Privacy Disclaimer

Effective date: 01-26-2022

In accordance with the provisions of the Federal Law on Protection of Personal Data inPossession of Individuals (hereinafter referred to as the “Law”), companies of trade name H21 CASA DE HUESPEDES (“H21”, “we”) that operate in Mexico, hereinafter referred to as “The Company”, will be responsible for the treatment of the personal data of its clients, its client prospects and users. This data policy applies to information we collect and we use about you when you access or use the services of H21, the website, the mobile application or other mobile online service that links to or presents you with this privacy policy, these, hereinafter will be collectively referred to as the”Services”.

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. IF YOU ARE NOT AGREE WITH THIS POLICY DO NOT USE THE SERVICES.

For the purposes of this notice, the Company jointly indicates asaddress to hear and receive notifications located at: Higuera, Number 21,Colonia Villa Coyoacán, C.P. 04000, Mayor Coyoacán, Mexico City, Mexico andemail: reservaciones@h21.mx.

The Company in compliance with the Law has developed the policies and guidelines for the protection of the personal data of its clients, client prospects and users. This notice specifies the rights that you have under the provided by the Law and the use or treatment of said Personal Data.

Obtaining and origin of personal data pFor the purposes indicated in this privacy notice, we may collect your personal data in different ways: when you provide it to us directly; when you visit our website; through our telephone service or using our online services, and whenWe obtain information through other sources that are permitted by law.

Please note that we need certain types of information in order to

provide the services to you, if you do not provide us with such information or require that theremove it you may no longer be able to access or use our services.

The data we obtain and its forms, according to the following description They may be:

1. INFORMATION YOU PROVIDE US

We collect a variety of information that you provide to us directly. For example, we collect information from you by:

v THE SERVICES YOU USE OR PROCESS YOUR ORDERS
v REQUESTS OR QUESTIONS YOU SEND US THROUGH FORMS ONLINE, EMAIL OR OTHER RELATED WAY
v YOUR PARTICIPATION IN DRAWS, CONTESTS OR SURVEYS
v ANY REVIEWS YOU SUBMIT ABOUT THE SERVICES
v UPLOADS OR PUBLICATIONS REGARDING THE SERVICES
v CUSTOMER SUPPORT AND TECHNICAL ASSISTANCE REQUESTS

Information about you. Although some parts of the Services may notrequire you to provide information that can directly identify you byyour name (for example, if you choose to browse the website without entering any datayours), the specific types of information we collect will depend on the

Services you use, how you use them, and the information you choose to provide. TheTypes of data we collect directly from you include:

• Name, last name (if you choose to provide it), address, numbers landlines or cell phones, emails, credit card number credit, debit or bank account, verification number, zip code and expiration date for recurring charge service, card payment at an agency and/or by telephone, as well as billing information.

• Information about your reservations or other transactions with us. • Information about your customer service interactions with us.

• Demographic information such as your gender or other information you choose provide as part of your interaction with the website.

• User generated content, example: when you comment on the quality of the Services, respond to a survey request, etc.

• Its browser type, operating system and the IP address.

• Those personal data and those related to the services provided by theCompany.

Information about others. If you request that your reservation be provided to another person other than you, we use the information you provide about the another person to complete the reservation.

2. INFORMATION WE COLLECT THROUGH MEDIA

AUTOMATED
When you use our Services, we collect certain information as described in this section. As mentioned in this notice, we and our service providers (which are third-party companies working on our behalf) may use a variety of technologies, including cookies and similar tools, to help collect this information. Among them: Websites. When you use our website, we collect and analyze

information such as your IP address, browser types, browser language, operating system, software and hardware attributes (including device IDs), referring and exit pages and URLs, the number of clicks, pages viewed and the order of those pages, the date and time of use, content viewed, total minutes viewed, error logs, and other similar information about how the Website is used. Mobile apps. When you use an H21-related mobile application or software (“application”), such as booking, expedia, tripadvisor, etc., we automatically receive certain information about the mobile phone, tablet or computer used to access the application, including device identifiers, IP address, operating system, version and internet service, provider, browser type, domain name and other similar information, if and when you update the application, date and time of use, content viewed , total minutes viewed, error logs, and other similar information about how you use the app. Location information. When you use the Services, we and our service providers may automatically collect information from you. general location (for example, IP address, city/state, and/or ZIP code associated with an IP address, city/state) from your computer or mobile device.

