PRIVACY NOTICE
If you are reading this, it means you are a responsible user who takes care of your personal data.
In this Privacy Notice, we explain why we request your data, under what circumstances, and how we protect it.
About the Data Controller
Legal Name: Experiencias Xcaret Parques S.A.P.I. de C.V. (hereinafter referred to as Grupo Xcaret).
Address: Carretera Chetumal–Puerto Juárez, Km 282, Municipality of Playa del Carmen, Quintana Roo, Mexico, ZIP Code 77710.
Business Activity: We are a business group operating cultural, natural, ecological, and adventure parks, as well as unique hotels. We offer our Visitors and Guests ecological, cultural, and recreational experiences.
Department Responsible for Protecting Your Data: Cultural Promotion and Outreach Department.
Contact Email: privacidad@xcaret.com
Personal Data We Collect and When We Collect It
For your participation in "THE EVENT", which will take place in May 2027, and related activities, we will collect your personal data at the following stages:
During Registration for the Swimming Test
- Full name, photograph, email address, dialing prefix, date of birth, gender, height, weight, copy of an official identification document, address, country of residence, state of residence, mobile phone number, medical conditions, and blood type.
- A medical certificate issued by the Red Cross is also required.
- Emergency contact information: full name, email address, relationship, gender, date of birth, address, country, state, and telephone number.
When Attending the Swimming Test
- Presentation of an official identification document to verify your identity.
- Submission of the signed liability waiver form.
When Signing the Participation Agreement for LA TRAVEXÍA
- Full name and signature.
- Proof of payment, training liability waiver, signed regulations, and comprehensive medical certificate.
- The medical certificate is submitted to the Comprehensive Safety Department to ensure that the information remains available and up to date for consultation if medical attention is required.
During the Event
- Collection of photographs and videos of participants and attendees.
Important Information
- We will never request personal data by telephone or email.
- We will never request credit or debit card information outside official payment channels.
Purposes of Personal Data Processing
The personal data collected will be used for the following purposes:
Primary Purposes (Necessary)
- Register your participation in "THE EVENT" and related activities.
- Identify and verify your identity through an official identification document.
- Communicate with you throughout the registration and participation process, primarily through the email address infotsm@xcaret.com .
- Evaluate your health condition to determine whether you are medically fit to participate, maintain relevant medical history, and take appropriate measures during training sessions or in the event of an incident.
- Receive and validate the participation agreement, which is mandatory for your inclusion in the event.
- Provide medical follow-up through Grupo Xcaret's Comprehensive Safety Department and First Aid Unit.
- Capture photographs and videos during the event for recordkeeping and institutional communication purposes.
Secondary Purposes (Optional)
- Arrange an accommodation reservation at the designated hotel.
- Conduct internal research and statistical studies to understand interests and improve the services offered.
- Maintain a participant database to communicate important changes, dates, training sessions, and swimming tests.
- Provide promotions related to the event and invite you to future editions of "THE EVENT".
- Use photographs and videos from the event for advertising and institutional communication purposes.
If you do not wish your data to be used for secondary purposes, you may express your preference by following the procedure for exercising ARCO rights described in this Notice.
The processing activities described above are subject to your consent. We will never use your data for any purpose other than those stated in this Privacy Notice, nor will we sell your information.
Use of Cookies
Cookies are text files that are automatically downloaded and stored on your device when browsing a website. They allow websites to remember display preferences, usernames, and passwords.
Some sections of our website require cookies to be enabled for proper functionality. You can manage their use through your browser settings.
Limitation of Use and Disclosure of Information
The information you provide is protected. We recommend that you do not share additional personal data with third parties.
You may limit the use or disclosure of your personal data by emailing privacidad@xcaret.com , specifying the restrictions you wish to apply.
ARCO Rights and Other Rights
By providing us with your data, you have the right to:
- Request access to your personal data.
- Request correction of your personal data.
- Request deletion of your personal data.
- Request restrictions on the processing of your personal data.
- Object to the processing of your personal data.
- Request portability of your personal data.
- Withdraw your previously granted consent.
These rights must be exercised personally. You must submit your request to the Cultural Promotion and Outreach Department using the corresponding form and a copy of your official identification document, by emailing privacidad@xcaret.com .
Office Hours: Monday through Friday, from 9:00 a.m. to 7:00 p.m.
The response period will not exceed 15 business days.
Data Retention
The information collected will be securely retained for a maximum period of one year from the date of collection, unless otherwise required by law or subject to an express deletion request.
Sensitive personal data will be deleted following best practices once your participation in "THE EVENT" has concluded.
Data Transfers
Please note that we share your basic information with different hotels, which will be determined before the event, in order to arrange your accommodation. You may request information about the designated hotels by contacting infotsm@xcaret.com in the days leading up to the event.
Security Measures
We have implemented technical, administrative, and physical measures to protect your data, including:
- Use of SSL certificates on our websites.
- Security procedures for our personnel.
- Restricted access to databases.
- Best practices for server security.
- Controls to comply with the LFPDPPP and the GDPR.
Use of Images and Audio Through Video Surveillance
To ensure the safety of visitors, guests, employees, and facilities, we operate video surveillance systems that may capture images and, in some cases, audio, which are considered personal data. Such data will be processed in accordance with this Privacy Notice.
Applicable Legal Framework
This Privacy Notice incorporates:
- LFPDPPP — Federal Law on the Protection of Personal Data Held by Private Parties, Mexico.
- GDPR — General Data Protection Regulation, EU Regulation 2016/679.
Supervisory Authority
If you believe that your right to personal data protection has been violated, you may contact the Secretariat of Transparency and Good Governance (Secretaría de Transparencia y Buen Gobierno), the competent authority in this matter.
Acceptance of Terms
By providing your information and checking the consent box, you agree that your information will be processed in accordance with the terms of this Privacy Notice.
Amendments
We may update or modify this Privacy Notice to reflect legal or internal changes.
You will be notified of updates when entering your information in the registration form and checking the acceptance box.
Last Updated: September 16, 2026.
