Privacy Policy

Last updated: March 21st, 2026

In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties and other applicable provisions, HIRAM SERVICES & SOLUTIONS, S. de R.L. de C.V. (the “Controller”), with legal address at Greco 517, Prados Providencia, Guadalajara, Jalisco, Mexico, C.P. 44670, telephone +52 33 2037 6027, and email [email protected], hereby makes available this Comprehensive Privacy Notice applicable to the Vuelta Chapala website, including its pages, forms, application processes, registration flows, contact channels, and any related services or interactions connected to the event.

For purposes of this Privacy Policy, “Vuelta Chapala” refers to the website, the event, and the related services operated by the Controller.

1. Personal data we may collect

We may collect, directly or indirectly, the following categories of personal data, depending on your relationship with us and the forms or processes you use:

a) Identification data

full name;
date of birth;
nationality;
identification photograph, where necessary;
handwritten or electronic signature, where applicable.

b) Contact data

email address;
telephone number;
address;
city, state, or country of residence;
emergency contact details.

c) Registration and participation data

information related to your event application or submission;
participation history;
cycling experience;
distance or type of previous events;
bicycle or equipment information;
size or logistical information related to event materials;
operational preferences reasonably related to the event.

d) Billing and payment data

legal name, tax ID, or tax information, where an invoice is requested;
transaction information;
payment method;
information related to payments, charges, validations, and reconciliations.

Important: the Controller does not intend to directly store your complete bank card data where payment is processed through specialized third-party platforms. Such processing may be carried out by payment providers under their own privacy notices and applicable terms.

e) Website usage and browsing data

IP address;
device identifiers;
browser type;
operating system;
language;
pages visited;
date and time of access;
browsing behavior;
traffic source;
cookies and similar technologies.

f) Sensitive personal data

In certain cases, and only where necessary for event safety or emergency response, we may collect sensitive personal data voluntarily provided by you, such as:

medical conditions relevant to your participation;
allergies;
injuries;
physical restrictions;
health information necessary for emergency response;
information related to medications or urgent medical attention, where applicable.

The processing of such sensitive data shall be subject to your express consent, unless a legal exception applies.

2. Primary purposes of processing

Your personal data will be processed for the following purposes, which are necessary for the existence, maintenance, and fulfillment of the legal relationship with you:

to identify you and verify your identity;
to respond to requests for information, contact, or event applications;
to assess your eligibility, profile, and participation in Vuelta Chapala;
to process your registration, confirmation, payments, and documentation;
to administer your participation in the event;
to manage check-in, rider briefing, materials, logistics, and event operations;
to address safety requirements, operational control, and regulatory compliance;
to maintain emergency contact details and, where appropriate, health information necessary for safety and emergency response;
to issue tax invoices, where applicable;
to handle clarifications, complaints, claims, or requests related to our services;
to comply with legal, regulatory, contractual, or authority requirements;
to maintain administrative, legal, and operational event records;
to prevent fraud, misuse of the website, improper charges, or conduct contrary to our terms and conditions;
to protect the safety of participants, staff, suppliers, and third parties connected to the event.

3. Secondary purposes

Additionally, unless you object, we may process your personal data for the following secondary purposes:

to send you information about future editions of Vuelta Chapala;
to send you information about other related events, experiences, or services of the group;
to share news, editorial content, recommendations, updates, or promotional materials;
to conduct satisfaction surveys, market research, experience analysis, or service improvement efforts;
to segment audiences for commercial communications reasonably related to our activities.

If you do not want your personal data to be processed for these secondary purposes, you may state your refusal at any time by sending an email to [email protected] with the subject line: “Objection to Secondary Purposes.”

Refusal to allow the use of your personal data for these secondary purposes will not be grounds for denying you the services or products you request.

4. Sensitive personal data

Where the Controller collects sensitive personal data, it will do so only where reasonably necessary for event safety, emergency response, compliance obligations, or the protection of your physical integrity.

In such cases, the Controller will adopt enhanced confidentiality, restricted-access, and limited-processing measures in accordance with applicable law.

By providing sensitive data through physical or electronic means enabled for that purpose, you acknowledge and consent to its processing under the terms of this Privacy Policy, without prejudice to any additional express consent mechanism that the Controller may implement.

