Privacy Notice
Updated: October 30, 2026
Controller
OPERADORA HOTELERA MADI, Sociedad Anónima de Capital Variable, Mexican tax ID (RFC) OHM190717SY6, operator of Hotel MÄDI, with a contact address at San Francisco 34, Zona Centro, 37700, San Miguel de Allende, Guanajuato, Mexico, is responsible for personal data collected through this website, contact forms, phone, email, WhatsApp and other hotel-related digital channels.
Privacy contact
Jaime Levy is the designated contact for personal data requests. Email jlevy@jl.com.mx.
Personal data
We may collect your name, email, telephone number, room of interest, message and stay preferences. Please do not submit sensitive personal data through the contact form.
Purposes
We use your data to respond to enquiries, quotations and reservations, follow up on messages, manage accommodation and guest services, and meet applicable legal obligations.
Marketing
You may object to promotional communications at any time by contacting jlevy@jl.com.mx.
Service providers
Data may be processed by providers supporting website hosting, email, reservations, payments and professional services, and disclosed to competent authorities where legally required. Processing is limited to the purposes described here.
Cookies and analytics
Analytics through Google Analytics loads after you accept analytics cookies. You can change this choice using Cookie preferences. Meta Pixel and the Conversions API are used only if you separately accept advertising measurement. The pixel measures page visits, booking/contact clicks and successful enquiry submissions. Meta may process your IP address, browser information, page URL and advertising cookie identifiers for measurement and advertising attribution, including international processing. After a contact enquiry is accepted by the email service, the server may send the Lead event to Meta with the same event identifier to avoid duplicate counting. Newsletter requests are excluded from this server event. We do not send the contact form’s name, email, telephone or message to Meta. You can reject optional cookies or withdraw consent in Cookie preferences. Meta privacy policy. The contact form uses Google reCAPTCHA to prevent spam. The external booking engine and WhatsApp operate under their own privacy terms.
Your rights
To request access, correction, cancellation or objection to processing, revoke consent, or limit the use of your data, email jlevy@jl.com.mx. Include your name, contact details, a clear description of your request and, where required, proof of identity or representation.
Response times
Email jlevy@jl.com.mx with the subject “ARCO rights”. We will communicate a decision within 20 business days of receipt and implement an approved request within 15 business days after the response. Each period may be extended once for an equal period when justified. Exercising these rights is free, except for permitted copying or delivery costs.
Retention
Data is retained for the time needed to handle your request or accommodation relationship and meet applicable legal obligations. When these purposes end, data will be blocked where necessary to address liabilities, and deleted after the relevant legal periods expire.
Applicable law and authority
Processing is governed by Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties. The competent authority is Secretaría Anticorrupción y Buen Gobierno. Read the current law.
Security
Hotel MÄDI adopts reasonable administrative, technical and physical measures to protect personal data against loss, alteration and unauthorised access or processing.
Updates
Updates to this notice will be published on this page.