PRIVACY NOTICE

On July 5th, 2010 The Official Federation Journal issued the FEDERAL LAW ON PROTECTION OF PERSONAL DATA HELD BY PRIVATE PARTIES that is why to fulfill the mentioned law, the Company KETZALTOUR, VARIABLE CAPITAL CORPORATION declares responsible of the protection of the personal data that are provided by our clients and providers, that is why with the intention of guaranteeing the right to privacy and the right to informational self-determination corresponding due to the entry into force of the mentioned law, sets to your disposal the present PRIVACY NOTICE with the aim that you learn how we use, store and handle your personal data that are under our possession, at the same time it has as an aim that you know about your rights and the way in which you may uphold them, in case you feel aggrieved by the usage, storing or handling that is given to the same, in light of the fact that if there is no opposition to the treatment given to the same, you will grant your consent for KETZALTOUR, VARIABLE CAPITAL CORPORATION, may use them in compliance with what has been foreseen in the present privacy notice.

Before providing any information, please read and understand the terms of this Privacy Notice, expressly stating your consent to accept them.

Except of the fulfillment of these last purposes, we will not transfer the data to any third party.

Following, the complete text of the Privacy Notice:

I. RESPONSIBLE PARTY OF THE PROTECTION OF PERSONAL DATA.

KETZALTOUR, VARIABLE CAPITAL CORPORATION, and / or its affiliated and /or subsidiary companies and / or natural person and companies related owners of the trademark tips4travel, identified as ketzaltour, dedicated to the execution of any activity related with the national and international tourism industry, including agents, brokers, representatives, intermediaries from other tourism agencies, hotels, restaurants and entertainment centers; planning, sales and organization of all kinds of excursions and pleasure or business trips within and outside the Mexican Republic, we recognize that our clients and providers give us personal data, due to this last our commitment is to protect and handle these data only for the aims intended which are necessary for the operation, management, contracting and provision of the tourism services contracted with us and / or the goods and services that we request, to sell the services that are requested to us, for the provision of a service, to provide us the requested goods, to inform you about changes in the goods or services that we request or are requested from us, to collect the traded goods or services provided, to evaluate the quality of the services, to identify and confirm the identity of our clients and providers, to offer commercial promotions of goods or services or our own or from third parties that we consider may be of our client’s interest, to comply with the rights and responsibilities contracted with our clients, providers or third parties, to transfer or share to third parties the personal data retrieved, to be recorded on a video, due to the aforementioned we recommend you to read and understand the terms of this Privacy Notice before providing any information and if it is the case to express your nonconformity with the same.

II. ABOUT THE PERSONAL DATA THAT WILL BE SUBJECT OF USAGE (hereinafter “the Data”).”)

The personal data that the Title Holder will provide and thus, subject of usage may be Identification Data; such as: Name(s), Surnames; Birthdate, Age; Sex, Federal Taxpayer Identification Number, Sole Population Registration Code, Education Level, Marital Status, Official national or foreign identification document; Voter’s Code, Registration or Id Card Number, Signature; Contact information; such as: Home address, e-mail, Telephone number, Mobile number and/or Fax; Professional or Work Data; such as: Company Name, Position, Salary, Telephone, Work Career, Number of years in the job. Besides the aforementioned we may also request data about hobbies, amusement and fun, pastimes; travel frequency and preferred places within and outside Mexico, as well as particular interests.

III. ABOUT SENSIBLE PERSONAL DATA.

In accordance with the provisions in article 3, fraction VII of the Federal Law on Protection of Personal Data held by Private Parties, the data considered sensible are intimate personal data are such as: Ethnic or Racial Origin, State of health, Diseases Suffered, Allergies, Blood Group, Treatment and / or Ailment Medical Certificates, Possible Addictions, Blood Type, Genetic Information, Religious, Philosophical and/or Moral Beliefs, Sexual Preferences.

