HOTEL ATELIER PLAYA MUJERES
COMPREHENSIVE NOTICE OF PRIVACY

In compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter, the “Law”) and its Regulations, this Notice of Privacy is issued under the following terms:

1) IDENTITY AND ADDRESS OF THE CONTROLLER.

GUC Hoteles S.A. de C.V. (commercially (referred to commercially and hereinafter as “Atelier Playa Mujeres”), is a legal entity that has been duly incorporated under the laws of the Mexican Republic, with address at Av. Bonampak, Supermanzana 10, Manzana 2, Lote 7, Cuarto Piso Torre “B”. Zip Code 77500, Cancun, Quintana Roo, Mexico. Atelier Playa Mujeres is responsible for the use and protection of your personal data, which will be processed based on the principles of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility under the terms of the Law. To that end, we inform you of the following:

2) PERSONAL DATA TO BE COLLECTED AND SUBJECT TO PROCESSING.

For the purposes indicated in this Notice of Privacy, your data will be collected from the following sources: provided directly by you in person, via telephone, or through email, as well as through our web page: www.atelierdehoteles.com.mx/atelier-playa-mujeres. The personal data we collect are as follows:

• Identification and Contact Data.- Full name, age, gender, address, marital status, telephones, place and date of birth, occupation, company where you work, nationality, social security number, Population Registration ID (CURP) or its equivalent for foreign nationals, email, Federal Taxpayer Registry (RFC) or its equivalent for foreign nationals, handwritten signature, official identification, migration documents, academic data, names of family members, and any other document that is essential for identifying you.
• Identification and contact data of third parties with whom you have a relationship.- Name, telephone, email, relation to you, and any other data that is necessary to identify the individuals designated to be contacted in case of emergency.
• Financial and Asset-Related Data.- Data that is necessary to successfully carry out the services provided, such as: names of banking institution and branch, bank account number(s), and credit card data.

Atelier Playa Mujeres will also request and process data that the Law considers sensitive, which are listed below and will henceforth be understood as included within the term, “Personal Data”.

Sensitive:: Health Condition.

The sensitive personal data collected by us will be processed in order to fulfill the purposes identified in this Privacy Notice and, in particular, for the provision of services offered by Atelier Playa Mujeres, whose nature requires specific measures to ensure the well-being and/or health of our members.

Atelier Playa Mujeres may also process sensitive personal data related to your health condition when provided by you for the provision of services or special assistance and when expressly required during your stay at the Atelier Playa Mujeres. facilities. In light of the above, and when strictly necessary, we will request your express written consent for processing this sensitive personal data by methods that adequately inform you about such processing.

Images for video surveillance purposes.

Atelier Playa Mujeres prioritizes security on its premises, which is why there is a video surveillance system to ensure the safety of the clients, employees, and individuals who visit our facilities. This system will collect your personal image in equipment and servers operated under the strictest confidentiality. This data will be used solely for purposes related to maintaining the safety and well-being of all individuals.

3) PURPOSES OF PROCESSING YOUR DATA.

We use the personal data collected from you for the following purposes, which are necessary for the service you request and contract:

• Ensure the functionality and quality of the contracted services by issuing identifying tags to guarantee personalized attention to your needs and the safety of guests in all the facilities of Atelier Playa Mujeres and, where applicable, the hiring and confirmation of services provided by third parties that have been or were requested by you either prior to or during your stay at Atelier Playa Mujeres.
• Provide assistance, deliver information, and assist you in contracting services, whether from us or third parties, during your stay at the facilities of Atelier Playa Mujeres.
• Follow up on requests made regarding products, services and price quotes.
• Verify your identity when registering or making payments for services through our website or in the Atelier Playa Mujeres facilities.
• Notify you of changes in our service.
• Billing and collection for the services and products provided, including the collection of such services or products through judicial or extrajudicial means.
• Manage charges via bank cards.
• Video surveillance for the safety of individuals visiting our hotel.

