Based on articles 15, 16 and other applicable articles of the Federal Law for the Protection of Personal Data in Possession of Individuals (the "Law") and its regulations, we hereby inform you that La Ceiba DCM, S.A. de C.V., (hereinafter La Ceiba DCM.) with address at Carretera Federal Chetumal-Puerto Juárez km 298, Playa del Carmen, Solidaridad, Quintana Roo, C.P. 77710, which is intended to hear and receive notifications, is responsible for the use and protection of personal data, and in this regard informs you as follows:

In accordance with the provisions of the Law, the terms used in this privacy notice will have the definition assigned to them by the same, with the express exception of those defined here. This Notice specifies the type of data that La Ceiba DCM, collects; the purposes for which it carries out the treatment of these, as well as the rights that the holder has in this regard.

I. PRINCIPLES OF PERSONAL DATA PROCESSING

La Ceiba DCM, collects your personal data for the purposes mentioned in this Privacy Notice. In this context, we inform you that your personal data will be treated and safeguarded based on the principles of legality, quality, consent, information, purpose, loyalty, proportionality and responsibility enshrined in the Law.

II. PRIMARY PURPOSES

We collect your personal data, which are treated in a strictly confidential manner and with the security measures, physical and digital, necessary to ensure their protection. The personal data that we will collect from you will be used for the following purposes, which are necessary to carry out and maintain the legal relationship between the responsible and the owner, in order to provide the service you request: real estate sales service, for the creation, updating, and maintenance of an identification file, to issue the invoice corresponding to your purchase, maintain communication in order to provide better service and to comply with federal and local laws.

III. SECONDARY PURPOSES

In addition, we will use your personal information for the following purposes that are not necessary for the requested service, but that allow and facilitate us to provide you with better service:

For marketing, advertising or commercial prospecting purposes; to notify you about new services or products that are related to those already contracted, those that may be of interest to you or to inform you about changes in them; to carry out periodic evaluations of our products and services in order to improve their quality.

In case you do not want your personal data to be processed for these additional purposes, you can express your refusal by (i) a free writing addressed to our compliance area, or (ii) by a free writing signed by your owner or authorized representative sent by e-mail to the following address cumplimiento@ciudadmayakoba.com. The refusal to use your personal data for these ancillary purposes may not be a reason for us to deny you the services and products you request or contract with us.

IV. PERSONAL DATA SUBJECT TO PROCESSING

To carry out the purposes described in this privacy notice, we will use the following personal data:

Identification data: name, place and date of birth, nationality, Federal Taxpayers Registry (RFC), Unique Population Registry Code (CURP), valid identification number.

The RFC will be used solely and exclusively for the issuance of invoices requested for purchases or payment of services performed by La Ceiba DCM.

Contact information: address, telephone, cell phone, e-mail.

Likewise, at the moment of entering our facilities, your image will be videotaped for the purpose of protection, security and crime prevention, which will have a storage duration of 60 days, once the previous term has elapsed, your images will be deleted from our servers/cloud.

V. SENSITIVE DATA

La Ceiba DCM, in no case and under no circumstances stores sensitive personal data information such as racial or ethnic origin, current health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions or sexual preference.

VI. VERACITY OF THE DATA PROVIDED BY THE USER

You, as user or client, guarantee that the personal data provided to La Ceiba DCM, are true and you are responsible for communicating to La Ceiba DCM at any time, any substantial modification in them. Substantial modification shall be understood as any change or alteration in the personal data that does not allow the correct contact, location and subsequent identification of the user.

VII. PERSON IN CHARGE OF PERSONAL DATA

You may contact the area responsible for the handling and administration of personal data by e-mail at the following address cumplimiento@ciudadmayakoba.com or directly at the address established in this Privacy Notice. The person in charge of the processing of your personal data.

VIII. DATA TRANSFERS

Your personal data may be transferred and processed within and outside the country with persons or entities other than La Ceiba DCM, for the following purposes: For the creation, updating, and maintenance of an identification file and compliance with federal and local laws. Recipient of the Personal Data: CDMK servicios, S.A. de C.V., Operadora Lakahn, S.A de C.V., Controladora Turística Simba, S.A. de C.V., MKB Real Estate, S.A. de C.V., Sancus CMK Negocios, S de R.L. de C.V. and controlling companies, subsidiaries, branches or affiliates under the common control of the responsible party, companies or parent companies, any company of the same group of the responsible party that operates under the same processes and internal policies or related authorities for the management of its service.

