Comprehensive Privacy Notice

Personal Data We Will Collect

To carry out the purposes described in this privacy notice, we will use the following categories of data:

• Identification: Full name.
• Contact: Email, telephone, postal address (State, City, Zip Code).
• Browsing Data: IP address, browser type, cookies, and usage data (diagnostic and analytical).

Purposes of Data Processing

The data will be used for the following purposes:

Primary Purposes (Necessary for the service):

• To provide, operate, and maintain the website and our services.
• To notify you about changes to our platform or services.
• To provide technical support and customer service.
• To detect, prevent, and correct technical issues or illicit activities.
• To comply with legal obligations before competent authorities.

Secondary Purposes (Not necessary, but useful):

• Sending newsletters.
• Sending advertising material, special offers, and event information.
• Conducting statistical and market analysis to improve our offering.

Do you not wish to receive advertising? You may object to the secondary purposes by sending an email to atencion@tusamexico.com. Your refusal will not be a reason to deny you the service.

Data Transfer

We inform you that your personal data may be shared with:

• Service Providers: Third parties who process data on behalf of TUSA (such as Google Analytics for analysis or payment platforms) with the sole purpose of providing the contracted service.
• International Transfer: Your data is transferred and stored in the United States of America. By using the site, you consent to this international transfer necessary for the technical operation of the service.
• Authorities: In the event of a legal or judicial requirement to protect the rights of TUSA or third parties.

The personal data of the data subject may be processed without their consent when: (i) it is provided for in a law or treaties to which Mexico is a party; (ii) the personal data appears in publicly accessible sources; (iii) the personal data is subjected to a prior dissociation procedure; (iv) it has the purpose of fulfilling obligations derived from a legal relationship between the data subject and the responsible party; (v) there is an emergency situation that could potentially harm an individual in their person or property; (vi) they are indispensable for medical care, prevention, diagnosis, the provision of health care, medical treatments, or the management of health services, provided the data subject is not in a condition to grant consent, under the terms established by applicable laws and legal provisions, and such data processing is carried out by a person subject to professional secrecy or equivalent obligation; and/or (vii) a resolution is issued by a competent authority.

ARCO Rights and Revocation of Consent

At all times, the data subject has the right to access, rectify, and cancel their personal data, as well as to oppose the processing thereof or revoke the consent granted to us to cease its use; for which you must request our "ARCO Rights Exercise Request (Access, Rectification, Cancellation, and Opposition)" form to our Legal Department by sending an email to the address: atencion@tusamexico.com with the subject "ARCO Form" and we will gladly send you the corresponding form to be duly completed and returned to us by the same means.

To process the request, the data subject must attach a copy of their valid official identification (voter credential, Passport issued by the Ministry of Foreign Affairs, National Military Service Card, or Professional License) and exhibit the original for collation, in order to authenticate the identity of whoever exercises any of the ARCO rights. In cases where the exercise of ARCO rights is carried out through the legal representative of the data subject, in addition to accrediting the identity of both, the corresponding power of attorney, proxy letter signed before two witnesses, or declaration in personal appearance by the data subject must be delivered. When seeking to exercise the right of rectification, documentation accrediting the requested change according to the personal data to be rectified must be delivered.

The response to the request will be provided within 20 business days counted from the date on which it was received. TUSA México may extend this period by up to 20 additional business days when the case warrants it, subject to prior notification to the data subject. The resolution adopted by COLIVERS will be communicated to the data subject or legal representative, as applicable, through the option chosen from those established in the ARCO Rights Exercise Request form.

In cases where the data subject wishes to exercise the right of Access to their Personal Data, the requested information will be provided through the means established in the “ARCO Rights Exercise Request” form by the data subject, and in the event that COLIVERS does not hold their Personal Data, we will inform you through the means by which the request was made. For any questions or clarification regarding this procedure, please send an email to our customer service area at the following address: atencion@tusamexico.com.

5. Use of Cookies and Tracking Technologies

We use cookies and other technologies to monitor your behavior as a user and provide a better experience. These include:

• Session Cookies: For technical operation.
• Preference Cookies: To remember your settings.
• Security Cookies: To protect your account.

You can disable the use of cookies in your browser configuration, although this may limit some functions of the site.

6. Information Security

TUSA implements administrative, technical, and physical security measures to protect your data. However, since no internet transmission system is 100% infallible, we commit to acting with due diligence in the event of any breach.

7. Applicable Legislation

This privacy notice shall be governed by and construed in accordance with the federal law on the protection of personal data held by private parties and the applicable laws of the operating country.

8. Changes to the Privacy Notice

We reserve the right to make modifications or updates to this privacy notice at any time, to address legislative novelties, internal policies, or new requirements for the provision or offering of our products and services. In such a case, TUS México will publish these modifications on the website.

In any case, we recommend that you review our privacy notice each time you use our website, in order to be aware of the changes, modifications, or updates made to it. This Privacy Notice is governed by the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and other applicable legal provisions in the United Mexican States.

Any changes will be published directly on our website: atencion@tusamexico.com.