4) ADDITIONAL PURPOSES.

Additionally, we will use your personal information for the following secondary purposes which are not essential to the requested service, but allow us to provide you with better attention:

• Send you information about offers and new products and services provided by Atelier Playa Mujeres.
• Send you information about offers, products and services related to those contracted with Atelier de Hoteles which are provided by various third parties.
• Conduct surveys related to the products and services provided by Atelier Playa Mujeres in order to offer you higher quality in our products and services.

If you do not wish for your personal data to be used for these additional purposes, you may deny your consent by sending an email to the following address: datos@grupobd.mx.

5) TRANSFERS OF PERSONAL DATA.

Your personal data, including sensitive data, may be transferred and processed by persons other than Atelier Playa Mujeres. The recipients of said transfers (national or international) belong to the following categories:

• Parent companies, subsidiaries, or affiliates of Atelier Playa Mujeres for the purposes of centralized storage of information, managing activations and closures, making changes to your service reservations, as well as for collecting customer statistics in order to evaluate, improve, and design new services for Atelier Playa Mujeres customers and improve the quality of our products and services.
• Third parties, exclusively so that any service provider may assist Atelier Playa Mujeres in carrying out the additional services explicitly requested by the customer during their stay at Atelier Playa Mujeres.
• Individuals bound by medical professional confidentiality or an equivalent obligation, in those cases where the transfer of your sensitive personal data related to your present and future health condition to any legally authorized third party is essential for medical care, prevention, diagnosis, the provision of healthcare, medical treatments, or the management of healthcare services, while you are unable to give consent, in accordance with the terms established by the General Health Law and other applicable legal provisions.

6) CONSENT FOR THE TRANSFER OF DATA.

The transfers of personal data referred to in the previous section do not require your consent, as provided by Article 37 of the Law.

You may contact Atelier Playa Mujeres at any time through our Personal Data Department and express your desire to withdraw consent for the future transfer of your personal data.

7) USE OF COOKIES AND WEB BEACONS.

We inform you that we do not collect personal data through the use of Cookies or Web Beacons and other technologies for obtaining personal information from you, such as the following:

• Your type of browser and operating system.
• The webpages you visit.
• The links you follow.
• The IP address.
• The site you visited before entering ours.

8) ARCO RIGHTS (Access, Rectification, Cancellation or Opposition).

You, as owner of the Personal Data collected by Atelier Playa Mujeres have the right to request Access, Rectification, Cancellation or Opposition regarding any data you have provided to us. For further clarity, we provide the following definitions:

• Access.- The right you have to access your data and know which of them are being used in accordance with the purposes for which they were collected.
• Rectification.- The right you have to request correction or modification of your data if they are incorrect.
• Cancellation.- The right you have to request the deletion of your data from the Atelier Playa Mujeres database when you believe they are not being processed in accordance with this Privacy Notice or with the Law and its regulations. The cancellation request can apply to all your data or only some of it.
• Opposition.- The right you have to object to the processing of your Personal Data or to demand the cessation of its use.

Exercising any of the aforementioned rights does not limit or exclude the possibility of exercising any of the others, nor is there a specific order of execution; therefore, the exercise of one right will not be a requirement for exercising the others. However, the Law establishes circumstances in which it will not be possible to comply with your request, particularly in the case of requests related to Opposition and/or Cancellation.

You may submit your request to exercise your ARCO rights at any time and free of charge, either on your own behalf or through your legal representative. To do so, you must fill out the form called “ARCO Rights Request”, which can be downloaded from this website.

ARCO Rights requests may be submitted digitally via email sent to the address: datos@grupobd.mx, All requests must contain the following information:

• Your name, address, and the means through which we can inform you of the response to your request.
• The documents that verify your identity and that of your legal representative (official ID’s, power of attorney).
• A detailed description of the Personal Data you wish to subject to any of the aforementioned rights.
• Any additional information that will help locate your Personal Data.
• In the case of a request for rectification of data, the modifications to be made and the document supporting your request.

