Due to the commercial activities carried out by BUQMX BOOKING APP, S.A.P.I. DE C.V. ("BUQMX"), in some cases data and information of the users of our application (the "App") is collected and/or transmitted, which is done for purposes related to our business and always with the absolute commitment to protect the privacy of your data.

Our Privacy Notice ensures that any information you provide to us will be kept private and secure. Therefore, below we set out the details of what information we collect, how we collect it, how we use it and the means for the user to exercise their Rights of access, rectification, cancellation and opposition (ARCO Rights) under the Federal Law on Protection of Personal Data Held by Private Parties.

BUQMX will do everything in its power to protect the privacy of the information. It may happen that by virtue of court orders, or legal regulations, BUQMX is forced to disclose information to authorities or third parties, or in cases where third parties may intercept or access certain information or data transmissions in which case BUQMX will not be liable for the information that is disclosed in such ways.

This document is an integral part of the Terms and Conditions of BUQMX. By accepting the Terms and Conditions the user accepts the terms of the Privacy Notice contained herein. The use of this App by the user is voluntary, so it is considered that the user accepts both this Privacy Notice and the Terms and Conditions of BUQMX. If you do not agree with them do not use the App.

1. Responsible for the protection of your personal data
   
   BUQMX BOOKING APP, S.A.P.I. DE C.V. with address at Saltillo 3, Colonia Condesa, 06100, Mexico, Distrito Federal, is responsible for the treatment of your personal data.

How to contact us:
Address: Saltillo 3, Colonia Condesa, Mexico City
E-mail: [email protected]
Telephone: 55 65 53 39 69

III. Purposes and use of your personal data

Your personal data will be used by BUQMX for the following purposes:

•  Provide the services and products requested by you;
  - Inform about changes or new products or services that are related to the contracted or purchased by the customer that BUQMX considers may be of interest (via mail, social networks such as Twitter or Facebook, cell phone applications, SMS, etc.);
  - Inform about promotions or discounts that BUQMX considers may be of interest (via mail, social networks such as Twitter or Facebook, cell phone applications, SMS, etc.).);
  - Deliver products or provide services that have been purchased or contracted by the customer through the App;
  - Fulfill obligations to our customers;
  - Evaluate the quality of service;
  - Conduct internal studies on consumer habits and market research;
  - Proceed to the billing and collection of the product and/or service purchased by the user;
  - Contact you directly whenever it is considered convenient in order to offer you by different means and ways (including mail, social networks such as Twitter of Facebook, cell phone applications, SMS, etc.) other products and/or services; - Contact you directly whenever it is considered convenient in order to offer you by different means and ways (including mail, social networks such as Twitter of Facebook, cell phone applications, SMS, etc.) other products and/or services.) other products and/or services;
  - Improve our commercial and promotional initiatives to analyze the pages most visited by users, searches performed, improve our content offerings, customize such content, presentation and services;
  - Send information or messages about new products and/or services, display advertising or promotions and banners that are of interest to our users, news about BUQMX, in addition to any other information we deem appropriate;
  - Provide the personal data of users to entities involved in the resolution of disputes between them, such as: Insurance Companies or courts competent to resolve such disputes; and
  - Send you e-mails related to BUQMX and its services.

1.  What personal data do we collect and from where?

For the purposes outlined in this Privacy Notice, we may collect your personal data in different ways: (i) when you provide it to us directly; (ii) when you visit our Internet App or use our online services; and (iii) when we obtain information from other sources that are permitted by law.

Personal data we collect directly

We collect your personal information directly from you when you provide it to us by various means, such as when you participate in our promotions or provide us with information in order for us to provide you with a service. The information we collect in this way may include, but is not limited to: first and last name, gender, occupation, address, e-mail address, date of birth, telephone number, payment method details, and taste information.

We also collect personally identifiable information (PII) that is voluntarily submitted during the registration process or in response to requests made by BUQMX. We may also collect your IP (Internet Protocol) address to help diagnose problems with our server, and to administer the App. An IP address is a number that is assigned to your computer when you use the Internet. Your IP address is also used to help identify you within a particular session and to gather broad demographic information.

BUQMX automatically collects and stores certain information about user activity within our App. Such information may include the URL they come from (whether or not they are on our App), what URL they subsequently access (whether or not they are on our App), what browser they are using, as well as pages visited, searches performed, posts, purchases or sales, messages, etc.

Personal data we collect from other sources

We may obtain information about you from other sources permitted by law, such as social networks on the Internet such as Twitter and Facebook, cell phone applications, telephone or work directories. The data we obtain by these means may include, but is not limited to: first and last name, address, e-mail address, date of birth, telephone number, payment method details.

1.  Limit the use or disclosure of your personal data

You may stop receiving promotional messages by landline or cell phone, or via e-mail, by sending a request to that effect to the following address: [email protected].

1.  Exercising ARCO Rights (access, rectification, cancellation and opposition)

You have the right to access your personal data in our possession and the details of their treatment, as well as to rectify them in case they are inaccurate or incomplete; cancel them when you consider that they are not required for any of the purposes stated in this Privacy Notice, are being used for non-consensual purposes or the contractual or service relationship has ended, or oppose to their treatment for specific purposes.

The mechanisms that have been implemented for the exercise of these rights are through the presentation of the respective request to [email protected].

Your application must contain the following information:

1.  Name and surname, address, e-mail address (or any other means by which you will be notified of the response to your request), date of birth, and telephone number, attaching a copy of an official identification;
   b. In case you are a legal representative, attach a copy of the document accrediting you as such;
   c. A clear and precise description of the personal data with respect to which you are seeking to exercise any of the aforementioned rights;
   d. Any other element or document that facilitates the location of the personal data;
   e. A clear and precise description of the right sought to be exercised, on what grounds and for what purposes; and
   f. In the case of requests for rectification of personal data, the holder must indicate the modifications to be made and provide the documentation supporting the request.

