PRIVACY NOTICE 

Last updated date: February 14th, 2024 

This Privacy Notice is hereby issued in accordance with the provisions of the Federal  Law for the Protection of Personal Details in Possession of Individuals, its  regulations and other current and related legislation (hereinafter the “Personal Data  Legislation”). 

1. Identity and address of the Responsible. 

Promociona y Piensa en Mexico, S.A.P.I. of C.V. (the “Responsible” or “We”,  interchangeably) obtains, uses, discloses and stores (hereinafter the “Processing”)  personal details (hereinafter “Personal Details”) of you (hereinafter “You” or the  “Holder”) collected either personally through our domains www.piensamexico.com and www.thinkinmexico.com (hereinafter the “Sites”) or our App (hereinafter the  “App”) and has an address for purposes of hearing and receiving notifications in  relation to this Privacy Notice at Bosque de Duraznos # 55, Ground Floor, Colonia  Bosques de las Lomas, Miguel Hidalgo, Mexico City, 11700. 

2. Personal details processed by the Responsible. 

For the purposes established in this Privacy Notice, we shall process the following  categories of both general and specific Personal Details: 

Identification and contact information;  

interests; 

comments posted on the Sites and/or the App; 

phone calls, email addresses and conversations in our contact centres;  consent evidences, authorizations and evidence of life; and  financial and asset data. 

geolocation data. 

In case you have provided Personal Details of third parties, You ensure that you  have their authorization, or in the case of minors, the authorization of their parents  or legal counsels to provide such data and are responsible for communicating to  such persons about the Processing of their Personal Details in accordance with this  Privacy Notice as well as the means to know its full content.  

3. Purposes of Treatment. 

We shall process Personal Details for the following primary and necessary purposes: a. Provide you with access to the Sites and/or the App.  

b. Manage, develop, maintain, customize, and improve the Sites and/or the App  and operating systems and perform the activities necessary for them to  function optimally and correctly as well as prevent or detect fraud or abuse. 

c. Manage and process reservations, payments, operations, and transactions of  Holders using the Sites and/or the App. 

d. Provide the Holder with information, communications and notifications about  the Sites and/or the App and transactions it carries out through the Sites  and/or the App. 

e. Provide advice, clarifications and customer service through call centers,  messaging applications, email addresses and/or by any other means. 

f. Monitor the quality of our customer service provided through our call centers,  messaging applications, email addresses and/or any other technological  environment as well as the attention provided through such means, for which  we can record the calls answered in our call center or store conversations  from messaging applications, email addresses and/or any other means by  which customer service is provided. 

g. Register you in our database. 

h. Monitor the creation, management, control and/or administration of your file  and, where appropriate, your account. 

i. Statistics and historical record of users. 

j. Conduct satisfaction surveys. 

k. Carry out market strategies and processing of market segmentation. 

l. Comply with legal requirements of competent national or foreign authorities  and with the obligations arising from the legal relationships between you and  the Responsible and/or between the affiliated companies and subsidiaries. 

m. Comply with any legal provisions and obligations applicable to the  Responsible, the subsidiaries and/or affiliated companies as well as  managing any legal proceedings of the latter.  

n. Carry out processes related to corporate restructurings of the Responsible,  such as merging, consolidation, sale, liquidation, or transfer of assets. 

o. Make the transfers mentioned in Section 5. 

p. Necessary and/or analogous supplementary activities to make the purposes  abovementioned come true. 

We shall process personal details for the following secondary or ancillary purposes: 

a. Marketing, advertising, promotion, newsletters, advertising messages, news,  invitations to events, commercial research and new services offering. 

If you do not wish your personal details to be processed for these secondary or  ancillary purposes, You may send an e-mail to privacy@piensamexico.com,  following the procedure referred to in Section 6 of this Privacy Notice. 

4. Options and means we offer you to limit the use or disclosure of your  Personal Details. 

In accordance with the procedures described in Section 6 of this Privacy Notice, You  may submit a request to limit the use or disclosure of your Personal Details unless  there are some reasons why the limitation or use of your Personal Details would be  inappropriate. 

5. Transfer of Personal Details. 

Your Personal Details may be transferred within the national territory or abroad in  accordance with the following items: 

a. To controlling companies, controlled or subject to common control with the  Responsible, which operate under the same internal processes and policies  of the Responsible, for the purposes of centralised safekeeping of  information, provision of services, administration, analytical and statistical  purposes and customer registration, among other internal processes of the  Responsible; 

b. to governmental authorities, agencies or entities in compliance with or in  relation to obligations under the legislation applicable to the Responsible, its  subsidiaries and/or affiliated companies as well as in compliance with  requests made to them; 

c. to governmental authorities, agencies or entities, notaries public and public  brokers when the transfer is required necessary for the recognition, exercise  or defence of a right of the Responsible, its subsidiaries and/or affiliated  companies in legal proceedings; 

