PRIVACY NOTICE

Last updated: March 25, 2025.

COZUMELITOSTOURS.com (hereinafter, " COZUMELITOS TOURS ") values ​​its users and is committed to protecting their personal data and privacy. To fulfill this commitment, COZUMELITOS TOURS has developed this privacy policy (the “Privacy Policy” or the “Policy”) that describes COZUMELITOS TOURS ’ practices in the processing of personal data, in accordance with the provisions of the law.

When you use COZUMELITOS TOURS services through any of our sales channels operated under any of our brands (“ COZUMELITOS TOURS ” or others) – i.e., websites, mobile and tablet applications, call centers, branches or sales islands, or others (the “Sales Channels”) – COZUMELITOS TOURS collects certain personal data for subsequent use. This Privacy Policy is intended to help you understand how we process such personal data.

By accepting this Privacy Policy, you authorize COZUMELITOS TOURS to process your personal data for all or some of the purposes set forth in this Policy. COZUMELITOS TOURS may modify this Policy at any time and must notify you when we make any substantial changes. You can see the date of its last update at the top of this Policy. For any questions about this Policy and/or COZUMELITOS TOURS 's practices in this regard, please contact us through "My Account" or "My Booking."

Our commitment to your privacy.

At COZUMELITOS TOURS, we are committed to protecting your privacy and ensuring that your personal data is treated in accordance with applicable law and market best practices. We are transparent about our practices and are available to answer any questions you may have.

Below, we detail the principles that guide how COZUMELITOS TOURS processes your personal data:

• All collection and processing of personal data will be carried out in accordance with this Privacy Policy and to fulfill the purposes stated herein.

• Your personal data will not be transferred, sold, leased, or otherwise disclosed in ways other than those described in this Privacy Policy.

• When personal data is no longer needed and we are no longer legally required to store it, we intend to delete or destroy it.

• Our intention is to collect the least amount of personal data necessary, collecting only that which is necessary to fulfill the purposes set forth in this Policy.

Important definitions. 

Below are some important terms defined to help you understand how we protect your personal data, the limits of our processing, and your rights:

• Owner : You are the owner of your personal data.

• Personal data : information that identifies or leads to the identification of a person. Examples of personal data include your full name, telephone number, identification number and postal address.

• Controller : person responsible for making decisions related to the processing of personal data of the For the purposes of this Policy, it will be COZUMELITOS TOURS .

• Processing : any operation performed on personal data, which may include collection, access, analysis, transfer, storage, anonymization, or deletion.

• Anonymization : the process of depersonalizing personal data by eliminating any association of this information with the data subjects.

Your rights. 

The law grants you certain rights in relation to your personal data, which you may exercise as described in this Policy.

The following are your main rights in relation to your personal data:

• Consult if your personal data is processed by

• Obtain information about how your personal data is processed.

• Correct incomplete or inaccurate data.

• Request the anonymization, blocking, or deletion of personal data that is unnecessary, excessive, or being processed in violation of the privacy policy.

• Know which public and private entities have access to your personal data.

• Revoke your consent to the processing of your data and be informed of the consequences of such revocation.

• Revoke your consent for the collection of new data.

Now, throughout this Policy we will answer the following questions:

1. What personal data do we collect?

1. What is our cookie and web beacon policy?

1. What do we use the personal data we collect for?

1. With whom do we share the personal data we collect?

1. Where do we store and how do we protect the personal data we collect?

1. How can I access, delete, rectify and/or update the personal data collected?

1. How does COZUMELITOS TOURS interact with its social media?

1. Information

1. Special clauses for Mexico.

Let's get started…

1. What personal data do we collect?

COZUMELITOS TOURS collects and stores a) personal data that the user provides to us, b) personal data obtained from third parties, including public data, and c) personal data automatically collected by our platform, as described below:

a) Data personal data that the user provides us.

In order to make tourist reservations through our Sales Channels, you must provide us with certain personal information, including, but not limited to, your full name, valid ID number, nationality, tax identification number, and contact information (such as phone number, address, or email address).

In order to arrange tourist reservations, you may also be required to provide us with your debit or credit card information (such as the credit card number, security code, cardholder name, and expiration date). Personal data will only be collected through the sales channels listed above.

