1. Identity of the Data Controller
Identity of the Data Controller OPERADORA ESGOS, SA DE CV, holding Tax ID (RFC) OES190117RNA (doing business as “Hotel Zócalo Central” and “Balcón del Zócalo”); OPERADORA SOUTEIRA, SA DE CV, holding Tax ID (RFC) OSO190117I48 (doing business as “Hotel Histórico Central”); and HOTELERA XARAVEDRA, S.A. DE C.V., holding Tax ID (RFC) HXA030306QDA (doing business as “Hotel Canada”); along with their affiliates and/or subsidiaries (collectively hereinafter referred to as “CENTRAL HOTELES”), with their respective business addresses—the establishments of the first and third operators, and the first establishment of the second operator being located at Av. 5 de Mayo 61, Col. Centro, Centro Histórico, C.P. 06000, Mexico City, and the second establishment of the second operator being located at Calle Bolívar 28, Col. Centro, Centro Histórico, C.P. 06000, Mexico City—is a company deeply committed to protecting your privacy. Our Data Protection Officer is the Personal Data Department.
This Privacy Notice applies to the services provided by CENTRAL HOTELES, including those offered on the following websites: www.centralhoteles.com, www.balcondelzocalo.com, www.empleocentralhoteles.com, www.eventoscentralhoteles.com, on CENTRAL HOTELES mobile applications, as well as services provided in our hotel establishments or restaurants.
If after reading these terms you have any doubts regarding them or the privacy of your personal data, please send an email to datos.personales@centralhoteles.com or a letter to the address indicated above. The purpose of the email address datos.personales@centralhoteles.com is to address privacy and data protection issues, and it should not be used for commercial inquiries, reservations, or human resources matters.
1.1 Modifications to the Privacy Notice
CENTRAL HOTELES may update this privacy notice at any time. In the event that substantial changes are made to this notice, we will communicate them through our websites indicated in this Privacy Notice. Therefore, we suggest that you periodically visit this privacy notice to remain informed of any updates.
"CENTRAL HOTELES informs you that, for the correct operation, optimization, and maintenance of digital customer service channels and the virtual assistant (AI Bot) available on our Website, it carries out the forwarding of your personal data. These third parties handle the information exclusively on behalf of and under strict instructions from CENTRAL HOTELES, in accordance with Article 49 of the Regulations of the Federal Law on the Protection of Personal Data Held by Private Parties (RLFPDPPP). Therefore, this forwarding does not constitute a transfer of personal data under the terms of Article 36 of the Law, but rather a data processing assignment."
2. Personal Data
In accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, users of this website, as well as individuals who have provided personal information to any company associated with the CENTRAL HOTELES brand or other services we offer directly or indirectly, are informed that the processing of this personal data is intended to provide the services you have chosen to contract. In no case will your data be assigned to other companies for any other purpose without you being adequately informed. The data you provide will be incorporated into various files and properly registered.
For the purposes outlined in this Privacy Notice, CENTRAL HOTELES may collect your personal data in various ways: when the information is provided directly by you; when you visit CENTRAL HOTELES websites; when you use the services offered by CENTRAL HOTELES online through data you authorize CENTRAL HOTELES to collect from your social networks (Facebook, Twitter, Google, etc.) or when connecting to the Wi-Fi that CENTRAL HOTELES may offer; and when we obtain information through other means different from those mentioned above that are permitted by applicable laws.
Automated Customer Service Channels: CENTRAL HOTELES may collect your personal data (such as name, email address, telephone number, lodging preferences, and any information you voluntarily provide) through the Virtual Assistant or Artificial Intelligence (AI) conversational Bot implemented on our Websites.
The personal data collected includes:
Contact Data: name, home, mobile and/or work phone number, marital status, signature, email address, nationality, gender, age, date of birth, username, and password. The HR department of CENTRAL HOTELES may also request from potential candidates: social security number, personal references, work references, information related to education, skills, knowledge, and work experience, language proficiency level, unique population registry code (CURP), AFORE account statement, INFONAVIT credit account statement, tax withholding certificate, and equity data.
Financial Data: cardholder's name, credit or debit card number, expiration date (in case of online transactions).
Billing Data: name or company name, RFC (Tax ID), fiscal address.
Preference Data: Related to the room, required services, and/or purpose and preferences of travel.
Images collected by video surveillance cameras: Our facilities are equipped with video surveillance systems that record images and audio of individuals who access our facilities or are in the surrounding areas.
3. Sensitive Personal Data
Sensitive personal data refers to personal data that affects the most intimate sphere of its owner, or whose improper use could give rise to discrimination or entail a serious risk to them. In particular, sensitive data includes information that may reveal aspects such as racial or ethnic origin, current and future health status, genetic information, religious, philosophical, and moral beliefs, union affiliation, political opinions, and sexual preferences.
If you stay at any of our hotels, the sensitive personal data we will request you to provide will be those related to health or special capacities, which will be used solely to provide you with better service and satisfy your specific needs.
CENTRAL HOTELES may also collect, through its HR department, photographs of candidates, nationality, gender, and general information regarding their current health status for the creation of their corporate medical file.
