Privacy Notice

In terms of the FEDERAL LAW ON THE PROTECTION OF PERSONAL DATA HELD BY PRIVATE PARTIES (LFPDPPP), PEBE DEL SOL, S. DE RL DE CV hereinafter “THE COMPANY”, makes this privacy notice available to you, prior to the processing of your personal data, in accordance with the following:

I.- IDENTITY AND ADDRESS OF “THE COMPANY”: PEBE DEL SOL, S. DE RL DE CV is responsible for the processing (use) of your personal data, it is a company duly constituted and legally existing in accordance with the laws of the United Mexican States, with address for the purposes of this privacy notice at Amaca Beach Quimixto Pez Volador 4 A, Playa El Volador Quimixto, Cabo corrientes – Jalisco, CP 48440. Contact telephone number 52 1 322 292 3546

All communications must be addressed to the Personal Data Department, which has been designated as responsible for processing requests and promoting the protection of Personal Data, in accordance with Article 30 of the Law.

II.- PERSONAL DATA THAT WE OBTAIN AND FROM WHICH SOURCE IT COMES:

Personal data that we collect in the case of a legal entity:

• Customer information (company name, email, address, proof of address, telephone, fax).
• Identity documentation (article of incorporation, registration folio before the public property and commercial registry).
• Tax information (tax identification card, billing address).
• Financial data: bank account information, payment methods.

Personal data that we collect from natural persons:

• Contact information (Full name, email, address, proof of address, phone, cell phone, fax)
• Identity documentation (voter ID, passport, driver's license, professional card or certificate)
• Tax information (Tax identification card, billing address).

Sensitive personal, financial or property data that we may collect:

• Financial data: bank account information, payment methods.

III.- PURPOSE OF PROCESSING PERSONAL DATA: “THE COMPANY” undertakes to make correct use of your personal data, including sensitive personal data that may be collected in accordance with the principles of the Federal Law on Protection of Personal Data Held by Private Parties, legality, consent, information, quality, purpose, loyalty, proportionality and responsibility. The object or purpose of obtaining, using and storing the personal data of the owner is broken down as follows:

1. Provide legal advice.
2. Verify the information you provide us.
3. For internal use of “THE COMPANY”, as well as to answer your questions or comments arising from the provision of services.
4. To promote the products and services offered by “THE COMPANY” or, where appropriate, invitations to any of our events.
5. Integrate your file as a client.
6. Provide required services and products and inform about new products or services that are related to what was contracted or acquired by “The Owner”.
7. Inform about changes in our services, evaluate the quality of service and products.
8. Identification, information technologies, operation, administration, marketing, commercialization and other similar and lawful purposes in accordance with the provisions of the Law, derived from the services contracted by "The Owner."

Sensitive data will be collected for the following purposes:

• To have the necessary background information in order to be able to provide adequate care.

By reading and accepting this Privacy Notice, I give my consent for the processing of my sensitive personal data, for the purposes necessary for the provision of services with the Controller.

For the purposes indicated above we may collect your personal data in different ways:

• When you freely provide them to us voluntarily.
• Through our website.
• By telephone.
• When we obtain information through other publicly accessible sources that are permitted by law (telephone directories, email, websites, and the like).

Please be advised that our facilities have a closed-circuit surveillance camera system, which is active 24 hours a day, allowing us to stay informed and control access to visitors entering the facilities and ensure the safety of staff, customers and visitors.

All personal and aggregate information obtained from “The Owner” will constitute a database, property of “THE COMPANY”, information that is stored to protect it and prevent its loss, misuse, alteration, or that it may be intercepted by third parties. “The Client” hereby expressly authorizes “THE COMPANY” to share the personal information provided with any Authority that requires it in writing and in terms of law.

IV.- LINKS TO OTHER WEBSITES: Our website may contain, for your convenience, links to different websites. “THE COMPANY” is not responsible for said websites, and therefore does not guarantee or accept responsibility for the content found therein. We invite you to carefully read the Privacy Notice of each of the websites you visit.

V.- OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA: at the time when “THE COMPANY” collects your personal data, the Owner of the same may limit its use or disclosure, expressing his opposition in relation to non-necessary purposes, which he will have to state at the time of requesting your personal data, and indicating which he is not willing to provide to the person responsible.

Likewise, if the Owner does not express his/her disagreement at the time his/her personal data is being collected, “THE COMPANY” will collect the data it considers sufficient to carry out the contracted service.

VI.- MEANS TO EXERCISE YOUR OPPOSITION TO THE PROCESSING OF DATA FOR NON-NECESSARY PURPOSES: You may express your opposition to the processing of your data for non-necessary purposes by generating a free written document in which you state which data you do not agree to provide to the controller. The written document will be addressed to the contact email of the area designated for the processing of personal data, which is info@hotelamaca.com. The aforementioned written document must meet the following requirements:

• Full name of the owner of the personal data.
• Specify the data that you do not wish to provide to the controller.
• Give a brief explanation of why you believe it is unnecessary to provide this data to the controller.
• Attach to the document an official identification document of the owner of the personal data.

VII.- MEANS TO EXERCISE THE RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION OR OPPOSITION: "The Owner" may request "THE COMPANY" at any time, access, rectification, cancellation or opposition regarding the personal data that concerns him/her; the mechanisms that have been implemented for the exercise of said rights are through the presentation of the respective request to our Personal Data Department, either in person at the address thereof or by sending an email to the one indicated previously, where after receiving your request "THE COMPANY" has a term of 20 business days to respond to you and let you know whether your request is admissible or not; if it is admissible, the person responsible will have a term of 15 business days to make the request by the owner of the personal data effective.

VIII.- DATA TRANSFERS THAT ARE MADE: “THE COMPANY” undertakes not to transfer your personal information to third parties without your consent, except for the exceptions provided for in article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties, as well as to carry out this transfer under the terms established by that Law.

In the event that “THE COMPANY” were to transfer your personal data to third-party service providers for the fulfillment of legal, accounting, regulatory or contractual obligations of PEBE DEL SOL, S. DE RL DE CV or any of its affiliated companies in Mexico or abroad, in order to carry out the purposes of the treatment established in this privacy notice, it will do so after entering into confidentiality agreements and, as long as (1) the provider or person to whom the data is transmitted agrees to subject the processing of personal data to this privacy notice and, (2) it is not one of the assumptions established in article 37 of the Law. If you do not express your opposition to your personal data being transferred to third parties, it will be understood that you have given PEBE DEL SOL, S. DE RL DE CV your consent to do so.

IX.- SECURITY MEASURES FOR THE PROTECTION OF PERSONAL DATA: The company has adopted and maintains the administrative, technical and physical security measures necessary and within its reach to protect the personal data that you have freely provided to us.

X.- MODIFICATIONS TO THE PRIVACY NOTICE: This privacy notice may be modified or updated unilaterally by “THE COMPANY” by informing “The Owner” of such changes through the following means: (I) visible advertisements in our establishments or customer service centers; (II) brochures or pamphlets available in our establishments or customer service centers; (III) on our website; (IV) or we will send them to the last email address you have provided us.

If you have any questions about this privacy notice, you can contact us at the telephone numbers and/or email address indicated in the first section called “I.- IDENTITY AND ADDRESS OF “THE COMPANY”, where you will receive the requested attention.