3. INFORMATION WE COLLECT FROM SOCIAL NETWORKS AND OTHERS CONTENT PLATFORMS
If you access the Services through a third-party connection or log in (for example, through a social network such as Facebook or Twitter), you can allow us to access and store certain information from your social network profile. This can include your name, gender, profile picture, your likes and records, and your list of friends, according to the configuration of said services. If you do not want this shared information do not use a social network connection to access the Services. For
obtain a description of how social networks and/or sites handle your information consult their privacy policies and terms of use, which may allow you to modify your privacy settings. You can also have the option to publish the activities of your contracted Services (reservations) in social media services when you access content through the Services (for example, you can post on Facebook that you are staying at H21); You acknowledge that if you choose to use this feature, your friends, followers, and subscribers of any Social Networking Services you have enabled will be able to view such activity.

4. INFORMATION WE COLLECT FROM OTHERS
We may receive additional information, such as demographic information and statistics, from third parties, such as business partners, marketers, researchers, analysts and other parties we may attribute to you based on your assignment to certain statistical groups. We use this information to supplement the information we collect directly from you in order to derive your potential interests and provide you with more relevant experiences and improve our products, analytics and advertising. HOW WE USE YOUR INFORMATION We or our service providers use your information to various purposes, depending on the types of information we have collected from you and about you in order to:
• Complete a reservation or provide the Services you have requested, including billing and accounting;
• Respond to your request for information and provide you with customer service. more effective and efficient;
• Provide you with updates and information about where you have been hosted;
• Contact you by email, postal mail or phone regarding
H21, products, services, third party surveys and research, studies, promotions, special events and other topics that we think may
be of interest to you;
• Personalize the advertising and content you see on the Services;
• Help us to better understand your interests and needs, to improve the services including through investigations and reports and to test and create new products, features and services;
• Protect our websites and apps and resolve crashes of applications and other reported problems;
• Comply with all procedures, laws and regulations that are assigned to us. apply where necessary for our legitimate interests or the legitimate interests of others.
• Establish, exercise or defend our legal rights when necessary. necessary for our legitimate interests or the legitimate interests of others.
• Provide the services and products required by the client, user or client
• Inform about changes or new products or services that are related to the contracted or acquired by the client;
• To comply with obligations to our customers;
• Evaluate the quality of the service and;

• Comply with regulatory obligations and prepare reports required by the competent authorities. Combined information. For the purposes described in this Privacy Policy, We may combine the information we collect through the Services with the information we receive from other sources, both online and offline, and use such combined information in accordance with this Privacy Policy. Aggregated/anonymous data. We can add and/or anonymize any information collected through the Services so that such information is no longer linked to you or your device. We may use such information for any purpose, including, but not limited to, for research purposes and marketing and we may also share such data with third parties, including advertisers, promotional partners and sponsors. The Company will implement security, technical, administrative and physical, necessary to protect your personal data, as well as in the use, access or unauthorized treatment. The Company will only use your personal data for the purposes established in this Privacy Notice. COOKIES AND SIMILAR TECHNOLOGIES To collect the information in the section “Information we collect through automated means” indicated above, we and our service providers use internet server logs, cookies, tracking pixels and other similar tracking technologies. We use these technologies to offer you a more personalized experience in the future, by understanding and remembering your particular browsing preferences. The cookies are small text files that are placed on your computer or device mobile when you visit a site that allows us to: (i) recognize your computer; (ii) store your preferences and settings; (iii) understand the web pages of the Services you have visited; (iv) improve your user experience by delivering and measuring the effectiveness of content and advertising tailored to your interests; (v) perform searches and analysis; and (vi) assist with the administrative functions and security. Some cookies are placed in the cache of your browser, while those associated with Flash technologies are stored with your image files. Adobe Flash Player. As we adopt additional technologies, we may also collect information through other methods. Please note that you can change your settings to notify you when a configuration is being configured or updated. cookie or to block cookies completely. Consult the “Help” section of your browser for more information (for example, Internet Explorer, Google Chrome, Mozilla Firefox, or Apple Safari). You can also manage the use of Flash technologies, including flash cookies and local storage objects, with the Flash management tools available on the Flash website. Adobe. Please note that by blocking, disabling or managing any or all cookies, you may not have access to certain features or offers of the Services. For more information about our use of cookies, see our cookie policy.

5. ONLINE ADVERTISING AND ANALYSIS

We may use third-party web analytics services (such as those of Google Analytics) on our Services to collect and analyze usage information through cookies and similar tools; participate in audits, investigations or reports; help with fraud prevention; and provide you with certain functions. To prevent Google Analytics from using your information for analytics, you can install the opt-out browser plugin of Google Analytics through the electronic links intended for it. If you receive email from us, we may use certain email tools analytics, such as clear GIFs to capture data, such as when you open our message or click on any link or banner contained in our email electronic. This data allows us to measure the effectiveness of our communications and marketing campaigns.