La Ceiba DCM, is committed to comply and respect the legal principles of personal data protection when they are transferred, either to individuals or companies, in order to offer you our products and services.

La Ceiba DCM, will ensure through the signing of agreements and/or adoption of other binding documents, that such third parties maintain adequate security, administrative, technical and physical measures to safeguard your personal data, as well as that such third parties only use your personal data for the purposes for which they were hired and in accordance with this Privacy Notice.

La Ceiba DCM, generates its own personal database generated online and in person by its employees to their respective customers, the management of the information contained in these databases will be temporary for five years, then the data will be processed for cancellation in accordance with the law.

In the event that it decides to do so in the future, it will communicate to the owners through its contact information or on its website that it will transfer their personal data to third party business partners, for which reason its prior consent will again be required to carry out this type of transfer.

We undertake not to transfer your personal data to third parties without your consent, and may only transfer your personal data without your prior consent, only when it is under the exceptions provided for in Article 37 of the Law, and in any case complying with the conditions provided for in Article 17 of the Regulations of the Law.

IX. MEANS OF OBTAINING PERSONAL DATA

For the purposes indicated in this privacy notice we may collect your personal data in different ways: directly from the holder, through agents or promoters, when you visit or use our website, by phone, by email, by social networks, by instant messaging applications, through various electronic media, directly at the offices and points of sale, other public sources permitted by law.

X. MEANS TO PROTECT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA

La Ceiba DCM, will implement the necessary technical, administrative and physical security measures to protect your personal data and avoid its damage, loss, alteration, destruction or unauthorized use, access or treatment within this privacy notice.

Ensuring that only authorized personnel, who have complied with and observed the confidentiality requirements, may participate in the processing of your personal data. Authorized personnel are prohibited from allowing access to unauthorized persons and from using your personal data for purposes other than those set forth in this Privacy Notice. The obligation of confidentiality of the persons involved in the processing of your personal data subsists even after the termination of the relationship with La Ceiba DCM.

XI. ARCH RIGHTS AND/OR REVOCATION OF CONSENT

We inform you that at any time you have the right to Access, Rectification, Cancellation or Opposition on the processing of your personal data (ARCO rights). You may exercise your ARCO rights, as well as revoke the consent, if any, you have given us for the processing of your personal data.

However, it is important to note that not in all cases we will be able to fulfill your request or terminate the use immediately, as we may be required by law to continue processing your personal data.

In order for you to exercise your ARCO rights and/or revoke your consent to the processing of your personal data, you may do so in writing signed by the owner or authorized representative and sent by e-mail to the following address: cumplimiento@ciudadmayakoba.com.

The application must contain and be accompanied by the following:

1. The name of the holder of the personal data.

Telephone number and e-mail address.

3. The clear and precise description of the personal data with respect to which the exercise of any of the aforementioned rights is sought. Any other element or document that facilitates the location of the personal data.

4. Identification of the applicant or document with the necessary powers to exercise the right on behalf of a third party.

5. Any other element or document that facilitates the location of personal data.

6. In the case of requests for rectification of personal data, the holder must indicate, in addition to what is indicated in items 1, 2, 3 and 4, the modifications to be made.

Upon receipt, La Ceiba DCM, will have a period of 20 business days to respond to your request, however, this period may be extended for an equal period of time, which will be notified by the means that you have indicated for such purposes, stating the reasons for such extension, in accordance with Article 32 of the Federal Law for the Protection of Personal Data in Possession of Individuals, which if ruled as appropriate will be effective within fifteen (15) business days from the response you receive, which if ruled as appropriate will be effective within fifteen (15) business days from the response you receive. Federal Law for the Protection of Personal Data in Possession of Individuals, which if ruled as appropriate will be effective within fifteen (15) business days from the response you receive.

In the event that the information provided in the request is insufficient or erroneous to meet the request, or is not accompanied by the documents referred to, or does not clearly indicate the modifications to be made, the data controller may require the holder, once and within five days following receipt of the request, to provide the elements or documents necessary to process the request. The holder will have ten days to comply with the requirement, counted from the receipt of the request. If no response is provided within such term, the corresponding request will be deemed not to have been filed.

