Privacy notice
Last updated: 2026-10-31
FIBRA VAC. ADMINISTRACIÓN, S.A. de C.V. (“VIATO”), located at Alica 49, piso 2, Col. Molino del Rey, Mexico City, is responsible for processing your personal data under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties.
Data we process
Identification and contact data, booking data, payment data (processed and stored by Openpay; VIATO does not store your full card number) and, to prevent fraud, sensitive biometric data: images of your official ID and your face, processed by our identity verification provider (Didit).
Primary purposes
- Managing your booking, payment, invoicing and stay.
- Verifying your identity and that the cardholder is the payer, to prevent fraud and chargebacks.
- Managing your account and VIATO Rewards wallet.
- Guest support and legal compliance.
Secondary purposes
- Sending newsletters, promotions and satisfaction surveys.
You may opt out at any time from “My account”, via the unsubscribe link, or by writing to hola@viato.mx.
Express consent for biometric data
By ticking the box during booking you give express written consent to process your biometric data solely to verify your identity.
Transfers
We share data with Openpay (payments), Didit (identity verification), Hostaway (reservations), email providers and competent authorities where required.
ARCO rights
To exercise your rights of access, rectification, cancellation and opposition, or to revoke consent, email hola@viato.mx.