Last updated December 28, 2022
Privacy Policy- Sirenna Studio
This Privacy Notice (Privacy Statement) describes the treatment of personal data of users and visitors (hereinafter, the «USER») of the company’s digital platforms collected by PHOTOPRO S. DE R.L DE C.V., PHOTUR S. DE R.L. DE C.V., PHOTUR S. DE R.L. DE C.V., PHOTUR RD, FOTUR LIMITED, OHS LIMITED, HOTEL SHOPS S. DE R.L. DE C.V., PHOTO Y FOTO SA DE CV, PHOTUR RD, FOTUR LIMITED, OHS LIMITED, HOTEL SHOPS S. DE R.L. DE C.V., PHOTO Y FOTO SA DE CV, NONSOLOFOTO SRL and its subsidiaries (hereinafter, «SIRENNA») through its websites https://www.sirennastudio.com and https://www.sirennacrm.com (hereinafter, «ARCADIA SIRENNA»). SIRENNA may process the USER’s personal data when accessing the Website and/or using the ARCADIA SIRENNA functions.
2.1 Description of the concept of Personal Data
Personal Data is understood as any information belonging to any natural person that can be used to identify him/her directly or indirectly, it is the information that describes, gives identity, characterizes and differentiates from other individuals or groups.
The concept of Personal Data used in this Privacy Notice covers all information in any form, whether alphabetical, numerical, graphic, photographic or sound, to name a few and that may be contained in any of the forms, sections or sections developed on the Website and SIRENNA ARCADIA software or any other specific digital media in point 2.3 of this Privacy Notice.
2.2 Personal data as the object of a processing
In compliance with the provisions of the Federal Law for the Protection of Personal Data in Possession of Individuals («THE LAW»), SIRENNA always seeks to protect and safeguard your information to avoid damage, loss, destruction, alteration, as well as unauthorized use, access and disclosure of your personal data.
The data that SIRENNA intends to collect from users will be detailed below:
2.2.1 Navigation data.
The TIC (Technologies, Information and Communication) systems and software procedures operated by ARCADIA SIRENNA, during their normal operation, collect some personal data, the transmission of which is implicit when using internet communication protocols. This is information that is not collected to be associated with identified data subjects, but information that, by its nature, could, through processing and association with data held by third parties, allow users to be identified.
This category includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to send the request to the server, the size of the file obtained in response and the numerical code indicating the status of the response of the server data (success, error, etc.) and other parameters related to the operating system or the computer environment of the data subject.
2.2.1.1 Links to Other Sites
Our Websites may contain links to other sites not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly encourage you to review the Privacy Notice of every site you visit. We have no control over and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.
2.2.2 Cookies
We use cookies and similar tracking technologies to track activity in our operation and maintain certain information.
Cookies are files which contain a small amount of data that may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies also used are tags and scripts to collect and track information and to improve and analyze our operation. The USER can always refuse any cookie from the same configuration of your browser. However, if you do not accept all cookies, you may not be able to use some parts of our site and/or application or they may be limited.
By using ARCADIA SIRENNA, the data subject agrees to the use of cookies in accordance with this Privacy Notice.
2.2.3 Staying Data
Due to our business nature, in order to create a basic file in our database with the USER’s information, it is necessary to have the vacation and event reservation data of the USER and/or his/her companions, in this way they can be identified in the SIRENNA ARCADIA system and follow up on the coverage and/or products contracted with SIRENNA.
For our correct operative performance and to start with any request that our users may have, it is necessary that the USER provides personal information and information about their event such as:
-The name of the Resort where the event will take place.
-Range of dates in which you will be staying
-Date of the event
-Package selected
This data is shared with our operational team (CONCIERGE) during the first contact with each USER, even if the USER does not purchase SIRENNA packages or products, this data will be loaded into our system database for the creation of a folder for any necessary consultation.
2.2.4 Personal Data
For the purposes of this Privacy Notice, the parties agree that «USER» means any person of any nature who enters the website, ARCADIA SIRENNA and/or any of the sub-pages displaying its content and/or the person of any nature who registers and/or uses any of the packages, applications and/or forms offered through said page.
In order to complete a user record below we discuss the most sensitive information that data collection processes can obtain, and these are:
-Full/partial name
-E-mail address
-Nationality
-Birthday date
-Country and city of residence
-Phone number and e-mail address
-Address in case of shipment of products
Payment data: The USER’s payment data will be processed directly through third parties such as the Hotel where the event takes place, Stripe or through an external payment company. SIRENNA does not store or process USER’s credit/debit card or Stripe information.
Due the nature of such information and its use by third parties, please review section 2.2.1.1 of this Privacy Notice.
2.3 Methods and/or sources of collection of personal data
The aforementioned personal data will be collected by SIRENNA personnel and/or the official digital means mentioned below. The list of members who will collect and process the data is specified in point 2.4.
