Privacy Notice

Data Controller

We hereby inform you that we are responsible for processing the personal data you provide. Such data will be protected in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations and the Privacy Notice Guidelines.

You may contact us to exercise your ARCO rights or with any questions related to the handling of your personal data through our Personal Data Protection department, by email at ivg@investvacaygroup.com.

Personal Data We Collect

We collect your data primarily through the vivesofia.com platform, by email, in person and directly, via WhatsApp or through forms. We may also collect data indirectly from sources permitted by law.

Contact Information

• First and last names of the client or person connected with the service.
• Email address.
• Address.
• Telephone numbers.

Identification Information

• Full name.
• Corporate or business name.
• Corporate documents (articles of incorporation, powers of attorney, compliance opinions, etc.).
• Nationality.
• Photograph.
• Marital status.
• Sex.
• Handwritten signature.
• Occupation.
• Mexican Federal Taxpayer Registry (RFC) and tax status certificate.
• Proof of address.
• Mexican population registration code (CURP).
• Information contained in voter identification credentials.
• Passport.

Financial and Asset Information

We collect this information to formalize agreements and provide real-estate and hospitality services:

• Assets, rights, liens or obligations that can be assigned a monetary value.
• Tax information.
• Credit history, income and expenses.
• Bank accounts.
• Credit and/or debit card number.

Sensitive Personal Data

Only when the service or product requires it, and with your prior express consent, we may process:

• Ethnic or racial origin.
• Current or future health status.
• Genetic information.
• Religious, philosophical and moral beliefs.
• Union affiliation.
• Political opinions.
• Sexual preference.
• Marital status.

When you visit our offices, we may also capture your image through security cameras located at specific points on the premises for security and access-control purposes.

Purposes of Processing

Primary Purposes

Your data is necessary for the creation, maintenance and fulfillment of our legal relationship with you:

• Preparation, signing and formalization of agreements.
• Information repositories.
• Delivery and performance of real-estate and lodging services or products.
• Communications related to the service or product provided.
• Proper delivery of the service or product.
• Issuance of invoices and compliance with applicable tax laws.
• Management and oversight of the service or product.
• Ensuring collection.
• Identifying your needs and preferences, and personalizing the service.
• Preventing and detecting abuse, fraud or identity theft.
• Verifying your identity and the accuracy of information.
• Internal coordination and timely responses to inquiries.

Secondary Purposes

Additionally, we will use your personal information for purposes that are not necessary for the relationship, but allow us to provide you with better service:

• Marketing: sending emails and communications about services, products, promotions, offers and surveys.

Refusal to allow the use of your data for secondary purposes will not be grounds for denying the services and products you request from us.

Data Transfers

RDS Elite Condos PDC, S.A. de C.V., as well as its processors, does not transfer personal data to third parties. All processing is carried out by this entity, except in cases expressly provided for in Mexico's Federal Law on the Protection of Personal Data Held by Private Parties.

Information Security

We have physical, technical and administrative security measures at every stage of processing to protect your data against damage, loss, alteration, destruction or unauthorized access. If a security breach occurs, we will notify you at the email address you provided.

All data is handled under strict confidentiality measures. This obligation remains in effect even after the service has ended.

ARCO Rights and Withdrawal of Consent

You have the right to Access your data; to Rectify it if it is outdated or inaccurate; to Cancel it when you believe it is not being processed in accordance with the law; or to Object to its processing for specific purposes. You may also withdraw the consent granted, provided that the data is not necessary for the legal relationship or for security reasons.

Request Requirements

• Name of the data subject and address or means by which to communicate the response.
• Documents proving your identity or, where applicable, representation.
• A clear and precise description of the data for which you wish to exercise your right.
• Any other information that helps locate the data.

To exercise your rights, you may use the form that can be requested by email at ivg@investvacaygroup.com.

How to Submit Requests

• By certified mail with acknowledgement of receipt to the controller's address.
• By email at ivg@investvacaygroup.com, provided that it is possible to identify the data subject through authentication mechanisms permitted by legal provisions.

Response Timeframes

If the information is incomplete, we will request the missing information within 5 business days after receipt; you will have 10 business days to respond. We will respond to the request within 20 business days. If granted, we will make it effective within the following 15 business days. Timeframes may be extended once, for equal periods, when circumstances justify it.

Limiting the Use or Disclosure of Your Data

To limit the use and disclosure of your information, the following options are available:

• Registration with PROFECO's Public Registry to Avoid Advertising (REPEP). More information is available at www.profeco.gob.mx.
• Sending an email to ivg@investvacaygroup.com stating that you do not wish to continue receiving advertising.

Changes to This Privacy Notice

This notice may be modified, changed or updated at any time as a result of new legal requirements or service needs. We will notify you of changes through the email address you have provided or through the Privacy Notice link published at vivesofia.com, so that you are always aware of our current policies.

Any questions may be sent to ivg@investvacaygroup.com.