IV. ABOUT FINANCIAL DATA.

The Responsible Party will gather financial data deemed necessary in order to collect or pay goods or services charged to credit card or banking transfers, among these data we may find: movable property and real estate, tax information, credit report, income and expenditure, name of the banking institution, number of branch, number of the bank account, number of standardized interbank code, form of payment, credit card number, debit card number; Tax or Legal Data; such as: address for tax purposes, employer registration number, corporate name.

V. ABOUT THE USE OF YOUR DATA.

Your Data will be used for the following purposes:

a. Main Purpose: Contact Information and identification to operate and manage the tourist services you contract with us, which is necessary to offer our services, this information includes: Identity verification for the correct provision of the service from the part of KETZALTOUR, S.A. DE C.V., or a third party; Hiring independent services with third parties; Correct delivery of printed information; Registration and filing.

b. Secondary Purpose: Additionally your personal information may be used to improve the commercial and marketing process, this information includes; To ensure efficiency in our services and provide better attention to the Title Holder, as well as to improve the experience in the use of our services; To send and present goods and/or services which could be relevant or attractive, including their involvement in promotions, offers and advertising campaigns, of our own or from third parties; ) To inform about changes or new products and services which we consider can be of your interest; to comply with legal obligations; To evaluate the quality of our service or to perform internal studies about consumer habits.

VI. ABOUT DATA TREATMENT AND REFUSAL.

The treatment of your personal data must be limited to the fulfillment of the aims foreseen at the present Privacy Notice, for that purpose, the information provided voluntarily containing Personal Data, will be treated under the strictest security measures to guarantee their confidentiality. Your Personal Data may be used for aims which are different to those mentioned or included in the present Privacy Notice, in the understanding that those aims will be compatible with the ones described and may be considered comparable.

KETZALTOUR, S.A. DE C.V., may submit all or part of the Data to third parties, which may be natural or artificial persons, national or foreign, affiliated or subsidiary companies, including goods or service providers, that require to know about this information, including information storage servers, who will be forced to keep the confidentiality of the data and according to this Privacy Notice. The recipient third parties, may include, but are not limited to be, tourist, commercial and / or service companies.

VII. ABOUT THE EXERCISE OF ARCO RIGHTS.

The Title Holder will have the right to request KETZALTOUR, S.A. DE C.V., at any moment access, correction, cancelation or opposition concerning his/her Data ("ARCO rights").

KETZALTOUR, S.A. DE C.V., with address located in the street of Matias Romero Street Number. 425 P.A., Colonia Del Valle, Postal Code 03100, Delegación Benito Juárez, in Mexico City, is responsible of guarding the personal data that are provided by our clients and providers, so it will be in charge of processing the applications of ARCO rights, understanding ARCO rights as the right to access which grants to the title Holder, the right to attain with a previous request and with reasonable frequency the confirmation of the existence or inexistence of which of his/her Personal Data are included in KETZALTOUR, S.A. DE C.V., data base as well as information about the origin of the same, in which way these have been used and in general, the conditions and generalities of the treatment of those data.

The delivery of Personal Data will be without charge, covering only the justified expenses of delivery or with the reproduction cost in copies or other formats.

Nevertheless, if you (same person) reaffirm your request in a period of less than twelve months, the Law grants us the benefit of collecting for that concept, which at no moment will be higher than three days of the General Minimum Salary in force in Mexico City, unless there are substantial modifications to the Privacy Notice that motivate new enquiries the same must be delivered without charge.

Rectification right: it is that which grants the ability to update or rectify your Personal Data due to substantial changes in the same, or in its case, to modify or correct the same, if these are incorrect or incomplete. When the suppression or modification may cause harm to third parties or when there is legal duty to preserve your Personal Data, KETZALTOUR, S.A. DE C.V., will not proceed to the rectification of the same.

Cancellation right: it is that which grants the ability to unsubscribe your Personal Data, being these total or partial from KETZALTOUR, S.A. DE C.V., data base by virtue of the fulfillment of the objective for which these have been collected.