At its sole discretion, COZUMELITOS TOURS may verify the personal data provided by consulting public entities, specialized companies, or credit bureaus, for which you expressly authorize us. The information COZUMELITOS TOURS obtains from these entities will be treated confidentially, in compliance with applicable law and this Policy.

You can always choose not to provide us with your personal information, but this information is generally required to complete tourist reservations. If you choose not to provide us with certain information, you may not be able to purchase our services.

If you make a reservation on behalf of a third party, you must obtain the third party's prior consent before providing us with their personal information. If the third party is a minor under applicable law, you represent that you have the consent of at least one of the minor's parents or legal guardian to provide their personal information and accept this Privacy Policy on their behalf.

You may also submit opinions, comments, and suggestions by voluntarily participating in surveys and/or answering questions sent via email or other channels (the "Opinions"). In this case, in order to provide other users with real testimonials about travel experiences, you accept and agree that all Opinions you send us may be published on our Sales Channels or on other websites or applications with which COZUMELITOS TOURS has agreements. In such case, you may be identified by your full name, nickname, photo, comment, nationality, and/or other information.

Personal. By providing your Opinion or uploading multimedia content through any Sales Channel, you understand that such content will not be treated as confidential and may be freely used by COZUMELITOS TOURS for commercial purposes. Subject to the limitations provided by applicable law, you waive all rights to use such material, including privacy rights, property rights, and publicity rights, and the right to object to how such material is used. You also grant COZUMELITOS TOURS and its affiliates a non-exclusive, unrestricted, perpetual, and royalty-free license to use, transmit, copy, and display the Opinions in any media. No compensation will be paid for the Opinions or the multimedia content.

We remind you that you can provide your feedback anonymously or delete it by setting your preferences in “My Account” or “My Booking.”

Always keep in mind that when you post information or multimedia to a public section of a COZUMELITOS TOURS website or application, you are making it available to other users and the general public; therefore, it will be outside of COZUMELITOS TOURS 's control. Please remember this and be careful about what information you choose to share.

b) Personal data obtained from third parties, including public data. 

To the extent permitted by law, and in particular personal data protection legislation, COZUMELITOS TOURS may also obtain personal data about you from its affiliates, business partners, suppliers, and other third-party sources—such as public databases, information collected during a telephone conversation with the customer service center, and/or through interactive applications. Personal data obtained from third parties will be combined with any other personal data we hold about you.

All personal data obtained by COZUMELITOS TOURS from third parties will be treated in accordance with the provisions of this Privacy Policy and applicable law.

c) Personal data automatically collected by our platform. 

COZUMELITOS TOURS automatically collects and stores certain user browsing data. Browsing data includes: IP addresses, uniform resource identifiers (URIs), request times, methods used to submit requests to the server, size of files received in response, numerical codes indicating the status of the server's response, and other parameters related to the user's operating system and computing environment.

During use, computer systems and programs designed to navigate websites collect certain data whose transmission is necessary for the use of Internet communication protocols. As a general rule, this information is not collected to identify users, but, given its nature, it may allow for such identification through association with other data.

Likewise, to ensure our websites function properly, COZUMELITOS TOURS uses its own and third-party cookies.

2. What is our policy on cookies and web beacons?

Cozumel Experts recommends that you allow the use of cookies when browsing the website to perform certain functions. Cookies are specific types of information that a website transfers to a user's computer hard drive or other device for record-keeping purposes. Cookies can be used to make a website easier to use by saving your settings and preferences while you browse the Internet.

COZUMELITOS TOURS cannot access other information stored on your device through cookies, even if they are downloaded from our website. Cookies cannot load malicious code of any kind, viruses, or malware, and they do not harm the user's device.

Web beacons, on the other hand, are images embedded in a website or email that can be used to monitor a visitor's behavior and store information about the user's IP address, the length of time they interact with the website, and the type of browser they are using, among other things.

Through cookies and web beacons, COZUMELITOS TOURS collects information about its users' website activity. This information may include the URL they just came from (whether or not they are on a COZUMELITOS TOURS website), the URL they subsequently access, the browser they are using, their IP addresses, the sites they visit, searches performed on our websites, and the identification of the devices they are using, among other things.

