The company Rivieralti S.A. de C.V. commercially known as Rivieralty, with address for all purposes and obligations related to this Privacy Notice at Punta Castell, manzana 56, lote 1, numero 18, Punta Estrella, zip code 77723, Solidaridad, Playa del Carmen, Quintana Roo, will use your “Personal Data” collected for the purposes set forth in section III of this Privacy Notice.

The Data Subject is informed through this Privacy Notice of the terms under which your “Personal Data” collected will be treated, so we recommend that you read this Privacy Notice carefully, as it details crucial aspects about the collection and use of your personal data, as well as information regarding the protection of your information, with whom it can be shared and what are your rights in this regard.

I. Definitions. – For purposes of this Privacy Notice, the following terms shall have the meanings set forth below:

Privacy Notice: This document.

Law / LFPDPPP: Federal Law for the Protection of Personal Data in Possession of Private Parties.

Regulations: The Regulation of the Federal Law for the Protection of Personal Data in Possession of Private Parties.

Personal data: Any information concerning an identified or identifiable natural person.

Sensitive personal data: Those personal data that affect the most intimate sphere of its holder, or whose improper use may give rise to discrimination or entail a serious risk to the holder. In particular, sensitive data are considered those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions, sexual preference.

Responsible: The company Rivieralti S.A. de C.V. commercially known as Rivieralty, who collects your.

Personal Data to be processed in accordance with the purposes stated in this Privacy Notice.

Data subject: The natural person to whom the personal data corresponds.

Consent: Manifestation of the will of the owner of the data by means of which the processing of the data is carried out.

Processing: The obtaining, use, disclosure or storage of personal data, by any means. Use encompasses any action of access, handling, exploitation, transfer or disposition of personal data. Processor: The natural or legal person who alone or jointly with others processes personal data on behalf of the controller.

Transfer: Any communication of data made to a person other than the controller or processor.

Databases: The ordered set of personal data concerning an identified or identifiable person.

1. Responsible for the “Personal Data”. –In compliance with the Law for the Protection of Personal Data in Possession of Private Parties (LFPDPPP) and its regulations, the responsible party described in section I of definitions of this Privacy Notice, declares to be a Mexican company duly constituted under Mexican law with domicile in Punta Castell, manzana 56, lote 1, numero 18, punta estrella, postal code 77723, solidaridad, playa del Carmen, Quintana Roo, who will be responsible for the collection, access, use, handling, use, transfer, disposition, disclosure or storage of the “Personal Data” and will be individually responsible for the same.

III. Purpose of the processing of your Personal Data.

The Data Controller informs the Data Subject that the purpose for which the Processing of his Personal Data will be carried out will be primarily in relation to:

a. Proof of the identity of the holder or his representative and economic situation;

b. Prepare a dossier for the preparation of documents necessary for the provision of the services we offer;

c. Preparation of offer letter, promise of purchase and sale agreement, and if applicable, promise of trust agreement;

d. To follow up on requests for information, attention and service from the Holder; e. Comply with applicable legal requirements;

f. To provide the real estate services you have requested and to inform you about changes in them; g. To file records and file for follow-up of future services or procedures;

h. To comply with the obligations and commitments we have made to the holder and to evaluate the quality of the service we provide,

and secondarily:

i. Send to the Holder advertising and notices by direct or electronic mail, via telephone, social networks, or any other similar electronic and physical means of communication for marketing or advertising purposes, which will be sent, unless the Holder expressly states its opposition.

j. Send quality surveys.

1. Your “Personal Data” may be used for purposes that are compatible with those described and may be considered analogous.

The “Responsible” informs the holder that if he/she does not expressly state his/her opposition to the processing of his/her “Personal Data”, it will be understood that the holder has granted his/her consent and authorizes the “Responsible” to use them for the secondary purposes mentioned above, as well as to send and collect information through quality surveys and, if applicable, to transfer his/her “Personal Data” to third parties when it is necessary or convenient for the “Responsible” to comply with the obligations and commitments it has undertaken with the holder.

In case the owner does not want his/her “Personal Data” to be processed for any of the purposes mentioned above, he/she can state what they are from this moment on, indicating them in the following lines:

I do NOT give my consent for my “Personal Data” to be used for the following purposes: ________________

____________________________________________________________________________________________

IV. “Personal Data”. For the aforementioned purposes, we need to obtain the following personal data: Personal Identification Data, Patrimonial Data, Financial Data and Supporting Documents to provide the Advisory, Promotion, Mediation, Information and Management service for the purchase and sale of your property, and to comply with the obligations and commitments we have made to the owner.

1. Personally identifiable data that the Data Subject has provided or will provide to Rivieralty shall include, but is not limited to, the following:

1. • Individual: Full name, identification, address, RFC, landline telephone, cell phone, e-mail, CURP, address, date of birth, country of origin, occupation, autographic signature, electronic signature, marital status, marital status, if married under marital partnership, cohabitation or partnership in cohabitation; The following data of the couple: Name, telephone, e-mail, CURP, autographic signature, fiscal address, RFC.

