Legal Notice
A. Identity of the Data Controller
Turística Fortaleza S.A DE C.V., for the purposes of marketing the products and/or services that Turística Fortaleza manages and/or distributes (hereinafter, Hotel LuCa), located at Calle Orizaba number 16, Colonia Roma Norte, Alcaldía Cuauhtémoc, Mexico City, is a company committed to protecting your privacy. Our Data Protection Officer is the Personal Data Compliance Department, located at the same address. You may contact them via email at: gerencia@hotelluca.mx
B. Personal Data
For the purposes set forth in this Privacy Notice, Hotel LuCa may collect your personal data in various ways: when the information is provided directly by you; when you visit Hotel LuCa's websites; when you use the online services offered by Hotel LuCa through the data you authorize Hotel LuCa to collect from your social media networks (Facebook, X, LinkedIn, Google) or when connecting to the Wi-Fi that Hotel LuCa may offer you; and when we obtain information through other means different from those mentioned above that are permitted by applicable laws.
The personal data obtained through the aforementioned means are:
1. Identification: first name(s), last name(s), telephone number(s), marital status, email address, age, date of birth, nationality, gender, RFC number, CURP, occupation, preferences related to lodging services and/or travel needs, license plate number, and state of origin of the vehicle.
2. Physical location: home address, tax address; reservation and/or stay dates and codes, flight number, date, and time, destination and hotel name, arrival and departure date and time at the hotel.
3. Authentication: username and password, handwritten and electronic signature, official IDs.
4. Financial/Property: bank card number, income level, and tax status certificate (constancia de situación fiscal).
5. Sensitive: credit and/or debit bank card number, expiration date and/or CVV, family environment, health status and medical reports, and official IDs of minors.
C. Sensitive Personal Data
Sensitive personal data is considered to be that personal data that affects the most intimate sphere of its owner, or whose improper use may give rise to discrimination or entail a serious risk for them. In particular, sensitive data includes information that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical, and moral beliefs, union affiliation, political opinions, and sexual preferences. In the event that you require a specific service or product for which you provide this data, Hotel LuCa will use it solely to provide said service, manage reservation cancellations, identify travel needs, and satisfy your specific requirements.
In the event of a health emergency, Hotel LuCa, under the terms of applicable regulations, will collect data relating to your health status with the sole purpose of ensuring your health protection and that of other persons at the hotel or any property managed by Hotel LuCa. This information will only be kept for the time necessary to fulfill said purpose.
D. Purpose and Processing of Personal Information
Purposes that give rise to the legal relationship and are necessary for the provision of the service:
1. The personal information you provide to us will be used by Hotel LuCa to render the services and/or products you request or that are part of a program you have enrolled in or a purchase you have made: reservations, partner/customer service, collection management; providing your data to the respective provider when applicable.
2. Hotel LuCa may use the personal information you provide to offer you a better service and, where appropriate, identify your preferences during your stay to make it more pleasant.
Purposes that require the consent of the data subject, since they do not give rise to a legal relationship nor are they necessary for the provision of the service, and which you consent to being carried out:
1. Likewise, the information may be used to offer you promotions and tourism or commercial products, send promotions, special services, newsletters, or surveys.
2. Data analysis may be performed through the use of technologies in order to create profiles regarding your stays and travel preferences, allowing us to evaluate our service and personalize the communication and promotions designed for you.
E. Limitation on the Use or Disclosure of Personal Information regarding purposes that do not give rise to a legal relationship.
To enable you to limit the use and disclosure of your Personal Information regarding purposes that do not give rise to a legal relationship, we offer you the following means:
1. In the event that you are a resident of the United Mexican States, registration in the Public Registry to Avoid Advertising (Registro Público para Evitar Publicidad), which is managed by the Federal Consumer Attorney's Office (PROFECO), so that your personal data is not used to receive advertising or promotions from goods or services companies. For more information, you may consult PROFECO's website or contact them directly.
2. Send a request to the email address gerencia@hotelluca.mx indicating the email address(es) and/or telephone number(s) that require restriction.
F. Exercise of Access, Rectification, Cancellation, and Opposition Rights (ARCO Rights).
Access, rectification, cancellation, or opposition regarding the information you provide to Hotel LuCa, as set forth in the Federal Law on Protection of Personal Data Held by Private Parties, or any applicable regulation, may be requested by submitting a written application to the Personal Data Compliance Department at the following address: Calle Orizaba number 16, Colonia Roma Norte, Alcaldía Cuauhtémoc, Mexico City, from 9:00 AM to 2:00 PM, Monday through Friday, or via email at gerencia@hotelluca.mx
Said request must contain at least the following: (i) Name of the Personal Data Subject; (ii) Email address to receive notifications; (iii) Documents proving your identity or, if applicable, the legal representation of the subject; (iv) A clear and precise description of the personal data regarding which you seek to exercise the right and the right you intend to exercise; (v) Any other element or document that facilitates the location of the personal data. In the event that the request does not satisfy any of the requirements mentioned above, the Personal Data Compliance Department may require you, within 5 days of receiving the request, to provide the necessary elements or documents to process it. You will have 10 days to fulfill this requirement; if no response is provided within that period, the request will be deemed as not submitted.
