The entity responsible for processing your personal data is AMIGO TOURS EUROPA, S.L. (hereinafter, “AMIGO TOURS”), with Tax ID No. B87468732, and registered office at Pasaje de Bisbal 6, Floor 1, 28028, Madrid.This Privacy Policy governs access to and use of the Website (hereinafter, the “Website”) that AMIGO TOURS makes available to Internet users (hereinafter, the “Users”) interested in the content (hereinafter, the “Content”) and the services (hereinafter, the “Services”) offered by AMIGO TOURS thereon. Contact email address:&nbsp;<a target="_blank" rel="noopener noreferrer" href="mailto:dataprotection@amigotours.com">dataprotection@amigotours.com</a>

Who is responsible for processing your data?

Please read carefully and follow the recommendations below:<ul><li>Keep your device equipped with properly updated antivirus software to protect against malicious software and spyware applications that may endanger your Internet browsing and the information stored on your device.</li><li>Read and review this Privacy Policy and all legal texts made available by AMIGO TOURS on the Website.</li></ul>

Recommendations

For the proper functioning of the Website, AMIGO TOURS may have access to the following data provided, where applicable, by the User: (i) Identification data: first name, last name. (ii) Personal data: date of birth, gender, IP address, device used. (iii) Contact details: email address, telephone number.

Information about the data that AMIGO TOURS collects through the Website

The legal basis that entitles AMIGO TOURS to process Users’ data through this Platform is the application, at the User’s request, of pre-contractual measures.Notwithstanding the foregoing, the legal basis for sending commercial communications will be the consent granted by the user.AMIGO TOURS takes the protection of your privacy and your personal data very seriously. For this reason, your personal data are stored securely and processed with the utmost care, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “General Data Protection Regulation” or “GDPR”).This Privacy Policy governs access to and use of the service that AMIGO TOURS makes available to the User interested in the services and content hosted on the Website.In this regard, the User may withdraw their consent at any time by sending a message to the following email address:&nbsp;<a target="_blank" rel="noopener noreferrer" href="mailto:dataprotection@amigotours.com">dataprotection@amigotours.com</a>, without this affecting the lawfulness of the processing based on consent prior to its withdrawal.

Why is AMIGO TOURS entitled to process your data?

The personal data collected by AMIGO TOURS may be used for the following purposes, depending on the consent granted in the corresponding registration form: (i) To provide the services offered through the Website. (ii) To manage, process, and respond to the User’s requests, applications, incidents, or inquiries. (iii) If the data subject has given consent, to receive commercial communications or information about AMIGO TOURS products and services by mail, telephone, email, SMS/MMS, or other equivalent electronic communication means.

What are the purposes of processing your personal data?

The User guarantees the accuracy of the personal data provided and undertakes to notify AMIGO TOURS of any changes thereto. In any case, the User shall be responsible for the accuracy of the data provided, and AMIGO TOURS reserves the right to exclude from the services any User who has provided false data, without prejudice to any other actions that may be applicable by law.Users are advised to protect their data with the utmost diligence by using appropriate security tools. AMIGO TOURS shall not be responsible for any theft, unlawful modification, or loss of data.Any modification or update of the data must be communicated to AMIGO TOURS through the communication channels provided in this Privacy Policy.

Accuracy of the data provided by Users

The protection of Users’ privacy and personal data is very important to AMIGO TOURS. Therefore, AMIGO TOURS makes every effort to prevent User data from being used improperly. Only authorized personnel have access to User data.Users’ personal data will be retained while they remain in AMIGO TOURS’ database for the purposes for which they were provided, provided that the User has not revoked their consent by requesting the deletion of their account or the erasure of certain personal data from the Website.Subsequently, if necessary, AMIGO TOURS will keep the information blocked for the legally established periods.AMIGO TOURS undertakes to comply with its obligation of secrecy and confidentiality regarding personal data in accordance with the applicable legislation.

Data retention

Users have the right to: (i) Access their personal data; (ii) Request the rectification of any inaccurate data; (iii) Request the erasure of their data; (iv) Request the restriction of the processing of their data; (v) Object to the processing of their data; (vi) Request the portability of their data; (vii) Likewise, Users have the right not to be subject to decisions based solely on automated data processing.The User may exercise all these rights by sending an email to:&nbsp;<a target="_blank" rel="noopener noreferrer" href="mailto:dataprotection@amigotours.com">dataprotection@amigotours.com</a>, stating the reason for the request. The User may also send their request by ordinary mail to the following address: Pasaje de Bisbal 6, Floor 1, 28028, Madrid.The communication addressed to AMIGO TOURS must contain the following information:<ul><li>User’s first and last name;</li><li>The specific request being made.</li></ul>Without prejudice to any other administrative remedy or judicial action, the User shall have the right to lodge a complaint with a Supervisory Authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement, if they consider that the processing of their personal data does not comply with the regulations, as well as in the event that their rights are not satisfactorily exercised. The supervisory authority with which the complaint has been lodged will inform the complainant of the progress and outcome of the complaint.

