This privacy notice hereinafter “THE NOTICE” is issued in compliance with the provisions of Article 15 of the Federal Law for the Protection of Personal Data in Possession of Individuals hereinafter “LFPDPPP”, and its correlatives of the Regulation of the Federal Law for the Protection of Personal Data in Possession of Individuals hereinafter “THE REGULATION” and is made available to users who submit personal data or information through our website www.smileandgo.mx owned by SMART SHUTTLE, S. A. de C.V. its subsidiaries, affiliates, affiliates, controlled or controlling companies, hereinafter “Smart Shuttle”, this notice may be amended or updated from time to time to reflect the changes in the privacy policy of SMART SHUTTLE, S. A. de C.V. its subsidiaries, affiliates, controlled or controlling companies, hereinafter “Smart Shuttle”.A. de C.V. its subsidiaries, affiliates, subsidiaries, affiliates, controlled or controlling companies, hereinafter “Smart Shuttle”, this notice may be amended or updated from time to time to reflect changes in our practices with respect to the processing of your information or changes in applicable law.

You should read this privacy notice and check this page regularly to ensure that your privacy is protected.

1.- Responsible for the Protection of your PERSONAL DATA

Smart Shuttle, domiciled at Calle Acceso Sm. 301, Manzana 79, Lote 79, int. 27-A, between Calle Monte Líbano and Monte Campestre, Cancún Quintana Roo C.P. 77560, in the city of Cancún, Quintana Roo, as the party responsible for the processing of personal data, observes the principles of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility, as established by the LFPDPPP.

2.-Means of contact

To contact us, you must submit a request written in Spanish language, addressed to the PERSONAL DATA PROTECTION OFFICE of Smart Shuttle and send it by e-mail to the following address: datospersonales@smartshuttle.mx or by mail to Calle Acceso Sm. 301, Manzana 79, Lote 79, int. 27-A, between Monte Líbano and Monte Campestre, Cancún Quintana Roo C.P. 77.560

3.- Data collected and means of obtaining Personal Data

The personal data we collect from users to comply with the purposes described in this “NOTICE” are collected directly, when you provide them to us personally through our ticket offices, on our Website, mobile applications, Smart Shuttle portals, by telephone and email and when we obtain information through other sources of public access permitted in the LFPDPPP and its Regulations.

The data that we collect directly, in our Web Site or at the moment of contracting a service or when making use of this one are the following:

1. Full name and surname;
2. Details of purchases on our Web Site;

• Gender (male or female);

1. Date of birth;
2. Schooling;
3. Customer number;

• Nationality;
• Phone;

1. Cell phone number;
2. E-mail;
3. Work or personal address;

• Age, and
• Official identification.

For legal entities, they are as follows:

1. name or company name,
2. articles of incorporation,

• document(s) showing the powers of the legal representative or attorney-in-fact,

1. registered office,
2. proof of address,
3. official identification of the representative or legal proxy,

• signature of the attorney-in-fact or legal representative,
• RFC,

1. tax domicile and account number.

In addition, we may collect the following information on our Web Site:

1. Data, information or statistics of the services obtained;
2. The approximate location of the User through the IP address of the electronic equipment through which the User accessed our Web Site;

• Identification or registration number for associated advertising;

1. Type of device used to access the Web Site;
2. Information collected through the use of cookies, javascript or any other technology.

Since the LFPDPPP allows other sources of information such as physical or electronic telephone and service directories, the data that we can obtain by such means are name and surname, telephone, e-mail and physical address.

As for the data of a patrimonial or financial nature such as the Federal Taxpayers Registry (RFC), fiscal address, credit or debit card number, expiration date of the credit or debit card, security number of the credit or debit card and name of the credit or debit card holder, by using this information to purchase any of our products or services, you give your express consent for the processing of this data in accordance with the provisions of Article 8 of LFPDPPPPP.

All personal data collected except those of a patrimonial nature may be used to offer and improve our services, surveys, advertising, offers, promotional campaigns, marketing for tour and excursion packages and any other tourist service.

4.- Transfer of personal data, national and international.

Pursuant to Articles 36 and 37 of the LFPDPPP your personal data may be transferred and/or shared in the following cases:

• Controlling, subsidiary or affiliated companies under common control of Smart Shuttle, or to a parent company or any company in the same group as Smart Shuttle that operates under the same internal policies and processes;
• When the transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the owner, by the data controller and a third party;
• When the transfer is necessary for the maintenance or fulfillment of a legal relationship between the responsible and the holder such as Suppliers, Banking and Credit Institutions, and among others.

It is important to note that third parties to whom your personal data is transferred will be bound by the same terms of this Privacy Notice and will comply with the corresponding security and confidentiality measures.

The User’s data may be transferred when the transfer is necessary or legally required by a judicial authority for the procurement or administration of justice when the transfer is necessary for the recognition, exercise or defense of a right in a judicial process.

5Purposes of the Personal Data collected.

Your personal data will be used for the following purposes:

1. Purposes that gave rise to and are necessary for the existence, maintenance and fulfillment of the legal relationship between the holder and Smart Shuttle, such as the provision of the service requested; for purposes of monitoring, updating and confirmation of the products and / or services contracted and for billing purposes;
2. Secondary purposes such as statistics, security of persons, credit and payment validation, fraud risk assessment of transactions, purchase history, marketing in order to contribute to the improvement of communication and customer services provided to users, as well as to offer the range of products and services marketed by Smart Shuttle and to communicate promotions.

In the event that you purchase any product and/or service offered by Smart Shuttle, as contemplated in point i) of the preceding paragraph, your data will be used additionally to evaluate the quality of service and conduct studies on consumption habits and preferences. For the purposes of your safety and that of other customers, when using any of our services, you may be videotaped or photographed, so you are informed that the images from the video recordings will be protected by LFPDPPP and its Regulations.

