PRIVACY NOTICE

Pursuant to the Federal ___ of Protection of Personal ____ Held in Private Possession (___ Federal de Protección de _____ Personales en Posesión de ____________) (the “ Act ”) and its Rules (___ “ Rules ”) in force in ______, we hereby inform you ___ terms and conditions of ________ Data Privacy Notice (Aviso __ Privacidad de Datos Personales) __ [ Dreams Acapulco Resort and ___, Nueva Icacos S.A. de _._. (el “ Hotel ”)]. (hereinafter referred to __ the “ Hotel ”) located in Av. Costera Miguel Alemán # 1 Col. Icacos Acapulco, ________, México C.P. 39860 .

1. What information do __ gather?

The HOTEL gathers your ________ data by means of _______ formats. Some of these ___ request information related to ________, such as: (i) Personal data, including ____ and surname, date of _____, private address, work address, _____ number, e-mail address, tax ______________ number (Registro Federal de ______________) (“ RFC ”), Unique Population Registry ____ (Clave Única de Registro __ Población), (ii) Financial or patrimonial ___________ including credit card information __ connection with payment of _____________ service and (iii) sensitive personal information ____ about your physical health (___ “ Sensitive Data ”). Such data hereinafter ________ to as “Personal Data” ( Datos Personales ).

While checking-in the HOTEL, _______ documentation (such as, copy __ your photo identification, debit __ credit card number and ___) may be requested to ___. We use the highest _________ in terms of security __ order to protect your ________ Data.

2. What do we ___ your information for?

The Personal Data we ______ from you have the ____ purpose of:

Primary Purpose : (a) Identifying the Guest, (b) Creating and updating ___ Guests’ records, including Guests’ ___________ in connection with statistics _______ to their choices and ___________ in accommodation services, and _______ provided by guests of ___ HOTEL; (c) Evaluating as potential ______; (d) Providing required products ___ services, in a timely ___ proper manner, such as, ____________, purchase of vacation packages, ________ of memberships or any _____ vacation program and/or in __________ with any other transaction _______ to accommodation, touristic and/or __________ services; (e) Informing you about _______ services to those hired __ past visit(s) to the _____; (f) Carrying out studies ___ analysis related to consumer’s ______ and behaviors; (g) Debit and credit ____ charges for purchased services; (h) Invoicing and billing, ___; (i) Fulfilling our obligations ____ our guests in general.

Regarding Sensitive Data, the _______ and only purposes are: (a) Adopt safety and __________ actions to avoid the ______ of infections in the _____, specifically (COVID19); (b) comply with our _____ and monitoring process “ CleanComplete Verification Program” and (c) where appropriate, refer ___ guests to medical services ___ special facilities.

Secondary Purpose : (a) Email advertising, (b) Informing about Hotel’s _______, gifts and/or special offers, (c) Evaluating the quality __ the HOTEL’s services, and (d) Contacting directly to ___ guest by means of _________ or e-mail for the _____ mentioned purposes.

All persons entering Hotel __________ may be recorded by ________ cameras. The images recorded __ security cameras are used __ ensure the safety of ______ and supervise Hotel areas __ real-time.

When any person enters __ Hotel facilities, a thermal ______ or any other electronic _____ will detect body temperature. __ the thermal camera indicates ____ your surface body temperature __ above the threshold, we ___ ask for your cooperation _________ our internal procedures avoid ___ spread of infections.

In collecting, processing and ________ your Personal Data, we ______ with the principles established __ the Act; legality, quality, _______, information, finality, loyalty, proportionality ___ responsibility.

3. Who we share ____ Personal Data with?

The HOTEL may transfer ____ Personal Data exclusively to ___ of the AMResorts’ corporate _____ companies, as well as __ any third party that ___ entered into a service _________ with the HOTEL in __________ with, or in order __ provide services for the _______ of the Guest, pursuant __ item 2 of this _______ Notice.

In order to comply ____ the applicable law or ___ requirement from a competent _________, the HOTEL may reveal _______ or allow the access __ your Personal Data. We ____ not commercialize, sell or _____ your personal information without ____ previous consent.

Sensitive Data could be ______ within the territory of ______ only to a judicial __ administrative authority, for the ___________ of obligations provided by ___ General Health Law of ______ or in agreements issued ___ the fulfillment of the _______ Health Law of México.

Your Personal Data may __ sent, stored and processed __ a country other than _____ it was collected, such ________ will be carried out __ accordance with applicable data __________ laws. The Hotel protects ________ Data regardless of where __ is stored or sent.

The Personal Data you _______ to the Hotel may __ accumulated and stored in _ database that is the _________ property of or designated __ the Hotel.

4. What security and _______ measures we use to _______ your Personal Data?

The HOTEL has implemented ______________, technical and physical security ________ in order to protect ____ Personal Data against damage, ____, alteration, destruction or unauthorized ___ or access to it, _____ we also demand from ___ service suppliers, even when _____ services are supplied or ________ by HOTEL’s subsidiaries or __________.

5. Who oversees the _________ of your Personal Data?

The “Committee of Personal ____” (Comité de Datos Personales) __ in charge of processing ___ treating your Personal Data. ___ Committee of Personal Data _____ from 9:00 to 18:00, ______ through Friday and is _______ in Av. Costera Miguel Alemán # 1 Col. Icacos Acapulco, ________, México C.P. 39860, direct _____ number +52 744 469 1234 or it can ____ be contacted to the _-____ address indicated in item 6 of this Privacy Notice.

6. How to exercise ____ ARCO rights and revoke _______ to use your Personal ____?

Owners of Personal Data ___ exercise their ARCO rights (______, Rectification, Cancellation and Opposition __ processing and treating Personal ____), or revoke consent granted __ the HOTEL for processing _____ Personal Data, by sending _______ petition to [email protected] .

Such request shall include, __ least the following information: (a) name and address __ any other contact information __ order to notify you ___ response to your request; (b) documents proving your ________ or legal representation, if __________; (c) clear and precise ___________ of the Personal Data ___ which you wish to ________ any of your ARCO ______, and (d) any other information _______ to facilitate identifying your ________ Data.

7. When can you ________ your ARCO rights?

Pursuant to the Act ___ the Rules, you may _______ the exercise of your ____ rights at any time; ___ HOTEL has the obligation __ reply your request within ___ following 20 days. Once ____ period of time has _______ and in case the _____ has not replied to ____ request, then you may ____ for the right’s protection _________ before the Federal Institute ___ Access to Public Information ___ Data Protection (Instituto Federal __ Acceso a la Información _ Protección de Datos) (INAI).

8. Amendments to the _______ Notice.

We may amend this _______ Notice from time to ____. Any amendment to this _______ Notice will be informed __ you by any of ___ following means: (i) visible signs placed __ the HOTEL’s facilities (bulletin _____), (ii) HOTEL’s website https://www.dreamsresorts.com.mx/privacy or (iii) email or mail ________ to the provided addresses. __ will not be held ___________ if you do not _____ of any amendment to ____ Privacy Notice or in ____ you do not receive ____ certain communication distributed by ___ HOTEL. For your convenience, ______ check over the content __ this Privacy Notice periodically __ sending a request to ___ email address [email protected] .

9. Other Applicable Laws.

The HOTEL is located __ Mexico and Mexican law _________ all the matters related __ the Personal Data. By _________ your information to the _____, you consent us to ___ and transfer your Personal ____ as mentioned above, and ______ this Privacy Notice.

This privacy notice complies ____ the requirements established by ___ Mexican law.

Last Update: June 08, 2021