Users’ rights

The protection of Users’ privacy and personal data is very important to AMIGO TOURS. Therefore, AMIGO TOURS has taken all measures within its reach to prevent misuse of data, allowing access only to authorized personnel.AMIGO TOURS maintains appropriate security measures to protect personal data in accordance with applicable legislation and has established all technical means at its disposal to prevent loss, misuse, alteration, unauthorized access, and theft of the data provided by the User through the Website, without prejudice to informing the User that Internet security measures are not impregnable.AMIGO TOURS undertakes to comply with the duty of secrecy and confidentiality with respect to personal data in accordance with applicable legislation.AMIGO TOURS shall not be liable for any damages that may arise from the User’s breach of this obligation.

Data security

Users are informed that their personal data may not be transferred to third-party companies or national entities. Users’ data may only be used by AMIGO TOURS for any purpose that serves to properly fulfill the purposes of personal data processing set out in section 5 of this Privacy Policy.

Transfers and/or disclosures to third parties

If you have any questions about our Privacy Policy, please contact us by sending an email to&nbsp;<a target="_blank" rel="noopener noreferrer" href="mailto:dataprotection@amigotours.com">dataprotection@amigotours.com</a>.Likewise, if you believe that your rights are not adequately protected, you have the right to file a complaint with the Spanish Data Protection Agency, whose contact details are: telephone numbers 900 293 183; postal address C/Jorge Juan 6, 28001 Madrid; electronic office&nbsp;<a target="_blank" rel="noopener noreferrer" href="https://sedeagpd.gob.es/sede-electronica-web/">https://sedeagpd.gob.es/sede-electronica-web/</a>&nbsp;and application&nbsp;<a target="_blank" rel="noopener noreferrer" href="http://www.agpd.es">www.agpd.es</a>.

Questions

The User declares that they have been informed of the conditions regarding the protection of personal data, accepting and consenting to their processing by AMIGO TOURS, in the manner and for the purposes indicated in this Privacy Policy.

Acceptance and Consent

Privacy Policy Europe

AMIGO TOURS, with its address for receiving notifications at Isabel La Católica 39-Interior 502, Historic Center of Mexico City, Col. Centro, Alcaldía Cuauhtémoc, C.P. 06000, Mexico City, Mexico, is responsible for the processing of your Personal Data. As the responsible party for the processing of Personal Data, AMIGO TOURS adheres to the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility, as established by the Law.

RESPONSIBLE FOR THE PROTECTION OF YOUR PERSONAL DATA

To contact us, you must submit a request written in Spanish, addressed to the AMIGO TOURS PERSONAL DATA PROTECTION OFFICE, and deliver it in person or by postal mail to the following address: Isabel La Católica 39-Interior 502, Historic Center of Mexico City, Col. Centro, Alcaldía Cuauhtémoc, C.P. 06000, Mexico City, Mexico, or by email to: <a target="_blank" rel="noopener noreferrer" href="mailto:dataprotection@amigotours.com">dataprotection@amigotours.com</a>

