1. Identity and Address of the Responsible Party that processes the Personal Data.

CIA MEXICANA DE INVERSIONES TURISTICAS, SA DE CV

Autopista Tijuana Ensenada, Number 2501, Col. Zona Playitas in the city of Ensenada, Baja California. Is responsible for your personal data in accordance with this Privacy Notice.

1. Data that will be subjected to the Privacy Treatment.

The Data that will be subjected to the security treatment are the following:

• Name of owner.
• Owner’s Address.
• Identification document.
• Any other element that allows the location of personal data.

III. Express indication of the Sensitive Data to be processed.

Sensitive personal data will be those related to disabilities, medical requirements or any other necessary to offer a better service, Compañía Mexicana de Inversiones Turísticas, S.A. de C.V. undertakes that sensitive personal data will be treated with strict security and confidentiality.

1. Purpose of the Processing of Personal Data.

Personal data in possession of Compañía Mexicana de Inversiones Turísticas, S.A. de C.V. will be used for:

• Provision of hosting services.
• Provision of restaurant services.
• Provision of banquet services.
• Provision of event organization services.
• Provision of tourist and commercial services.
• Inform about new services, products or events related to the previous services, including sending advertising and newsletters.
• Comply with obligations related to previous services.
• Evaluate quality and service.
• Internal analysis of services.

1. Negative Manifestation or Approval to the Processing of Personal Data.

I grant my consent for my personal data to be processed by Compañía Mexicana de Inversiones Turísticas, S.A. de C.V. in accordance with this privacy notice, which I have read and understand. Otherwise I will inform you by sending an email to datospersonales@lucerna.com.mx or written notification to the Department of Personal Data with attention to Lic. Maritza Mendez.

1. Transfer of Personal Data to a Third Party.

Compañía Mexicana de Inversiones Turísticas, S.A. de C.V. may transfer the personal data in its possession to companies belonging to the same corporate group. Likewise, you can transfer personal data to third parties subcontracted or related to the provision of services, for marketing purposes or market research.

VII. Acceptance or Not to the Transfer of your Personal Data.

I accept the transfer of information of my personal data in accordance with the provisions of the previous paragraph (VI). Otherwise, I will inform you by sending an email to datospersonales@lucerna.com.mx or notification in writing to the Department of Personal Data with attention to Lic. Maritza Mendez.

VIII. Means and Procedure to exercise ARCO Rights.

To have access to the personal data that Compañía Mexicana de Inversiones Turísticas, S.A. de C.V. has, as well as to rectify them in case they are inaccurate or incomplete, to cancel or oppose their treatment for certain purposes, please submit a written request addressed to our Personal Data Department at datospersonales@lucerna.com.mx or notification by written to Lic. Maritza Mendez from Monday to Friday from 09:00 to 18:00 Hrs. containing the following information:

• Name of owner.
• Address of the owner or email address to communicate response to request.
• Documents that prove identity or authorization to present it in the application.
• Description of the personal data on which you intend to exercise any ARCO right.
• Any other element that allows the location of personal data and attention to request. ARCO. Access, Rectification, Cancellation and Opposition.

1. Mechanisms and Procedures to revoke Consent to the Processing of Personal Data.

At any time you can revoke the consent granted to Compañía Mexicana de Inversiones Turísticas, S.A. de C.V. to process your personal data by sending a written request addressed to our Personal Data Department at datospersonales@lucerna.com.mx or written notification to Lic. Maritza Mendez from Monday to Friday from 09:00 to 18:00 Hrs. in which you clearly detail the data regarding what you revoke your consent.

1. Options and Means of Limiting the Use and Disclosure of Personal Data.

To limit the use of personal data, please send an email to our Personal Data Department at datospersonales@lucerna.com.mx or written notification to Lic. Maritza Mendez in which you indicate the limitation to the use of your desired data.

1. Security Measures in Electronic Communication Media.

Compañía Mexicana de Inversiones Turísticas, S.A. de C.V. recognizes the value of your personal data for which it has implemented security measures that prevent its use for purposes other than those authorized as well as its alteration, loss, theft or access by third parties. The measures include the use of specialized computer programs, electronic communication, for which we have trained personnel and the adoption of internal data protection policies.

XII. Notice of Changes to the Privacy Notice.

This Privacy Notice may be modified at any time to comply with legislative, jurisprudential updates, internal policies, new requirements for the provision of services of Compañía Mexicana de Inversiones Turísticas, S.A. de C.V. or any other cause. In this case, the modifications will be available on our website www.hoteleslucerna.com.

CIA MEXICANA DE INVERSIONES TURISTICAS, SA DE CV

(Hotel Lucerna Ensenada)

Autopista Tijuana Ensenada, Number 2501.

Zona Playitas. Postal Code 22860.

Telephone (646) 1-74-50-48.

datospersonales@lucerna.com.mx