Nuevo León

NUEVO LEÓN TOURISM DEVELOPMENT CORPORATION (CODETURNL)

In compliance with Article 29, paragraph 30, and other relevant provisions of the Law on the Protection of Personal Data Held by Obligated Entities of the State of Nuevo León, and the applicable provisions of the General Law on the Protection of Personal Data Held by Obligated Entities, the Nuevo León Tourism Development Corporation, a Decentralized Public Agency for Citizen Participation (“CODETURNL”), with its registered office and address for service of process located at Torre Meridiano, 12th Floor, Dr. José Ma. Coss 731, Colonia Centro, Monterrey, Nuevo León, ZipCode 64000, is the data controller responsible for the use and protection of your personal data, and in this regard, we inform you of the following:

1. What personal data will we use for these purposes? 

To fulfill the purposes described in this comprehensive privacy notice, the following personal data will be collected: nationality, state of the Mexican Republic in which you reside, age, address, email address, phone number, academic background, images and photographs (in the case of minors, this will be carried out in accordance with the proper processing of personal data), official identification documents, Federal Taxpayer Registry number, proof of address, bank details, CURP, tax information, and general contact information.

In addition to the personal data mentioned above, for the purposes set forth in this comprehensive privacy notice, we will collect the following personal data considered sensitive, which requires special protection, in accordance with Article 7 of the Law on the Protection of Personal Data Held by Obligated Entities
of the State of Nuevo León, noting that the express written consent of the data subject will be required for its processing: opinions regarding tourist attractions and entities in the state of Nuevo León.

1. Legal basis for the processing of personal data and sensitive personal data, as well as for the transfer of personal data to government authorities, agencies, entities, bodies, and organizations at all three levels of government, and to private individuals or entities.

The Nuevo León Tourism Development Corporation, a decentralized public agency for citizen participation, with legal personality, its own assets, and technical,
and managerial autonomy to fulfill its purpose; established by Decree No. 69 (sixty-nine) containing the Law of the Nuevo León Tourism Development Corporation (hereinafter, the “CODETUR LAW”), published in the Official Gazette of the State of Nuevo León on February 26, 2004, is collecting and processing personal data
in its capacity as a data controller. This is in accordance with Section I of Article 4 (four) of the “CODETUR LAW,” which states that CODETURNL’s objective is to design and coordinate policies and strategies regarding tourism promotion and development at the regional, national, and international levels, as well as the planning, development, marketing, and maintenance of new tourism development hubs.

Therefore, for the implementation of the development, marketing, and maintenance of these new tourism hubs.

CODETURNL, in order to comply at all times with applicable regulations, will collect and process personal data and, where applicable, sensitive personal data in accordance with Section 1 of Article 2 of the Law on the Protection of Personal Data Held by Obligated Entities in the State of Nuevo León, as well as with the communications, circulars, recommendations, and observations issued by the Commission on Transparency and Access to Information of the State of Nuevo León, as well as with any other applicable
legislation in this area.

3. Purposes of processing for which personal data and/or sensitive personal data are collected.

Main Purposes. We will use the personal data we collect from you, including but not limited to, for the following purposes, which are necessary
for the service you are requesting:

• To collect information that will enable us to compile statistics on the economic impact of tourist attractions in the state of Nuevo León.
• Conduct surveys to gather information on the main tourist attractions in the state of Nuevo León.
• Conduct surveys to determine the number of visitors to various tourist attractions in order to position the state as a tourist destination.

Legal, operational, and/or commercial relationships with individuals, corporations, or other government agencies, parastatal entities, and trusts at the municipal, state, and/or federal levels.

Secondary purposes. CODETURNL may also use your personal data for marketing, advertising, and/or business development purposes.

Any sensitive personal data collected and used for the purposes set forth herein will be collected and processed in accordance with applicable laws, with the express written consent of the data subject.

4. With whom do we share your personal information, and for what purposes? 

Please be advised that your personal data may be shared at the state and municipal levels with any authority, entity, body, or agency of the executive, legislative, and judicial branches; autonomous bodies; political parties; public trusts and funds; and/or any other individual or legal entity.

Your consent will not be required for the transfer of personal data pursuant to Articles 23, 77, and 81 of the Law on the Protection of Personal Data Held by Obligated Entities of the State of Nuevo León.

Please be advised that for transfers classified as involving sensitive personal data, we are required to obtain your express written consent. If you do not expressly object to such transfers, we will assume that you have given your consent by implication.

If you do not wish for your personal data considered sensitive to be processed, you must state that you do not authorize the sharing of your personal data with third parties. In accordance with Article22 of the Law on the Protection of Personal Data Held by Government Entities in the State of Nuevo León.

1. How can you access, correct, or delete your personal data, or object to its use?  Mechanisms, means, and procedures available to exercise your ARCO rights.

The data subject has the right to know what personal data we hold as a data controller, the purposes for which we use it, and the conditions under which we use it (Access). Furthermore, the data subject has the right to request the correction of their personal information if it is outdated, inaccurate, or incomplete (Rectification); to have it removed from our records
or databases when they believe it is not being used in accordance with the principles, duties, and obligations set forth in the regulations (Deletion); as well as to object to the use of their personal data for specific purposes (Objection); and to revoke their consent for the processing of their personal data (Withdrawal). These rights are known as ARCO rights.

