Tsalach Royal Group, S. de RL de CV, better known as Tsalach Real Estate; with address at Carretera Federal Cancún – Playa del Carmen, lot 1, block 46, zone 1, Ejidal neighborhood, Playa del Carmen, municipality of Solidaridad, postal code 77710, Quintana Roo, Mexico; and website https://grupotsalach.com/ ; is responsible for the use and protection of your personal data. In this regard, we inform you of the following:

For what purposes will we use your personal data?

The personal data we collect will be used for the following purposes, which are necessary for the service you request:

• Execute purchase and sale agreements and trust agreements.

• Manage contracts for the transfer of ownership.

• Generate commercial commission contracts.

• Produce real estate brokerage contracts.

• Integrate customer files.

• Transfer documentation to sellers and/or trustors; buyers and/or trustees; Notaries and/or Banks.

• Offer real estate products and services.

Refusal to allow the use of your personal data for these purposes will not be grounds for denying you the services and products you request or contract with us.

What personal data will we use for these purposes?

To carry out the purposes described in this privacy notice, we will use the following personal data:

• Name.

• Marital Status.

• Federal Taxpayer Registry (RFC).

• Unique Population Registry Code (CURP).

• Place of birth.

• Birthdate.

• Nationality.

• Home.

• Private telephone.

• Cell phone.

• Email.

• Handwritten signature.

• Electronic signature.

• Age.

• Photography.

• Fingerprint.

• Immigration status.

• Residence rights.

• Movable property.

• Real estate.

• Tax information.

• Credit history.

• Income.

• Expenses.

• Bank accounts.

• Number of credit cards.

• Identification data.

• Contact information.

• Biometric data.

• Migration data.

• Asset and/or financial data.

With whom do we share your personal information and for what purposes?

We inform you that your personal data is shared within and outside the country with the following people, companies, organizations or authorities other than ourselves, for the following purposes:

If a legal relationship exists regarding the execution of purchase and/or trust agreements, purchase and/or trust contracts, or commercial commissions, we will transfer your personal data to those with whom such relationships are established without the need for consent, such as:

• Companies that have the same controlling person in their corporate administration and/or subsidiary companies.

• Promising sellers and promising buyers.

• Trustor promisors and trustee promisors.

• Sellers and buyers.

• Settlors and trustees.

• Principals or commission agents.

• Notaries.

• Banks.

How can you access, rectify or cancel your personal data, or oppose its use?

You have the right to know what personal data we hold about you, what we use it for, and the conditions of its use (Access). You also have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to have it deleted from our records or databases when you believe it is not being used appropriately (Cancellation); and to object to the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights.

To exercise any of your ARCO rights, you must submit the corresponding request through the following means:

• juridico@grupotsalach.com

Regarding the procedure and requirements for exercising your ARCO rights, we inform you of the following:

a) Through what means can the holder and, where applicable, their representative prove their identity, as well as the latter's legal capacity?

• Any request must be issued from the email address of the data subject where their personal data was originally sent to Grupo Tsalach.

b) What information and/or documentation should the application contain?

• Voting card or passport.

c) How many days will it take to respond to your request?

• 5 to 10 business days.

d) How will we communicate the response to your request?

• To the same email address from which the request was made.

e) In what media can the personal data that you request, if applicable, be reproduced?

• To the same email address from which the request was made.

The contact details of the person or department responsible for handling requests related to ARCO rights are as follows:

a) Name of the person or department responsible for personal data:

• Legal department of Grupo Tsalach.

b) Address:

• Federal Highway Street Cancun – Playa del Carmen, block 46, lot 1, zone 1, Ejidal neighborhood, Playa del Carmen town, municipality of Solidaridad, postal code 77710, in the state of Quintana Roo, country Mexico.

c) Email:

• juridico@grupotsalach.com

You can revoke your consent for the use of your personal data:

You may revoke any consent you have given us for the processing of your personal data. However, please note that we may not be able to fulfill your request or immediately cease processing your data in all cases, as we may be legally obligated to continue processing your personal data. Furthermore, you should be aware that, for certain purposes, revoking your consent will mean that we can no longer provide you with the service you requested, or it will result in the termination of your relationship with us.

To revoke your consent, you must submit your request through the following means:

• juridico@grupotsalach.com

Regarding the procedure and requirements for revoking your consent, we inform you of the following:

a) Through what means can the holder and, where applicable, their representative prove their identity, as well as the latter's legal capacity?

• Any request must be issued from the email address of the data subject where their personal data was originally sent to Grupo Tsalach.

b) What information and/or documentation should the application contain?

• Passport or voting credential.

c) How many days will it take to respond to your request?

5 to 10 business days.

d) How will we communicate the response to your request?

• To the same email address from which the request was made.

How can you limit the use or disclosure of your personal information?

To enable you to limit the use and disclosure of your personal information, we offer the following options:

• Express request to juridico@grupotsalach.com specifying the limitations you require regarding the disclosure of your personal information.

How do we use tracking technologies on our website?

We inform you that our website uses cookies, web beacons, and other technologies to monitor your online behavior and provide you with a better browsing experience. The personal data we collect through these technologies will be used for the following purposes:

• To offer users real estate products similar to their searches and/or preferences.

The personal data we obtain from these tracking technologies are as follows:

• Identifiers, username and passwords for a session.

• User's preferred language.

• Region where the user is located.

• User's browser type.

• User's operating system type.

• Date and time of the start and end of a user session.

• Web pages visited by a user.

• Searches performed by a user.

• Advertisement reviewed by a user.

• Lists and consumption habits on shopping pages.

How can you find out about changes to this privacy notice?

This privacy notice may be modified, changed or updated due to new legal requirements; our own needs related to the products or services we offer; our privacy practices; changes in our business model; or other reasons.

We are committed to keeping you informed about any changes to this privacy notice through https://grupotsalach.com/.

The procedure through which notifications regarding changes or updates to this privacy notice will be carried out is as follows:

Go to https://grupotsalach.com/ and if there are any changes to the privacy notice, a pop-up ad will appear informing you.