The personal, patrimonial and/or bank data that we collect, through our physical branches in the country, our contact center or internet portal, will be used for the following purposes that are necessary for the service you request: 1. Provide the services and products that you have requested 2. Speed up the reservation and/or rental process, 3. Validate your identity, 4. Credit, 5. Customer service, 6. Invoicing, 7. Collection, 8. Compile reservation history, 9. Security and compliance of the obligations we have contracted with you.

The purpose of this Privacy Notice is to provide you with complete information on how we treat your personal data and how we use it, with the necessary precautions that the case requires, for the social purpose of our business.

The geographical scope of these Privacy Standards and the information process that is collected covers the entire territory of the Mexican Republic. Therefore, this Privacy Notice is not applicable in any way, for the treatment of the personal data information carried out by all those companies and dealers that operate with the brand and the “Avis” system, in other countries different to the United Mexican States.

Additionally, we will use your personal information for the following secondary purposes that are not necessary in the requested service, but that allow us and facilitate us to provide you with better service: 1. Perform periodic evaluations of our products and services in order to improve their quality, 2. Evaluate the quality of the service we provide, 3. To notify you about new services or products, which are related to those you already contracted or acquired with us, 4. Communicate about changes in them, 5.Marketing or advertising and 6. Commercial prospecting.

In case you do not want your personal data to be used for these secondary purposes, please indicate below: I consent to my personal data being used for the following purposes:

In case the lack of consent to a secondary purpose is not indicated, it is understood that the consent is expressly granted, the refusal to use your personal data for these secondary purposes may not be a reason for us to deny you the services and/or products that you request or contract with us.

To carry out the purposes described in this Privacy Notice, we will use the following personal data of Individuals: 1. Full name, 2. Sex, 3. Date of birth, 4. Marital Status, 5. Country of origin, 6 Federal Taxpayer Registry, 7. Private and/or fiscal domicile, 8. Landline and cell phone number, 9. Email, 10. Labor data (company name, position and seniority in it), 11. Data of your official identification or Passport and driver's license, 12. Bank details (number(s) of credit and/or debit card, name of the holder, expiration date and security code), 13. Autograph signature; in the cases of Legal Entities: 1. Corporate Name or Business Name, 2. Federal Taxpayer Registry, 3. Tax domicile, 4. Telephone Number(s), 5. Simple copy of the Articles of Incorporation (in the cases that apply), 6. Simple copy of the power of the Legal Representative (if applicable), 7. General data of your legal representative (Points to request from Individuals: 1, 2, 3, 4, 5, 8, 9, 10 and 12), 8. Copy of your annual tax return (if applicable), 9. Bank details.

Regarding the data of patrimonial or financial nature such as points: 6. and 2.Federal Taxpayer Registry, 7 and 3. Tax domicile, 12 and 9. Bank details (Number(s) of credit or debit card(s), expiration date, as well as the security number of them), when making use of said cards to pay for any of our products or services, it will be considered that you are giving us your express consent for the processing of this data.

We inform you that for no reason we collect sensitive data.

The personal data that we collect from you, for the purposes described above in this Privacy Notice are collected, Personally: When you visit, request or purchase any of the services provided in our branches; Direct: When you provide us with your personal data to request our services or hire any of them, either by telephone or, through electronic means such as emails, mobile applications, social networks, forms on our websites, Indirect: From any other commercially available source of information that is permitted by law.

As a general policy, we do not disclose or transfer any personal information that our users send or provide to us; this is with the desire to treat carefully the Personal Information, unless your prior authorization to make such transfer or that the latter is carried out in the special cases provided by law. Here are some of the circumstances in which your information may be disclosed and shared within the country with the following people, companies, organizations or authorities other than us, for the following purposes

Regarding transfers that require your consent, please indicate below if you grant it, in most cases, the transfer of information will only be limited to providing the email address, full name, age and nationality.

If it is necessary to disclose more Personal Data, we will notify you before making the transfer and except in those cases in which it is strictly necessary to provide various services or products you request, you can have full security and confidence that we will not transmit it from any mode to third parties, without your prior written consent.

I grant my consent for the following transfers of my personal data:

In case the lack of consent is not indicated, it is understood that the consent is expressly granted to carry out the transfer of your personal data.

"Avis" may transfer information without your consent on those websites where "Avis" considers as necessary the transfer of your personal data to identify, contact or take legal action against someone who may be violating the conditions of use of our websites or that could be causing damages and/or damages (either intentionally or accidentally) in the management and operation of our websites or any of the property rights of “Avis”, as well as in the cases established in the Article 37 of the Law.

The information we collect from you may be combined to help us in offering, providing and/or improving our services. The personal data of the owner and his authorized additional drivers will be kept in strict confidentiality, in accordance with the security, administrative, technical, physical and electronic measures, which we have implemented in our security policies and procedures, prohibiting its disclosure and limiting its use to third parties, in accordance with the provisions of this Privacy Notice.