To exercise any of your ARCO rights, you, as the data subject whose personal data is held by CODETURNL, must submit the relevant request via the following email addresses: transparencia.codetur@nuevoleon.gob.mx; karla.cepeda@nuevoleon.gob.mx; and daniel.fernandez@nuevoleon.gob.mx. Alternatively, you may submit your request in person at the CODETURNL offices located at Torre Meridiano, 12th Floor, 731 Dr. José Ma. Coss Street, Centro neighborhood, Monterrey, Nuevo León, ZIP code 64000.

To learn about the procedure and requirements for exercising your ARCO rights, you may call the following phone number: 8120332400; visit our website at https://www.nuevoleon.travel/; or contact our Transparency Unit, which will process requests to exercise these rights and address any questions you may have regarding the processing of your information.

 The contact information for the Transparency Unit is as follows:

Address: Torre Meridiano, 12th Floor. 731 Dr. José Ma. Coss Street, Centro neighborhood, Monterrey, Nuevo León, ZIP Code 64000 Phone: 8120332400 Email: transparencia.codetur@nuevoleon.gob.mx; karla.cepeda@nuevoleon.gob.mx and daniel.fernandez@nuevoleon.gob.mx To ensure you can exercise your rights,
we provide the following mechanisms:

Access and Correction. You may request to be informed of the personal data that CODETURNL holds about you and/or request that such data be corrected, either in person or electronically.

Deletion. Request the deletion or removal of your personal data held by CODETURNL. In this case, if CODETURNL is unable to delete your data due to its legal obligations in this regard, it will inform you of the legal basis preventing CODETURNL from deleting your personal data.

Objection. You have the right to object to the processing of your personal data as described in this Privacy Notice.

Withdrawal. Withdraw your consent, as set forth in this Privacy Notice, to the processing of your personal data in accordance with the provisions of this document.

To exercise their ARCO rights, data subjects must submit a request that meets the following requirements:

Please direct your request to the entity responsible for processing your personal data, namely the Transparency Unit and the Transparency Committee of the Nuevo León Tourism Development Corporation and the state-run decentralized entities and trusts incorporated into the tourism sector.

The request must be made in person by the data subject, their legal representative, or their authorized agent. If the request is submitted by the data subject’s legal representative or authorized agent, the request must include the legal document certifying the grant of authority by the data subject, authorizing said attorney-in-fact or legal representative to act on their behalf, as well as the official identification of the data subject and their attorney-in-fact or legal representative. The request must also include the data subject’s full name, phone number, address, and email address for the purpose of receiving notifications, and must specify the rights the data subject wishes to exercise in their request.

The application must be sent via email to: transparencia.codetur@nuevoleon.gob.mx; karla.cepeda@nuevoleon.gob.mx; and Daniel.fernandez@nuevoleon.gob.mx, or delivered in person to the CODETURNL office at Torre Meridiano, 12th Floor. 731 Dr. José Ma. Coss Street, Centro neighborhood, Monterrey, Nuevo León, ZIP code 64000, with proof of receipt.

The exercise of ARCO rights shall not be applicable, in accordance with Article 55 of the Law on the Protection of Personal Data Held by Obligated Entities of the State of Nuevo León, in any of the following cases:

• When the account holder or their representative is not properly authorized to do so.
• When the personal data is not in the possession of the data controller.
• When there is a legal impediment.
• When the rights of a third party are infringed.
• When judicial or administrative proceedings are obstructed.
• When there is a decision by a competent authority that restricts access to personal data or does not permit the correction, deletion, or objection to such data.
• When the cancellation or objection has already been filed.
• When the person in charge is not qualified.
• When necessary to protect the legally protected interests of the data subject.
• When necessary to fulfill legal obligations incurred by the data subject.
• When, in accordance with its legal authority, such daily use, protection, and management are necessary and proportionate to maintaining the integrity, stability, and continuity of the Mexican State.
• When personal data is included in the information that entities subject to the financial regulation and supervision of the obligated party have provided to the latter, in compliance with requests for such information regarding their operations, organization, and activities.

In accordance with the provisions of Article 62 (sixty-two) of the Law on the Protection of Personal Data Held by Obligated Entities of the State of Nuevo León, CODETURNL will process your request within a maximum of 20 (twenty) business days from the day following receipt of your request, responding regarding the admissibility of the request, the reason for the decision adopted by the Transparency Committee, and through the same means by which the request was submitted, accompanied, where applicable, by any relevant evidence.

CODETURNL will be deemed to have fulfilled its obligation to respond to your request upon delivery of the correspondence to the postal service or on the date the response email is sent.
The decision issued will be binding and will allow for the necessary legal actions to be taken in accordance with applicable laws and regulations.

1. How can you find out about changes to this privacy notice?

This comprehensive privacy notice may be subject to modifications, changes, and/or updates resulting from new legal requirements; our own needs related to the products or services we offer; our privacy practices; changes to our business model; or other reasons, at our sole discretion.

We are committed to keeping you informed of any changes to this privacy notice by posting a visible notice at CODETURNL’s main offices.

This Privacy Notice constitutes a valid agreement between the owners of the personal data and CODETURNL. If you use or have a relationship with this organization, it means that you have read, understood, and agree to the terms set forth herein and expressly consent to them.

 Last updated: March 2025