Within a maximum period of 20 (twenty) business days from the date you made your request, Atelier Playa Mujeres will send you a response through the means you specified in your request. If applicable, the approved resolution will be implemented within a maximum of 15 (fifteen) days from the date Atelier Playa Mujeres communicated the response to you.

In the case of requests for access to your Personal Data, these will be considered as duly completed when Atelier Playa Mujeres makes the requested information available to you by any means or format.

ARCO Rights requests may be made by individuals other than yourself, provided that the designated person proves:

• Your identity as the owner of the data that will be subject to the request.
• The identity of your legal representative.
• The existence of the legal representation, either through a public document, a power of attorney signed in the presence of two witnesses, or through your personal declaration.

The request and delivery of the Personal Data will be free of charge; however, the requesting party will be required to cover the costs of shipping, certification, copies, or reproductions in other formats.

As mentioned earlier, the Law establishes circumstances in which Atelier Playa Mujeres may deny a request related to ARCO Rights. For more information on this, we suggest reviewing Article 34 (Thirty-Four) of the Federal Law on the Protection of Personal Data Held by Private Parties.

If you have any questions regarding the processing of your Personal Data, contact the Personal Data Department of Atelier Playa Mujeres by email at: datos@grupobd.mx or call (998) 272 8040 EXT. 5292 during business hours, Monday through Friday, from 9:00 a.m. to 1:00 p.m.

9) METHODS AND PROCEDURES FOR THE DATA OWNER, IF APPLICABLE, TO REVOKE HIS CONSENT AT ANY TIME.

You may revoke your consent for the processing of your personal data, without retroactive effects, in all cases where such revocation does not render it impossible to fulfill obligations arising from an existing legal relationship between you and Atelier Playa Mujeres.

The procedure for revocation of consent, if applicable, will be the same as the one established in Section 7 of this Privacy Notice, regarding the exercise of ARCO rights.

10) OPTIONS AND METHODS FOR LIMITING THE USE OR DISCLOSURE OF YOUR PERSONAL DATA.

You may limit the use or disclosure of your personal data by directing the request to our Personal Data Department. The requirements to verify your identity, as well as the procedure to address your request, will be the same as those outlined for the exercise of ARCO rights mentioned in Section 7 of this Privacy Notice.

In order for you to limit the use and disclosure of your personal information, we offer the following options:

Registration with the Public Registry to Avoid Advertising, managed by the Federal Consumer Protection Agency (PROFECO), so that your personal data is not used to receive advertising or promotions from goods or services companies. For more information about this registry, you can visit the PROFECO website or contact them directly.

11) SECURITY MEASURES IMPLEMENTED

To protect your personal data, we have implemented administrative, physical, and technical security measures to prevent loss, misuse, or alteration of your information.

When we communicate or share your information with third parties that provide us with services, we require and verify that they have the necessary security measures in place to protect your personal data, prohibiting the use of your personal information for purposes other than those established in this Privacy Notice. This is with the understanding that any non-compliance by such third parties with the provisions of the Law and its Regulations is the sole responsibility of those third parties.

12) MODIFICATIONS TO THE PRIVACY NOTICE.

We reserve the right to make modifications or updates to this Privacy Notice at any time.

Atelier Playa Mujeres will inform you of any changes made to this Privacy Notice, which will be available on the website https://www.grupobd.mx/privacidad

13) COMPLAINTS AND GRIEVANCES.

If you believe that your right to personal data protection has been violated, or suspect that there has been a breach in the processing of your personal data in violation of the provisions set forth in the Federal Law on the Protection of Personal Data Held by Private Parties or its Regulations, you may file the corresponding complaint or report with the National Institute for Transparency, Access to Information, and Protection of Personal Data (INAI). For more information, please visit the website: https://home.inai.org.mx/.