Your privacy and trust are very important to INCENTIVOS MEXICANOS, S.A. DE C.V. Therefore, we make our privacy notice available to you in compliance with the Federal Law on Protection of Personal Data Held by Private Parties, published in the Official Gazette of the Federation on July 5, 2010. This law aims to protect personal data held by private parties, ensuring its legitimate, controlled, and informed processing, in order to guarantee individuals’ privacy and their right to informational self-determination. This also applies to its Regulations, published on December 21, 2011, and the Privacy Notice Guidelines, published on January 17, 2013.

Any modification to this privacy policy will be communicated to you through the procedures described later in this document.

INCENTIVOS MEXICANOS, S.A. de C.V. is a company incorporated under the laws of the United Mexican States, with registered address at Calle Verano 101, Col. Pueblo Viejo, Temixco, Morelos, C.P. 62588.

INCENTIVOS MEXICANOS, S.A. de C.V. will collect from the client the personal data necessary for the proper provision of our services.

Such Personal Data may include:

• Full name, gender, address, home, mobile, and/or work phone number, passport, RFC, CURP, place and date of birth, age, names of family members.

• Employment data: work address, phone number, and email.

• Sensitive personal data such as: credit card number, cardholder’s name, security code, expiration date, and issuing bank.

We commit to processing this information under strict security measures, guaranteeing absolute confidentiality.

The Personal Data provided by the client will be used for the following purposes:

• To provide services related to leisure and/or business travel sales, as well as conventions, including reservation processing, subcontracting of services with tourism providers, travel profile creation, billing, and payment collection.

• To conduct inquiries, research, and review regarding complaints or claims.

• To keep our clients informed on any matter related to leisure and/or business travel services or this Privacy Notice.

• To evaluate the quality of our services and, in general, to comply with obligations contracted with the client.

INCENTIVOS MEXICANOS, S.A. de C.V. may transfer your Personal Data as necessary for the provision of services both within and outside the Mexican Republic.

INCENTIVOS MEXICANOS, S.A. de C.V. is committed to ensuring compliance with all legal principles regarding the protection of our clients’ personal data during such transfers. Likewise, we are committed to ensuring that this privacy policy is respected at all times by us and by our business partners.

To this effect, INCENTIVOS MEXICANOS, S.A. de C.V. informs its clients that, in order to provide its services, it will transfer Personal Data to:

• Business partners, so that they may manage and operate complementary services to those provided, such as airlines;

• Companies that jointly operate with INCENTIVOS MEXICANOS, S.A. de C.V. certain software or IT infrastructure serving as a platform for service provision;

• Third parties and providers of auxiliary or complementary services, in order to assist in service provision; and

• External consultants for collection management related to services and to defend INCENTIVOS MEXICANOS, S.A. de C.V. in any legal dispute arising from service provision, such as collection agencies or external auditors (legal and accounting).

In accordance with the Federal Law on Protection of Personal Data Held by Private Parties, the data subject, either personally or through a duly accredited legal representative, may, as of January 6, 2012, exercise their rights of access, rectification, cancellation, and opposition directly before the Privacy Attention Unit.

1. Access. The client may, at any time, request information on what data has been collected and is held by the controller.

2. Rectification. In case any data is inaccurate or incomplete, the client may request its correction, attaching the documentation supporting such modification.

3. Cancellation. The client may request at any time the cancellation of their data; if the request is deemed valid, the data will enter a blocking period during which it may not be processed in any way, and will later be deleted.

Any substantial or total changes to this Privacy Policy may be notified via our website https://destination-mexico.com or via email to the address registered by INCENTIVOS MEXICANOS, S.A. de C.V. for such purposes.