The cancellation of personal data will give rise to a blocking period after which La Ceiba DCM, will proceed to the deletion of the corresponding data. Once the corresponding personal data has been cancelled, La Ceiba DCM will notify the owner.

Once the above has been done, La Ceiba DCM may keep the personal data exclusively for the purposes of the responsibilities derived from the treatment referred to in this Privacy Notice.

La Ceiba DCM will not be obliged to cancel the personal data in the cases established in article twenty-six of the Law.

Likewise, when the information collected in the personal data is no longer necessary for the fulfillment of the purposes set forth in this Privacy Notice and in the applicable legal provisions, your personal data will be cancelled from the database of La Ceiba DCM.

La Ceiba DCM, will keep the personal data of users only for the time necessary for the realization of the purposes for which they were collected, as long as you do not revoke the consents granted. In this sense, personal data is kept for the time that, in each case, is considered necessary to justify and/or account for the management, which may be linked to legal statutes of limitations, or the possibility of receiving requirements from competent authorities. La Ceiba DCM, is entitled to process your personal data because you have given your consent for the specific purposes requested in order to provide you with our services. Regarding the reservation of services, payment and billing, the treatment is legitimized by the reservation of services and the request for billing consumption.

The processing of data in order to send you emails about services, events and news related to our professional activity is based on the legitimate interest of La Ceiba DCM, to carry out such treatments in accordance with current regulations. Similarly, the user's information may be used to comply with the various legal obligations of La Ceiba DCM.

XII. REVOCATION AND/OR LIMITATION ON THE USE AND/OR DISCLOSURE OF PERSONAL DATA

In addition to the exercise of ARCO rights and the Revocation of Consent, it is possible to limit the use and disclosure of personal information through the following mechanisms:

Registration in the Public Registry to Avoid Advertising (REPEP), which is in charge of the Federal Consumer Protection Agency (PROFECO), or in the Public Registry of Users (REUS) of the National Commission for the Protection and Defense of Users of Financial Services (CONDUSEF).

Registration in the exclusion list of La Ceiba DCM, so that your personal data will not be processed for marketing, advertising or commercial prospecting purposes by the responsible. For this purpose, you may request your registration to the compliance area. It is important to inform you that not in all cases we can meet your request or terminate the use immediately, since there is a possibility that at the time of your request there is still some legal obligation or legal relationship, which requires that we continue to treat your personal data.

XIII. AUTOMATION OF DATA USE

Personal data will be subject to automated processing in accordance with the policies of La Ceiba DCM, and La Ceiba DCM will make this privacy policy notice or any other important information available to users or customers so that they can access this privacy policy notice or any other important information. Notwithstanding the foregoing, and unless otherwise indicated, responses to some of the personal information requested are voluntary, and La Ceiba DCM will not be obligated to provide you with any personal information. The failure to answer these questions does not imply any impairment in the quality of the products or services offered.

The collection and automated processing of personal data, aims to maintain the contractual relationship if any established in the terms and conditions that the user expressly accepts at the time of any transaction involving any product or the provision of any service by La Ceiba DCM.

La Ceiba DCM, has the highest levels of security for the protection of personal data that current legislation requires and seeks to adapt to the needs and requirements both legal and technological.

XIV. USE OF TRACKING TECHNOLOGIES ON THE INTERNET PORTAL (COOKIES, WEB BEACONS)

We hereby inform you that the following e-mail address www.ciudadmayakoba.com; does not make use of cookies, web beacons or similar technologies through which personal data are obtained.

Our website may contain, for your convenience, links to other websites. La Ceiba DCM, has not reviewed the Privacy Notices of such web sites and does not warrant and is not responsible for the content of such web sites. We invite you to carefully read the Privacy Notice of each of the sites you visit on the Internet.

XV. CHANGES TO THE PRIVACY NOTICE

This privacy notice may be modified, changed or updated due to new legal requirements; our own needs for the services we offer; our privacy practices; changes in our business model, or for other reasons. We commit ourselves to keep you informed about the changes that this privacy notice may undergo, through its publication in our website www.ciudadmayakoba.com

Version 3.0

Last update: 01/14/2024.