CONTACT METHODS

The personal data we collect from users to fulfill the purposes described in this Privacy Notice are obtained directly when you provide them to us through our establishments, our website amigotours.com, mobile applications, official social media accounts, instant messaging services, customer service centers called "hola," by phone, or by email. We may also obtain information through other publicly available sources permitted by the Law and the Regulations.The data we collect include:For individuals: Full name, gender (male or female), image, date of birth, nationality, landline phone number, mobile phone number, email address, home address, age, and official identification. For foreigners, we may additionally collect immigration status as documented in the proof of legal stay in the United Mexican States (hereinafter, "Mexico"). Regarding financial data, such as the Federal Taxpayer Registry (RFC), tax address, and payment information, by using this information to purchase any of our products or services, you expressly consent to the processing of this data as provided in Article 8 of the Law.For legal entities: For the legal representative or attorney-in-fact, full name, official identification, signature, email address, unique population registry code, date of birth, phone number, address, and nationality. Regarding the company's financial or patrimonial data, such as the Federal Taxpayer Registry (RFC), tax address, and payment information, the attorney-in-fact or legal representative, by using this information to purchase any of our products or services, expressly consents to the processing of this data as provided in Article 8 of the Law.We inform you that AMIGO TOURS does not store any debit or credit card information or payment methods as part of the payment processing. AMIGO TOURS transmits debit or credit card or payment method information directly to your bank or the payment platform you are using.Additionally, since the Law allows us to obtain information from other sources such as telephone and service directories (physical or electronic), the data we may obtain through these means include name, phone number, email address, and home address.Personal Data of Third Parties and MinorsAMIGO TOURS may collect and process identification and contact data of third parties, such as their full name, email address, and phone number, and for foreigners, the immigration status documented in the proof of legal stay in Mexican territory, when you or such third parties provide this information for purposes related to the products and/or services contracted on their behalf. By providing this information, you declare under penalty of perjury that you have informed these third parties about the use of their personal data and have obtained their prior consent for AMIGO TOURS to process it for the aforementioned purposes.AMIGO TOURS does not collect or process personal data of minors. Therefore, you acknowledge and declare under penalty of perjury that at the time of providing your data, you are of legal age, have full legal capacity, and have read this Privacy Notice. In the exceptional case that personal data of minors or individuals with natural or legal incapacity as established by law are collected and processed, such as name and age, and additionally, for foreign minors or individuals with natural or legal incapacity, the immigration status documented in the proof of legal stay in Mexican territory, such data will be collected or processed only with the prior consent of the person exercising parental authority, guardianship, or legal representation, in accordance with applicable laws.If AMIGO TOURS identifies that a minor or an individual with natural or legal incapacity has provided their personal data without the consent of the person exercising parental authority, guardian, or legal representative, or if, due to human or technical error, personal data of minors or individuals with natural or legal incapacity have been collected, such personal data will be deleted from the databases containing them as soon as this becomes known.Sensitive Personal DataAMIGO TOURS will not collect or process any sensitive personal data.

PERSONAL DATA WE COLLECT AND METHODS OF COLLECTION

Your Personal Data will be used for the following purposes:Primary Purposes: Purposes that give rise to and are necessary for the existence, maintenance, and fulfillment of the legal relationship between you and AMIGO TOURS:<ul><li>• Identification and contact.</li><li>• Contracting, follow-up, updating, confirmation, and generation of a history of the products and/or services contracted.</li><li>• Creation, updating, customization, maintenance, and authentication of your user account.</li><li>• Handling inquiries, complaints, comments, suggestions, clarifications, and follow-up on them.</li><li>• Security of individuals: When purchasing a product or service, you may be videotaped or photographed. We inform you that images from such recordings or photographs will be protected by the Law and the Regulations and will be retained in databases for a period of ten calendar days. After this period, the recordings or photographs will be formatted or deleted.</li><li>• Credit and payment validation and fraud risk assessment for transactions.</li><li>• Invoicing for contracted services or products.</li><li>• Compliance with legal and regulatory obligations, as well as requirements from governmental, immigration, or judicial authorities, federal, state, or municipal, and/or regulatory entities.</li></ul>Secondary Purposes: Purposes that are different and do not give rise to the legal relationship between you and AMIGO TOURS but are very useful to provide you with better service and develop new products and services:<ul><li>• Service quality evaluation through surveys, studies on consumption habits and preferences.</li><li>• Participation in contests, raffles, events, and promotions. We inform you that if you participate in such activities, AMIGO TOURS may collect your image through videos and/or photographs and publish them through various physical or electronic media, as well as your personal data, such as full name, date of birth, email address, home address, and phone number, to document your participation or deliver the corresponding prize or incentive.</li><li>• Informing and/or offering you the range of products and services marketed by AMIGO TOURS and communicating promotions.</li><li>• Marketing and commercial prospecting.</li><li>• Conducting mass data analysis techniques for profiling and better customer understanding.</li></ul>The provision of services and/or the creation of an account implies the full and unreserved consent of users for the processing of their Personal Data in accordance with this Privacy Notice.If you wish to **OPPOSE** the processing of your personal data for the secondary purposes described above, you must send an email to <a target="_blank" rel="noopener noreferrer" href="mailto:dataprotection@amigotours.com">dataprotection@amigotours.com</a> or submit a written request in Spanish to the following address: Isabel La Católica 39-Interior 502, Historic Center of Mexico City, Col. Centro, Alcaldía Cuauhtémoc, C.P. 06000, Mexico City, Mexico, stating which secondary purpose or purposes you oppose.