Opposition right: it is that which grants the ability of opposing due to a legitimate and justified cause to the treatment of your Personal Data. To ease the exercise of ARCO rights, the forms of access request, rectification, cancellation or opposition are at your disposal in our address marked or at the following e-mail addressThis email address is being protected from spambots. You need JavaScript enabled to view it.

The request to exercise the ARCO rights or to revoke the consent for the treatment of personal Data, must include and be accompanied by the following: the name, surnames of the Title Holder; address; e-mail; and / or any other means to communicate the answer for his/her request; Official documents that prove the identity or, if it is the case, the legal representation of the Title Holder; a clear and precise description of the Data concerning which any of the before mentioned rights is to be exercised; and; any other element or document which eases the localization of the Title Holder Data.

Once KETZALTOUR, S.A. DE C.V., receives a written notice from the Title Holder concerning his/her exercise of his/her ARCO rights, KETZALTOUR, S.A. DE C.V.must analyze, assist and send the Title Holder the corresponding answer within the next 7 working days. The means to send the answer may be in the way the Title Holder indicates or using the same media by which the Title Holder send the corresponding written notice to KETZALTOUR, S.A. DE C.V.

VIII. ABOUT COMMUNICATION MECHANISMS.

Any communication that the Title Holder sends to KETZALTOUR, S.A. DE C.V. related with the present Privacy Notice, must be performed to the addresses provided for the exercise of ARCO rights, mentioning in a clear and precise manner: the name, surnames of the Title Holder; address and/or e-mail and / or any other means to communicate the answer to his/her request; Official documents that prove the identity or, if it is the case, the legal representation of the Title Holder; and a clear and precise description of the reason for the communication.

In the same way, KETZALTOUR, S.A. DE C.V., will provide assistance and answer any communication received within the following 7 working days after the reception of that written notice, the answer being provided in the same way that the communication was received or by the means indicated for that purpose.

IX. ABOUT REMOTE MEDIA.

In case the Title Holder provides his/her Data through electronic media, including the web site (Internet) of KETZALTOUR, S.A. DE C.V., then the Title Holder is understanding, accepting and recognizing that:

a) The web site of KETZALTOUR, S.A. DE C.V., may include links to the sites of third parties; entering to them will cause the Title Holder to leave the web site of KETZALTOUR, S.A. DE C.V., due to that, KETZALTOUR, S.A. DE C.V. does not assume any responsibility related with these web sites from third parties.

b) The web site of KETZALTOUR, S.A. DE C.V., may include links to sites managed by social networks, in whose case the Title Holder accepts that providing any kind of information or Data to those sites, will cause that the same may be read, seen, accessed, retransmitted and used by any person and thus frees KETZALTOUR, S.A. DE C.V. from any responsibility.

c) It is possible that the systems from KETZALTOUR, S.A. DE C.V., could gather Title Holder data such as kind of browser, operating system, Internet Sites visited, IP address, etc., through "cookies" or "web beacons", among others.

In order that the Title Holder may disable these programs, he/she may access the “Internet Options” located in the “tools” section, or similar functions, of the browser that is being used.

X. ABOUT THE USE OF VIDEO RECORDING CAMERAS.

KETZALTOUR, S.A. DE C.V., with address located in Matias Romero Street Number 425 P.A., Colonia Del Valle, Delegación Benito Juárez, Postal Code 03100, in Mexico City, has a video monitoring system, therefore all the images recorded by our video monitoring system will be used only and exclusively to provide security in our premises, to you, the persons that are providing their services for this company and to all the persons that are visiting us, so in case it is necessary, those images will be delivered to the authority, provided that there is a written requirement, that is to say, that these will not be used for other purpose, and will not be delivered to other persons that are different from the authority.