4. User Consent for the Processing and Assignment of Personal Data
By delivering your data to CENTRAL HOTELES or any company associated with CENTRAL HOTELES, the user expressly accepts these conditions and rules of use, under the terms of Article 8 of the Federal Law on the Protection of Personal Data Held by Private Parties, granting unequivocal consent to the processing of their personal data in accordance with the informed purposes.
Likewise, the user accepts the assignment of their data to the corresponding entities for the fulfillment of obligations according to the contracted service, exclusively for reserved purposes, ensuring that under no other circumstances will they be assigned to third parties for another purpose without the additional consent of the owner. Due to legal obligations and collaboration with Authorities, data may be delivered to public bodies that require it, specifying that in these cases, only the minimum information demanded for legal compliance will be provided, protecting the rest of the data with the utmost rigor.
The user accepts that the data provided to CENTRAL HOTELES is truthful, current, and correct. Furthermore, the user agrees to hold CENTRAL HOTELES harmless from any lawsuit or claim arising from errors in the personal data delivered.
5. Purpose and Processing of Personal Information
Purposes that give rise to the legal relationship and are necessary for the provision of the service:
The personal information you provide will be used by CENTRAL HOTELES to render the services you request or that are part of a program you have enrolled in or a purchase you have made: reservations, affiliation with our referral programs, organization of social events and meetings, and purchase of products and/or tourist services.
Process, channel, and respond to your questions, quote requests, comments, or assistance in reservation processes through automated technological messaging tools and Artificial Intelligence.
CENTRAL HOTELES may use the collected personal data to ensure compliance with the terms and conditions of the purchase and sale of tourist services or any other contracted agreement.
For security reasons, our facilities are equipped with video surveillance systems. We inform you that the images and sounds obtained from them will be used solely to safeguard the safety of the people staying with us, those who visit us, and our staff and facilities, and they may be shared with authorities if necessary.
Purposes that do not give rise to a legal relationship and are not necessary for the provision of the service:
CENTRAL HOTELES may use the information to offer you promotions and commercial tourist products, send promotions, special services, newsletters, surveys, and online contests.
In the event that the user does not wish their personal data to be used for all or some of the Secondary Purposes set forth in this section, they must send a request for data removal, specifying the purposes for which they do not wish their personal data to be processed, to the following email address: datos.personales@centralhoteles.com.
CENTRAL HOTELES informs the END CONSUMER that all personal data stored in both physical and/or electronic media will be kept once the purpose for which it was collected concludes, having a maximum preservation period of 10 years, in compliance with the provisions and terms required by applicable commercial, fiscal, and accounting laws, prior to its subsequent destruction. In the case of data and authorizations captured for commercial purposes, as long as the interested party does not request the cancellation of the previously granted authorization, we may retain and use it for our commercial actions indefinitely.
6. Limitation of the Use or Disclosure of Personal Information
At any time, you may express your refusal to the processing of your data for purposes that do not give rise to a legal relationship and are not necessary for the provision of the service. You may request this by emailing datos.personales@centralhoteles.com, indicating the email address(es) or channels you wish to unsubscribe.
7. Forwarding of Personal Data to Third-Party Processors
CENTRAL HOTELES informs you that, for the correct operation, optimization, and maintenance of digital customer service channels and the virtual assistant (AI Bot) available on our Website, it carries out the forwarding of your personal data. These third parties handle the information exclusively on behalf of and under strict instructions from CENTRAL HOTELES, in accordance with Article 49 of the Regulations of the Federal Law on the Protection of Personal Data Held by Private Parties (RLFPDPPP). Therefore, this forwarding does not constitute a transfer of personal data under the terms of Article 36 of the Law, but rather a data processing assignment:
EKADESIGN S.C.P. (RFC: EKA141121AT6), located at Montecito 38, Piso 28, Ofna 16, Col. Nápoles, Benito Juárez, C.P. 03810, Mexico City, acting as the agency responsible for the management and administration of digital and marketing services for CENTRAL HOTELES.
Buda Ti (https://budati.com/), acting as the technology provider and developer of the Artificial Intelligence conversational bot software that processes user interactions.
These third parties possess administrative, technical, and physical security measures identical or superior to ours to ensure the confidentiality of your data and are strictly prohibited from using your information for their own commercial purposes or for training public Artificial Intelligence models outside of CENTRAL HOTELES. By using our automated chats, you understand and accept these necessary forwardings for the provision of the service.
8. Exercise of Access, Rectification, Cancellation, and Opposition Rights (ARCO Rights)
Access, rectification, cancellation, or opposition regarding the information you provide to CENTRAL HOTELES under the Federal Law on the Protection of Personal Data Held by Private Parties, or the revocation of the consent you have granted us for processing your personal data, can be requested by submitting a written application to the Data Protection Department at the following address: Av. 5 de Mayo 61, Centro Histórico, Centro, 06000 Centro Histórico, CDMX, from 9:00 AM to 2:00 PM, Monday through Friday, or via email to datos.personales@centralhoteles.com.
