PRIVACY notice
1. Identity of the data controller
Balam DMC México (Balam DMC LLC), with its address at Blvd Palmas Hills 1, suite 11-115, Huixquilucan, State of Mexico, CP 52787, is the data controller responsible for processing your personal data in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and, where applicable, the European Union's General Data Protection Regulation (GDPR).
2. Personal data we collect
Through this website we may collect the following data:
- Identification data: first name, last name, email address, phone number
- Professional data: agency/company, company type and country
- Travel data: type of trip, dates, number of travelers, budget, destinations of interest and message
- Browsing data (first-party analytics): pages visited, language, referring site, campaign parameters (UTM), device type, browser and operating system, active time on each page, scroll depth, sections viewed and approximate location (country, region and city). The IP address is not stored.
3. Purposes of processing
Primary purposes:
- Responding to quote and proposal requests
- Operating and coordinating booked trips
- Complying with legal and tax obligations
Secondary purposes (you may object):
- Sending newsletters, offers and commercial communications
- Statistical analysis and website improvement
- Invitations to fam trips and events
4. Data transfers
Your data may be transferred to:
- Travel service providers (hotels, transportation companies, restaurants)
- Technology providers: Amazon Web Services (website and database hosting), Microsoft (the email service used to send form submissions) and IPLocate (lookup of approximate location from the IP address, at the time of the visit)
- Immigration or tax authorities when required by law
All third parties with whom we share data are bound by equivalent contractual data protection commitments.
5. ARCO rights + GDPR
You have the right to:
- Access: know what data we hold and for what purpose
- Rectification: correct inaccurate data
- Cancellation: have your data deleted where appropriate
- Opposition: object to certain processing
- Portability (GDPR): request a copy in a structured format
- Restriction (GDPR): restrict processing
To exercise these rights, write to contact@balamdmcmx.com with your request and a copy of your identification.
6. Cookies and analytics
This website does not use advertising cookies, and only uses third-party cookies (Google Analytics) if you accept them. To understand in aggregate how the site is used, we rely on a first-party analytics tool: it stores a random session identifier in the browser's session storage (sessionStorage), which is erased when the tab is closed. The IP address is used only during the visit to obtain the approximate location and to compute an anonymous identifier with a key that changes every day and is deleted after two days; the IP address is not stored. Analytics data is kept in our own database and is not shared with third parties for advertising purposes. You can prevent this measurement by using private browsing or by blocking site storage in your browser. If you accept them in the cookie notice, we use Google Analytics, by Google LLC, to measure in aggregate how the site is used: pages viewed, visit duration, device type and approximate country. Google may process this data on servers outside Mexico. You can change your choice at any time from "Cookie preferences" at the bottom of every page.
7. Data retention
Your data is retained only for as long as necessary to fulfill the purposes of processing, applicable legal obligations and statutes of limitation. Commercial data: up to 5 years. Tax data: up to 10 years in accordance with Mexican law. Analytics data: 25 months.
8. Security
We implement reasonable technical, physical and administrative measures to protect your personal data against unauthorized access, loss or alteration. Our infrastructure is hosted on AWS, with automatic daily server backups, a firewall that allows only the necessary connections, a database that cannot be accessed from the internet, and internal areas protected by username and password. The connection between your browser and our website is encrypted with HTTPS (TLS), and any unencrypted visit is automatically redirected to HTTPS.
9. Changes to this notice
Any changes to this notice will be published on this page. Changes take effect upon publication.
10. Data controller contact
Email: contact@balamdmcmx.com
Address: Blvd Palmas Hills 1, suite 11-115, Huixquilucan, State of Mexico, CP 52787