Any information that SIRENNA collects will be solely and exclusively through the following means:
The most popular social networks are part of the tools that SIRENNA needs for its proper functioning; Like any other media, data protection follows the same protocols.
SIRENNA has an official account on each of the following social networks:
-Facebook
-Instagram
-Youtube
-Tiktok
-Twitter
-Pinterest
Any contact through digital media either by:
-Publications: Comments, links, images written in within publications.
-Contests: Contact information obtained from any contest, whose terms and conditions will be explained in the development of the same.
-Advertising: The possibility for the user to provide information by making use of the promotions presented on these platforms and are required to perform these advertising services.
-Direct Message: Direct communication through the inbox of each platform.
It is protected under the agreement of this Privacy Notice and its treatment will be with the same standards of protection established in point 2.2.
2.4 Members of the organization that will process the Personal Data
Personal Data, specifically from items 2.2.1 and 2.2.2, are stored and processed through the computer systems owned by SIRENNA and will be processed by authorized personnel;
The data are processed exclusively by personnel specifically authorized to process them, including personnel in charge of extraordinary maintenance operations and personnel in charge of monitoring and Customer Service.
SIRENNA declares that among the personnel who may process this information are:
-The concierge and Chief concierge are dedicated to your service and attention.
-Customer Service Agent
-Store Manager of the Hotel where the event takes place
-Photographers and/or videographers in charge of the coverage.
-Marketing Manager
-Social media Manager
-Operational Director
-System Administrators
-Administrative and/or financial personnel
Each of them have specific responsibilities for the correct processing of the information specified in the following points.
2.5 Explanation of the purpose of data processing
It is essential that the USER remembers the processing of Personal Data collected by any of the express means will be limited to the purposes outlined in this Privacy Notice.
The data described in points 2.2.1 and 2.2.2. are used only to obtain anonymous statistical information on the use of ARCADIA SIRENNA and the websites of our customers, to ensure their proper functioning in order to identify anomalies and / or misuse and are deleted after processing.
Their processing is necessary for the fulfillment of SIRENNA’s interests or in the exercise of the obligations conferred on the data controller. The data may be used to determine responsibilities in the event of computer crimes damaging the website or third parties.
The data may also be included in statistical reports for the purpose of monitoring institutional progress and improving SIRENNA’s procedures.
For the treatment of sensitive information of each user, obtained from points 2.2.3 and 2.3.4, it will only be used for operational purposes; that is, for the proper functioning of the process chain developed by SIRENNA.
The use is limited to the operational development of the following cases:
-User creation on the arcadiasirenna.com tracking platform.
-Creation of photo and video delivery folder – Dropbox.com
-After-sales service or customer support (Search and location of the files of each user)
-Scheduling of photo and/or video sessions
-Application of current promotions
-Invoicing and administrative control
-Sending of offers and promotions*.
* In the event that SIRENNA requires to use the information for the development of promotional emails or a newsletter, it will always notify the user and make available the means in case he/she wishes to cancel his/her subscription under the ARCO statutes explained in point number 4.
2.6. Legal basis to carry out the processing of personal data.
The applicable law of this Privacy Notice shall be the same for all SIRENNA ARCADIA USERS and subsequent USERS anywhere in the world. Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction. If you are located outside of Mexico and choose to provide us with any information, please note that the handling of the information is handled in the United Mexican States, including your Personal Data.
By entering and using ARCADIA SIRENNA and / or the Website the user is accepting the terms of use contained in this Privacy Notice and expressly declares its acceptance by using electronic means, in terms of the provisions of Article 1803 section II and other related to the Federal Civil Code. Also to articles 1° fraction VIII and 76 BIS of the Federal Consumer Protection Law.
Likewise, in order to comply with the above, this Privacy Notice follows the guidelines of the Federal Law for the Protection of Personal Data in Possession of Private Parties of the Mexican legislation.
In case of not accepting absolutely and completely the terms and conditions of this Privacy Notice, the USER must refrain from accessing, using and observing ARCADIA SIRENNA as well as the Web Site sirennastudio.com.
In case of the user accesses uses and observes the aforementioned Websites, it shall be considered as an absolute and express acceptance of this Privacy Notice.
The sole use of said Internet page grants the general public the condition of the user and implies the full and unconditional acceptance of each and every one of the general and particular conditions included in this Privacy Notice published by the Web Site at the very moment the user accesses the site.
3.1 Appropriate security practices.
Under no circumstances does SIRENNA publicly or discuss Personal Data provided to access user lists. SIRENNA declares that any controller who carries out the processing of Personal Data shall establish and maintain administrative, technical and physical security measures to protect Personal Data against damage, loss, alteration, destruction or unauthorized use, access or processing.
