Comprehensive Privacy Notice of Hotel Posada Real Ixtapa

1. Hotel Posada Real Ixtapa is located at Boulevard Ixtapa, s/n, lote 6, Zona Hotelera, Municipality of Zihuatanejo de Azueta, Guerrero, C.P. 40884, Mexico.

For the purposes of this Privacy Notice, we inform you that the party responsible for processing the personal data of the guests of Hotel Posada Real Ixtapa (the Data Controller) is Promotora Turística Posada Real, S.A. de C.V., located at Paseo del Pedregal No. 59, Col. Jardines del Pedregal, C.P. 01900, Mexico City.

2. What is the Privacy Notice?

Pursuant to Article 2, Section I, of the new Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), in force since March 21, 2025, the Privacy Notice is the document, whether physical, electronic or in any other format, generated by the Data Controller, which must be made available to the Data Subject (the guests) from the moment their personal data is collected.

3. In accordance with Article 14 of said Law, the Data Controller is required, through the Privacy Notice, to inform the Data Subject of the main characteristics of the processing to which their personal data will be subject, in order to inform them of the purposes of such processing so that the Data Subject can make informed decisions in this regard.

4. As established in Articles 1 and 15 of the current LFPDPPP, the purpose of this Privacy Notice is to ensure that the personal data of the Hotel's guests is used in a legitimate, controlled and informed manner, in order to guarantee people's privacy and their right to informational self-determination.

5. Personal Data

For the above purposes, the following are considered Personal Data necessary to provide our service:

• first and last name(s),
• official identification,
• address,
• home, mobile and/or work phone number,
• marital status,
• signature,
• email address,
• gender,
• age,
• date of birth,
• nationality,
• occupation,
• name of workplace and position,
• name(s) and details of third parties in case of emergency.

6. Sensitive Personal Data

Sensitive Personal Data is data that belongs to the most intimate sphere of the Data Subject, such as religious beliefs, health status, racial or ethnic origin, genetic information, among others. For the purposes of the services we provide to our guests, the sensitive data that must be provided is:

• your health status, in order to look after your health protection and that of the people at the Hotel.

We do not collect sensitive data, except in cases where the Data Subject requests special meals, emergency medical services or other cases (Art. 3, Section VI and Art. 8).

7. The Data Subject is responsible for the accuracy of their Personal Data and Sensitive Personal Data.

8. The purpose of the Personal Data is to manage everything related to the present and future provision of:

• lodging services
• restaurant services
• banquet services
• event planning services
• tourism and commercial services
• sending advertising to inform you about new services and products developed by the Hotel.

9. Data transfers to third parties

In general, Personal Data will be transferred to third parties that are other hotels of the group, namely Hotel Posada Real Los Cabos and Hotel Posada Real Puerto Escondido. It will also be transferred when there is a legal obligation requiring the Data Controller to provide the Data Subject's Personal Data, under the terms of Article 36 of the LFPDPPP.

10. ARCO Rights

These rights mean that you are entitled to Access, Rectify, Cancel or Oppose (ARCO) the processing of your data, as provided in Articles 22 and 28 of the LFPDPPP. The procedure to exercise them is as follows:

• Send a written request to the Data Controller's email address: datos.ixtapa@posadareal.com.mx
• Include your full name, identification document and a clear description of the data regarding which you wish to exercise your rights.
• The hotel will respond within 20 business days (Art. 31 LFPDPPP).

11. Use of Technological Means

Please note that we use video surveillance cameras in common areas, and cookies on our website to improve your experience. These mechanisms are used solely for security and functionality purposes (Art. 9, Sections IV and V).

12. Changes to the Privacy Notice

The Data Controller reserves the right to make changes or updates to this Notice, which will be communicated to you through:

• A notice posted at the Front Desk
• Our website: hoteles-posada-real.com.mx.

13. Data Protection Authority

If you believe that your right to the protection of personal data has been violated, you may file a complaint with the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance).

14. Consent

The Data Subject agrees to this Privacy Notice or its simplified version when they: a) sign this Notice, b) accept the services provided at the Hotel, or c) provide the data necessary for the provision of the services.