Privacy Policy

In compliance with Articles 3, 27, 28, and other relevant provisions of the GENERAL LAW ON THE PROTECTION OF PERSONAL DATA HELD BY OBLIGATED SUBJECTS (the "Law"), the legal entity named "TURISMO Y TRANSPORTACION DEL CARIBE, S.A. DE C.V." (MEXICO TRAVEL GROUP) with its fiscal address at Boulevard Luis Donaldo Colosio, Manzana 1 Lote 3, Interior 202, Supermanzana 9, C.P. 77504, Cancún, Benito Juárez, Quintana Roo, Website www.mexicotravelgroup.com, is responsible for the use and protection of your personal data, and hereby informs you of the following:

Your data will be collected and processed based on the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility, in accordance with the provisions of the aforementioned Law.

The personal data we collect from you will be used for the following purposes, which are necessary for the development of our services:

• Contact and identification, provision of online sales services for tourist products and services, vacation packages, and purchase of vacation packages.

• To make travel arrangements through our website in an easy, fast, convenient, and secure manner, and to inform you about the status of your reservations and vacation package purchases.

• To offer you our tourism services, online assistance through the use of online tools or by phone.

• To charge and bill for our services, evaluate the quality of our services, address your feedback, complaints, and suggestions.

• To contact you via phone, email, regular mail, or any other medium regarding the company’s informational and promotional purposes

• To facilitate the use of our website, develop our services, evaluate the quality of our services, promote and market products and services, create internal statistics, and for statistical and internal analysis purposes.

Use of Personal Data

To carry out the purposes described in this Privacy Notice, the information requested from the user on the website is as follows:

• Identification data: Full Name, Official ID, Date of Birth, Age, Photograph, Landline or Mobile Number, Address, Email, Marital Status, Federal Taxpayer Registry, Unique Population Registry Code (CURP), and Interbanking Key if applicable.

• Data for online purchase services: Credit or Debit Card Data: Full Name, Card Number, Security Code, Expiration Date, which under Articles 8, 10, and 37 of the Law are not considered data that require your express consent for use.

We do not handle or request sensitive personal data, understood as those that affect the most intimate sphere of the individual, or whose improper use could lead to discrimination or a serious risk. Sensitive data includes, in particular, those that may reveal racial or ethnic origin, present or future health status, genetic information, religious, philosophical, or moral beliefs, union membership, political opinions, or sexual preference.

Security Measures and Responsibility

We are committed to offering security and confidentiality of the data you provide when contracting an online service, as we have a secure server under the SSL (Secure Socket Layer) protocol, ensuring that the information is encrypted for your protection. Once we receive your data transmission, we make reasonable efforts to ensure its security in our systems. However, we cannot guarantee total security for transmissions made via the Internet due to external violations of our software servers and firewalls. Therefore, data transmission via the Internet is at your own risk.

Social Media

The social media platforms available constitute a communication and interconnection platform between users' digital platforms, and are independent of Mexico Travel Group, therefore, they are not under our responsibility. The information you provide on social media in which Mexico Travel Group participates as a user is not considered part of the personal data protected by this Privacy Notice, being the responsibility of the platform company and the user posting the information.

Use of Personal Information

We inform you that your personal data is shared within the country with the following people, companies, organizations, and authorities distinct from us, for the following purposes:

• Local, state, and federal authorities, as well as public agencies such as the Ministry of Finance and Public Credit, the Ministry of Tourism, INFONAVIT, IMSS, and others as required by law. Compliance with tax obligations, notifications, judicial requests, and those indicated by the law. Advising on best practices in customer services and optimizing internal quality controls and organization.

It is important to note that third parties to whom your personal data is transferred will be obligated under the same terms as this Privacy Notice and will comply with the corresponding security and confidentiality measures.

I consent and authorize that my personal data be processed and transferred according to the provisions of this Privacy Notice.

