The Tourist Insight
The Tourist Insight Heritage of Mexico
Archaeological volcanic stone relief under archival lighting
Institutional Regulatory Document

Privacy policy and data protection

This Privacy Policy describes the processing that The Tourist Insight (hereinafter, "the Site"), with address at Av. Paseo de la Reforma 50, Col. Juárez, Cuauhtémoc, 06600 Mexico City, CDMX, Mexico, applies to the personal data collected through this informative web portal. We comply with the principles of legality, consent, information, loyalty, and responsibility provided for in the applicable legislation on personal data protection.

Territorial Scope Mexico City, Mexico
Registration Type Cultural and Educational Portal
Declared Validity Updated to 2026
Direct ARCO Channel legal@thetouristinsight.com
01

Identity and address of the data controller

The controller of the personal data collected on this website isThe Tourist Insight, with administrative headquarters at Av. Paseo de la Reforma 50, Col. Juárez, Cuauhtémoc, 06600 Mexico City, CDMX, Mexico, contact phone number +52 55 5207 8100 and institutional email addresslegal@thetouristinsight.com. This entity ensures the confidentiality and legitimate handling of the data that users provide voluntarily.

Our primary function lies in the rigorous dissemination of historical routes, the architecture of the Historic Center, and the cultural memory of the central valleys of Mexico. This cultural vocation requires a scrupulous standard of legal integrity, ensuring that no personal information is subject to arbitrary commercial exploitation or practices contrary to informational self-determination.

Legal Address in CDMX

Av. Paseo de la Reforma 50, Col. Juárez, Cuauhtémoc, C.P. 06600, Mexico City, Mexico.

Hours and Telephone Support

+52 55 5207 8100
Monday to Friday: 09:00 - 18:00 (Central Time)

02

Personal data subject to processing

Identification and Contact Data

Provided via web form

  • Full name:for the correct personalization of written responses.
  • Email address:unique channel for directing clarifications and requested cultural itineraries.
Technical Navigation Records

Automated stability capture

  • Anonymized IP address:truncated for perimeter protection against network intrusions.
  • Environment metadata:user agent, operating system, and historical query pages reviewed.

Strict exclusion of special categories or sensitive data

We do not request or process under any circumstances sensitive personal data related to ethnic origin, religious beliefs, health status, or financial data. In the event that a sender accidentally includes such reports in their free communication, the record is purged immediately and irreversibly.

03

Purposes of data processing

1

Handling and resolution of cultural inquiries

To attend to, channel, and respond to inquiries, questions, and proposals submitted by users through the institutional contact form, allowing us to guide the reader regarding schedules, characteristics of collections, and tours in heritage sites in Mexico.

2

Perimeter security and infrastructure stability

To monitor technical stability, perimeter security, and the prevention of cyberattacks on the web server infrastructure, avoiding overloads from malicious requests or intrusions by unwanted automated agents.

3

Aggregated evaluation and editorial organization

To evaluate reading behavior on the portal in an aggregated and anonymous manner to improve the thematic presentation of heritage articles, ensuring that archaeological outreach content meets general educational interests.

We do not use your data for incompatible secondary purposes, aggressive commercial prospecting, or automated marketing. We also do not create behavioral profiles for advertising pricing purposes or the sale of audiences to third parties.

04

Legal basis and legitimacy of processing

The legal basis that legitimizes the processing of your contact data is the free, specific, informed, and unequivocal consent granted by the user when voluntarily submitting a communication through the Site's form. This act materializes the express will to establish an informative epistolary exchange regarding our guides and recommendations.

Meanwhile, the processing of technical navigation data responds to the controller's legitimate interest in ensuring the technical availability, integrity, and operational security of its outreach platforms. This balancing does not violate the fundamental rights and freedoms of visitors, as identifiers are anonymized and kept solely for defensive and network operational purposes.

Type of Information Legal Basis Verification Mechanism
Contact data (form) Express and informed consent of the data subject Voluntary submission after consulting the legal notice
IP logs and web headers Legitimate interest in network perimeter security Technical anonymization in load balancer
Handling of ARCO rights Compliance with mandatory legal obligation Epistolary acknowledgment of receipt and verification of ownership
05

Data retention periods

Personal data provided through the contact form will be kept only for the time necessary to resolve the formulated inquiry and address any subsequent clarifications, with a maximum ordinary period of twelve months after the last exchange of communications. After this period, the data will be deleted or irreversibly anonymized.