6. ONLINE ADVERTISING
The Services may integrate third-party advertising technologies that enable the delivery of relevant content and advertising on the Services, as well as on other websites you visit and other applications you use. Ads can be based on various factors, such as the content of the page you are visiting, the information you enter, such as your age and gender, your searches, demographic data, user-generated content and other information we collect from you. These ads may be based on your current activity or your activity over the course of the time and across other websites and online services and may be tailored to your interests.
Third parties may also place cookies or other tracking technologies on your computer, mobile phone or other device to collect information about you as mentioned above. These third parties (for example, networks ad servers and ad servers such as Google Analytics, DoubleClick and others) may also serve you personalized advertisements while you use the Internet and applications connected to the Internet, and access their own cookies or other tracking technologies on your computer, mobile phone or other device you use to access the Services to assist in this activity. H21 does not have access to or regulate this Privacy Policy on the use of cookies or other tracking technologies that may be placed on your device that you use to access to the Services by such unaffiliated third parties.

7. NOTICE ABOUT DO NOT TRACK
Do Not Track (“DNT”) is a privacy preference that users can
set in certain web browsers. However, we currently do not recognize nor do we respond to browser-initiated DNT signals. to get more information about Do Not Track, you can consult it in the medium of your choice. HOW WE SHARE AND DISCLOSE YOUR INFORMATION H21 will share your information in the following ways: Affiliates and subsidiaries. We may share the information we collect within our family of companies to provide you with products and services, ensure a consistent level of service and improve our products, services and your experience as a customer. Service providers. We provide access to your information or the
we share with selected third parties who perform services on our behalf. They have access to perform these services, but are prohibited from using their information for other purposes. They provide us with a variety of services, including billing, sales, marketing, product content and features, advertising, analytics, research, customer service, data storage, security, fraud prevention, payment processing and legal services. Protection from H21 and others. By using the Services, you acknowledge and agree that We may access, retain and disclose the information we collect and we keep about you if we are required to do so by law or if we have a good faith belief that such access, retention or disclosure is reasonably necessary to: (a) comply with legal process (for example, a subpoena or court order); (b) do comply with our Terms of Service, this Privacy Policy or other contracts with you, including investigation of potential violations of the themselves; (c) respond to claims that any content violates the rights of third parties; (d) respond to your customer service requests; and/or (e) protect the rights, property or personal safety of H21, its agents and affiliates, its users and/or the public. This includes sharing information with other companies and organizations for the protection against fraud and the prevention of
spam / malware. Commercial transfers. As we continue to develop our business, we may buy, merge or associate with other companies. in such transactions (including in contemplating such transactions), the information of the user may be among the transferred assets. If a part or all our assets are sold or transferred to a third party, customer information (including your email address) would probably be one of the transferred business assets. Whether such transfer is subject to restrictions or additional mandatory requirements under applicable laws, we will comply with such restrictions. Public forums. Certain features of our Services allow you to share comments publicly with other users. Any information that you submit through those features is not confidential and we may use it for any purpose (including in testimonials or other marketing materials). Any information you post openly in this way will be available to the general public and potentially accessible through third-party search engines. Therefore, be careful when using these functions. Aggregated/anonymous information. We may occasionally share aggregated/anonymous information about the use of the Services, for example, by publishing a report on usage trends. The exchange such data is not restricted.

PRESERVATION OF YOUR INFORMATION
We retain your information for no longer than is necessary for the purposes for which it was processed. The period of time for which we retain the information depends on the purposes for which we collect and use it and/or as needed to comply with applicable laws.

HOW WE PROTECT YOUR INFORMATION
H21 takes technical and organizational security measures to protect the information provided through the Loss, Misuse and Access Services unauthorized disclosure, alteration, or destruction. However, none transmission over the Internet or email is completely secure and is not Error free. Please keep this in mind when disclosing any information to H21 over the Internet.

THIRD PARTY LINKS AND FEATURES
The Services contain links to third party websites, such as networking sites. social networks, and also contain third-party plug-ins (such as the “Me” button Like” on Facebook and the “Follow” button on Twitter). If you choose to use these sites or functions, you may disclose your information not only to those third parties, but also to its users and the general public, depending on the operation of its services. No, we are responsible for the content or practices of those websites or services. The collection, use and disclosure of your information will be subject to the privacy policies of third-party websites or services, and not this Policy Of privacy. We recommend that you read the privacy and security policies of these third parties.