The deadlines for responding to your request are as follows: The response will be communicated within a maximum period of twenty days, counted from the date on which the request for access, rectification, cancellation or opposition was received, the determination adopted, to the effect that, if appropriate, the same is made effective within fifteen days from the date on which the response is communicated. In the case of requests for access to personal data, the delivery shall be made upon proof of the identity of the applicant or legal representative, as appropriate.

The aforementioned terms may be extended by BUQMX only once for an equal period, provided that the circumstances of the case justify it and the applicant is notified.

BUQMX may deny access to personal data, or to make the rectification or cancellation or grant opposition to the processing thereof, in the following cases:

1.  When the applicant is not the owner of the personal data, or the legal representative is not duly accredited to do so;
   b. When in its database, the personal data of the applicant are not found;
   c. When the rights of a third party are harmed;
   d. When there is a legal impediment, or the resolution of a competent authority, which restricts access to personal data, or does not allow the rectification, cancellation or opposition thereof; and
   e. When the rectification, cancellation or opposition has been previously made.

The refusal referred to in the previous paragraph may be partial, in which case the data controller will carry out the access, rectification, cancellation or opposition required by the holder.

In all the above cases, the responsible party must inform the reason for its decision and communicate it to the holder, or if applicable, to the legal representative, within the deadlines established for such purpose, by the same means by which the request was made, accompanying, if applicable, the evidence that may be relevant.

For further information, please contact the privacy office at 55 65 53 39 69.

VII. Revocation of consent for the processing of your data

At any time, you may revoke the consent you have given us for the processing of your personal data, so that we stop using them. To do so, it is necessary to submit your request to the following e-mail [email protected]

Your request must be accompanied by the following information:

1.  Name and surname, address, e-mail address, date of birth, and telephone number, attaching a copy of an official identification.
   b. In case you are a legal representative, attach a copy of the document that certifies you as such.
   c. Clear and precise description of the personal data with respect to which you wish us to stop using them, indicating that it is the totality of your personal data, and
   d. Any other element or document that facilitates the location of the personal data.

We will respond to your request within a maximum period of twenty days and will inform you of the origin of your request via the e-mail address you have provided in your request.

VIII. Your data may be transmitted, travel to another country or be shared with others.

Your personal data may be transferred and processed inside and outside the country, by persons other than this company. In that sense, your information may be shared with subsidiaries, affiliates, related parties, credit institutions with which BUQMX has agreements to provide its services, and other third parties that BUQMX considers convenient to comply with the services and activities indicated in section III of this Privacy Notice.

We undertake not to transfer your personal information to third parties without your consent, except for the exceptions set forth in article 37 of the Federal Law for the Protection of Personal Data in Possession of Individuals, as well as to carry out this transfer in the terms set forth in said law.

If you do not express your opposition to the transfer of your personal data, it will be understood that you have given your consent. You can express your opposition by sending an e-mail to [email protected].

If there is a sale, merger, consolidation, change in corporate control, substantial asset transfer, reorganization or liquidation of BUQMX, then, at our discretion, we may transfer, sell or assign the information collected in this App to one or more relevant parties.

1. Modifications to the Privacy Notice
   
   We reserve the right to make changes or updates to this Privacy Notice at any time, in order to comply with new legislation, internal policies or new requirements for the provision or offering of our services or products.

These modifications will be available to the public through the following means: (i) on our website in the Privacy Notice section: https://buq.mx/privacidad/; or (ii) we will send them to the last e-mail address you have provided to us. The amendments will take effect immediately upon the occurrence of either of the two events set forth in this paragraph.

1. Use of cookies and web beacons
   
   Cookies are text files that are automatically downloaded and stored on the hard disk of the user's computer equipment when browsing a specific Internet page, which allow the Internet server to remember some data about this user, including your preferences for viewing pages on that server, name and password.

Web beacons are images inserted in an Internet page or email, which can be used to monitor the behavior of a visitor, such as storing information about the user's IP address, duration of interaction time on that page and the type of browser used, among others.

Please be informed that we use cookies and web beacons to obtain personal information from you, such as the following:

•  Your browser type and operating system.
  - The Internet pages you visit.
  - The links you follow.
  - The IP address.
  - The App you visited before entering our site.

1. Security and Storage
   
   We employ a variety of security techniques to protect your data from unauthorized access by App visitors from inside or outside our company. It should be noted that no Internet transmission can be guaranteed to be completely secure, so while we strive to protect your personal information, the security of the transmission of any information cannot be guaranteed or warranted. Once we receive the data, we will make every effort to safeguard the information on our server. Therefore, BUQMX is not responsible for illegal interceptions or violation of its systems or databases by unauthorized persons or for the improper use of information obtained by such means.

At the moment of contracting a service or purchasing a product online, you will be asked for bank details for which we are committed to offer security and confidentiality of the data you provide us, for this, we have a secure server under the SSL protocol (Secure Socket Layer) so that the information you send us is transmitted encrypted to ensure your protection. To verify that you are in a protected environment, make sure that an "S" appears in the navigation bar "httpS".

When you are on our App, you will share your information with BUQMX, unless otherwise specified. We do not assume any obligation to keep confidential any other information that the user provides through newsletters, online chats or social networks (Twitter, Facebook, etc.), as well as the information obtained through cookies.

XII. Complaints and claims for improper processing of your personal data

If you consider that your right to protection of personal data has been harmed by any conduct of our employees or our actions or responses, and you presume that in the processing of your personal data there is any violation of the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, you may file the corresponding complaint or denunciation before the Federal Institute of Access to Information and Data Protection (IFAI). For more information, please visit www.ifai.org.mx.