Privacy Notice

A. Identity of the Data Controller

YURZIM EVENTOS, S.A. de C.V., (hereinafter "YURZIM EVENTOS"), with address at Calle Teotlixco, No. 225 A, Col. Momoxpan, San Pedro Cholula, C.P. 72760, Puebla, Mexico, is a company duly incorporated under the laws of the United Mexican States, committed to protecting your privacy. This Privacy Notice is made available to address your concerns in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter "LFPDPPP").

Your data will be processed and safeguarded based on the principles of lawfulness, quality, consent, information, purpose, loyalty, proportionality, and accountability established in the "LFPDPPP".

"YURZIM EVENTOS" has a Data Protection Officer who can be contacted by email at administracion@priedehotelboutique.mx, or in person at the address above.

This Privacy Notice applies to the following website operated by Yurzim Eventos: priedehotelboutique.mx

B. Personal Data

"YURZIM EVENTOS" may collect your personal data in various ways:

• When information is provided directly by you;
• When you visit "YURZIM EVENTOS" websites;
• When using online services offered by "YURZIM EVENTOS", including data you authorize from your social media accounts (Facebook, X, Instagram, LinkedIn, Google, etc.), or when connecting to Wi-Fi provided by "YURZIM EVENTOS"; and
• When we obtain information through other lawful means.

Personal data that may be collected includes:

1. Identification: name(s), surname(s), phone number(s), marital status, email address, age, date of birth, nationality, gender, tax ID (RFC), occupation, lodging preferences and/or travel needs.
2. Physical location: home address, tax address; reservation dates and codes, flight number, date and time, hotel destination, hotel check-in and check-out dates.
3. Authentication: username and password, handwritten and electronic signature, official IDs, and member/traveler number.
4. Financial: bank card number, income level, and tax compliance certificate.
5. Sensitive: credit and/or debit card number, expiration date, and/or CVV; family environment, health status, and medical records.
6. Biometric: voice recording.

C. Sensitive Personal Data

Sensitive personal data is data that affects the most private aspects of the data subject, or whose improper use may lead to discrimination or pose a serious risk. This includes data that may reveal racial or ethnic origin, current and future health status, genetic information, religious, philosophical or moral beliefs, union membership, political opinions, or sexual preferences.

If you provide such data for a specific service, "YURZIM EVENTOS" will use it solely to provide that service, manage reservation cancellations, identify travel needs, and meet your specific requirements.

In the event of a health emergency, "YURZIM EVENTOS" may collect health-related data solely to ensure the protection of guests and others on the premises, retaining it only for the time necessary to fulfill that purpose.

D. Purpose and Processing of Personal Information

Primary purposes (necessary for the provision of services):

1. Your personal information will be used by "YURZIM EVENTOS" to provide the services and/or products you request: reservations, vacation packages, loyalty programs, referral programs, event organization, tourism services, customer service, and billing; sharing your data with the relevant provider as needed.
2. "YURZIM EVENTOS" may use your personal information to offer you a better service and identify your preferences during your stay.

Secondary purposes (require your consent and are not necessary for the provision of services):

1. Your information may be used to offer you tourism and commercial promotions, special services, newsletters, surveys, prize draws, and online contests, sharing your data with affiliated companies where applicable.
2. Data analysis using technology to create profiles related to your stays and travel preferences, allowing us to evaluate our service and personalize communications and promotions for you.

E. Limitation on Use or Disclosure of Personal Information

To limit the use and disclosure of your personal information for non-essential purposes, you may:

1. If you are a resident of Mexico, register in the "Registro Público para Evitar Publicidad" (Public Registry to Avoid Advertising), managed by the Federal Consumer Protection Agency (PROFECO), to prevent your data from being used for advertising. Visit the PROFECO website for more information.
2. Send a request to administracion@priedehotelboutique.mx, specifying the email address(es) and/or phone number(s) subject to the limitation.

F. Exercise of ARCO Rights

You have the right to know what personal data we hold about you, how we use it, and the conditions of its use (Access). You may also request correction of inaccurate or incomplete information (Rectification); deletion from our records when you believe it is not being used in accordance with applicable law (Cancellation); and you may oppose the use of your data for specific purposes (Opposition). These are known as ARCO rights.

To exercise any ARCO right, please submit a written request to: Av. 16 de Septiembre 313, Col. Centro Histórico, Puebla, C.P. 72000, Puebla, Mexico, Monday to Friday, 9 a.m.–6 p.m., or by email to administracion@priedehotelboutique.mx.

Your request must include at minimum:

1. Full name of the data subject;
2. Email address for notifications;
3. Documents proving your identity or legal representation;
4. A clear description of the personal data and the right you wish to exercise;
5. Any other information or document that facilitates locating your personal data.

Responses will be provided within a maximum of twenty business days from receipt of the request. This period may be extended once for an equal period when circumstances justify it.

G. Revocation of Consent

You may revoke the consent you have granted for the processing of your personal data. Please note that in some cases "YURZIM EVENTOS" may not be able to immediately cease processing due to legal obligations. Revocation may also result in the inability to continue providing the requested service. Requests will be handled as described in Section F above.

H. Security of Personal Information

"YURZIM EVENTOS" is committed to taking the necessary measures to protect collected information, using security technologies and access control procedures to prevent unauthorized access, use, or disclosure. For online transactions, we use Secure Socket Layer (SSL) encryption. However, no security system or internet-dependent data transmission can be guaranteed to be completely secure.

I. Use of Image

"YURZIM EVENTOS" may make video recordings or take photographs for security and service quality purposes. Your image will be used solely as a security and crime-prevention measure with respect to the property, its contents, and the people present on the premises.

J. Electronic Media and Cookies

When you use our electronic services, cookies may be generated to provide you with a better experience. Cookies are small pieces of information sent by the website to your browser and stored on your device. They allow us to:

• Recognize you when you visit our sites and offer a personalized experience;
• Remember your personal site settings;
• Measure audience size and analyze traffic patterns;
• Track various activities to improve our service.

You can configure your browser to refuse cookies or to notify you when a cookie is received. However, we recommend keeping cookies enabled to take full advantage of our site's features.

K. Data Transfers

"YURZIM EVENTOS" may transfer personal data only in the following cases:

1. As established in Article 36 of the "LFPDPPP";
2. When required by applicable international law;
3. When necessary to share data with third-party providers in connection with contracted services or products.

Additionally, "YURZIM EVENTOS" may transfer your data when you authorize transmission through physical or electronic means such as "Google Signals".

L. Data Retention Period

Your personal data will be retained for as long as the legal relationship with you is maintained and you have not exercised your right to deletion or revoked your consent. Once data is no longer needed, "YURZIM EVENTOS" will retain it in a blocked state only for the legally required periods, after which it will be securely destroyed.

M. Changes to this Privacy Notice

"YURZIM EVENTOS" may update this Privacy Notice at any time. Substantial changes will be communicated through our website. We encourage you to review this notice periodically.

By providing your personal data on our digital platforms, you acknowledge that you have read this Privacy Notice and authorize "YURZIM EVENTOS" to process your personal data as described herein.

If you have any complaint about the processing of your personal data, in addition to contacting the data controller as described in this notice, you may contact "Transparencia para el Pueblo" or the relevant competent authority.