CHILDREN’S PRIVACY
The Services are intended for a general audience and not for children and/or persons minors. If we become aware that we have inadvertently collected “personal information” (as defined by the respective Law) of children and/or persons minors without valid parental consent, we will take action reasonable to remove it as soon as possible.

RIGHTS AND OPTIONS OF THE INTERESTED PARTY AS WELL AS LIMITATION OF USE
OR DISCLOSURE OF YOUR PERSONAL DATA
You can stop receiving promotional messages by landline or cell phone, likewise, you can stop receiving advertising postal mail and you can also stop to receive emails with promotional through the following application:
Send an email to reservaciones@h21.mx in which you indicate the following:
• Full name
• Phone number or contact email
• Reference of the medium that you want to block for advertising (number phone, postal address or email)
• Indication that you do not wish to receive advertising of our products or services
• In case of being the legal representative of the owner, attach: electronic copy of the public instrument in which the representation is recorded, Power of attorney
signed before two witnesses, or Declaration in appearance of the owner, in addition to the current official identification of the holder and representative. Within a maximum period of twenty business days we will attend to your request and
We will inform about the origin of the same through email
that you provide us to notify you or at the address that you indicate in your request
for said purposes.

ACCESS, RECTIFICATION, CANCELLATION, OPPOSITION AND REVOCATION OF USE
OF PERSONAL DATA
You have the right to access your personal data that we possess and the details of the treatment of the same, as well as to rectify them in case of being inaccurate or incomplete; cancel them when you consider that they are not required for any of the purposes indicated in this privacy notice, are being used for

non-consensual purposes or the contractual relationship has ended or service, or oppose the treatment thereof for specific purposes. Similarly, you may revoke the consent you have given us for the processing of your personal data, so that we stop making use of them. The mechanism that has been implemented for the exercise of said rights is through the presentation of the respective application; send a mail email to reservaciones@h21.mx.

Your request must contain the following information: • Full name
• Phone number
• Contact E-Mail

• Home
• Federal Taxpayer Registry (for persons of nationality
Mexican)
• Electronic copy of both sides of your valid official identification (Credential of the Federal Electoral Institute, Passport, Service Card National Military, Professional ID, certificate or proof of studies), if Any other valid official identification is a foreign person.
• Type of right you wish to exercise (Access, Rectification, Cancellation, Opposition or revocation of consent)
• Reason for the request and a clear and precise description of the personal data with respect to which one seeks to exercise any of the rights aforementioned;
• In case of being the legal representative of the owner, attach: electronic copy of the Public instrument in which the representation is recorded, Power of attorney
signed before two witnesses, or Declaration in appearance of the holder, in addition to the current official identification of the holder and representative. Within a maximum period of twenty business days we will attend to your request and We will inform about the origin of the same through email that you provide us to notify you or at the address that you indicate in your request
for said purposes. For more information, please contact the privacy department at the following email: reservaciones@h21.mx.

YOUR DATA MAY TRAVEL TO ANOTHER COUNTRY OR BE SHARED WITH OTHERS

Your personal data may be transferred and processed inside and outside the country, by persons other than the Company. In that sense, your information may be
shared with affiliated companies, subsidiaries, contractors, subcontractors, consultants, suppliers, third parties that provide us with direct services or indirect and/or competent authority, for any

lawful purpose, including without limit the fulfillment of its contractual, commercial, regulations and/or the provision of services provided by the Company.

MODIFICATIONS TO THE PRIVACY NOTICE

We reserve the right to make changes or changes at any time. updates to this privacy notice, for the attention of news legislation, internal policies or new requirements for the provision or offering our services or products.

These modifications will be available to the public through one or more of the following means: (i) visible advertisements in our establishments or centers customer service; (ii) brochures or brochures available in our customer care establishments or centers; (iii) on our page of Internet https://h21.mx/ ; (iv) or we will send them to the last email that you have provided to us. In the event that the client or user does not oppose the terms of this Notice of Privacy or to future modifications, this will be considered agreed and consented to its content, in terms of the provisions of Article 8 of the Law.

TO WHOM CAN YOU SUBMIT YOUR COMPLAINTS AND COMPLAINTS ABOUT THE
IMPROPER TREATMENT OF YOUR PERSONAL DATA?
If you consider that your right to protection of personal data has been injured by any conduct of our employees or our actions or answers, presumes that in the processing of your personal data there is some violation of the provisions set forth in the Law, we would appreciate it if you notify the Privacy Officer. For this, it is necessary that you send your communication to the mail email at the address: reservaciones@h21.mx or, failing that, direct your complaints to the Federal Institute for Access to Information, the body responsible for the application of the law.