Although most browsers automatically accept cookies and web beacons, you can set your web browser to reject them. Please note that cookie preferences must be set for each browser (Internet Explorer, Google Chrome, Mozilla Firefox, Safari, Opera, or other).

Our websites use different types of cookies and web beacons:

• Technical cookies: These are necessary to ensure the website functions properly and cannot be deleted. They are set in response to actions you take, such as your privacy preferences, login, service requests, or form filling. These cookies do not store information.

• Functional cookies: These cookies allow for more advanced customization of the user's session than technical cookies allow.

• Analytical cookies: These cookies allow us to see visitors' browsing behavior on the website, with the aim of improving the user experience. The data captured is aggregated and anonymized.

• Advertising cookies: These are third-party cookies (e.g., Google and Facebook) that collect information about your preferences and choices on the site. They are intended for advertising networks, which then use them to show you personalized advertising on other websites.

3. What do we use the personal data we collect for?

CozumelExperts uses the personal data collected for the following purposes:

• Manage your travel reservation, carry out transactions you have initiated, and process invoices or other tax documentation related to your reservation. We also maintain your reservation history in our database.

• Offer you products and services, individually or jointly.

• Manage your requests and answer your questions.

• Conduct internal analysis of sales patterns.

• Measure our customers' satisfaction with our products, services, and customer service.

• Comply with our legal obligations, including cooperating with any requests from public bodies under the law.

• Send you confirmation and updates about your trip, as well as any relevant information. This information may be sent via email, SMS, WhatsApp, or other instant messaging service to the contact information you provide. These messages may contain (but are not limited to) information about COZUMELITOS TOURS services, as well as contact information for suppliers who could help you with your travel experience at the destination.

• Contact you to provide customer service, conduct surveys, statistics, or analyze consumer habits.

• Send special offers and information about participating in contests and sweepstakes, our loyalty program, or our credit card issuance program.

• In order to offer better services or provide its users with information related to their preferences, COZUMELITOS TOURS may also conduct internal studies on the interests, behaviors, and demographics of users, in order to better understand their needs and interests, improve our commercial and promotional initiatives, personalize its content, presentation, and services, and/or display advertising or promotions of interest to users. For this purpose, COZUMELITOS TOURS will only use data.

• Likewise, COZUMELITOS TOURS uses debit or credit card information (such as the cardholder's name, card number, and expiration date) only to complete your travel reservations, including sending your information to the final service providers to manage your reservations and/or purchase requests. You can choose to have COZUMELITOS TOURS remember certain of your card and billing information, which will automatically appear when you access the online sales channels.

• Finally, COZUMELITOS TOURS may use the user's personal data to provide payment processing or fraud prevention services to its affiliated companies.

4. With whom do we share the personal data we collect?

You give your unequivocal consent for COZUMELITOS TOURS to share your personal data with service providers to manage your reservations or purchase requests. These providers may include airlines, hotels, tourism companies that provide services at the destination, self-drive vehicle rental companies, travel assistance service providers, wholesale operators, and other providers of products and services that you contract through our Sales Channels.

You also agree that COZUMELITOS TOURS may share your personal data with third-party providers that provide services to COZUMELITOS TOURS , including credit card acquirers, business analytics, customer service, marketing, payment processing, and/or fraud prevention. These third parties may use your personal data to offer you products and services or to provide their services.

Consequently, by accepting this Privacy Policy, the user acknowledges and accepts that COZUMELITOS TOURS , as the data controller, may share your personal and transaction data with third parties, including, but not limited to, your reservation or purchase request data, so that COZUMELITOS TOURS and/or said third parties, individually or jointly, can offer products and services that fit your profile, improve transaction security, prevent fraud, perform credit risk analysis, and improve the products and services provided, always in strict compliance with applicable law. Such third parties will be subject to contracts and policies that prohibit the unauthorized use or disclosure of the personal data to which they have access, as well as to prevent it from being used in violation of applicable law.

