Comprehensive Privacy Notice

 Era Operadora Inmobiliaria de Occidente SA de CV, with its registered address for receiving notices located at Av. Lapislázuli 3123 A, Col. Residencial Victoria, Zapopan, Jalisco, Mexico, CP 45089, is the company that operates and manages the Grand Mazamitla Tourist Development, located at Gorriones 6, Col. Fracc. Pinos de Mazamitla, Mazamitla, Jalisco, Mexico, CP 49500 (hereinafter referred to as “OIO”). Our company is committed to protecting your privacy in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (“LFPDPPP”), its regulations, the Privacy Notice Guidelines, and other applicable legal provisions in the Republic of Mexico (hereinafter collectively, the “Legislation”). In addition to the provisions of the Legislation, OIO has adopted the best international practices in the handling and administration of “Personal Data”, so in order to clearly and specifically inform you what Personal Data we collect, the means by which it is collected, as well as the treatment we give it, always under our commitment to protect your privacy under the highest standards of ethics, responsibility and professionalism, we make available to you this “Privacy Notice”.

 A. PERSONAL DATA WE COLLECT. To fulfill the legal relationship and provide the services you request, if you stay with us or visit our facilities, OIO may collect the following categories of Personal Data from you, either through physical or electronic formats: Identification and contact information. Financial information (bank details for payment, tax information for invoicing). Biometric data (fingerprints, facial recognition, voice signature, image data in photographs and/or videos). Information on family members to be notified in case of emergency. Information on your companions (registered persons) in the room or suite. Vehicle identification information (license plate). Health information (allergies, illnesses, conditions). Within the categories of Asset Data, Biometric Data and/or Health Data, being considered as Sensitive Personal Data that require special protection, OIO will give special treatment to them and will request your express and written consent in accordance with the provisions of the Legislation and the purposes established in this Privacy Notice.

 B. OTH PROCESSES PERSONAL DATA FOR THE FOLLOWING PURPOSES: For identification, verification, and/or contact in any type of legal or business relationship with OIO. For the fulfillment of contractual obligations regarding the lodging and/or rental services we must provide. For the provision of additional services to lodging and/or rental if you request them.

For your assistance in case of security incidents during your stay at our facilities, for which we have established security and surveillance measures, including video monitoring, security controls, and physical and logical access control. For billing and collection of payments for the services you request, as well as for processing refunds, if applicable. For your assistance in case of health incidents. Additionally, we use your Personal Data for the following "Secondary Purposes," which are not necessary for fulfilling the legal relationship that gives rise to the processing of Personal Data, but which allow us to provide you with better service: To develop studies and programs for marketing or advertising purposes. To maintain records for the provision of services in the future. To inform you about current or future products, services, advertising, promotions, and newsletters that may be of interest to you. To promote, prospect, and profile potential clients for the acquisition of contracts. To conduct quality surveys of our products and/or services. If you do not wish for your Personal Data to be used for any of the Secondary Purposes, please follow the procedure outlined in section “E.” of this Privacy Notice. Refusal to allow the use of your Personal Data for these Secondary Purposes will not be grounds for denying you the services and/or products you request or contract with OIO.

 C. RETENTION PERIOD FOR YOUR PERSONAL DATA. OIO will retain your Personal Data for the duration of the legal relationship with you, or in accordance with the periods established by law, or until you request us to delete them, provided that the law allows it.

 D. MEANS TO LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA. If you wish to object to the use or disclosure of your Personal Data, you may request to be included on our “Exclusion List.” To request inclusion on our Exclusion List, you must follow the process established in section “E.” of this Privacy Notice.

 E. EXERCISE OF RIGHTS OF:

(i) ACCESS, RECTIFICATION, CANCELLATION, AND OBJECTION (“ARCO Rights”);

(ii) REQUEST FOR REVOCATION OF CONSENT TO THE PROCESSING OF PERSONAL DATA;

(iii) DATA PORTABILITY; AND (iv) RIGHT TO BE FORGOTTEN. In accordance with the Law, you may exercise your right of Access to know what Personal Data we have about you in our records, as well as how we use it and how we process it. You may exercise your right of Rectification or request its correction if it is inaccurate. You may request its Cancellation, as well as express your Objection to its use and processing. You may request the right of Portability or Revoke your consent for its processing, as well as request the right to be Forgotten.

To exercise any of the rights mentioned above, please request the form by calling 33 51 11 10 18 and/or emailing grandmazamitla@gmail.com. The request must be sent by email to grandmazamitla@gmail.com and must be accompanied by the documentation indicated on the form. Our Personal Data Office will respond within a maximum of 20 (twenty) business days from the date your request is received. If your request is deemed valid according to the guidelines established in the Legislation and this Privacy Notice, it will be processed within 15 (fifteen) business days following the date we notify you of our response. When OIO deems it appropriate, it may agree with the Data Subject on alternative means for registering on our Exclusion List, in accordance with the law, provided that our Personal Data Office can authenticate their identity and respond to their request. It is important to note that we may not be able to fulfill requests for ARCO rights (Access, Rectification, Cancellation, and Opposition), Revocation of Consent, Portability, or Right to Erasure in all cases, as we may be legally required to continue retaining and/or processing your Personal Data in accordance with this Privacy Notice. If this is the case, we will inform you, indicating the corresponding obligations, and will proceed, where applicable, to block the relevant Personal Data for the period required by law for its retention and until its definitive deletion. If you have any questions or would like more information regarding the procedure to (i) limit the use or disclosure of your Personal Data, (ii) exercise your ARCO rights (Access, Rectification, Cancellation and Opposition), or (iii) exercise your right to Revocation of Consent, Portability or the right to be Forgotten, we offer you the following means of contact: Email: grandmazamitla@gmail.com, or contact the Personal Data Office from within Mexico at telephone number 33 51 11 10 18. Hours of operation are Monday to Friday from 10:00 am to 6:00 pm, Mexico City time.

 F. DATA TRANSFER. OIO may transfer your Personal Data to affiliated or subsidiary companies, as well as to independent third parties with whom it has a legal relationship, in order to fulfill the services you request from us and in accordance with the following:

 G. ELECTRONIC MEDIA, COOKIES, OR WEB BEACONS. We inform you that our website uses analytical cookies that allow us to monitor your browsing behavior on our website to offer you a better experience. We also inform you that we may use other technologies through which we may collect Personal Data, always in accordance with the purposes described in this Privacy Notice. You can disable all cookies, prevent the acceptance of new cookies, or have your browser notify you when you receive a new cookie by clicking the "help" button located in your browser's toolbar.

 H. COMMUNICATION METHODS FOR CHANGES AND/OR MODIFICATIONS TO THE PRIVACY NOTICE. OIO reserves the right to update, change, or modify this Privacy Notice at any time. In the event of any changes, OIO will communicate them through our website: www.grandmazamitla.com

 I. JURISDICTION. This Privacy Notice is governed by Mexican law, and any dispute will be resolved before the competent Mexican authorities. By accepting this Privacy Notice, you waive any other jurisdiction and legislation that may apply to you by reason of your domicile.

 J. AUTHORITY. If you believe that your right to the protection of Personal Data has been violated by any conduct or omission on the part of OIO, or suspect any violation of the provisions provided for in the Legislation and other applicable regulations, you may file your complaint with the National Institute of Transparency, Access to Information and Protection of Personal Data (INAI).

 K. EFFECTIVE DATE. This is the most recent version of our Privacy Notice, which became effective on April 1, 2025. Last modified: April 1, 2025