PURPOSES OF PERSONAL DATA PROCESSING

You may limit the use or disclosure of your personal data by submitting a written request in Spanish, addressed to the AMIGO TOURS PERSONAL DATA PROTECTION OFFICE, to the email <a target="_blank" rel="noopener noreferrer" href="mailto:dataprotection@amigotours.com">dataprotection@amigotours.com</a> or to the following address: Isabel La Católica 39-Interior 502, Historic Center of Mexico City, Col. Centro, Alcaldía Cuauhtémoc, C.P. 06000, Mexico City, Mexico. In your request, you must state your intention to limit the use or disclosure of your personal data and provide necessary details such as: full name, a simple copy of your official identification, customer number (if applicable), phone number, and home address or email address.In addition to the procedure described above, you may unsubscribe from promotional, marketing, and/or advertising emails by clicking on the link included at the bottom of each email.

LIMITATIONS ON DATA USE

You or your duly accredited legal representative may exercise, where applicable, the rights of access, rectification, cancellation, or opposition (hereinafter, the "**ARCO Rights**") provided by the Law, through the mechanism described below. It is important to note that exercising any of the ARCO Rights does not prevent the exercise of another right.- Mechanisms for Exercising ARCO Rights and Revoking Consent for the Processing of Your Personal DataThe exercise of "ARCO Rights" and the revocation of your consent for the processing of your personal data will be carried out by submitting the respective request in writing and in Spanish by the owner of the personal data or their legal representative, addressed to the AMIGO TOURS PERSONAL DATA PROTECTION OFFICE at the following address: Isabel La Católica 39-Interior 502, Historic Center of Mexico City, Col. Centro, Alcaldía Cuauhtémoc, C.P. 06000, Mexico City, Mexico (shipping costs will be borne by the requester), or by email to <a target="_blank" rel="noopener noreferrer" href="mailto:dataprotection@amigotours.com">dataprotection@amigotours.com</a>.Your request must include your full name, a simple, legible, and current copy of your official identification (or a scanned version if using electronic means), the email address or mailing address you designate for notifications, and a contact phone number. If your request is submitted by your legal representative, it must additionally include the official documents accrediting such representation.If the information provided in your request is incorrect or insufficient to process it, or if the required accreditation documents are not included, you will be notified within five business days of receiving your request to provide the necessary elements or documents to proceed. You will have ten business days to respond to this request, counted from the day after it is issued by the AMIGO TOURS PERSONAL DATA PROTECTION OFFICE. If you do not respond to this request within the given period, your request will be considered not submitted.Once the aforementioned requirements are met, within a maximum period of twenty business days from the date of receipt of your ARCO Rights request or revocation of consent for personal data processing, the AMIGO TOURS PERSONAL DATA PROTECTION OFFICE will respond regarding the admissibility of your request by email to the address you provided in the request or by sending a notification to the mailing address you designated for this purpose (the twenty-day period will be considered fulfilled when the document is delivered to the postal service). If the request is admissible, it will be implemented within fifteen business days following the date on which the response regarding its admissibility is communicated.

ARCO RIGHTS

Your Personal Data will not be transferred nationally or internationally to third parties without your consent, except as provided in Article 37 of the Law:<ul><li>• When the transfer is made between controlling, subsidiary, or affiliated companies under the common control of AMIGO TOURS, or to a parent company or any company within the same group as AMIGO TOURS that operates under the same internal processes and policies.</li><li>• When the transfer is necessary for medical prevention or diagnosis, the provision of healthcare, medical treatment, or the management of health services.</li><li>• When the transfer is necessary under a contract entered into or to be entered into in your interest by AMIGO TOURS and a third party, for the purpose of granting you benefits.</li><li>• When the transfer is required for the maintenance or fulfillment of a legal relationship between AMIGO TOURS and you, such as with suppliers, banking and credit institutions, chambers of commerce, among others.</li><li>• When the transfer is necessary or legally required to safeguard public interest or for the administration of justice.</li><li>• When you contract a service outside of Mexico through the Website.</li></ul>

NATIONAL AND INTERNATIONAL DATA TRANSFERS

We inform you that we use electronic technologies (cookies and web beacons) on our website: amigotours.com. When you access our Internet Portal, we receive information about your browser type and operating system, the web pages you have recently visited, the links you have recently followed, the IP address of your computer, and the site you visited before entering our website.You can disable or adjust the use of these technologies by following the procedures of the internet browser you use to access our website.- Disclaimer for Our Website or ApplicationWhile browsing or using the Website or applications, you may encounter hyperlinks, links, banners, or buttons owned by third parties that may request your personal data (hereinafter "**Third-Party Sites**"). The personal data you provide through these portals or websites will be subject to the Privacy Notices displayed and applicable to these portals and websites. Therefore, AMIGO TOURS will not be responsible for the use, publication, disclosure, and/or dissemination you make of your personal data through the aforementioned Third-Party Sites. We recommend users to be careful and responsible about the personal information they provide on such sites.