COZUMELITOS TOURS may authorize service providers to collect personal data on its behalf, including as necessary to operate certain elements of our online Sales Channels or to facilitate the delivery of online advertising tailored to your interests.

Finally, COZUMELITOS TOURS may also share your personal data with affiliated companies belonging to the COZUMELITOS TOURS Group and operating under any of the group's trademarks (" COZUMELITOS TOURS " or others). In the event of a transfer of personal data, the recipient of the personal data will assume the same obligations as the data controller who transferred the data.

Please note that if you provide personal data on your own initiative and directly to service providers (whether or not they are service providers for COZUMELITOS TOURS ), those providers may collect, process, and retain such information in accordance with their own privacy policies. COZUMELITOS TOURS is not responsible for any misuse of personal data by third parties.

5. Where do we store and how do we protect the personal data collected?

All personal data is collected and stored on servers physically located in the United States of America. COZUMELITOS TOURS may relocate these servers to any other country and may store personal data in the United States of America or other countries for backup purposes.

By accepting this Policy, you give your unequivocal consent for COZUMELITOS TOURS to transfer your personal data to any country in the world. We guarantee that personal data transferred abroad will be protected.

In any case, COZUMELITOS TOURS is committed to ensuring that legally required standards for the protection and safeguarding of your personal data are met by signing agreements designed to protect your privacy.

COZUMELITOS TOURS has tools to protect your personal data from unauthorized access by third parties. We take appropriate security measures to prevent unauthorized access, alteration, disclosure, or destruction of your data. These measures include internal analyses of our data collection, storage, and processing practices.

With the measures we take, we can ensure that we prevent security breaches affecting your personal data to the greatest extent possible. However, we recognize that there are risks inherent in using the Internet and understand that we cannot completely eliminate them . In any case, we guarantee that the protection of your personal data is one of our priorities and that, should any incident occur, we will take all possible measures to minimize any damage.

6. How can I access, delete, rectify and/or update the personal data collected? 

• Opt

When you make purchases or register as a user with COZUMELITOS TOURS , you may opt in to receive promotional newsletters, messages, or alerts about offers. You will have the opportunity to unsubscribe with each message we send.

Please note that the exercise of your opt-out right applies to promotional circulars, messages, or alerts about offers. However, you will continue to receive communications regarding the status of your active reservations. Furthermore, COZUMELITOS TOURS will retain certain of your personal data for the purpose of resolving disputes or claims, detecting and resolving problems or incidents, and complying with the provisions of the General Terms and Conditions for the period of time determined by law. Furthermore, a user's personal data may not be immediately deleted from our files for technical reasons, including backup systems.

6.2. How can you exercise your rights of access, rectification, cancellation, and objection to your personal data?

You can exercise them by any of the following options:

• By sending a request by email to the address contacto@cozumelitostours.com In your request, you must provide your full name and prove your authority. Likewise, if you are making the request on behalf of a third party, you must prove your authority to represent them. COZUMELITOS TOURS may request additional information or documentation to verify your identity or to clarify your request, such as a copy of your national identification document, an email address and postal address designated for notifications, and a contact telephone number; and a clear and precise description of the personal data regarding which you seek to exercise the right, as well as the documents supporting the request. Once the detailed requirements have been met, and provided that the request is granted, COZUMELITOS TOURS will inform you whether it has granted your request or rejected it. Unless a different period is indicated in the special clauses by country, COZUMELITOS TOURS will have 10 (ten) business days from receipt of the complete request to send a response in the case of an access request, and 5 (five) business days if you request the rectification, update or deletion of personal data.

• Additionally, you can access, update, and correct your registration information at any time by accessing "My Profile" under "My Account" or "My Booking" on our website or app. You can also choose which emails you want by accessing "Emails and Alerts" under "My Account" or "My Booking."

Please note that you are responsible for providing up-to-date, accurate, and authentic personal data.

7. How does COZUMELITOS TOURS interact with its social networks?

When you register with COZUMELITOS TOURS, you are asked to choose a user ID and password (i.e., to access a personal account). COZUMELITOS TOURS also allows you to access your personal account through your Facebook account or other social media accounts that may be supported in the future (the "Social Networks").