Technical navigation logs on servers are periodically purged in cycles no longer than sixty calendar days, ensuring that operational memory maintains a limited volume free of residual information susceptible to non-essential retrospective traceability.

Epistolary Cycle Up to 12 Months

Form Inquiries

Remains hosted in a restricted environment to resolve complementary questions about itineraries or regulatory clarifications before its final purge.

Server Logs Maximum 60 Days

Technical Logs and Firewalls

Connection and technical debugging logs are cyclically overwritten every sixty calendar days, preventing the accumulation of historical data.

06

Transfers and communication to third parties

The Tourist Insight does not sell, rent, or transfer its users' personal data to third-party entities, except in cases strictly required by legal mandate or a founded and motivated request from competent judicial or administrative authorities within the framework of their regulatory powers.

For the provision of auxiliary services (such as web server hosting and spam filtering systems), we hire technology providers who act as data processors under formal agreements of strict confidentiality. Such technical corporations are legally prohibited from using the information for any purpose other than the strict custody or telematic transport of the contracted service.

Key Commitments with Data Processors

  • Indelible confidentiality and professional secrecy clauses.
  • Strict prohibition of opaque subcontracting or data transfer to commercial brokers.
  • Immediate deletion of all records upon the conclusion of the infrastructure contract term.
07

Rights of the data subjects (Access, Rectification, Cancellation, and Opposition)

Access

Know the status of your data

To know what personal data of yours is in our records, the origin of its collection, and the specific purposes for which it is used.

Rectification

Correction and updating

To request the correction of your information in case it is outdated, inaccurate, erroneous, or incomplete in our repositories.

Cancellation

Deletion of records

To request the deletion of your data from our databases when you consider that it is not being processed in accordance with the law or its purposes have expired.

Opposition

Cessation of specific processing

To object to the processing of your personal data for specific purposes when there is a legitimate cause derived from your particular situation.

Formal processing procedure

To exercise these rights, the data subject must send a written request to the emaillegal@thetouristinsight.comor by postal mail to our headquarters at Av. Paseo de la Reforma 50, Col. Juárez, Cuauhtémoc, 06600 Mexico City, attaching a copy of a document that reliably proves your identity. The request must precisely indicate the right you wish to exercise and the email to which the corresponding acknowledgment should be sent.

Ordinary response time: 20 business days At no cost to the applicant
08

Security measures and technical protection

In order to prevent unauthorized access, accidental alteration, or illicit loss of personal data, The Tourist Insight applies proportional technical and organizational security measures, including web communication encryption protocols (HTTPS with valid TLS certificates), perimeter firewalls, and strict access controls to the administration database.

Our hosting architecture in Mexico City restricts direct access to repositories only to duly accredited personnel subject to express deontological responsibilities. Management passwords and service keys are systematically renewed under entropy robustness policies.

Notwithstanding the above, the user must be aware that no electronic transmission on the public network is completely impregnable against illicit conduct of international cybercrime. In the remote and hypothetical event of a security breach that significantly compromises the rights of users, prompt notification will be carried out in accordance with applicable regulatory frameworks.

09

Frequently asked questions about privacy

Is it mandatory to provide my personal data to read the cultural guides?

No. All the informative collection, archaeological monographs, and itineraries of the Historic Center are open to free public consultation. We only request your name and email if you decide to send us a personalized inquiry through the institutional contact form.

Does the site sell my data or send unwanted advertising?

Absolutely not. The Tourist Insight does not sell, rent, or transfer mailing lists to external advertisers, commercial operators, or advertising agencies. Communications are limited exclusively to responding to the request you have voluntarily initiated.

How long does it take to resolve a request for rectification or data deletion?

Requests sent tolegal@thetouristinsight.comare resolved within a period of no more than 20 business days from the complete receipt of the request and proof of identity, with a formal confirmation issued by the same means.

What happens if this policy undergoes regulatory or technical changes?

Any adjustment motivated by legislative reforms or improvements in web architecture will be published in its entirety and immediately at this same address, updating the effective date located in the header of the document.

Institutional Framework and Assistance

Transparency and protection of the reading community

If you have questions about the processing of your information or need to formulate a legal clarification regarding our heritage monographs, our legal channel remains at your disposal.