Privacy notice

In accordance with that which is set forth in the Federal Law for the Protection of Personal Data Possessed by Third Parties (the Law) and its Rules and Regulations, and with the goal of safekeeping the integrity, privacy, and protection of your personal data, "RIDE MOVILIDAD Y SERVICIOS CONEXOS DE MEXICO", (henceforth "THE COMPANY") places the following Privacy Notice at your disposal:

Information on the Party responsible.

"RIDE MOVILIDAD Y SERVICIOS CONEXOS DE MEXICO S.A. DE C.V.", (henceforth "THE COMPANY"), indicates the following address for the purposes of the Privacy Notice herein "Boulevard Luis Donaldo Colosio, Manzana 26, Kilómetro 350, Lote 03-01, Local 107-C, Planta Alta, Supermanzana 311, Alfredo V. Bonfil, Benito Juárez, Quintana Roo. C.P. 77560".

Personal Data.

"THE COMPANY" may collect personal data from you in the following ways, as needed for the proper rendering of its services: when you provide it to us directly, when you visit one of our websites or when you use our online services, when we take a call from you over the phone, when it is collected through our agents, promoters, commissioners or commercial partners and when we obtain the information through other sources that are allowed by Law.
The personal data that "THE COMPANY" may collect from you can include, but is not limited to the following:

1) Identification information: full name; copy of official photo identification (passport, voter's card, professional ID); age; date of birth; copy of birth certificate; copy of marriage certificate (if applicable); nationality; copy of immigration document (if applicable); email; personal phone number, work phone number, cellphone number; copy of the Federal Register of Taxpayers; copy of the Unique Population Registration Code (CURP); social security number; copy of Mexican Institute of Social Security card; certificates of education or certificates of studies; certificates or acknowledgements of competency in foreign language and/or any other documentation or information relating to the contractual relationship existing, or which may come to exist, between THE COMPANY and yourself, as owner of the personal data.

2) Employment information: occupation, employee number; category of employee and post; area or department; wages, income and deductions; copy of the acknowledgement of hiring, firing or adjustment of wages from the Mexican Institute of Social Security (IMSS); copy of the acknowledgement of income from the last job; photograph; personal references; emergency contact data; information relating to beneficiaries or financial dependents, which can include full name, date of birth and other identification information, such as copies of the birth certificates of financial dependents; curriculum vitae; information regarding the employee's performance; acknowledgements from prior employment; copy of proof of enrollment in AFORE (if applicable); copy of acknowledgements of mortgages (INFONAVIT)(if applicable), letters of recommendation and/or any other documentation or information relating to the contractual relationship existing, or which may come to exist, between THE COMPANY and yourself, as owner of the personal data.

3) Estate information: credit history, income and expenditures, payroll receipts, bank accounts, banking statements, inter-banking CLABE, insurance, afore, bonds, any sort of securities issued and/or any other documentation or information relating to the contractual relationship existing, or which may come to exist, between THE COMPANY and yourself, as owner of the personal data.

4) Biometric data through the capture of photographic images, video, or any other means of technology allowing for the capture of facial or fingerprint traits. The data submitted via Voter's ID shall be verified with the Federal Electoral Institute.

Purpose of Handling the Personal Data.

THE COMPANY collects, uses, stores or transfers your personal data, for which we obtained your consent in or by THE COMPANY's name prior to handling it, and in strict adherence to that which is set forth by the Law, in order to carry out the following:

Purpose of the identification and estate information.

Identification purposes.

Purposes of formalizing a relationship of employment, rendering of services, contact via phone or email with the purpose of sending you information pertaining to the products, services contracted or to be contracted, promotions and invitations from THE COMPANY to various courses and activities.

Fulfilling those obligations that are derived of the legal relationship in existence or to exist, between yourself as the owner of the personal data, and THE COMPANY as the party responsible for handling it.

Formalizing the transactional and/or contractual process with you, be it as an employee, collaborator, client, consumer or vendor.

Completing the file on the owner of the personal data, be it as an employee, collaborator, client, vendor or consumer.

Rendering of the services contracted or to be contracted, under an employer-employee, commercial, mercantile and/or consumer relationship; as well as carry out the acquisition of the rights or products pertaining thereto.

The fulfillment of administrative, employment, operative, legal, fiscal, civil, mercantile, penal obligations, amongst others, derived of the employer-employee, association, transactional and/or contractual relationship between yourself and THE COMPANY.

Receiving publicity via printed or electronic means, including communications with the purpose of wishing a happy birthday, online marketing or telemarketing of products and services.

Purpose of the employment information:

Evaluation as a possible candidate to occupy a vacant post.