Unless applicable regulations state otherwise, the response time will be a maximum of 20 days from the date the request is received to communicate the determination made, so that, if appropriate, it becomes effective within 15 days following the issuance of the response. The aforementioned periods may be extended once for an equal period, provided that the circumstances of the case justify it.
In order to protect your confidentiality, Hotel LuCa will send the response to your request to the email address you have provided for that purpose and will keep it available to the applicant at the address indicated in the paragraph above.
Likewise, you may request information related to the conditions and general aspects of the processing of your personal data by sending a request to the aforementioned email.
G. Revocation of Consent for the Use of Your Personal Data.
You may revoke the consent you have given us for the processing of your personal data. It is important to bear in mind that Hotel LuCa may not be able to address your request or conclude the processing immediately in all cases, as we may be required to continue processing your personal data due to a legal obligation. Furthermore, you must consider that, for certain purposes, the revocation of your consent will imply that we can no longer provide the service you requested or will result in the termination of your relationship with Hotel LuCa.
To revoke your consent, you must submit a written request to the Personal Data Compliance Department at the following address: Calle Orizaba number 16, Colonia Roma Norte, Alcaldía Cuauhtémoc, Mexico City, from 9:00 AM to 2:00 PM, Monday through Friday, or via email at gerencia@hotelluca.mx
The processing and fulfillment of said request will be carried out in accordance with the provisions of Section F above.
H. Control and Security of Personal Information.
Hotel LuCa undertakes to take the necessary measures to protect the information collected, using security technologies and control procedures for access, use, or disclosure of your personal information without authorization; for example, by storing the personal information provided on servers located in Data Centers that have limited access controls. For online transactions, we also use security technologies that protect the personal information transmitted to us through various electronic means, such as the use of a secure server under the Secure Socket Layer (SSL) protocol.
However, no security or data transmission system over which the company does not have absolute control and/or relies on the internet can guarantee complete security.
I. Use of Image
Hotel LuCa may make recordings or take photographs for security purposes and service quality assurance.
The capture of your image will be used by Hotel LuCa as a control and security measure, for the prevention of unlawful acts in general, and especially regarding the property, its contents, and the persons found within it.
J. Electronic Media and Cookies.
In the event that you use electronic media in connection with your personal data, cookies will be generated in order to provide you with a better service.
Cookies are small pieces of information that are sent by the website to your browser.
Cookies are stored on your computer's hard drive and are used to determine your preferences when you connect to our website services, as well as to track certain behaviors or activities carried out by you within our sites.
In some sections of our site, we require the customer to have cookies enabled, as some functionalities need them to work. Cookies allow us to: a) recognize you at the time you enter our sites and offer you a personalized experience, b) know the personal configuration of the site specified by you; for example, cookies allow us to detect the bandwidth you selected when entering our site's home page, so we know what type of information is advisable to download, c) calculate our audience size and measure certain traffic parameters, since each browser accessing our sites acquires a cookie used to determine the frequency of use and the sections of the sites visited, thus reflecting your habits and preferences, information that is useful to us to improve content, headlines, and promotions for users. Cookies also help us track some activities; for example, in some online surveys we launch, we can use cookies to detect if the user has already filled out the survey and avoid displaying it again. The "help" button located on the toolbar of most browsers will tell you how to avoid accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable all cookies. However, cookies will allow you to take advantage of the most beneficial features we offer, so we recommend leaving them activated.
K. Transfers
Hotel LuCa only transfers personal data in the following cases:
1. Those established in Article 36 of the Federal Law on Protection of Personal Data Held by Private Parties.
2. In cases where another international regulation applies, data will only be transferred in the instances specified therein.
3. In cases where it is necessary to provide them to third-party providers regarding the services or products you are contracting.
L. Retention Period of Personal Data.
Your personal data will be retained as long as the legal relationship with you is maintained, until it is satisfactorily concluded and you do not exercise your right to erasure, or until you revoke your consent. In any case, the retention period of personal data will be restricted to the minimum necessary, so that they will only be kept while the purpose for which they were collected remains. When retention is no longer necessary, Hotel LuCa will keep blocked those data that may be required during the legally established periods to address any issues relating to their processing or the legal relationship originated with you. Once the legal periods have elapsed, the personal data will be deleted by adopting appropriate security measures that guarantee their total destruction.
M. Changes to this Privacy Notice.
Hotel LuCa may update this privacy notice at any time. In the event that substantial changes are made to this notice, we will communicate it through our websites indicated in Section A of this Privacy Notice. Therefore, we suggest you periodically visit this privacy notice to be aware of any updates.
I acknowledge and accept the terms and conditions established in this Privacy Notice, and otherwise, I will communicate it to Hotel LuCa in accordance with the provisions of Sections E, F, and G of this Privacy Notice. In case of any disagreement or complaint regarding the processing of your personal data, in addition to contacting the data controller according to this notice, you may turn to the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) in Mexico, or the competent authority in the event that a regulation other than Mexican law applies.
Date of last update: January 2, 2026.
