NOTICE OF PRIVACY

A. Identity of the Responsible

Villa Segovia with address 11 Av. with Calle 10, Col. Andres Quintana Roo, Cozumel, Quintana Roo, Mexico, Quintana Roo is a company committed to protecting your privacy. Our person in charge of Data Protection is the Department of Personal Data and is located at the same address, you can contact him at the email: auditoria@costamed.com.mx

B. Personal Data

For the purposes indicated in this Privacy Notice, Villa Segovia may collect your personal data in various ways: when the information is provided directly by you; when you visit the internet sites of Villa Segovia; when you use the services offered by Villa Segovia online for the data that you authorize Villa Segovia to take from your social networks (Facebook, twitter, LinkedIn, google, etc.) or when connecting to the Wi-Fi that Villa Segovia in your case offer you; and when we obtain information through other means than those indicated above and that are permitted by applicable laws.

The personal data obtained by the aforementioned means are:

1. Identification data: name(s), surname(s), address, home, cell and/or work telephone number, marital status, signature, email, gender, age, date of birth, username and password .

2. Financial Data: cardholder name, credit card number, expiration date (in case of online transactions).

3. Invoicing data: name or denomination or social reason, RFC, fiscal domicile.

4. Preference Data: Related to the room, required services and/or reason, travel preferences and special requirements.

C. Sensitive Personal Data

Sensitive personal data is considered personal data that affects the most intimate sphere of its owner, or whose improper use may give rise to discrimination or entail a serious risk for it. In particular, those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union affiliation, political opinions, sexual preferences are considered sensitive. Villa Segovia does not collect sensitive personal data, in case you require a certain service for which you provide this data, Villa Segovia will use it only to provide said service and satisfy your specific needs.

Due to the health emergency derived from COVID 19, Villa Segovia, due to the provisions of article 10 sections V and VI of the Federal Law on the Protection of Personal Data Held by Private Parties, will collect data related to your state of health with the sole purpose of achieving

health protection of you and the other people who are in the hotel, information that will only be kept for the time necessary to fulfill said purpose.

D. Purpose and Treatment of Personal Information

Purposes that give rise to the legal relationship and are necessary for the provision of service:

• The personal information you provide us will be used by Villa Segovia to provide the services you request or that are part of a program you have signed up for or a purchase you have made: reservations, purchase of vacation packages, vacation club membership , affiliation to our loyalty programs, affiliation to our referral programs, organization of events and social gatherings, purchase of tourist products and/or services. Villa Segovia may use the personal information you provide us to offer you a better service and, in its case, identify your preferences during your stay and make it more pleasant. Purposes that do not give rise to the legal relationship or are necessary for the provision of service: Likewise, you can use the information to offer you promotions and tourist and commercial products, sending promotions, special services, newsletters, surveys, prize draws and others. online contests.

E. Limitation to the Use or Disclosure of Personal Information with respect to purposes that do not give rise to the legal relationship.

In order for you to limit the use and disclosure of your Personal Information for purposes that do not give rise to the legal relationship, we offer you the following means:

• Your registration in the Public Registry to Avoid Advertising, which is in charge of the Federal Consumer Protection Office, so that your personal data is not used to receive advertising or promotions from companies of goods or services. For more information, you can consult the internet portal of PROFECO, or contact it directly. Request email auditia@costamed.com.mx, indicating the email(s) and/or number Telephone(s) that require your limitation.

F. Of the Exercise of the Rights of Access, Rectification, Cancellation and Opposition.

Access, rectification, cancellation or opposition regarding the information provided to Villa Segovia indicated in the Federal Law on Protection of Personal Data Held by Private Parties, may be done by submitting the request in writing to the Department of Personal Data to the following address: 45 Avenida Sur 735, Adolfo López Mateos, 77667 San Miguel de Cozumel, Quintana Roo, from 9 a.m. to 2 p.m., Monday through Friday or to the email auditoria@costamed.com.mx

Said request must contain at least the following: (i) Name of the Owner of the Personal Data; (ii) Email to receive notifications; (iii) Documents that prove your identity or, where appropriate, the legal representation of the owner; (iv) Clear and precise description of the personal data with respect to which the right is sought to be exercised and of the right that is intended to be exercised. (v) Any other element or document that facilitates the location of personal data. In the event that the request does not meet any of the requirements indicated above, the Department of Personal Data may require you, within 5 days of receiving the request, to provide the necessary elements or documents to process it. You will have 10 days to meet the request, if you do not respond within that period, the corresponding request will be deemed not submitted.

