I.- IDENTITY OF THE RESPONSIBLE PARTY

In accordance with the provisions of Articles 8, 15, 16, 36, and other relevant and applicable articles of the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter referred to as FiveQueens S.A. de C.V.), with an address at Callejón de Loreto 25, 37700 San Miguel de Allende, Mexico, we inform you that we are responsible for obtaining and processing your personal data obtained due to the relationship you have with us.

II.- PERSONAL DATA

For the purposes mentioned above, the following personal data is necessary to provide our service:

a) Identification data: first name(s), last name(s), official identification and/or data, address, home phone number, mobile and/or work phone number, marital status, signature, email address, gender, age, date of birth, nationality, name and data of third parties, occupation, name and contact details of the workplace, position.

b) Financial Data: payment method, cardholder’s name, credit card number, expiration date, security code number, copy of the credit card.

c) Billing Data: name or business name, RFC, tax address.

d) Preference Data: related to room, required services and/or reasons, travel preferences, hobbies, and opinions.

We obtain your personal data through the following means:

a) Personally, when you provide it to one of our employees, by filling out forms when checking in with us, or at our reception. Additionally, when you complete satisfaction and service opinion surveys.

b) Directly, when you provide it to us via telephone or through electronic means, by filling out the reservation form on our website, interacting on our social media, through cookies or web beacons (see section VII), or via email.

c) Indirectly, when you provide your personal data to one of our suppliers, such as travel agencies, tour operators, or third parties who provide us with databases, supporting us during the reservation and marketing processes.

Furthermore, we inform you that FiveQueens S.A. de C.V. does not obtain personal data considered sensitive by the Federal Law on the Protection of Personal Data Held by Private Parties. Sensitive personal data is understood as those personal data that affect the most intimate sphere of their owner, or whose improper use could result in discrimination or carry a serious risk for the owner.

III.- PURPOSE

The provided data will be used, as appropriate, for the following purposes:

• Reception and registration of guests.
• Provision of lodging services.
• Provision of restaurant services.
• Provision of banquet services.
• Provision of event organization services.
• Provision of general tourist and commercial services.
• Billing.
• Charging credit and/or debit cards for services provided by the hotel.
• Quality and satisfaction surveys and evaluations.
• Sending promotional information, either in paper or electronic form, related to the products and services offered by the hotel.
• In general, for the provision of services offered by FiveQueens S.A. de C.V.

IV.- TRANSFER OF PERSONAL DATA

FiveQueens S.A. de C.V. will not commercialize your personal data with third parties and will collect them to provide you with its services and carry out the processes described in the previous section. However, please be aware that the personal data collected may be transferred to entities within the company’s group of interest or those with which it has signed hotel operation, franchise, or similar contracts, and/or third parties, national or foreign, solely to fulfill the purposes for which the personal data was provided.

V.- RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION, AND OPPOSITION

In accordance with Article 28 of the Federal Law on the Protection of Personal Data Held by Private Parties, you have the right to Access, Rectification, Cancellation, or Opposition of your personal data (ARCO Rights), briefly explained as follows:

• Access: Right to access the personal data we hold about you, as well as to obtain information about the conditions under which your data is processed.
• Rectification: Right to rectify your personal data if it is inaccurate or incomplete.
• Cancellation: Right to request the cancellation of your personal data when you believe it is not being processed in accordance with the principles and obligations established by the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations.
• Opposition: Right to oppose the processing of your personal data when there is a legitimate cause or to prevent your data from being processed for specific purposes.

To exercise your ARCO rights, you may request or revoke your previously granted consent for the processing, and generally, for any doubt or complaint regarding the processing of your personal data or to find out if there are other available options (in addition to those established here) to limit the use or disclosure of your data, you need to (i) send a request regarding your personal data as provided in Articles 29 and 31 of the Law, addressed to our Personal Data Protection Department, located at Callejón de Loreto 25, 37700 San Miguel de Allende, Mexico, (ii) call +52 1 415 690 5493, or (iii) send an email to hola@fivequeens.mx.

VI.- SECURITY OF YOUR PERSONAL DATA

The personal data collected by FiveQueens S.A. de C.V. will be duly safeguarded in accordance with the security, administrative, technical, and physical measures established by the Law and the Regulations to protect such personal data against damage, loss, alteration, destruction, or unauthorized use, access, or disclosure, and will be processed under the principles of legality, consent, information, quality, purpose, loyalty, proportionality, responsibility, security, and confidentiality provided in the said Law and the Regulations.

VII.- ELECTRONIC MEDIA AND COOKIES

A cookie is a data file stored on the hard drive of your computer or electronic communication device that you use when browsing our website, allowing the exchange of status information between our site and your browser. The status information can reveal session identifiers, authentication or user preferences, as well as any data stored by the browser regarding the website. On the other hand, a web beacon is a visible or hidden image embedded within our website or email that can be used to monitor your behavior on these media. Through these, information such as the originating IP address, browser used, operating system, time accessed, and in the case of email, the association of the data can be obtained. The data obtained through these means allows us to provide better service on our site. Most web browsers allow you to manage your cookie preferences. You can adjust your browser to reject cookies or delete certain cookies. You should generally be able to manage similar technologies in the same way you manage cookies using your browser preferences.

VIII.- MODIFICATIONS TO THE PRIVACY NOTICE

FiveQueens S.A. de C.V. reserves the right to make modifications or updates to this privacy notice at any time, to reflect the entry into force of new regulations or internal policies. These modifications will be available through the following means: visible notices at our establishments, website, or email. If you disagree with such modifications, you must send an email to hola@fivequeens.mx requesting the cancellation of your personal data.

If FiveQueens S.A. de C.V. does not receive your express opposition for your personal data to be processed in the manner and terms described above, it will be understood that you have given your consent.