Additionally, as part of the functionality of the online Sales Channels, and to provide a more personalized experience, you may link your account with Social Networks by providing your Social Network account login information through the COZUMELITOS TOURS website or application, or by allowing COZUMELITOS TOURS to access your Social Network account, as permitted by the applicable terms and conditions that govern your use of each Social Network.

You represent that you have the right to disclose your Social Network login information to COZUMELITOS TOURS and/or grant COZUMELITOS TOURS access to your account, without any breach by you of any of the terms and conditions that govern your use of the applicable Social Network and without COZUMELITOS TOURS being obligated to pay any fees or comply with any usage limitations imposed by the third-party service providers of the Social Network.

By granting COZUMELITOS TOURS access to any Social Network, you understand that COZUMELITOS TOURS will access, make available, and store (if applicable) all Social Network content that you have authorized to be available on our websites and/or applications.

Depending on the Social Networks you choose and subject to the privacy settings you have set in those accounts, personally identifiable information you post to your Social Networks will be available in and through your COZUMELITOS TOURS account on our websites and/or applications. You should be aware that if a Social Network becomes unavailable, or if the third-party service provider blocks COZUMELITOS TOURS 's access to that Social Network, your Social Network content will no longer be available on our websites and applications.

If you register on the COZUMELITOS TOURS website through your personal social media account (the “Personal Account”), you agree that COZUMELITOS TOURS may access the information contained in your Personal Account, including your personal data, information about your interests, preferences, contacts, and any content available in your Personal Account.

8. General information. 

PLEASE NOTE THAT YOUR RELATIONSHIP WITH PARTNER THIRD-PARTY SERVICE PROVIDERS IS GOVERNED SOLELY BY THE AGREEMENTS YOU HAVE EXECUTED WITH SUCH THIRD-PARTY PROVIDERS.

COZUMELITOS TOURS websites and/or applications may contain links to other websites that have their own privacy policies. Therefore, we recommend that if you visit other websites, you carefully review their privacy and confidentiality policies, as this Policy does not cover the practices or policies of third parties, including those that may disclose and/or share information with COZUMELITOS TOURS .

If you lose control of your Social Media account or password, you may lose control of your personal data and could be subject to legally enforceable transactions made on your behalf. Therefore, if for any reason your password is compromised, you should immediately: (i) change it by modifying your registration information, and (ii) contact us through any means.

9. Special clauses for Mexico.

1. Introduction

For the purposes of Personal Data Owners domiciled in the United Mexican States (" Mexico ") and Mexican regulations on personal data protection, the provisions of this section shall apply first, and the provisions of the general terms and conditions of this document shall apply secondarily. For the purposes of Mexican regulations, this document constitutes a privacy notice, so that whenever this document refers to the terms "Privacy Policy" or "Policy," it shall be understood that it refers to this privacy notice.

The controller is the company COZUMELITOS TOURS , SA de CV (as the context requires, the “ controller ” and whose term will be considered to replace that of “Controller”, and/or “ COZUMELITOS TOURS ” in each place where it is used in the general terms).

The Controller may request and obtain your Personal Data through the following methods: (i) in person when the Owner provides it to the Controller in person; (ii) directly when the Owner provides it to the Controller; or (ii) indirectly, through persons other than the Owner, its representatives (as defined in Mexican law) and the Controller (" Third Parties "), and/or other sources of public information or through the Internet. Likewise, the Owner is informed that the Personal Data to be processed falls into the following categories:

1. Identification: all those that allow the identification of the

1. Contact: all information that allows you to maintain or get in contact with the

1. Assets and financial information: all information that allows us to understand the payment methods the Owner will use for the payment obligations assumed through the Sales Channels.

1. Historical: All information related to your travel history, places you've stayed, contracted services, travel companions, or purchased products, your level of satisfaction with them, as well as your browsing habits or the Owner's preferences.

1. Personal characteristics: all data obtained through the Owner's own photographs, videos, audios, or other content that they make public on their social networks, provided that they somehow tag or reference the Controller or the brands they own, or by participating in any type of campaign.

