WORLDPASS places great importance on respecting and preserving the trust of our customers, partners and colleagues. Your personal information will always be treated confidentially and in accordance with the laws, directives, regulations and principles applicable to the protection of personal data.

In accordance with the provisions of the Federal Law for the Protection of Personal Data in Possession of Individuals and the requirements established by said legislation, worldpass releases this document:

For the purposes of this Privacy Policy, the following definitions shall apply:

Privacy Notice: Refers to this document, which is made available to the OWNER, prior to the processing of their personal data, in accordance with Article 15 of the Federal Law on Protection of Personal Data in Possession of Individuals.

Personal data: Any information concerning an identified or identifiable natural person.

Sensitive Personal Data: Sensitive personal data are considered to be those personal data that affect the most intimate sphere of their owner, or whose improper use may give rise to discrimination or entail a serious risk for the owner. In particular, sensitive data are considered those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions, sexual preferences. worldpass does not collect sensitive personal data, in the event that you require a specific service for which you provide this data, worldpass will use them only to provide such service and meet your specific needs.

Owner: The natural person to whom the personal data corresponds.

Person in charge: The natural or legal person who alone or jointly with others, processes personal data on behalf of the data controller.

Blocking: The identification and preservation of personal data once the purpose for which they were collected has been fulfilled, for the sole purpose of determining possible liabilities in relation to their processing, until the legal or contractual statute of limitations period. During this period, personal data may not be processed and after this period, it will be cancelled in the corresponding database.

ARCO Rights: Refers to the rights of access, cancellation, rectification and opposition that the OWNER has in relation to their personal data.

Law: Federal Law for the Protection of Personal Data in Possession of Individuals and/or its Regulations.

VIAJES A LAS TRADICIONES III S.A. DE C.V., also known as WORLDPASS, is a corporation with variable capital legally constituted in accordance with the laws of the Mexican Republic, with fiscal domicile at Avenida Garcia de la Torre, Block 9 (nine) Lot 50 (fifty) letter "A", Department 1 (one), Super Block "2" (two) letter "A" in the city of Cancun, Quintana Roo Mexico, being responsible for the processing of the personal data of the OWNER who grants his/her consent to this notice and for all matters related to this notice, Quintana Roo Mexico, being responsible for the processing of personal data of the OWNER who gives his consent to this notice and for all matters relating to this privacy notice, we provide the following email info@worldpassmail.com, which may be contacted to clarify doubts.

The personal data that WORLDPASS will process, including the collection, use, disclosure or storage of such data by any means of access, handling, use, transfer or disposition, are those that you, as the Data Controller, have provided or provide to WORLDPASS and those to which WORLDPASS has legitimate access.

For the purposes outlined in this Privacy Notice, WORLDPASS may collect your personal data in several ways: when the information is provided directly by you; when you visit WORDLPASS websites; when you use the services offered by WORLDPASS online through the data you authorize us to take from your social networks (Facebook, Twitter, LinkedIn, Google) and when we obtain information through other means other than those listed above and that are permitted by applicable laws.

The personal data obtained by the previously mentioned means are:

1. Identification: first name(s), last name(s), telephone number(s), marital status, e-mail address, age, date of birth, social networks, gender, business name and/or RFC number. Preferences related to lodging service and/or travel needs.

2. Physical location: home address, tax address; dates of reservation and/or stay, hotel, date and time of flight.

3. Authentication: user name and password, autographic signature, voice recording.

4. Patrimonial: bank card number and expiration date.

Purposes that give rise to the legal relationship and are necessary for the provision of the service:

1. The personal information you provide will be used by WORLDPASS to provide the services you request or that are part of a program you have enrolled in or a purchase you have made: reservations, purchase of vacation certificates, worldpass membership, purchase of tourism products and/or services; providing your information to the respective supplier.

2. WORLDPASS may use the personal information you provide to us to provide you with better service and, where appropriate, to identify your preferences during your stay and to make your stay more enjoyable.

3. WORLDPASS informs you that the personal data of the holder will be processed by WORLDPASS and/or its affiliated or subsidiary companies, agents acting on behalf of worldpass and third parties, who must comply with this Privacy Notice.

4. Also, it can use the information to offer you promotions, tourist and commercial products, sending promotions, special services, and surveys.