1. Additionally for foreigners: passport and immigration document.

Legal entity: corporate name, name and data of the attorney or attorneys-in-fact (for attorneys-in-fact, all the data of the natural person shall be provided), articles of incorporation, power of attorney, address, RFC, telephone, e-mail, autographic signature, electronic signature.

1. Patrimonial or financial data: Information will be collected regarding your assets, rights, charges or obligations susceptible of economic valuation, which will be, but not limited to, the following: real estate and personal property; tax information; credit history; income and expenses; insurance; afores; bonds; bank accounts; bank account information; credit card number.

The holder is informed that the responsible party does not collect or process “Personal Data” of minors or incapable persons without the express consent of their parents, guardians or legal representatives.

V. Means to limit the use or disclosure of personal data. The holder’s personal data will not be used for purposes other than those indicated herein. Privacy Notice and will be treated and safeguarded based on the principles of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility, provided in article 6 of the LFPDPPP, as well as administrative, technical and physical security measures will be maintained with respect to your personal data against damage, loss, alteration, destruction or unauthorized use, access or treatment, which are in no way less than those that Rivieralty has implemented for the treatment of its own information. Any security breach occurring at any stage of the processing of the Data Subject’s Personal Data will be immediately reported to the Data Subject so that he/she can take the corresponding measures in defense of his/her rights.

Likewise, we inform the holder that their personal data will not be transferred to persons other than the undersigned and/or those authorized in section VII of this Privacy Notice and/or those third parties that by the nature of their work and/or functions have the need to treat and/or use the information, in this case the third party involved in the processing of your Personal Data will keep due confidentiality regarding the same.

In the future, the “Personal Data” collected will have the same treatment referred to in this Privacy Notice, without prejudice to which the Data Subject may at any time exercise his or her right to object, as provided in this Privacy Notice, .

VI. Sensitive Data. The Data Subject acknowledges and accepts that it is possible, but unlikely, that the Data Controller may request information and/or documents that may contain sensitive personal data that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and/or moral beliefs, union membership, political opinions and/or sexual preference, however, the Data Subject expressly authorizes the processing of the Sensitive Personal Data only for the purposes stated above, consequently, any transfer of the different Sensitive Data must be previously authorized in writing by the Data Subject.

VII. Authorized Transfers . Se le informa al titular que su información puede ser compartida con diversas autoridades o dependencias gubernamentales, Notarías y/o aquellos terceros que por la naturaleza de sus trabajos y/o funciones tengan la necesidad de tratar y/o utilizar la información, esto para efectos de llevar a cabo el servicio profesional solicitado. Si el titular no manifiesta su oposición para que sus datos personales sean tratados en los términos del presente Aviso de Privacidad, se entenderá que ha otorgado su consentimiento para ello.

It may be disclosed, divulged and/or transferred within and outside the country to the following third parties, including, but not limited to, the following:

• Notary Public (Notary Publics)

• Financial Institutions and INFONAVIT

• Condominium Manager

• SAT

– Commercial partners (sending promotions and advertising of products or services that could be useful).

The Third Parties that receive the information related to the Personal Data of the Data Subject are obliged to comply with the provisions of this Privacy Notice, as well as with the applicable legislation in Mexico.

VIII. ARCO rights and means of exercising them. The holder has the right to access, rectify and cancel his/her personal data, as well as to oppose the processing thereof (ARCO rights) or revoke the consent granted for such purpose, through a written request containing each and every one of the requirements set forth in Article 29 of the LFPDPPP, duly signed by the holder, addressed to the undersigned and delivered to the address indicated in the contact details specified below, attaching a copy of identification and address where he/she must receive the response communication. The responsible party will communicate to the holder, within a maximum period of twenty days, counted from the date on which the request for access, rectification, cancellation or opposition was received, the determination adopted, so that, if it is appropriate, the same becomes effective within fifteen days from the date on which the response is communicated.

In the case of requests for access to personal data, the delivery will be made upon proof of the identity of the applicant or legal representative, as appropriate. The aforementioned deadlines may be extended once for an equal period, provided that the circumstances of the case so justify, such communication will take effect 15 days after its receipt.

IX. Changes to the Privacy Notice . El responsable se reserva el derecho de modificar en cualquier momento el contenido del presente Aviso de Privacidad, por lo que, se le informa al titular que este mismo puede sufrir modificaciones, cambios o actualizaciones derivadas de nuevos requerimientos legales; de nuestras propias necesidades por los productos o servicios que ofrece el responsable; de sus prácticas de privacidad; de cambios en el modelo de negocio, o por otras causas.

In case of modification, the holder will be kept informed through the publication of such changes, modifications or updates through the page www.rivieralty.com, being the obligation of the holder to periodically review the website, this in order to verify the most current version of the Privacy Notice.

X. Contact information, questions, comments and for more information. If you have any questions or comments regarding this Privacy Notice, you may contact our Personal Data Protection Department:

In charge: Michelle Luna Moreno.

Email: hola@rivieralty.com

Address: Punta Castell, manzana 56, lote 1, lote 1, numero 18, punta estrella, postal code 77723, solidaridad, playa del Carmen, Quintana Roo.

Telephone number: 55 3038 2721

XI. Consent. If the holder does not express his opposition to the processing of his personal data under the terms of this Privacy Notice, it will be understood that he has given his consent to do so.