The security of your data is important to us, but please remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
It is our policy to act against data traffic breaches as required by applicable law, including removing or blocking access to information, up to and including termination of employment of employees who are subject to activities that infringe the data protection rights of third parties.
Furthermore, we inform our USERS that their personal data will not be shared with any company, authority, organization or person other than those mentioned in this Privacy Notice and will be used exclusively for the purposes indicated.
The USER has at all times the right to know what personal data is collected, what it is used for and the conditions of use. Likewise, the USER has the right to request the correction of his/her personal information in case it is incorrect or outdated, as well as the right to request the deletion of his/her personal data from our records and databases or to revoke consent to the use of his/her information. You also have the right to object to the use of your personal data for specific purposes. This is part of your ARCO rights.
The owner of the data may at any time express their refusal to treatments or transfers; exercise their ARCO rights expressed in point 4, or request the portability of their personal data, to make them effective you can go directly to the address of the company or via email to the address: socialmedia@sirennastudio.com
The security breaches that occur at any stage of the processing and that significantly affect the economic or moral rights of the owners will be immediately communicated by the data controller to the owner of the data so that he can take appropriate measures in defense of their rights.
3.1.1 Warranties accepted as true by the Company
I.-Under this document SIRENNA declares that the consent of the Data Owner will always be requested before processing his/her personal data.
II.-SIRENNA declares not to obtain personal data through fraudulent means.
III.-The data processing will maintain the necessary measures to protect the vital interests of the data owner.
IV.- To process as little personal data as possible, and only those that are necessary, adequate and relevant in relation to the purposes set forth in this Privacy Notice.
V.- The personal data that SIRENNA collects in any of the active forms on the Website and/or ARCADIA SIRENNA will only be used for the purposes described in this Privacy Notice.
VI.- To process personal data strictly for the time necessary for legal, advertising, regulatory or legitimate purposes of the organization.
VII.-SIRENNA undertakes to keep the Personal Data confidential, an obligation that will subsist even after terminating its relationship with the data owner or, as the case may be, with the responsible party.
3.1.2 Statements that the Data Owner accepts as true
I.-The Data Owner acknowledges that by accepting this Privacy Notice a confidentiality agreement is executed in which he/she consents to the processing of his/her personal data for one or more specific purposes described in this Privacy Notice at the request of SIRENNA.
II.-The Data Owner expresses that the data provided on the Website and/or ARCADIA SIRENNA are entirely personal and does not act under the identity of a third party.
III.-If the Data Owner provides personal data of third parties, he/she must ensure that this information is communicated to SIRENNA and to the legitimate owner of the shared data.
IV.-It is declared that the data provided are updated and completely truthful.
V.- The USER accepts that he/she may only print and/or copy any information contained or published on the Web Site and/or ARCADIA SIRENNA exclusively for personal use, and therefore the commercial use of such information is expressly and strictly prohibited. All the contents offered in the Web Site sirennastudio.com and arcadiasirenna.com, are the creation and property of SIRENNA.
As mentioned in point 3 of this Privacy Notice, it is stated that the USER has the right to enforce his ARCO rights, each of which represents a fundamental basis for a correct treatment of the Data and to remain in full agreement with the same.
Each one is detailed below and the procedure to make them valid is described at the end.
I.- Access:
It refers to the right that the holders of the information have to request and receive details of the processing and management of their Personal Data, this allows you to receive a copy of the Personal Data SIRENNA have about you and check that we are processing them lawfully. Primarily this right refers that the Data Subject shall have the right to obtain from SIRENNA confirmation as to whether or not Personal Data concerning him/her is being processed and, if so, access to the Personal Data and the following information:
II.- Rectification:
The Data Owner has the right to request a rectification of the personal data provided that the information is subject to any of the following cases; When the data is:
– Incorrect
– Incomplete
– Not updated
III.- Cancellation:
The data subject shall have the right to obtain, modify or withdraw consent for the processing of his/her personal data by SIRENNA Deletion of personal data concerning him/her must be without undue delay in case the data is not being properly managed,
The Data Owner also has the right to modify or withdraw consent to the processing with respect to the receipt of the data for marketing purposes, via the Internet.
When requesting a cancellation of SIRENNA shall be obliged to delete the data provided that one of the following reasons applies:
a) The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
b) The data subject withdraws the consent on which the processing is based in accordance with Article 25 of the LFPDPPP, and where there is no other lawful ground for the processing.
c) The personal data have been unlawfully processed.
SIRENNA shall not be obliged to erase the personal data when:
III. Obstructs judicial or administrative proceedings related to tax obligations, the investigation, and prosecution of crimes, or the updating of administrative sanctions;
VII. Are the object of treatment for prevention or for medical diagnosis or the management of health services, provided that such treatment is carried out by a health professional subject to a duty of secrecy.