In order for you to limit the use and disclosure of your Personal Information for purposes that do not give rise to the legal relationship, we offer you the following means:

1. Your registration in the Public Registry to Avoid Advertising, which is in charge of the Federal Consumer Attorney's Office, with the purpose that your personal information will not be used to receive advertising or promotions from companies of goods or services. For more information, you can consult PROFECO's website, or contact PROFECO directly.

2. Request to the e-mail info@worldpassmail.com, indicating the e-mail(s) and/or telephone number(s) that require your limitation.

According to the Personal Data Protection Law, you have the right to exercise at any time your rights of access, rectification, cancellation and opposition (the "ARCO Rights") of your information, you may do so by delivering the request in writing to the staff responsible for Personal Data to the following address: Avenida Garcia de la Torre, Block 9 (nine) Lot 50 (fifty) letter "A", Department 1 (one), Super Block "2" (two) letter "A" in the city of Cancun, Quintana Roo Mexico, or email info@worldpassmail.com. To whom you may request for your protection and benefit, documentation that proves corrections to the data in case you request rectification of the same. You may request the cancellation of your personal data kept by Worldpass. You may also limit the use and distribution of your personal data by submitting a written request to worldpass. Notwithstanding the foregoing, worldpass may be obligated under applicable law to retain some or all of your personal data.

Such request shall contain at least the following:

i. Owner name of the Personal Data;

ii. E-mail address to receive notifications;

iii. Documents proving his identity or, if applicable, the legal representation of the holder;

iv. Clear and precise description of the personal data with respect to which the right is sought to be exercised and the right that is intended to be exercised.

v. Any other element or document that facilitates the location of the personal data.

In the event that the request does not meet any of the above requirements, the Department of attention to your request may require you within 5 days of receipt of the request to provide the elements or documents necessary to process it. You will have 10 days to comply with the requirement, in case of not responding within such term, the corresponding request will be considered as not submitted.

Unless the applicable regulations indicate otherwise, the deadlines for attention will be of a maximum of 30 days from the date on which the request is received in order to inform you of the decision adopted, so that, if it is appropriate, you may make the same effective within 15 days following the issuance of the response. The aforementioned terms may be extended only once for an equal period, provided that the circumstances of the case so justify.

In order to protect your confidentiality, worldpass will send the response to your request to the e-mail address you have provided for this purpose and will keep it at the disposal of the applicant at the address indicated in the previous paragraph.

The OWNER may rectify his/her personal data when they are inaccurate or incomplete, indicating in the rectification request the modifications to be made and providing worldpass with the documentation supporting his/her request. If the OWNER's request is admissible, worldpass shall inform the data processors and third parties of the changes in question, in the event that there have been data transfers under the terms of this Privacy Policy.

The right of cancellation consists in the deletion of the data and may be preceded by a blocking period during which the data may not be processed. The cancellation of personal data will not proceed in the cases provided for by law.

The OWNER will have the right at any time and for legitimate reasons to object to the processing of his/her data. If the request is admissible, worldpass Mexico will not be able to process the data subject's data. Worldpass may deny access to personal data, or perform the rectification, cancellation or grant the opposition when the applicant is not the OWNER or the legal representative is not duly accredited to do so, when in its database there are no personal data of the OWNER, when the rights of a third party are injured, when there is a legal impediment or a resolution of a competent authority that restricts access to personal data or does not allow its rectification, cancellation or opposition and when the rectification, cancellation or opposition has been previously performed.

Worldpass only transfers personal data in the following instances:

1. In the case of Mexico, in the assumptions established in article 37 of the Federal Law for the Protection of Personal Data in Possession of Private Parties. Among them are by way of example: that it is provided for in any Law; for health care; for the pursuit of justice, for the fulfillment of a legal relationship between the responsible party and the holder and between controlling and subsidiary companies.

2. In cases where another international standard applies, it shall only be transferred in the cases indicated therein.

Worldpass will at any time update this privacy notice. In the event of material changes to this notice, we will post those changes on our website. Therefore, we encourage you to periodically visit this privacy notice to be aware of any updates.

I acknowledge and agree to the terms and conditions set forth in this Privacy Notice, and otherwise I will notify WORLDPASS in terms of the provisions set forth in IV and V of this Privacy Policy.

Worldpass will at any time update this privacy notice. In the event of material changes to this notice, we will post those changes on our website. Therefore, we encourage you to periodically visit this privacy notice to be aware of any updates.

I acknowledge and agree to the terms and conditions set forth in this Privacy Notice, and otherwise I will notify WORLDPASS in terms of the provisions set forth in IV and V of this Privacy Policy.