1. In addition to all of the above, the Owner is hereby informed that the Controller will not collect or process sensitive Personal Data, as defined in the Federal Law on the Protection of Personal Data Held by Private Parties, and is therefore encouraged not to provide such data by any means. Should such data be communicated to the Controller despite our invitation, the Controller will delete such data.

1. For the purposes of this section, “ Treatment ” shall mean the collection, use, disclosure or storage of Personal Data.

II. What do we do with the Owner's Personal Data?

Based on Mexican regulations, the Controller divides its processing according to the following primary and secondary purposes:

1. Primary purposes . The Controller will process your data for the following purposes, which give rise to and are necessary for the existence, maintenance, and fulfillment of the legal relationship between the Controller and the Owner:

1. Manage your travel reservation, carry out transactions initiated by the Owner, and process payments and invoices or other related tax documentation.

1. Analyze, verify, and/or corroborate that the Owner has sufficient capacity and authority to enter into a contract with the Controller or to be bound by another legal instrument with the Controller regarding the services.

1. Analyze, verify, and/or corroborate that the payment method provided by the Owner is legitimate or has sufficient funds to fulfill the payment obligations resulting from the products or services purchased or contracted, respectively, through the platform.

1. Maintain your reservation history in our database so we can address any questions through customer service.

1. Maintain a customer identification file on the Owner. f) Manage their requests and respond to their questions.

1. Send you confirmation and updates about your trip, as well as any relevant information. This information may be sent via email, SMS, WhatsApp, or other instant messaging service to the contact information you provide. These messages may contain (but are not limited to) information about COZUMELITOS TOURS services , as well as contact information for suppliers who could help you with your travel experience at the destination.

1. Comply with our legal obligations, including cooperating with any requests from public bodies covered by the law. We also exercise any appropriate judicial or extrajudicial actions to enforce the contracts entered into by the Owner through the Controller's platform.

1. Provide information to third party providers who participate in the provision of services or sale of products offered through the platform of the

1. Secondary purposes . The Controller will process your Personal Data for the following purposes, which do not give rise to and are not necessary for the existence, maintenance, and fulfillment of the legal relationship between the Controller and the Owner:

1. Offer you products and services, individually or jointly with third parties, in addition to those you have already contracted through the platform.

1. Conduct internal analysis of sales patterns.

1. Measure our customers' satisfaction with our products, services, and customer service.

1. Contacting the Owner to provide customer service, conduct surveys, statistics, or analyze consumer habits.

1. Send special offers and information about participating in contests and sweepstakes, our loyalty program, or our branded credit card issuance program.

1. Conduct internal studies on user interests, behaviors, and demographics to offer better services or provide users with information related to their preferences, better understand their needs and interests, improve our marketing and promotional initiatives, personalize content, presentation, and services, and/or display advertising or promotions relevant to the tours we offer.

1. Whenever you opt in, we will remember certain details about your payment methods and billing information to facilitate future purchases, contracts, and/or billing through the Sales Channels.

1. Provide fraud prevention services to its related companies.

The Owner is hereby informed that the mechanism that the Controller has implemented for the Owner to express his/her refusal to process his/her Personal Data in accordance with the purposes included in section 2 of this subsection, consists of sending a request under the heading “Refusal to Process Secondary Personal Data”. The Owner must send this request to the Address or to the email address contacto@cozumelitostours.com, observing the requirements indicated in subsection “IV.

How are ARCO Rights and other rights of the Owner exercised?” of these Privacy Policies.

III. What are the purposes that justify the transfer of personal data? 

In addition to the disclosures to Third Parties (the " Transfers "), provided for in section 4 of the general terms of this Privacy Policy, the Owner's Personal Data may be subject to disclosure to judicial and/or administrative authorities to which the Controller is obliged in terms of law, as well as for the corresponding administration of justice.

The purposes justifying the transfer of the Owners' Personal Data are as follows: those in sections a), c), d), e), h) and i) of section 1 and in sections a), c), e, f) and h) of section 2; of the immediately preceding subsection II of this Privacy Policy.

