Privacy and Data Protection Policy

In compliance with the Mexican Federal Law for the Protection of Personal Data in Possession of Private Entities (hereafter the law), which has the purpose of protecting the personal data held by private parties (hereafter the information), Lomas Travel provides the following Privacy and Data Protection Policy.

Data Protection Liability

Viajes Turquesa del Caribe Mexicano, S.A. de C.V. (hereby Lomas Travel), located in Calle Acceso L28, Manzana 16, Lote 37, Supermanzana 309, Cancun, Quintana Roo, Mexico, Post Code 77560. The Web Development department, located in the address specified before, is liable for the protection of the information and may be contacted via e-mail to the following address:

Personal Information Requested

Lomas Travel will request personal information to all the people who uses our online and call centre services, in order to process, follow-up, and confirm the service(s) hired to Lomas Travel. The information requested to the users includes, but is not limited to: full name, e-mail address, mailing address, postcode, birth date, credit card information and additional information important for the reserve and payment processes. The credit card information is used for the payment process during the hiring of the services provided by Lomas Travel.

When filling the registry forms or giving the information to any representative of the call centre, the information owner gives full and voluntary consent to providing the personal information that may be requested on the understanding that in case that the user decides not to share any of the mandatory information he/she will not be able to access to the services which necessitate such information; nonetheless, will be able to access to all the other services provided inasmuch as the personal information is not required. Lomas Travel in no case and in no circumstance will keep, store, nor file any sensitive personal information such as race, ethnicity, health status, genetic information, religion a/o belief, membership to any union or such group, political conviction, sexual preference, etc.

Furthermore, Lomas Travel compiles the e-mail addresses of all the people that use these services to communicate with Lomas Travel, the additional information regarding the web pages visited through their visit to the website, and any other information given voluntarily, including but not limited to polls, surveys, or online registry forms.

The information provided as a user of the website may be utilized to: contact the user provided that any change on the reservation is made, detect a/o prevent possible cyber-crimes, to make customer surveys and polls, manage the customer-company relations and improve the website’s content as well as for statistical purposes of our service improvement. In the case that the user provides Lomas Travel with its phone number, it will be used as a means of communication in the event that any change in the reservations is made, or in any concern related to the payment process.

The personal information that, as a user of our website a/o Call centre, is provided to Lomas Travel must be true and in accordance with your present situation.

Data Transfer

Personal data may be transferred a/o shared with trading partners, associates, suppliers; financial, banking and credit institutions, subsidiary partners, subsidiaries, affiliates, branches and third parties such as hotels, leasing companies, airlines, tour suppliers, etc., to verify and confirm the reservation(s) made.

Privacy and Personal Data Protection

Lomas Travel uses the most advanced technologies and processes for the protection of the information provided by the data owners. These technologies encode, cipher, and prevent the interception of any data a/o information provided through the internet and the Call centre, including but not limited to: credit card numbers and e-mail addresses. Lomas Travel establishes and maintains administrative, technical and physical measures in order to safekeeping the personal data from: damages, loss or alteration, destruction or misuse, breach or unauthorized processing. The Lomas Travel website encloses links a/o hypertexts, advertising, buttons, and search engine tools onto the internet that, when clicked on or accessed by, connect the user to other portals and websites owned by third parties. Notwithstanding the fact that in some particular cases some of this third-party-owned websites are framed with the navigation bar a/o the design and appearance of the Lomas Travel website; the information that the user provides to any and all of these websites and portals is not covered under these Privacy Policy and Lomas Travel will not be liable for the navigation and use of personal information within third-party-owned portals and websites, consequently, it is recommended that the user of the website to verify the notices and privacy policies established or applicable to these third-party-owned portals and websites.

Lomas Travel commits to keep the user’s information undisclosed, and will not transfer the information to any third party unless prior consent from the user; with the exceptions mentioned on the Federal Law on Protection of Personal Data Held by Private Parties in its art.37; as well as executing the Data Transfer in observance of the present Law.