d. to third party acquirers, arising from a corporate restructuring of the  Respsonsible, including, merging, consolidation, sale, liquidation or transfer  of assets, where the transfer is necessary for the maintenance or  performance of the relationship between such Responsible and the Holder; 

e. to consultants, suppliers and service providers of the Responsible, where the  transfer is necessary for the maintenance or performance of the relationship  between the Responsible and the Holder;  

f. to third party providers of tourism services or products, who offer multiple stuff  and/or services through the Sites and the App, where the transfer is  necessary by virtue of a contract entered into or to be entered into in the  interests of the Holder, by the Responsible and such third parties and/or  where the transfer is necessary for the maintenance or performance of the  relationship between the Responsible and the Holder. 

g. on the grounds of the other assumptions established in the Personal Details  Legislation, which do not require your own consent. 

The above transfers do not require your consent under the Personal Details  Legislation. 

6. Different Means to Exercise Your Own Rights.

In all legally appropriate cases, You may at any time and through the procedures  established in this paragraph, exercise the following rights regarding your Personal  Details: (i) Rights of Access, Rectification, Cancellation or Opposition (hereinafter  "ARCO Rights ”); (ii) revoke the consent given to the Responsible for the processing  of Personal Details; (iii) limit the use or disclosure of Personal Details; and (iv)  express your refusal for the processing of your personal details with respect to the  secondary and ancillary purposes abovementioned. 

To exercise these rights regarding your personal details, firstly you must carry out  the corresponding procedures before the Responsible by means of a request that  we place at your service here to later print it, fill it out by hand or computer, establish  your autograph signature at the bottom of it and send it in electronic format to the  email address privacy@piensamexico.com, writing "Exercise of rights over personal  details" as subject of the email and attaching the following documents: 

a copy of the documents proving their identity (official identification in force  with a photograph);  

if you have legal representation, the documents to hand in should be as  follows: full name of your legal representative, document proving the identity  of you and your representative (valid official identification with photograph)  and copy of the instrument by means of official power of attorney or a letter  of attorney signed by two witnesses, evidencing the authority of such legal  representative to act on your behalf in accordance with the terms set forth in  the Personal Details Legislation; 

any other element or document that makes the location of your Personal  Details easier. 

We shall begin with the process of the Holders' claims for the exercise of their rights  regarding Personal Details within a period not exceeding 20 (twenty) business days  from receipt and shall comply with the request, if applicable, within 15 (fifteen)  business days following our response to your claim. All this implies that the  Responsible will be able to extend this period to process the claims up to 20 (twenty)  further business days when the case raised justifies it, prior notification to the  respective Holder. 

You may get the requested information or Personal Details through electronic  documents in conventional formats or even through any other legitimate means that  guarantees and accredits the effective exercise of the requested right. Our Privacy  Officer is in charge of handling any claims from the involved subjects in relation to  the exercise of their rights concerning Personal Details and can be contacted by  email at: privacy@piensamexico.com

The Holder must keep the Responsible updated at all times in relation to their Personal Details. Therefore, we request your cooperation in informing us of any  changes that we need to take into account in a timely manner so as to incorporate  them into our database. You guarantee and are responsible, in any case, for the  truthfulness, accuracy, validity and authenticity of your Personal Details or those 

belonging to any third party under your custody or legal representation as well as for  the corresponding authorisations to share them with us.  

7. Means that allow personal details to be collected automatically. 

We inform you that the Sites and the App make use of cookies and other  technologies, through which it is possible to automatically monitor your behaviour,  offer you our services and grant you an optimal and personalized experience while  using them. The personal details collected through these technologies are the  following: IP address, websites and sections thereof that you visit from the sites or  on pages related to the sites and the applications, browser characteristics, device  characteristics, operating system, language preferences, URLs, information about  behaviours and actions taken on the sites and the applications, information about  behaviours and actions taken while our application is open, dates and times of visits  to the sites or access to the applications, sections or content viewed on the sites and  the applications and so on and so forth. 

These technologies can be disabled by accessing the option(s) of Privacy and/or  Security located in the section(s) of Options, Tools, Internet preferences or similar  features of the Internet browser you are using. However, when disabling them you  should be aware that such action could cause the impossibility of being unable to  take advantage of the functions that the sites and social networks can offer you. If  you wish to obtain additional information about the cookies mentioned in this section,  you can visit www.allaboutcookies.org

8. Changes to the Privacy Notice. 

This Privacy Notice may be modified, changed, or updated as a result of new legal  requirements, our own needs for the services we offer, our privacy practices,  programs or policies, changes in our business model or for any other reasons.  

We undertake to keep you informed of any changes to this Privacy Notice through  the Sites and the App under the corresponding Privacy Notice section.


Subscribe to our newsletter