In the event that the Owner wishes to express refusal regarding the Transfer of his/her Personal Data, he/she may only do so with respect to those Transfers that are related to the secondary purposes or with the offering of products and/or services of said Third Parties, as well as those Transfers to subsidiaries of the Controller that do not adopt data protection policies similar to those of the Controller. In this case, the Owner must send a request, under the heading "Refusal to Transfer Personal Data", to the Address or email address contacto@cozumelitostours.com, observing the requirements indicated in subsection "IV.

How are ARCO Rights and other rights of the Owner exercised?” of these Privacy Policies, a request that will take effect within 3 (three) business days following receipt thereof.

All of the above, with the understanding that the Controller may freely make transfers related to the aforementioned primary purposes, as well as to its related companies that have data protection policies similar to those of the Controller. It is also noted that the Controller may transfer Personal Data to its suppliers and/or service providers for its own purposes, since under Mexican law, these third parties are merely its processors.

IV. How are ARCO Rights and other rights of the Owner exercised?

The rights of access, rectification, cancellation and/or opposition (the “ ARCO Rights ”) may be exercised, in accordance with section 6.2 of the general terms of this Privacy Policy, by submitting the request referred to therein to the email address contacto@cozumelitostours.com or at your home address.

The exercise of ARCO Rights will be free of charge, and the Owner shall only cover the costs of shipping, reproduction (simple copy), and, where applicable, certification of documents. However, if the Owner reiterates his or her request within a period of less than 12 (twelve) months, the costs will be equivalent to three (three) times the current Unit of Measurement and Update, unless there are substantial modifications to this Privacy Policy that motivate new inquiries. The hours for processing the above requests are Monday through Friday, from 8:00 a.m. to 6:00 p.m.

The Controller shall notify the Owner within a maximum period of 20 (twenty) business days from the date on which the request for the corresponding ARCO Right was received, of the determination adopted so that, if appropriate, it may be made effective within 15 (fifteen) business days following the date on which the response is communicated. The deadline may be extended only once, for each request, for up to an additional period of 15 (fifteen) business days, provided that the Controller justifies the extension to the Owner, which must be notified before the expiration of the original deadline. For this purpose, if the request is made in person, the Controller shall note the corresponding receipt date on the acknowledgment of receipt provided by the Owner.

The period indicated in the previous paragraph will be interrupted if the Controller requests additional information from the Owner because the information originally provided is insufficient or erroneous to address the request, or the aforementioned documents are not attached. To this end, the Controller may request the Owner, once and within 5 (five) business days following receipt of the request, to provide the necessary elements or documents to process it. The Owner will have 10 (ten) business days to address the request, counting from the day after receiving it. If the Owner does not respond within this period, the corresponding request will be deemed not submitted. On the other hand, if the Owner responds to the request for information, the period for the Controller to respond to the request will begin to run on the day after the Owner responds to the request for additional information.

The responses that the Controller provides to Owners who have exercised their ARCO Rights will be made through the same means in which the request was made, and will relate only to the Personal Data specifically indicated in the request in question.

The Owner's consent to this Privacy Policy may be revoked at any time, without retroactive effect. Any revocation of consent by the Owner must be done in accordance with the means and procedure set forth in this subsection.

Finally, the Controller informs the Owners that they may limit the use and disclosure of their Personal Data, with a tool other than the exercise of ARCO Rights or the revocation of consent, by registering their contact telephone number in the Public Registry to Avoid Advertising (REPEP) in accordance with the Federal Consumer Protection Law.

V. When is your personal data deleted from our systems? 

In the event that the Owner does not exercise his/her ARCO rights under the terms established in the previous section, he/she is hereby informed that the Controller will delete his/her personal data within a maximum period of 10 (ten) years from the end of the commercial relationship between the parties, in accordance with the provisions of the law.

VI. Deactivation of Cookies

Each Owner may accept or reject the use of cookies by configuring their devices for this purpose. However, it is important that Owners bear in mind that, if they do not accept the use of cookies , some functions of the Sales Channels may not be fully available, because some of the services or content thereof are available only through the use of cookies . The Owner may disable the use of cookies. following the procedure indicated in the configuration of the device you use to browse. As of the date of issue of this Policy, the sites to consult how to disable cookies In the most popular browsers are the following: