/guardian consent
✓ You have read this entire Privacy Policy
✓ You understand how your data will be collected, used, and shared
✓ You consent to our data processing practices as described
✓ You understand your rights and how to exercise them
✓ You accept the terms of this Privacy Policy
Thank you for choosing Paricutin Volcano Tours. We are committed to protecting your privacy while providing you with an unforgettable experience exploring one of Mexico’s most spectacular natural wonders.
[Company Legal Name]
Paricutin Volcano Tours
Date: [Insert Date]
Signature of Legal Representative: _______________________
For the best experience visiting Paricutin Volcano, one of the Seven Natural Wonders, trust Paricutin Volcano Tours with your adventure. Your privacy and safety are our top priorities.