IV.-Opposition:
If the data owner decides to oppose the processing of personal information he/she is fully entitled to do so, provided that one of the following circumstances applies:
a) The accuracy of the personal data is contested by the data subject, for a period that allows the data controller to verify the accuracy of the personal data;
(b) The processing is unlawful and the data subject objects to the erasure of the personal data and requests instead of the restriction of their use; or
c) SIRENNA no longer needs the Personal Data for the purposes of the processing, but the data subject needs the Personal Data for the establishment, exercise, or defense of legal claims;
SIRENNA does not share Personal Data with third parties; And if applicable, the data transfers to be made, the purposes, the recipients or categories of recipients to whom the Personal Data have been or will be communicated, in particular recipients in third countries or international organizations will be informed through the means described in point 5 of this Privacy Notice.
SIRENNA may only transmit your Personal Data in good faith when it considers that this action is necessary for the following:
-To comply with a legal obligation.
–Protect and defend the rights or property of SIRENNA.
– Prevent or investigate possible breaches in relation to the SIRENNA coverage contract.
– Protect the personal safety of USERS.
– Protect against legal consequences.
4.1 Means available to exercise ARCO rights
The USER has at his disposal the possibility of exercising any of the aforementioned ARCO rights mentioned above.
In order to fulfill your request, you must make it in writing, directly at the office address or via email to: socialmedia@sirennastudio.com according to the means, mechanisms and procedures mentioned below:
III. The clear and precise description of the personal data with respect to which SIRENNA seeks to exercise any of the aforementioned rights.
Before providing or modifying any information, it may be necessary to verify your identity and answer some security questions. This is a security measure to ensure that your Personal Data is not disclosed to anyone who is not entitled to receive it, the attention will be immediate.
We may also contact you if required to ask you for more information in relation to your request and thus speed up our response.
4.2. Specific Information
In addition to the above requirements, you must include in your request the following information, as appropriate:
Right of ACCESS: Modality in which you prefer access to be provided.
Right of RECTIFICATION: The amendments requested and, if applicable, the documents and/or evidence necessary to support them.
Right of CANCELLATION: Reasons for requesting the deletion of personal data.
Right to OPPOSITION: Situation that leads to request the termination of the processing of personal data, as well as the damages that would be caused by the continuation of the same or indicate the specific purposes for which you request the termination of the processing.
However, please note that we may not always be able to comply with your erasure request for specific legal reasons which will be notified to you if you proceed to object to the processing of your personal data where we rely on a legitimate interest (or the legitimate interest of a third party) and there is something in your particular situation that causes you to object to the processing on this ground because you consider that it affects your fundamental rights and freedoms.
If you withdraw your consent, we may not be able to offer you certain products or coverage. We will inform you if this is the case at the time you withdraw your consent.
Our operational activities are not directed to persons under the age of 18. We do not knowingly collect personally identifiable information from persons under the age of 18. If a parent or guardian learns that his or her child has provided us with Personal Data without his or her consent, he or she should contact the SIRENNA help desk. If we become aware that a child under the age of 18 has provided us with Personal Data, we will take steps to remove such information from our account data.
SIRENNA declares that it has the capability to update this Privacy Notice without the need to notify the data owner or USERS of any changes to this Privacy Notice; these changes will be made based on the need to supplement, update, modify or change, any of the points set forth in accordance with the legal requirements regarding data privacy.
Any such updates will be reflected in the «effective date» at the top of this Privacy Notice.
We encourage the USER to review this Privacy Notice periodically to see if changes have been made. Changes to this Privacy Notice become effective when they are posted on our web pages.
Any such changes will be made when SIRENNA deems appropriate, and it is the sole responsibility of the USER or data owner to ensure that he or she is aware of such changes.
SIRENNA declares that it is essential to have the consent of the USER or owner of the information to possess, treat, store and undergo the processes mentioned above, that is, to limit the processing of personal data to the fulfillment of the purposes provided in this privacy notice and any other contract or service order in force with SIRENNA.
When the personal data is no longer necessary for the fulfillment of the purposes foreseen in the Privacy Notice and the applicable legal provisions, it is deleted from our system and/or databases.
Contact information.
The person responsible for the processing of data collected, by any of the means mentioned in this Notice, of a personal nature is:
Sirena Studio Wedding Photography under the legal entities;
-Photopro S. de RL de CV,
-Photopro S. de RL de CV,
-Photour S. de RL de CV
-Photur RD
-Fotur Limited
-OHS Limited
-Hotel shops S. De R.L. de C.V.
-Photo y Foto SA de CV
-Nonsolofoto SRL
With address at:
Local 12, Centro Empresarial Plaza Palmeiras.
Calle 11 Sur, Manzana 248, Lote 01, Col. Ejido Sur
Playa del Carmen, Q. Roo Mexico CP: 77712
E-mail: socialmendia@sirennastudio.com