Carrying out contracting.

Fulfilling obligations derived of the employment relationship that is created with you, by means of an employment contract.

The administration of personnel; creating files on employees; payroll payment and administration; payment of fringe benefits, contributions, salaries and benefits, bonuses, reimbursements, pensions, insurance and others.

Contracting of insurance; documentation and managing the allocation of computing and communications assets; internal audits; creation of an employee email account; creation of the company directory; assigning tools for work; assigning codes and passwords, ensuring compliance with obligations of confidentiality and other employment obligations; verifying personal and work references; contacting your family members, financial dependents and/or beneficiaries in the event of an emergency.

The fulfillment of legal, fiscal, employment, social security obligations, amongst others, derived of the contractual relationship between you as an employee or possible employee, and THE COMPANY as the one responsible for your personal data.

Receiving publicity via printed or electronic means, including communications with the purpose of wishing a happy birthday, online marketing, or telemarketing of products and services.

The personal data of candidates who do not take a place at THE COMPANY shall be eliminated immediately and shall not be kept in any database.

Limiting the Use or Sharing of Personal Data.

THE COMPANY has security, technical, administrative and physical measures in place that are needed to protect your personal data and avoid damaging, losing, altering, destroying it, or unauthorized use, access or handling.

Only authorized personnel ("Department of personal data") who have fulfilled and observed the corresponding prerequisites for confidentiality may participate in handling your personal data. The "Department of personal data" is forbidden from allowing access to unauthorized persons and using your personal data for purposes other than those established in the Privacy Notice herein.

Transfer of Personal Data.

THE COMPANY may transfer your personal and sensitive personal data as needed for property security, rendering of services, within and even outside of the Mexican Republic, with parent, controlling, affiliated, subsidiary companies or some duly contracted vendor, such as companies that render medical, legal, insurance, bonding, security services, with whom THE COMPANY has a commercial or service relationship, including with other car rental agencies, and with whom we have executed a contract with clauses for confidentiality and protection of personal data.

You, as owner of the personal data, may manifest your consent or opposition with regard to the transfer of your personal data to any individual or corporate entity outside of THE COMPANY, including, without limit, clients, vendors and/or users, due to which we request you express your decision in the following paragraph:

I consent to my personal data being transferred to any individual or corporate entity outside of THE COMPANY, including, without limitation, other rental agencies, financial services companies, clients, vendors and/or users, in accordance with the terms and conditions of the Privacy Notice herein.
________Yes _________No.

For the purposes of the national or international transfer of data, THE COMPANY may do so without the need for consent from you, as owner of the personal data, in the event the transfer is needed in light of the manifestation of any of the hypotheticals established in article 37, section IV of the Federal Law for the Protection of Personal Data Possessed by Third Parties.

THE COMPANY is committed to ensure the fulfillment of all of the legal principles of protection surrounding the transfer of your personal data, as well as principles of Legality, Consent, Information, Quality, Purpose, Loyalty, Proportionality and Responsibility, contemplated in the Law and its Rules and Regulations.

Means of Exercising ARCO Rights

In accordance with the Law and its Rules and Regulations, you, as owner of the personal data, on your own behalf or through a legal representative who must correctly identify or accredit themselves, may at any time revoke the consent granted to THE COMPANY for the handling of your personal data, limit the use and sharing thereof, as well as exercise your access, rectification, cancellation and opposition rights (ARCO Rights), said request must be directed to the "Departamento de Datos Personales" of THE COMPANY and be submitted in writing to the following address " Boulevard Luis Donaldo Colosio, Manzana 26, Kilómetro 350, Lote 03-01, Local 107-C, Planta Alta, Supermanzana 311, Alfredo V. Bonfil, Benito Juárez, Quintana Roo. C.P. 77560.

When handling the prerequisites of the request, as well as its processing and the terms for response, THE COMPANY and you shall be governed by that which is set forth in The Law and its Rules and Regulations.

Modification or Elimination of registration data

You may exercise the rights of access, rectification, cancellation or opposition to the handling of your Data by submitting your request via the email [email protected], in writing, addressed to the Department of Privacy and Information Security.

A notification in writing confirming said changes shall arrive at your email within a term no longer than 20 days counting from the receipt of the request in accordance with article 32 of the Federal Law for the Protection of Personal Data Possessed by Third Parties.