5. Transfers of personal data

Your personal data may be transferred, without requiring your consent where permitted by law, or with your consent where required, to the following categories of third parties:

affiliates, subsidiaries, or related entities of the Controller, where necessary for administrative, commercial, operational, or compliance purposes;
technology, hosting, CRM, email, messaging, analytics, security, automation, support, or website administration providers;
payment processors or gateways;
logistics providers, operational staff, medical services, ambulances, security personnel, photographers, videographers, or third parties involved in the execution of the event;
legal, accounting, tax, or audit advisors;
competent authorities, where there is a legal requirement, properly founded request, or compliance need;
insurers, hospitals, medical personnel, emergency services, or related third parties, where necessary to protect your life, health, safety, or physical integrity.

In particular, and depending on the technological infrastructure used, some of your data may be stored or processed by providers located outside Mexico. In such cases, the Controller will seek to ensure that reasonable contractual, organizational, or technical measures exist to protect your personal data in accordance with applicable law.

6. Means to limit the use or disclosure of your personal data

You may limit the use or disclosure of your personal data for secondary or promotional purposes by:

sending an email to [email protected];
using unsubscribe or opt-out mechanisms included in our electronic communications, where available;
configuring your cookie or similar technology preferences, where applicable.

7. ARCO rights

You have the right to:

Access the personal data we hold about you and learn how we process it;
Rectify it when it is inaccurate, incomplete, or outdated;
Cancel it when you consider that it is not being processed in accordance with the principles, duties, and obligations established under applicable law; and
Object to the processing of your personal data for specific purposes.

To exercise any of your ARCO rights, you must send a request to [email protected], indicating at least:

your full name;
a means to communicate our response to you;
a clear description of the right you wish to exercise;
the personal data in respect of which you seek to exercise the right; and
documents or information allowing us to identify you or, where applicable, confirm your legal representation.

The Controller will process your request in accordance with the timeframes and terms established by applicable law. The exercise of ARCO rights may be subject to legal exceptions and to the retention of data necessary for the fulfillment of legal or contractual obligations.

8. Withdrawal of consent

You may revoke, at any time, the consent you have granted us for the processing of your personal data, to the extent that such revocation does not prevent compliance with legal, contractual, or safety obligations arising from the existing relationship.

To do so, you must send your request to [email protected].

Withdrawal of consent shall not have retroactive effect.

9. Use of cookies and similar technologies

Our website may use cookies, web beacons, tags, scripts, and similar technologies in order to:

enable the proper functioning of the website;
remember user preferences;
measure traffic and browsing behavior;
analyze performance, security, and user experience;
carry out analytics, advertising, or remarketing activities, where applicable.

Specific details regarding such technologies, their purposes, and the options available to manage them will be made available through the site’s Cookie Policy and Cookie Preferences mechanism when implemented.

10. Third-party sites

Our website may contain links to third-party websites, platforms, services, or environments. This Privacy Policy does not apply to such sites or services, and we recommend that you review their own terms and privacy notices before providing them with any information.

11. Security measures

The Controller has adopted and will seek to maintain reasonable administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing, taking into account the nature of the data and the risks involved.

However, you acknowledge that no system is completely infallible and that absolute security cannot be guaranteed.

12. Data retention

Your personal data will be retained for as long as necessary to fulfill the purposes described in this Privacy Policy, as well as to address legal, tax, contractual, safety, litigation, or audit requirements.

Once the legitimate or legal need for retention has ended, your data will be deleted, blocked, or anonymized, as appropriate.

13. Minors

As a general rule, the website and the event are intended for adults. We do not knowingly collect personal data from minors without the consent of a parent or legal guardian and without a legitimate basis for doing so.

If you believe that a minor has improperly provided personal data, you may contact us at [email protected] so that we may review the matter and, where appropriate, take reasonable measures.

14. Changes to this Privacy Policy

The Controller may modify, update, or adjust this Privacy Policy at any time to reflect legal, regulatory, operational, contractual, or technological changes.

Any material change will be made known through the website or through other reasonable means of communication. The current version of the Privacy Policy will be available in the corresponding legal section of the website.

15. Consent

By using the website, submitting forms, providing personal data, participating in application or registration processes, or electronically accepting the corresponding legal documents, you acknowledge that you have read and understood this Privacy Policy.

Where required by law, and especially in the case of sensitive personal data, the Controller may obtain additional express consent mechanisms.

16. Contact

For any questions, clarifications, ARCO request, consent withdrawal, or matter related to personal data protection, you may contact:

HIRAM SERVICES & SOLUTIONS, S. de R.L. de C.V.
Greco 517, Prados Providencia
Guadalajara, Jalisco, Mexico, C.P. 44670
Telephone: +52 33 2037 6027
Email: [email protected]