Article 37. Domestic or international transfers of data may be carried out without the consent of the data owner in the following cases:

  1. Where the transfer is pursuant to a Law or Treaty to which Mexico is party;
  2. Where the transfer is necessary for medical diagnosis or prevention, health care delivery, medical treatment or health services management;
  3. Where the transfer is made to holding companies, subsidiaries or affiliates under common control of the data controller, or to a parent company or any company of the same group as the data controller, operating under the same internal processes and policies;
  4. Where the transfer is necessary by virtue of a contract executed or to be executed in the interest of the data owner between the data controller and a third party;
  5. Where the transfer is necessary or legally required to safeguard public interest or for the administration of justice;
  6. Where the transfer is necessary for the recognition, exercise or defence of a right in a judicial proceeding, and
  7. Where the transfer is necessary to maintain or fulfil a legal relationship between the data controller and the data owner.

Use of Bank Card Information Liability

Lomas Travel commits to respect the privacy of all its customers; in the particular aspect of this website, to all those who make online booking or book through the Call centre. In order to ensure the safety of all the online operations a SSL certificate is used in its website, which protects the data sent from the user’s web navigator onto Lomas Travel’s website and databases. All the information regarding the transactions made with a credit card is ciphered in order to keep the user’s information safe and private.

All the personal information provided by Lomas Travel customers, such as full name, mailing address, e-mail address, telephone number, and any other data concerning the booking through the online payment process, will be considered as strictly confidential, unless specified otherwise by the customers.

Use of "cookies" and IP Addresses

Lomas Travel’ data server will send data to the user’s web navigator, same that will be stored in the user’s computer hard drive. This allows Lomas Travel to identify the devises employed by the user to access to its portal. This whole process is known as the use of “cookies” or IP address. Through the use of these “cookies” or IP address Lomas Travel is able to offer a personalized service to all its users for it permits, among other things, to issue publicity and promotion campaigns, measure the online audience and traffic in its websites visited by the user. Through these “cookies” or IP address the user is not personally identified, what is identified is the public IP address from where the user is accessing the website.

Access to Personal Data

Users of the services provided by Lomas Travel have the right to access the personal data they provide to its database, and to the detail of the treatment given to them, the right to rectify the data in cases where such data is inaccurate and incomplete, cancel them when deemed as unnecessary for any of the purposes mentioned in the present Privacy Policy, or when considered that such data is being used for the aim agreed in the present document, or when the contractual relationship of the service(s) or good(s) has ended, when disagreeing to the treatment of such for the specific means.

The Law grants four rights to assert (the ARCO rights):

  • Access to your personal data to learn which of it is being in safekeeping, if they are correct or updated and the means by which they are being used.
  • Rectification of such data in the case it is inaccurate, incorrect or not updated.
  • Cancellation, consisting of erasing such personal data when considered that it is not being used in compliance with the means established in the present Privacy Policy.
  • Opposition to the treatment given to your personal data regarding any of the means established in the present Privacy Policy.

Users have the right to abrogate the given consent for the treatment of their Personal Data in order for them not to be used furthermore, in addition to this, the consent to receive promotions and special offers by telephone or e-mail can be revoked.

In order to exercise the ARCOst rights or the right to revoke the consent for the use of personal data, the User must send a written notification in Spanish to Lomas Travel to the following e-mail address:, or send it to the Web Development Department to the following mailing address: Calle de Acceso L28, Manzana 16 Lote 37 Supermanzana 309, Cancún, Quintana Roo, México, Post Code 77560. In such written notification it must be specified: Full name, registered e-mail, mailing address, a telephone number, and a copy of the user’s ID must be attached.

Lomas Travel will contact the user in follow up to the request in the consecutive 15 working days of the reception of such notification and attachments hereby solicited, to communicate whether the revoke proceeds or not, inform its rectification, perform the necessary steps to cancel the utilization of the user’s personal data, or end its usage.

Modification of the Privacy Policy

Lomas Travel reserves the right to modify or amend totally or partially the present Privacy Policy if necessary; such amendments will be valid upon the date of publication in its website

Acceptance of the Terms

This Privacy Policy is subject to the terms and conditions in the website of Viajes Turquesa del Caribe Mexicano S.A. de C.V. / hereby described; which constitutes a legal agreement between you and Viajes Turquesa del Caribe Mexicano S.A. de C.V. If, as a user you utilize the services of Viajes Turquesa del Caribe Mexicano S.A. de C.V. a/o it will be understood that you have read, comprehended and agreed with the terms hereby presented.