It is understood that in order for Deal to handle any request referenced in this section in a correct and timely manner, the owner's request must contain at a minimum: (i) Full name of the owner, (ii) Contact number, (iii) Brief description of the object of the request, (iv) Reasons motivating the request. Our response to your request shall be sent within the term allowed by Law, to the email of the sender thereof. The user acknowledges and accepts that one of the purposes of the handling of their personal data is complying with the commercial obligations you maintain and/or shall maintain with Deal, due to which you may cancel and/or oppose the handling of personal data which might affect and/or restrict fulfillment thereof now or in the future.

Modifications to the Privacy Notice

Deal expressly reserves the right, under its exclusive discretion, to change, modify, add or eliminate parts of the Notice herein at any time. In such a case, Deal shall publish the modifications made to the Notice on the website www.dealrentacar.com.sv and shall indicate the date of the last version of the Notice on the top of the web page of said site. In the degree that the user does not request cancellation and/or oppositions of their personal data under the terms set forth above and continues accessing and/or using the Services partially or totally, it shall be implied that they have accepted and consented to such changes and/or modifications.

Upon providing their personal data to Deal, the user expressly acknowledges and accepts the Notice herein, including modifications or adjustments made to it from time to time, and grants their consent for Deal to proceed to process their personal data in the manner explained herein. If the user does not accept this Notice, they may exercise their rights conferred by Law, as described above.

FLEET CAR COMPANY MX is committed to ensuring the privacy of personal information obtained through its online services.

Protection

All data you type in, including the number of your credit card, name, address, telephone, amongst others, is encrypted under a sophisticated method using cutting edge technology and sent to our secure server. This data cannot be read in any way whatsoever during transmission. Upon receiving said data; we store it, encrypted, in a database kept on a computer that in inaccessible from the Internet, preserving security thereof after transmission.

Statistically, it is much safer to use a credit card on the Web than at a restaurant or store. We believe this is good news for anyone, however, we still take all possible precautions to protect the integrity of credit card data in any case.

When making a purchase or contracting at our virtual offices and stores, you can completely forget about the myths that have surged regarding fraud due to insecure transmission of personal data through the internet. For your safety, please do not send your credit card number via email since it does not travel encrypted.

Cookies

Cookies are small pieces of information that are sent by the website to the browser. They are stored on the hard drive of the equipment and are used to determine the preferences of users who access the website (www.dealrentacar.com.sv), as well as to track certain behaviors or activities. Cookies allow for the recognition of users, detecting the bandwidth they have selected, identifying the most prominent information, calculating the size of the audience and measuring some traffic parameters.

Confidentiality

When the user is on the website web (www.dealrentacar.com.sv), they will share their information with Deal Rent a Car unless the contrary is specified. Deal rent a car has no obligation whatsoever to keep confidential any other information provided by the user through bulletins and online conversations (chats), as well as through cookies, the foregoing based on the terms established in article 109 of the Federal Copyright Law and of article 76 bis, section I, of the Federal Law for Consumer Protection. The information may only be broadcast under special circumstances such as: identifying, locating or carrying out legal actions against persons entering into breach of the service conditions of the website www.dealrentacar.com.sv, cause damages to, or interfere in, Deal's rights, its properties, those of other users of the website or of any other person which might be negatively affected by said actions.

Deal will NOT sell, give away, facilitate or rent confidential information to third parties. If the user does not wish for their data to be shared, they may forego a determined service or abstain from participating in some promotions or contests.

Deal will NOT share confidential information with third parties, except by express authorization of its subscribers or when it is ordered to comply with certain court provisions via court order.

Confidentiality (Minors)

Safekeeping the information of minors is extremely important, due to which the data shall be minimal in order to render the services provided to this sector. Parents and tutors are recommended to provide guidance to the minors when navigating the internet and approve the sending of any sort of personal information.

Changes to the Privacy Notice

This Privacy Notice may be modified from time to time by THE COMPANY. Notice of said modifications shall be given in a timely manner through the following means:

1) Our website: www.dealrentacar.com.sv

2) Any means of oral, printed or electronic communications that THE COMPANY establishes for such purposes.

You, as owner of the personal data referenced in this Privacy Notice, sign in acknowledgement of having received it, and as a voluntary expression of your agreement with that which is contained in this document, in Cancun, Quintana Roo, Mexico on May 8th, 2021.

THE OWNER OF THE PERSONAL INFORMATION

_____________________________________________.

Full name and signature.

We hereby inform you that, for your safety, you at all times review that which is contained in this Privacy Notice. In the event of no response to a request for ARCO rights, or inconformity therewith, you may submit the corresponding Request for the Protection of Rights to the Federal Institute for Access to Information and Data Protection, under the dates and terms set forth by the Federal Law for the Protection of Personal Data Possessed by Third Parties and its Rules and Regulations.