Comprehensive privacy notice

1. Data controller and address

Numtasi, with an address at Puebla 251, Colonia Roma, Mexico City, is responsible for processing the personal data collected through the Baja Náuticos website.

2. Personal data we collect

Through the website, we may collect:

Numtasi does not deliberately collect sensitive personal data through the website.

• Full name.
• Email address.
• Reservation date.
• Billing information.

3. Purposes

Data will be used to manage and administer reservations; confirm reservations; maintain reservation-related communications; manage dates; issue invoices; handle requests; comply with legal, contractual and tax obligations; and improve the website’s operation and security.

4. Consent

Processing will follow the principles and rules of the Federal Law on the Protection of Personal Data Held by Private Parties. Where applicable, consent may be given electronically. When legally permitted, consent may be withdrawn by writing to valeroikal@gmail.com.

5. Card and PayPal payments

The website allows payments by bank card and PayPal. The data required to process them may be handled directly by the relevant providers under their policies. Numtasi does not directly store complete bank-card details.

6. Transfers and third parties

When necessary to provide requested services, process payments, comply with legal obligations or perform activities related to site operations, data may be processed by third parties involved in those activities. Transfers will be made under applicable law and consent will be requested when necessary.

7. Security measures

Numtasi will implement the administrative, technical and physical measures necessary to protect personal data from damage, loss, alteration, destruction, unauthorized access or processing, in accordance with the applicable provisions of the Law.

8. ARCO rights

The data subject may exercise the rights of Access, Rectification, Cancellation or Opposition. Requests should be sent to valeroikal@gmail.com.

9. ARCO procedure

The request must include the data subject’s name, a means for receiving a response, identification or legal representation, a clear description of the data, the right to be exercised and information that helps locate it. Numtasi will respond within the periods established by current law.

10. Limiting use or disclosure

The data subject may request limits on the use or disclosure of their data by emailing valeroikal@gmail.com.

11. Retention

Data will be retained for the time necessary to fulfill the stated purposes and applicable legal, tax and contractual obligations. Once no longer necessary, it will be deleted or blocked in accordance with applicable law.

12. Notice changes

Numtasi may modify or update this Notice when required by legal, regulatory or operational changes, or changes to the services. The current version will be available on the website.

13. Legal basis

This Notice is issued in accordance with the current Federal Law on the Protection of Personal Data Held by Private Parties, including provisions on data-protection principles, privacy notices, consent, security, ARCO rights and transfers.