I do not consent and authorize that my personal data be processed and transferred according to the provisions of this Privacy Notice.

If you do not express your opposition to such transfers, we will assume you have granted your consent.

Rights of the Data Subject

According to the General Law on the Protection of Personal Data Held by Obligated Subjects, as the data subject, you can exercise the rights of access, rectification, cancellation, and opposition, known as "ARCO Rights" (provided it is legally applicable). You can also revoke, at any time, the consent you have given for the processing of your personal data, or limit its use or disclosure.

The procedure for exercising your ARCO rights and revoking consent for Mexico Travel Group to process your personal data is through the following email: contact@mexicotravelgroup.com. The ARCO rights should be exercised through a request via the aforementioned email and must include necessary information such as: name, address, or another means of notification regarding the case.

We will respond to your request within 15 business days and inform you of its outcome. Mexico Travel Group advises users to update their information whenever it changes to provide better service.

Modification or Cancellation of Your Personal Data

You have the right to know what personal data we have of you, how we use it, and the conditions under which we use it (Access). You also have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); request that we delete it from our records or databases if you believe it is not being used in accordance with the principles and obligations set forth in the law (Cancellation); or oppose its use for specific purposes (Opposition). These rights are known as ARCO rights.

Revocation of the Use of Your Personal Data

You may revoke the consent you have given for the processing of your personal data. However, please note that we may not be able to meet your request or cease its use immediately, as we may need to process your personal data due to legal obligations. Additionally, revocation may prevent us from continuing to provide the requested service or terminate our relationship with you.

The revocation of consent can be made at any time without retroactive effects. To initiate the revocation process, you must specify in writing which consent you wish to revoke via email: contact@mexicotravelgroup.com. Requests for access, rectification, cancellation, or opposition must contain the following:

• The full name of the data subject and address or other means to communicate the response to your request.

• Documents proving the identity or legal representation of the data subject.

• A clear and precise description of the personal data for which you wish to exercise any of the aforementioned rights, and any other information or documents that facilitate locating the personal data.

For rectification requests, the data subject must indicate the modifications to be made and provide documentation supporting the request.

Mexico Travel Group will communicate the decision within fifteen business days from the date the request for access, rectification, cancellation, or opposition is received. If appropriate, we will make the requested changes within the following fifteen days. Requests for access to personal data will be processed once the identity of the requester or legal representative is verified. The aforementioned timeframes may be extended once for an equal period if justified by the circumstances.

The obligation of access will be considered fulfilled when the personal data is made available to the data subject or through the provision of copies, electronic documents, or any other means provided by Mexico Travel Group.

If the requestor seeks access from a person presumed to be responsible for the data and they are not, a notice will be given to the requestor via any printed medium (letter of non-proceeding) or electronic medium (email, optical media, etc.), thereby fulfilling the request.

Mexico Travel Group may deny access to personal data, or refuse to carry out rectification, cancellation, or opposition in the following cases:

• If the requestor is not the data subject, or the legal representative is not properly accredited.

• If the personal data is not found in our database.

• If the rights of a third party are infringed.

• If there is a legal restriction or ruling by a competent authority that restricts access to personal data or prevents its rectification, cancellation, or opposition.

• If rectification, cancellation, or opposition has already been carried out.

The refusal may be partial, in which case Mexico Travel Group will process the requested access, rectification, cancellation, or opposition in line with the request.

Limitation or Disclosure of Your Personal Information

To limit the use and disclosure of your personal information, we offer the following options:

• Registration in the Public Registry to Avoid Advertising, managed by the Federal Consumer Protection Agency (PROFECO), to ensure that your personal data is not used for receiving advertisements or promotions from goods or service companies.

Use of Tracking Technologies on Our Website

We may use cookies, web beacons, and/or similar technologies on our website to obtain information such as the following:

• Browser type and operating system, pages visited, links followed, IP address, sites visited before entering ours, user recognition, highlighted information, and measuring some traffic parameters.