INCENTIVE GROUPS TERRAMAR, S.A. DE C.V. (TERRAMAR), with address at Carretera Transpeninsular Km. 29.5, Plaza Las Palmas L-35 A, Col. Jesús Castro Agundez San José del Cabo, BCS 23440, Mexico, is responsible for the treatment (use) of your personal data.

In charge: Gabriela Alicia Pimentel González

Address: Paseo de Las Misiones M1 Lot 3, Golf Course Fractionation, San José del Cabo, BCS, Mexico CP 23440

Email: Privacy Data

Telephone: +52 624 1429200

Your personal data will be used for the following purposes:

• Provide the requested products, tourist activities, transportation services, and other products.
• Provide the services requested and/or contracted.
• Respond to your information, attention and service requirements.
• Evaluate the quality of the service we provide (surveys).
• Maintain records and contractual relationship files for follow-up of future services.
• Financial management, billing and collection, and process your payment (including evaluation of your payment method for fraud prevention purposes).
• Comply with the obligations and commitments that we have contracted with you.
• Administer loyalty programs, discounts and rewards, and carry out clarifications and investigations.

Additionally, your personal data may be used for promotion and marketing purposes:

• Prepare studies and programs necessary to determine habits of use and consumption.
• Offer you new products and services tailored to your interests and needs.
• Notify you about new services, tourist activities or products related to those already contracted or acquired.
• Send newsletters and communications about our organization.

For the purposes indicated above, we may collect your personal data in different ways:

• When you visit our internet sites or use our online services.
• By phone, email or fax.
• When you provide them to us personally.
• When we obtain information through other legally permitted public sources (telephone directories, work directories, websites, etc.).

Personal information we collect:

• Contact information (Name, Email, Address, Telephone, Cell, Fax).
• Identity documentation (Voter’s Credential, Passport, Driver’s License, Certificate or Professional Certificate).
• Financial data and means of payment (Credit card, debit card, checks).
• Socio-economic data (Age, Sex, Income level, Schooling).
• Labor information (Company, Position, activity developed, CV).
• Habits, sports and hobbies.
• Electronic records, including purchases of our activities and/or services (at points of sale or online), IP address, user preferences, browser type, activity on the site, images and/or voice records obtained during activities.

Protection of personal data and credit card information

Terramar has established physical, administrative and technical security measures to protect your personal data against damage, loss, alteration, destruction or unauthorized use, access or processing while such data are under our control.

Regarding credit card information, we process and store such data in accordance with the security standards adopted by credit card companies such as VISA, MasterCard and American Express.

Use of the site by minors

We recommend that parents take an active role in supervising their children’s use of the Internet. We do not intend to collect information from children under 18 years of age. If you are under 18, you should not provide information to this Website.

To comply with the purposes set forth in this notice, the following sensitive personal data may be collected and processed:

• Medical and/or psychological background (health status, illnesses, allergies, clinical history) collected to identify potential risks in contracted activities.

We require your express consent for the processing of sensitive personal data, which will be treated under strict security measures to guarantee confidentiality.

In the case of candidates, collaborators and/or employees of INCENTIVE GROUPS TERRAMAR, S.A. DE C.V. or its affiliates, personal data will be used to:

• Identify and carry out recruitment and personnel selection processes.
• Verify compliance with profile and hiring requirements.
• Prepare and process employment applications and contracts.
• Send information related to the company.
• Integrate and maintain personnel files.
• Send communications about activities, services, administrative notices, events and related information.
• Allow access to courses, events and work activities.

Personal information may be shared with payroll administration, recruitment and audit service providers, as well as other HR-related service companies such as Corporate Grupo T3, S.A. de C.V.

For these purposes, we may require: name, address, age, date of birth, nationality, sex, marital status, union membership, email, telephone, academic degrees, work history, references, IMSS affiliation number, RFC registration and CURP.

Information provided during registration to programs or promotions may be used for internal studies on user interests and behavior to improve products, services and advertising.

You have the constitutional right to access and know the personal data we hold about you, as well as details of its treatment and use. You may also:

• Rectify inaccurate or incomplete data.
• Cancel data when it is no longer necessary for the purposes indicated.
• Oppose the processing of your data for specific purposes.

To exercise your ARCO rights, you must submit your request via email to: Privacy Data.

Limiting use of personal information

If you wish to stop receiving non-essential communications, send your request to our Data Protection Department.

Revoking consent

You may revoke the consent granted for the processing of your personal data by contacting our Data Protection Department.

Your personal data may be transferred only in the following cases:

• To companies providing outsourced services, strictly for the execution of contracted services.
• To affiliates and companies belonging to our corporate group.

If you perform transactions through our website or points of sale, data transfers may be necessary to process your request and fulfill our contractual obligations.

We reserve the right to modify or update this Privacy Notice at any time due to new legislation, internal policies or new service requirements.

Modifications will be made available through:

• Visible notices at our establishments or customer service centers.
• Our website in the Privacy Policy section.
• Email notifications to the last address provided.

Cookies, web beacons and JavaScript

We use cookies and tracking technologies to store information about usage patterns of our website, including browser type, operating system, pages visited, origin of visit, IP address and time spent on the site.

These technologies can be disabled; however, doing so may affect proper website functionality.

If after exercising your ARCO rights you believe the response was unsatisfactory or incomplete, or you consider your data protection rights have been violated, you may file a complaint with the competent authority in Mexico.

For more information, please visit: ifai.org.mx.