Based on articles 15, 16 and other applicable articles of the Federal Law for the Protection of Personal Data in Possession of Individuals (the "Law") and its regulations, we hereby inform you that La Ceiba DCM, S.A. de C.V. (hereinafter La Ceiba DCM) with address at Carretera Federal Chetumal-Puerto Juárez km 298, Playa del Carmen, Solidaridad, Quintana Roo, C.P. 77710, which is intended to hear and receive notifications, is responsible for the use and protection of personal data, and in this regard informs you as follows:

I.PRIMARY PURPOSES.

The personal data that we will collect from you will be used for the following purposes, which are necessary to carry out and maintain the legal relationship between the responsible party and the holder: elaboration of an employment record, creation of an employee profile, administration of electronic access to systems and technological infrastructure, administration of payroll services; registration of insurance (and family members), life insurance, major medical expenses, compliance with the employment contract entered into with La Ceiba DCM, and all those that apply according to the Federal Labor Law, IMSS and INFONAVIT, keeping the systems and databases of the responsible updated at the end of the employment relationship, to perform the necessary dissolution procedures, comply with the applicable laws and provisions, maintain a communication channel with the employee, training and monitoring of labor performance. monitoring of labor performance.

II. SECONDARY PURPOSES.

In addition, we will use your personal information for the following purposes that are not necessary for the requested service, but that allow and facilitate us to provide you with better service such as: access to cultural and sports activities, granting, administration and procurement of payroll credits and providing labor references as permitted by applicable laws.

In case you do not want your personal data to be processed for these additional purposes, you can express your refusal in writing signed by the owner or authorized representative and sent by e-mail to the following address cumplimiento@laceibaciudadmayakoba.com. The refusal for the use of your personal data for these accessory purposes may not be a reason to deny the working relationship with our company.

III. PERSONAL DATA TO BE PROCESSED

To carry out the purposes described in this privacy notice, we will use the following personal data:

- Identification data: name, place and date of birth, nationality, Federal Taxpayers Registry (RFC), Unique Population Registry Code (CURP), valid identification number.

Contact information: address, landline, cell phone, e-mail.

-Academic data: educational background, professional degree, professional license, certificates, diplomas.

-Employment data: professional experience, previous workplaces, date of entry and exit from employment, references.

- Financial data: bank accounts.

- SENSITIVE PERONAL DATA: We inform you that La Ceiba DCM, collects personal data of the so-called sensitive data, since, at the time of personnel selection, a psychometric test is performed to the prospect for the evaluation of our candidates, such information is not transferred to third parties and that it has HIGH physical, technical and administrative security measures for its storage by virtue of the type of data.

Similarly, at the time of entering our facilities your image will be recorded, the above for the purpose of protection, security and crime prevention, which will have a duration of storage of 60 days, after the previous period, your images will be deleted from our servers / cloud.

IV. DATA TRANSFERS

Your personal data may be transferred and processed inside and outside the country with persons or entities other than La Ceiba DCM, for the following purposes: For the conversation of an employment record, and compliance with local and federal laws, for insurance and/or reimbursement procedures and to make payments corresponding to your payroll.

Recipient of Personal Data: CDMK Servicios, Sancus CMK Negocios, S. de R.L. de C.V., Operadora Lakahn, S.A. de C.V. its affiliates and subsidiaries, insurance companies and multiple banking institutions.

We undertake not to transfer your personal data to third parties without your consent, except for the exceptions set forth in article 37 of the Law, as well as to carry out this transfer under the terms set forth in said legal ordinance.

V. MEANS OF OBTAINING PERSONAL DATA

For the purposes outlined in this privacy notice we may collect your personal information in different ways: when you provide it to us directly, when you visit our website or use our online services, when we obtain information from other public sources permitted by law, as well as when you visit our offices.

VI. ARCH RIGHTS AND/OR REVOCATION OF CONSENT

We inform you that at any time you have the right to Access, Rectification, Cancellation or Opposition on the processing of your personal data (ARCO rights). You may exercise your ARCO rights, as well as revoke the consent, if any, you have given us for the processing of your personal data.

However, it is important to note that not in all cases we will be able to meet your request or terminate the use immediately, since it is possible that for some legal obligation we need to continue processing your personal data. In order for you to exercise your ARCO rights and/or revoke your consent to the processing of your personal data, you may do so in writing signed by the owner or authorized representative and sent by e-mail to the following address: cumplimiento@laceibaciudadmayakoba.com. The request must contain and be accompanied by the following:

1. The holder's name, address, telephone number, email or other means of communicating the response to your request;

2. The documents proving the identity or, if applicable, the legal representation of the holder.

3. A clear and precise description of the personal data with respect to which you are seeking to exercise any of the aforementioned rights.

4. Any other element or document that facilitates the location of personal data.

5. In the case of requests for rectification of personal data, the holder must indicate, in addition to what is indicated in items 1, 2, 3 and 4, the modifications to be made.

Upon receipt, La Ceiba DCM, will have a period of 20 business days to respond to your request, however, this period may be extended for an equal period of time, which will be notified by the means that you have indicated for such purposes, indicating the reasons for such extension, in accordance with Article 32 of the Federal Law on Protection of Personal Data Held by Private Parties.

In the event that the information provided in the request is insufficient or erroneous to meet the request, or is not accompanied by the documents referred to, or does not clearly indicate the modifications to be made, the data controller may require the holder, once and within five days following receipt of the request, to provide the elements or documents necessary to process the request. The holder will have ten days to comply with the requirement, counted from the receipt of the request. If no response is provided within such term, the corresponding request shall be deemed not to have been filed.

VII. LIMITATION ON THE USE OR DISCLOSURE OF PERSONAL DATA

In addition to the exercise of ARCO rights and the Revocation of Consent, it is possible to limit the use and disclosure of personal information through the following mechanisms: Registration in the Public Registry to Avoid Advertising (REPEP), which is in charge of the Federal Consumer Attorney's Office (PROFECO), or in the Public Registry of Users (REUS) of the National Commission for the Protection and Defense of Users of Financial Services (CONDUSEF). Registration in the list of exclusion of La Ceiba DCM, so that your personal data will not be used for marketing, advertising or commercial prospecting by the responsible. For which you may request your registration to the compliance area.

VIII. USE OF TRACKING TECHNOLOGIES ON THE INTERNET PORTAL (COOKIES, WEB BEACONS)

We hereby inform you that at the following e-mail address www.laceibaciudadmayakoba.com; use is made of cookies, web beacons or similar technologies by means of which personal data are obtained.

IX. CHANGES TO THE PRIVACY NOTICE.

This privacy notice may be modified, changed or updated due to new legal requirements; our own needs for the services we offer; our privacy practices; changes in our business model, or for other reasons. We commit ourselves to keep you informed about the changes that this privacy notice may undergo, through its publication in our web page www.laceibaciudadmayakoba.com.

Version 2.1

Last update: 01/06/2022.