The terms of attention will be a maximum of 20 days from the date on which the request is received to communicate the decision adopted, so that, if appropriate, make it effective within 15 days following the issuance of the response. . In order to protect your confidentiality, Villa Segovia will send the response to your request to the email you have provided for this purpose and will keep it available to the applicant at the address indicated in the previous paragraph.

G. Of the Revocation of the Consent for the Use of your Personal Data.

You can revoke the consent you have given us for the processing of your personal data. It is important that you bear in mind that not in all cases Villa Segovia will be able to attend to your request or conclude immediately, since it is possible that due to some legal obligation it is required to continue processing your personal data. Likewise, you must consider that, for certain purposes, the revocation of your consent will imply that we cannot continue providing the service you requested, or the conclusion of your relationship with Villa Segovia.

To revoke your consent, you must submit your request in writing to the Department of Personal Data at the following address: 45 Avenida Sur 735, Adolfo López Mateos, 77667 San Miguel de Cozumel, Quintana Roo, from 9 a.m. to 2 p.m. Monday through Friday or by email auditoria@costamed.com.mx

The processing of said request and its attention will be carried out in accordance with what is indicated in Subsection F, above.

H. Control and Security of personal information.

Villa Segovia undertakes to take the necessary measures to protect the information collected, using security technologies and control procedures in the access, use or disclosure of your personal information without authorization, for example, storing the personal information provided on servers located in Centers of Data that have limited access controls. For online transactions, we also use security technologies that protect the personal information that is transmitted to us through various electronic means, such as the use of a secure server.

However, no security or data transmission system over which the company does not have absolute control and/or is dependent on the Internet can guarantee that it is totally secure.

I. Electronic media and cookies.

In the event that you use electronic means in relation to your personal data, cookies will be generated in order to provide you with a better service.

Cookies are small pieces of information that are sent by the website to your browser.

Cookies are stored on your computer's hard drive and are used to determine your preferences when you connect to the services of our sites, as well as to track certain behaviors or activities carried out by you within our sites.

In some sections of our site we require the client to have cookies enabled since some of the features require them to work.

Cookies allow us to: a) recognize you when you enter our sites and offer you a personalized experience, b) know the personal configuration of the site specified by you, for example, cookies allow us to detect the bandwidth that you have selected when entering the home page of our sites, so that we know what type of information is advisable to download, c) calculate the size of our audience and measure some traffic parameters, since each browser that accesses our sites acquires a cookie that is used to determine the frequency of use and the sections of the sites visited, thus reflecting your habits and preferences, information that is useful to us to improve content, headlines and promotions for users. Cookies also help us to track some activities, for example, in some of the surveys that we launch online, we can use cookies to detect if the user has already filled out the survey and avoid deploying it again, in case it has. The "help" button found on the toolbar of most browsers will tell you how to avoid accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable all cookies. However, cookies will allow you to take advantage of the more beneficial features we offer, so we recommend that you leave them turned on.

J. Transfers

Villa Segovia only transfers personal data in the cases established in article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties.

K. Changes to this Privacy Notice.

Villa Segovia may at any time update this privacy notice. In the event that there are substantial changes to this notice, we will communicate it through our internet pages indicated in subsection A of this Privacy Notice. Therefore, we suggest you periodically visit this privacy notice to be aware of any updates.

I acknowledge and accept the terms and conditions established in this Privacy Notice, and if not, I will notify Villa Segovia in terms of what is stated in subsections E, F and G. of this Privacy Notice.

In case of any disagreement or complaint about the processing of your personal data, you can contact the National Institute of Transparency, Access to Information and Protection of Personal Data.