XI. SECURITY MEASURES ADOPTED TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA.

For your ease and security, your Persona Data which you have provided, KETZALTOUR, S.A. DE C.V., has adopted policies and privacy programs mandatory and claimable within our organization, among others: it has trained and raised awareness among its staff about the obligations in terms of protection on the subject of Personal Data; it has established managerial security measures, technical and physical, which are translated in a group of technical and managerial actions, to secure your Personal Data, which may allow us to guaranty the fulfillment of the principles and obligations established in the Law on the subject.

Your Personal Data are collected in a data base owned by KETZALTOUR, S.A. DE C.V., which has restricted access and managerial, technical and physical security measures which are used to protect your Personal Data against harm, loss, alteration, destruction, or unauthorized use, access, or treatment. However it is worth mentioning, that with the risks that we are facing nowadays, at the internet, due to the inappropriate use of data bases or the electronic or computer data traveling on the web, as well as acts or armed robbery, these measures are not infallible, that is why KETZALTOUR, S.A. DE C.V. may not guaranty that your Personal Data will be free from all harm, loss, alteration, destruction or the use, access or unauthorized treatment in case that any of both circumstances mentioned takes place.

XII. ABOUT THE MODIFICATIONS TO THE PRIVACY NOTICE.

KETZALTOUR, S.A. DE C.V. may modify the present Privacy Notice as many times as it is deem necessary, both to keep coherence with the legal rulings applicable, upon request of the corresponding authorities and / or own convenience. As long as KETZALTOUR, S.A. DE C.V. does not modify its identity, more Data than the ones mentioned herein may be required from the Title Holder, the purpose of the present Privacy Notice may be modified and / or the transference conditions may be changed, the Title Holder agrees and accepts that the way in which any change to this Privacy Notice is informed will be through its issuing at the Internet Site: www.ketzaltour.com

It is a Title Holder responsibility to visit periodically the mentioned site with the purpose of checking the latest version of the Privacy Notice. The changes that the present Privacy Notice may suffer and the modifications will be available to the public through the following media: visible announcements, brochures and leaflets placed in our address located in Matias Romero Street Number 425 P.A., Colonia Del Valle, Postal Code 03100, Delegación Benito Juárez, in Mexico City, or in our Internet Site.

XIII. ABOUT THE TERMS ACCEPTATION.span>

This Privacy declaration is subject to the terms and conditions of all the web sites of the Legally Responsible Person described before, which constitutes a legal agreement between the user and KETZALTOUR, S.A. DE C.V.

If the Title Holder uses the services from any of KETZALTOUR, S.A. DE C.V. sites, this means that he/she has read, understood and agreed with the terms already exposed. At the moment of your on-line registration, you have the option of accepting or not the terms of the present Privacy Notice by clicking the button "I Accept the Privacy Terms and Conditions".

XIV. ABOUT PROTECTION.

The security and confidentiality of the Data that the users may provide when contracting a service or buying a product on-line will be protected by a safe server under the Secure Socket Layer (SSL) protocol, in such a way that the data send will be transmitted encrypted, to secure their protection and according to the Law.

XV. RESPONSIBLE OF THE SYSTEM OF PERSONAL DATA PROTECTION

In case you have any doubt or comment concerning the contents of the present Privacy Notice or if you consider that your right to the protection of Personal Data has been harmed by any conduct from our employees or from our actions or responses or presume that it in the treatment from your Personal Data there is any violation to the dispositions foreseen in the Law you may contact the Person in Charge of the Personal Data Protection System, through e-mail and/or in our address..

KETZALTOUR, S.A. DE C.V. brings to your attention that, in case there is denial from our part to provide an answer within the terms determined by the law to the request of ARCO rights or non-conformity to the same, you may submit before the Federal Institute of Access to the Information and Data Protection, the corresponding Request of Rights Protection in the peridos and terms fixed by the FEDERAL LAW ON PROTECTION OF PERSONAL DATA HELD BY PRIVATE PARTIES.

The present version of this Privacy Notice was updated for the last time on December 1st, 2016.