LEGAL NOTICE

Palafitos Overwater Bungalows

PRIVACY NOTICE

In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (the Law), which aims to protect the personal information provided by each person (the Information), we hereby make available the following Privacy Notice.

IDENTITY OF THE RESPONSIBLE FOR THE PROTECTION OF YOUR PERSONAL DATA

For the purposes of this Privacy Notice, the following companies will be identified: Viajes Turquesa del Caribe Mexicano S.A. de C.V., Operadora Hotelera EDR S.A. de C.V., Operadora Hotelera Secrets EDM S.A. de C.V., Operadora ED Seaside S.A. de C.V., Operadora Gention S.A. de C.V., LT Brands S.A. de C.V., Distinctive Vacations S.A. de C.V., Viajes Acuáticos Turquesa S.A. de C.V., Desarrollos Turísticos Costa Turquesa S.A. de C.V., Servicios Turísticos Costa Turquesa S.A. de C.V., as Subsidiaries and/or Affiliates of Lomas Holding S.A. de C.V., interchangeably and that in turn are part of the Business Group of Grupo Lomas.

That the address of the aforementioned Companies is located at Calle de Acceso L28, Manzana 16 Lote 37 Supermanzana 309, Cancún, Quintana Roo, Mexico, Postal Code 77560.

The person responsible for the protection of personal data collected is the Web Development Department, located at the same address, can be contacted at the following email: webmaster@lomas-travel.com.

Requested personal information:

Grupo Lomas will request identifying and non-sensitive personal information from users of the services through our Website and Call Center, for the purposes of processing, tracking, updating, modifying, canceling, confirming reserved services, sending promotions and advertising, informing about products or services, and contacting potential clients of any of the business units of the business group related to Grupo Lomas. The type of information requested from users of the services includes, but is not limited to, name, email address, address, zip code, date of birth, credit card information, and additional important information for the reservation and payment process, which is necessary to carry out the normal activity of the service. The information related to your credit card is used exclusively at the time of contracting the services offered by Grupo Lomas.

The data owner, when registering, gives their consent in a free, specific, informed, and unequivocal manner to provide the personal data that may be required, as well as for their personal information to be shared, transferred, and/or processed among the affiliated and/or subsidiary companies belonging to Grupo Lomas, with the understanding that if the user decides not to provide the mandatory information, they will not be able to access the services that actually require such information, however, they may have access to all other services that do not require such information. Grupo Lomas in no case and under no circumstances stores sensitive personal data such as racial or ethnic origin, current health status, genetic information, religious beliefs, philosophical and moral beliefs, union affiliation, political opinions, sexual preference, etc.

Similarly, we collect email addresses from those who communicate with us through this means, aggregated information from the pages you visit when you browse Grupo Lomas and its subsidiaries and/or affiliates websites, when you use our online services, by the nature of the data used user authorizes Grupo Lomas to take information from their social networks, and even when connecting to Wi-Fi when using our facilities, as well as any other information that you voluntarily provide to us, such as information related to surveys or registrations on the site.

The information you provide as a user of our website may be used to: contact you in case of reservation changes, detect or prevent the commission of possible cyber crimes, conduct customer surveys, manage the customer relationship and improve the content of the site, for statistical purposes related to our service improvement, for sending promotions and advertising, informing about products or services and contacting potential clients of any of the business units of Grupo Lomas. If you provide us with your telephone number, we will only contact you through this medium in case of reservation changes or matters related to the payment process.

The personal information that you, as a user of our Website and Call Center, provide us with must be truthful and correspond to your current situation. This information will be treated in accordance with the principles established in the legislation incorporated in this privacy notice.

DATA TRANSFER

Personal data may be transferred to and/or shared with commercial partners, affiliates, suppliers, financial institutions, banks and credit agencies, subsidiary companies, affiliates, and third parties, such as but not limited to hotels, rental agencies, airlines, tour providers, etc., for marketing purposes, to confirm reservations and, in general, to comply with the obligations contracted with the user or client.

Privacy and Protection of Personal Data

Grupo Lomas uses the most advanced technology and processes to protect the information provided by data subjects. This technology encrypts, encodes, and prevents the interception of information provided via the Internet and the Telephone Support Center, including credit card information and email addresses. Grupo Lomas establishes and maintains administrative, technical, and physical security measures that protect personal data against: damage, loss or alteration, destruction, unauthorized use, access or processing. Grupo Lomas' Internet Site contains hyperlinks or hypertexts, advertisements, buttons, and search tools on the worldwide web that, when clicked or used by users, connect to other portals or websites owned by third parties. However, although in some cases these third-party sites or portals are framed with Grupo Lomas' navigation bar or style and appearance, the information that the User may provide through these sites or portals is not covered or included in this privacy notice, and its handling or use is not the responsibility of Grupo Lomas, so we recommend our users to verify the notices and privacy policies displayed or applicable to these third-party sites or portals.

We commit to not transfer your personal information to third parties without your consent, except for the exceptions provided in article 36 of the Federal Law on the Protection of Personal Data Held by Private Parties, as well as to carry out this transfer in accordance with the terms established by law.

Article 36 of the Federal Law on the Protection of Personal Data Held by Private Parties.