Such request must contain at least the following:
(i) Name of the Personal Data Owner;
(ii) Email address to receive notifications;
(iii) Documents proving your identity or, where applicable, the legal representation of the owner;
(iv) Clear and precise description of the personal data regarding which you seek to exercise your rights and the specific right you intend to exercise;
(v) Any other element or document that facilitates the location of the personal data.
In the event that the request does not satisfy any of the requirements mentioned above, the Data Protection Department may require you, within 5 days of receiving the request, to provide the necessary elements or documents to process it. You will have 10 days to fulfill this requirement; if no response is given within that timeframe, the request will be deemed as not submitted.
Response times will be a maximum of 20 days from the date the request is received to communicate the determination adopted. If the request is found to be grounded, it will become effective within 15 days following the issuance of the response. To protect your confidentiality, CENTRAL HOTELES will send the response to your request to the email address provided for that purpose and will keep it available for the applicant at the address indicated in the paragraph above.
9. Employment and Resume-Specific Conditions
Data management is carried out taking into account the state of technology, all in accordance with legal provisions. Data supplied or delivered is collected by CENTRAL HOTELES with the purpose of managing its recruitment database, maintaining communication with the candidate during the recruitment and selection process, and forming candidate-employee files. CENTRAL HOTELES participates in employment portfolio exchanges with other companies in the sector, subject to the prior authorization of the data owner.
Each owner accepts and authorizes the processing of personal data provided to our HR selection database, as well as unequivocally consenting to the processing or assignment of information for the explained purposes to any company of CENTRAL HOTELES. The owner may revoke the consent granted at any time, without retroactive effects. CENTRAL HOTELES informs the owner that they may exercise their access, rectification, cancellation, and opposition rights as indicated in this policy.
10. Email Communications, Subscriptions, and Newsletters
The processing of personal data, as well as the delivery of commercial communications through electronic media, complies with laws related to electronic commerce and the internet and follows international best practices and standards. In our promotional and advertising communications for our establishments and services, there must always be an address where you can unsubscribe from the service through a website link, or through the email address that sent it, proceeding to remove your email address from our lists. In case you detect any anomaly, please contact us at datos.personales@centralhoteles.com.
In the case of subscription to newsletters, news, or similar services on our website, your data will become part of CENTRAL HOTELES database. According to existing regulations, information may be assigned to national or international third-party companies directly related to the provision of the service for which you have contracted us.
11. Minors
We cannot always determine the age of people who access our website. In any case, when this is detected, the authorization of parents or legal guardians will be required both on the website and in our establishments.
12. Control and Security of Personal Information
CENTRAL HOTELES agrees to take the necessary measures to protect the collected information, using security technologies and control procedures for access, use, or disclosure of your personal information without authorization; for instance, by storing the personal information provided on servers located in Data Centers with limited access controls. For online transactions, we also use security technologies that protect the personal information transmitted to us through various electronic means, such as the use of a secure server under the Secure Socket Layer (SSL) protocol.
However, no security or data transmission system over which the company does not have absolute control and/or depends on the internet can guarantee complete security.
13. Electronic Media and Cookies
In the event that you use electronic media in connection with your personal data, cookies will be generated to provide you with better service. Cookies are small pieces of information sent by the website to your browser. Cookies are stored on your computer's hard drive and are used to determine your preferences when connecting to our site's services, as well as to track certain behaviors or activities carried out by you within our sites.
In some sections of our site, we require that the customer has cookies enabled, as some functionalities require them to work. Cookies allow us to: a) recognize you at the time of entering our sites and offer you a personalized experience, b) know the personal configuration of the site specified by you; for example, cookies allow us to detect the bandwidth you selected at the time of entering our home page, so we know what type of information is advisable to download, c) calculate the size of our audience and measure certain traffic parameters, since each browser accessing our sites acquires a cookie used to determine the frequency of use and sections visited, thus reflecting your habits and preferences, which is useful to improve content, headlines, and promotions for users.
Cookies also help us track some activities; for example, in some online surveys we launch, we may use cookies to detect if the user has already filled out the survey and avoid displaying it again. The "help" button on the toolbar of most browsers will tell you how to avoid accepting new cookies, how to have the browser notify you when receiving a new cookie, or how to disable all cookies. However, cookies allow you to take advantage of the most beneficial features we offer, so we recommend leaving them activated.
14. Transfers
CENTRAL HOTELES only transfers personal data under the circumstances established in Article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties.
CENTRAL HOTELES agrees not to transfer personal data to third parties for purposes other than those established in this Privacy Notice. In the event of a security breach that significantly affects the property or moral rights of data owners, they will be informed by email immediately, so they can take corresponding measures to defend their rights, holding CENTRAL HOTELES harmless if the breach is not attributable to it.
15. Acceptance of Terms
I acknowledge and accept the terms and conditions set forth in this Privacy Notice; otherwise, I will communicate it to CENTRAL HOTELES under the terms indicated in this Privacy Notice.
In case of any disagreement or complaint regarding the processing of your personal data, you may contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI).
Date of last update: July 10, 2026