INFORMATION ON THE INTERNET

AMIGO TOURS will retain your information for as long as necessary for the purpose for which it was collected, unless you request its deletion. In such cases, AMIGO TOURS may retain your personal data for longer periods than required by applicable laws if it is in our legitimate business interest and the laws do not prohibit it. Please note that when we have collected your personal data based on your consent and you withdraw such consent or exercise your ARCO Rights (to delete your personal data), we may retain your information blocked and available for as long as necessary to comply with applicable laws and for AMIGO TOURS to fulfill its responsibilities arising from the processing of your data.

DATA RETENTION

AMIGO TOURS may modify, expand, correct, or update this Privacy Notice at any time and at its sole discretion. In all cases, we will publish the date of the last update of this Privacy Notice on the Website. We may also communicate these changes through the Website or by sending you an email if we have your address, although we are not obligated to do so.

MODIFICATIONS TO THIS PRIVACY NOTICE

To delete data from Facebook, users can follow these steps:&nbsp;1. Access their Facebook account settings and privacy.&nbsp;2. Go to "Settings."&nbsp;3. Search for "Apps and Websites" to view all apps and websites linked to the account.&nbsp;4. Find and select the app or website you wish to delete.&nbsp;5. Click "Delete" to complete the data deletion process.&nbsp;&nbsp;Users can also choose to send an email to <a target="_blank" rel="noopener noreferrer" href="mailto:dataprotection@amigotours.com">dataprotection@amigotours.com</a> requesting that their information be deleted. The information will be removed from our databases within approximately 30 days.&nbsp;&nbsp;Users logged in through Facebook can request the deletion of their personal data at any time. To do so, they can send an email to <a target="_blank" rel="noopener noreferrer" href="mailto:dataprotection@amigotours.com">dataprotection@amigotours.com</a> stating their request. Once received, the associated information will be deleted.&nbsp;

DELETING FACEBOOK DATA

For the purposes of this Privacy Notice, the following terms shall have the meanings set forth below:<ul><li>I. "Privacy Notice": means this Privacy Notice as it may be modified, supplemented, or restated from time to time.</li><li>II. "Cookies": Text files that are automatically downloaded and stored on the user's computer hard drive when browsing a specific website or Internet portal, allowing the Internet server to store certain data, including information about your preferences and browsing patterns.</li><li>III. "Personal Data": Any information or data related to an identified or identifiable individual, such as name, nationality, address, year of birth, age, phone number, email address, and RFC (Tax ID); and for legal entities, corporate name, articles of incorporation, names of representatives, positions, email addresses, address, RFC, and certificates of compliance with tax or labor obligations.</li><li>IV. "Sensitive Personal Data": Information related to the most intimate aspects of individuals, such as racial or ethnic origin; health status (past, present, or future); genetic information; religious, philosophical, or moral beliefs; union membership; political opinions; and sexual preferences.</li><li>V. "Days": Pursuant to Article 3, Section VII of the Federal Law on Protection of Personal Data Held by Private Parties, the deadlines and timeframes stipulated in days shall be counted in **business days**.</li><li>VI. "ARCO Rights": The Rights of Access, Rectification, Cancellation, and Opposition, enshrined in the Law and referred to by their acronym.</li><li>VII. "Law": The Federal Law on Protection of Personal Data Held by Private Parties, published in the Official Gazette of the Federation on July 5, 2010, as it may be amended, supplemented, or restated from time to time.</li><li>VIII. "Regulations": The Regulations of the Federal Law on Protection of Personal Data Held by Private Parties, published in the Official Gazette of the Federation on December 21, 2011, as they may be amended, supplemented, or restated from time to time.</li><li>IX. "Website": The website owned by us: https://amigotours.com</li><li>X. "Transfer": Any communication of personal data within or outside Mexican territory to a person other than the data subject, the responsible party, or the processor.</li><li>XI. "You": Any individual or legal entity who uses the Website or has a commercial or employment relationship with AMIGO TOURS.</li><li>XII. "Web beacons": An image used exclusively to quantify the number of visits or monitor user behavior.</li></ul>

Privacy Policy