In case you wish to OPPOSE the processing of your personal data for the purposes described above, please send an email to datospersonales@smartshuttle.mx, or to Acceso Supermanzana 301, Manzana 79, Lote 79, int. 27-A, between Monte Líbano and Monte Campestre streets, Cancún, Quintana Roo, stating the purpose or secondary purposes to which you object.

6.-ARCO Rights

Article 28 of the LFPDPPP grants four rights to be exercised:

• The User has the right to access his/her personal data held by the responsible party and to know the Privacy Notice and its purposes.
• The User has the right to rectify their data if it is inaccurate, incorrect or outdated.
• The User has the right to cancel his/her personal data when he/she considers that they are not being used for the fulfillment of the purposes established in this Privacy Notice.
• The User has the right to object to the processing of his/her personal data for any of the purposes set forth in this Privacy Notice.

The User may exercise the rights described above through the procedure established in section 7 of this Privacy Notice; it is important to mention that the exercise of any of the “ARCO RIGHTS” does not prevent the exercise of any other right.

7.- Mechanisms for the exercise of ARCO Rights

The exercise of the “ARCO RIGHTS” as well as the revocation of your consent for the processing of your personal data will be made through the presentation of the respective request, which in writing and in Spanish language must be submitted by the owner of the personal data or his legal representative by e-mail to the address datospersonales@smartshuttle.mx or to Acceso Supermanzana 301, Manzana 79, Lote 79, int. 27-A, between Monte Líbano and Monte Campestre streets, Cancún, Quintana Roo; to the attention of the above mentioned OFFICE.

Your request must indicate full name and surname, address or e-mail address to receive notifications, a simple, legible and valid copy of your official identification or in case of using electronic means, attach the digitalized version of the same (scan), in case the request is submitted by your legal representative, you must attach to your request the official documents proving such representation, indicating the e-mail or physical address you designate for notifications and a contact telephone number.

In the event that the information provided in your request is incorrect or insufficient to fulfill it, or if the corresponding supporting documents are not provided, you will be requested within five business days of receipt of your request to provide the elements or documents necessary to process it. You will have ten business days to respond to such request, counted from the day after it has been issued by the data protection office of Smart Shuttle. If you do not respond to such request within the time limit granted, your request will be deemed not to have been submitted.

Once the above requirements have been met, within a maximum period of twenty working days from the date of receipt of your request for “ARCO RIGHTS”, as well as revocation of the processing of personal data, Smart Shuttle’s data protection office will respond to your request by e-mail to the e-mail address you have indicated in the request itself, or by sending a letter to the physical address you have indicated for such purposes (the twenty days will be considered fulfilled at the time of delivery of the document to the postal service). If the request is granted, it will be effective within fifteen working days following the date on which the response to the request is communicated.

8.- Modifications to this privacy notice.

Smart Shuttle reserves the right to make changes or updates to this “NOTICE” at any time. The modifications that are made will be made available to users through any or some of the following means: visible announcements in our stores, via our website, mobile application, via email to the most recent address we have of you, by means of posters, sound recordings, video or personally through our managers at the time of going to any of our facilities.

9Information on the Internet.

We inform you that when you access our Internet Portal, we receive information regarding your “cookies” (term defined in the Definitions section) and “web beacons” (term defined in the Definitions section) to obtain information such as: your browser type and operating system, the Internet pages you have recently visited, the links you have recently followed, the IP address of your computer, the site you closed before entering our Internet portal.

Therefore, you accept the use of own and third party cookies to analyze your navigation and offer a more personalized service according to your interests. If you wish to know our Cookies policy of click aquí.

10Sensitive personal data

We inform you that Smart Shuttle does not collect or process sensitive personal data.

11Use of mechanisms on remote media

Use of mechanisms in remote or local means of electronic, optical or other technology that allow the collection of personal data automatically or simultaneously with the time the holder makes contact with them.

Smart Shuttle may use for the purposes referred to in paragraph 4 of this “NOTICE”, cameras or video recorders to obtain your image, which will be retained in the databases for a period of 10 calendar days, after which the photograph or video will be formatted or deleted.

12Express acceptance of the Privacy Notice.

If the User does not expressly object to this notice and/or its updates, it is understood that he/she has given his/her tacit consent in terms of article 8 of the LFPDPPP. Smart Shuttle suggests reading this Privacy Notice, since, by providing your data by any means, constitutes acceptance of this Privacy Notice.

Definitions

For the purposes of this “NOTICE” the following is understood:

Cookies. -Cookies are text files that are automatically downloaded and stored on the hard disk of the user’s computer equipment when browsing a specific page or Internet portal, which allow the Internet server to store certain data, including preferred pages to view on the Internet, some keys and passwords.

Web beacons. Images inserted in Internet pages or portals, as well as in e-mails, which can store information such as the user’s IP address, time of interaction on websites, among others.

Days. -By provision of Article 3° in its section VII of the Federal Law for the Protection of Personal Data in Possession of Individuals, the terms and times stipulated in days, will be counted in working days.

ARCO Rights. -These are the Rights of Access, Rectification, Cancellation and Opposition, enshrined in the LFPDPPP, which by its acronym form that word.

Law. -Refers to the Federal Law for the Protection of Personal Data in Possession of Individuals, published in the Official Gazette of the Federation on July 5, 2010.

Regulation. -Refers to the Regulation of the Federal Law for the Protection of Personal Data in Possession of Individuals, published in the Official Gazette of the Federation on December 21, 2011.

Transfer. -Any communication of personal data within or outside the Mexican territory, made to a person other than the owner, the responsible party or the person in charge.

Date of last modification: January12 2022.