PRIVACY NOTICE

In strict compliance with the provisions of the Federal Law for the Protection of Personal Data in Possession of Individuals (hereinafter "the Law"), HOTELERÍA C&J, S. A. DE C. V. (hereinafter HOTELERÍA C&J) hereby informs you of the following:

A. IDENTITY OF THE DATA CONTROLLER

The personal and/or sensitive data and/or information that you voluntarily provide us or have been provided directly by you, when you visit the HOTELERÍA C&J websites, when signing a contract, order, or quote, or in general when we obtain information through other means other than those indicated and that is permitted by applicable laws, is completely confidential and is safeguarded by HOTELERÍA C&J, who is responsible for the use and processing of your personal data.

B. PERSONAL DATA

The personal data obtained by the means indicated above, for which the holder is responsible for the veracity of the same, are:

1. Identification and contact data: first name(s), last name(s), nationality, address, home phone number and/or work phone number, signature, personal or work email, gender, age, and date of birth.
2. Official Identity Document.
3. Employment data.
4. Incorporation data (in the case of legal entities).
5. Financial Data: Account holder's name, bank card number, expiration date (in case of online transactions), bank details.
6. Invoicing Data: full name or company name, Taxpayer Identification Number (RFC for its Spanish initials), fiscal address.

Sensitive Personal Data Processing

Sensitive personal data are considered to be those personal data that affect the most intimate matters of their owner, or whose improper use may give rise to discrimination or entail a serious risk for the owner. In particular, they are considered sensitive to those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical, and moral beliefs, union membership, political opinions, and sexual preferences. In case of receiving our services, the sensitive personal data that we will ask you to provide us will be used only for the commercial and contractual relationship that allows the corporate purpose of HOTELERÍA C&J.

C. USE AND COLLECTION OF PERSONAL DATA

1. The personal data collected will be used exclusively for the following purposes: ( i ) provision of lodging services; ( ii )provision of restaurant services; ( iii ) provision of banqueting services; ( iv ) provision of tourism and commercial services; ( v ) provision of event organization services; ( vi ) providing products or services required, as well as the activities permitted by the corporate purpose of HOTELERÍA C&J; ( vii ) informing about new products, services or events related to the above mentioned services, including advertising, marketing and newsletter purposes; ( viii ) to comply with obligations contracted with our customers and suppliers; ( ix ) to evaluate the quality of the services provided; ( x ) to formalize and register your contracting; ( xi ) identification purposes; ( xii ) statistical purposes; ( xiii ) to make the corresponding invoices; ( xiv ) to make payments; ( xv ) customer follow-up; ( xvi ) to eventually contact you in order to share news that may be of your interest.
2. For the aforementioned purposes, we may collect your personal data in the following ways: ( i ) when you provide them directly to us; ( ii ) when you visit our website or use our online services; ( iii ) by telephone or email; ( iv ) personally and directly when you provide them to us in order to provide you with a service; and, ( v ) other sources that are permitted by law.
   By virtue of the transfer of data that you give us or have given us previously, you authorize HOTELERÍA C&J to use the information provided for the purposes described above.

D. CONTROL AND SECURITY OF PERSONAL INFORMATION

We are committed not to transmit, sell, rent, disclose, or use your personal information to third parties without your consent, except for the information that is necessary for the purposes for which you have provided it or is required by federal or local authorities, in terms of applicable laws.

In this sense, your information may be shared with a parent company and/or any company of the same group of those responsible that operate under the same processes and/or internal policies and/or its associates

If you DO NOT express your objection to your personal data being shared, it will be understood that you have given your consent for it

If you wish to stop receiving promotional messages from us you can request it through our phone number 3343633340 or email recepcion@palpatiohotel.mx or visit our website www.palpatiohotel.mx

You are entitled to access your personal data in our possession and the details of the handling thereof, as well as to rectify them in case they are inaccurate or instruct us to cancel them when you consider that they are excessive or unnecessary for the purposes that justified their collection or object to the handling thereof for specific purposes

E. CONTACT AND ACCESS TO YOUR PERSONAL DATA

To exercise the rights of access, rectification, cancellation, or objection (ARCO), the holder of personal and/or sensitive data held by HOTELERÍA C&J should contact the Personal Data Department, attended by Claudia González González at recepcion@palpatiohotel.mx with the following information and documentation: ( i ) name, address (street, interior or exterior number, neighborhood, zip code, city, and state), and e-mail address to receive notifications of the response to the Request (ARCO); ( ii ) documents proving your identity (copy of ID card, valid passport, professional license, immigration document, in the case of a legal entity, articles of incorporation and powers of attorney), or if applicable, documents proving your legal representation (copy of ID card, valid passport, professional license, or immigration document); ( iii ) a clear and precise description of the personal data concerning which you seek to exercise any of the ARCO Rights; ( iv ) any document or information that facilitates the identification of your personal data; and ( v ) in case of requesting a data rectification, you must also indicate the modifications to be made and provide the documentation supporting your request (for example birth certificate, proof of address, articles of incorporation)

The Personal Data Department will respond to your request and the reasons for its decision, by e-mail within a maximum period of 30 calendar days, counted from the day your request was received. In case the request is answered in an affirmative or pertinent manner, the requested changes will be made within a maximum period of 15 calendar days. The Controller may deny access for you to exercise your ARCO Rights in the following cases: ( i ) when you are not the personal data owner or cannot prove the representation of the owner; ( ii ) when your personal data are not in the database of the Controller; ( iii ) when the rights of a third party are harmed; (iv ) when there is a legal impediment or the resolution of a competent authority that restricts your ARCO Rights, and; ( v ) when the rectification, cancellation or opposition has been previously carried out. The refusal may be partial, in which case, the Personal Data Department will carry out the access, rectification, cancellation, or opposition in the appropriate part

At any time, you may revoke the consent you have given to HOTELERÍA C&J for the handling of your personal data, in order to stop using it, however, you must prove to be the owner of the personal data or have the legal representation of the holder, for this, it is necessary to submit your request to the email recepcion@palpatiohotel.mx

F. MODIFICATIONS TO THE PRIVACY NOTICE

This Privacy Notice may be modified and updated at any time and without prior notice, in which case HOTELERÍA C&J will notify the corresponding changes through our website www.palpatiohotel.mx

If you consider that your right to the protection of personal data has been violated, or presume that in the handling of your personal data, there is any violation of the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, you may file a complaint with the INAI, for more information visit www.inai.org.mx

This Privacy Notice, as well as the general handling of information, made by HOTELERÍA C&J, is governed by the legislation in force and applicable in the United Mexican States, any dispute arising from its application shall be heard before the competent Jurisdictional Bodies in the City of Guadalajara, Jalisco