Article 36.- National or international data transfers may be carried out without the consent of the data subject when any of the following situations occur:

When the transfer is provided for in a Law or Treaty to which Mexico is a party;

II. When the transfer is necessary for prevention or medical diagnosis, the provision of healthcare, medical treatment or the management of healthcare services;

III. When the transfer is made to controlling companies, subsidiaries or affiliates under the common control of the data controller, or to a parent company or to any company within the same group of the data controller that operates under the same internal processes and policies;

IV. When the transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the owner, by the person in charge and a third party;

V. When the transfer is necessary or legally required for the safeguarding of a public interest, or for the procurement or administration of justice;

VI. When the transfer is necessary for the recognition, exercise or defense of a right in a judicial process, and

VII. When the transfer is necessary for the maintenance or fulfillment of a legal relationship between the data controller and the data subject.

Responsibility for the use of bank card information

Grupo Lomas has a commitment to respect the privacy of all its clients, and in the case of this page, to all those who make their reservations online or through the Call Center. To ensure the security of your online transactions, we use an SSL (Secure Socket Layer) certificate on our website, which protects the data you send from your browser to our site and database. All information related to the transactions you make with your credit card is encrypted, thus safeguarding your privacy and security.

All the information provided by customers to Grupo Lomas, such as name, address, email, phone number and other data about the reservation during the online payment processes, will be treated strictly confidentially, unless specified otherwise to customers.

USE OF "COOKIES" AND "IP ADDRESSES"

The data server of Grupo Lomas will send data to the User's browser to be stored in the hard drive of their computer. This allows us to identify the computers used by Users when accessing our Portal. This process is known as the use of "cookies" or "IP addresses". Through this process, Grupo Lomas can offer a more personalized service to its Users, as it allows us, among other things, to publish advertising and promotion campaigns, measure the size of our audience and the traffic flow on the different sites that the User visits. Through "cookies" or "IP addresses", users are not personally identified, but the public IP from which the user connects is identified.

ACCESS TO PERSONAL DATA

As a user of the services provided by Grupo Lomas, you have the right to access your personal data that you provide and details about their treatment, as well as to rectify and delete them in case they are inaccurate, incomplete or you withdraw your consent; cancel them when you consider that they are not required for any of the purposes indicated in this Privacy Notice, are being used for unauthorized purposes or have ended the contractual or service relationship, you may also object to the treatment of them for specific purposes, limit them, and even to the portability of your data.

RIGHTS ARCO

The Law grants the user, rights to exercise (ARCO Rights):
• Access to their personal data to know which ones are protected, if they are correct or updated, and for what purpose they are used.
• Rectification in case they are inaccurate, incorrect or outdated.
• Cancellation consisting of the removal of their personal data when they consider that they are not being used to fulfill the purposes established in this Privacy Notice.
• Opposition to the processing of their personal data with respect to any of the purposes established in this Privacy Notice.

The user has the right to revoke the consent given for the processing of their personal data, with the purpose of stopping their use, likewise, they can revoke their consent to receive promotions and offers by telephone or email at any time. To exercise their ARCO Rights or their right to revoke consent for the processing of their personal data, they must submit their respective request in writing and in Spanish, and send it to Grupo Lomas through the following email: webmaster@lomas-travel.com, or send their written request by mail, courier, or hand-deliver to the Web Development Department, located at Calle de Acceso L28, Manzana 16 Lote 37 Supermanzana 309, Cancún, Quintana Roo, México, Código Postal 77560.

Your application must indicate your full name with last names, attach a simple copy of your official identification, indicate your email or physical address for notifications, and provide a contact telephone number. You can enter this information at the following link: https://privacidad.lomastravel.com.mx/Grupo Lomas will follow up on your request within a period of 15 business days from the receipt of said request with complete documentation, to inform you whether the request was approved or not, notifying you of any rectification, carrying out the necessary procedures for the cancellation of your personal data, or ending the use of them.

LEGAL BASIS

The present Privacy Notice is issued in compliance with the provisions of articles 6 and 16 of the Political Constitution of the United Mexican States, as well as the Federal Law on the Protection of Personal Data Held by Private Parties, the Regulations of the Federal Law on the Protection of Personal Data Held by Private Parties, and the Guidelines of the Privacy Notice issued by the INAI (National Institute of Transparency, Access to Information and Protection of Personal Data).

MODIFICATIONS TO THE PRIVACY NOTICE

Grupo Lomas reserves the right to modify or update totally or partially the terms and conditions of this Privacy Notice, for the attention of legislative novelties, internal policies or new requirements for the provision or offering of our services or products. These modifications will be available to the public on our Website.

ACCEPTANCE OF TERMS

This Confidentiality / Privacy statement is subject to the terms and conditions of the Grupo Lomas business group's Internet site and/or its subsidiaries and/or affiliates, as previously described, which constitutes a legal agreement between you as a user of Grupo Lomas and/or its subsidiaries and/or affiliates. If as a user you use the services of Grupo Lomas, and/or its subsidiaries and/or affiliates or provide us with your information, it means that you have read, understood and agreed to the terms set forth above in a free, specific, informed, and unequivocal manner.