You have the right to know which of your data we have, what we use them for and the conditions of use we give to them (Access). It is also your right to request the correction of your personal information in case it is outdated, inaccurate or incomplete (Rectification); the removal of it from our records or databases when you consider that it is not being used properly (Cancellation); as well as to oppose the usage of your personal data in those uses or purposes not related or required for the provision of the services and/or the corresponding legal relationships. (Opposition). Better known as ARCO rights.

Said rights may be exercised through the procedures implemented, considering the provisions of the Law; it is important to note that ARCO rights can only be executed by the owner of the data or his legal representative.

In order to offer a more agile service for you, you must do it using the “Request to exercise ARCO Rights” format that can be requested and physically presented at any of our branches within the Mexican Republic, directly at our Corporate Offices or via email with subject “ARCO Rights” to those responsible for Protection of Personal Data, who will verify that it contains the following:

a) Which information/documents should the request be accompanied with? You must fill out the form: "Request to exercise ARCO Rights", which includes: name of the owner of the data, telephone number(s), full address and an email to communicate the response to your request, the clear and precise description of the personal information data and/or the reasons for which one of the ARCO rights and any other element or document that facilitates the location of personal data, as well as a simple copy of the Official Identification of the owner or his legal representative to validate his identity.

In the case of a request for RECTIFICATION, the owner must also indicate the modifications to be made and provide the documentation that supports his request. In case the application does not comply with any of these requirements in a manner, the application will be rejected and the applicant will be informed. In the event that the application meets all the requirements, the process will continue according to the following procedure:

b) How long will we take to answer your request? Within a maximum period of 20 (twenty) business days, counting from the date when the request was received, a response will be given and, if applicable, it will be effective within 15 (fifteen) business days following the date on which the answer is communicated.

In the case of ACCESS requests, the delivery, prior accreditation of the identity of the applicant or legal representative, as appropriate, will proceed, which will be done in person and individually by the holder or his legal representative at the office where the request was received. The obligation of ACCESS to the information will be considered fulfilled when the personal data are made available to the holder; or, by issuing simple copies, electronic documents or any other means.

c) By what means will we communicate the response to your request? By the email address indicated in the owner's request.

Access, rectification, cancellation or opposition to processing the holder's personal data may be denied, in the following cases:

1. When the applicant is not the owner of the personal data, or the legal representative is not duly accredited for it; 2. When in the “Avis” database, the personal data of the applicant is not found; 3. When the rights of a third party are damaged, 4. When there is a legal impediment, or the resolution of a competent authority, that restricts access to personal data, or does not allow their rectification, cancellation or opposition, and 5. When the rectification, cancellation or opposition has been previously made.

The person in charge of the Protection of Personal Data must inform the reason for the decision and notify the holder, or, where appropriate, the legal representative, within the deadlines established for that purpose, by the same means by which the request was made, accompanied, where appropriate, with the relevant evidence.

Once the response has been issued to the owner or his legal representative, he must acknowledge receipt by the same means in a period of less than 24 hours, in case of omission it will be understood that he received the response to his request.

The owner or his legal representative may challenge the response granted, according to the means legally established.

"Avis" offers, in terms of the provisions of Article 22 of the Law, that in cases in which a User wishes to update their personal data, they may do so through the procedure established above.

For more information on the procedure and requirements, we provide you with the following means: by telephone (999) 930 2045; Email: datos.personales@grupogomex.com.mx, with the subject “ARCO Rights” and in our website in the Privacy Notice section. The schedule of personal attention is from Monday to Friday from 09:00 to 19:00 hours, central Mexico time.

The contact details of those responsible for the protection of personal data, who are in charge of processing ARCO rights applications, are as follows:

Legal Department, Address: C. 32 #261, Apt. 601, 57 y 59, Col. San Ramon, Merida, Yucatan, Mexico, Z.C. 97117, Ref. Av. Andres Garcia Lavin, Bldg. SkyCity., Email: datos.personales@grupogomex.com.mx and telephone number: 01-800 500 “AVIS” (2847)/(999) 930 2045, schedule of personal attention is from Monday to Friday from 09:00 to 19:00 hours, central Mexico time.

You can revoke the consent that, given the case, you have granted us for the treatment of your personal data. However, it is important that you keep in mind that not in all cases we will be able to attend your request or terminate the use immediately, since it is possible that for some legal obligation, we require to continue treating your personal data. Likewise, you should consider that for certain main purposes, the revocation of your consent will imply that we cannot continue to provide the service you requested, or the conclusion of your relationship with us, to revoke your consent you must do it through the same procedure to claim ARCO Rights.

For you to limit the use and disclosure of your personal information, on our part, you must follow the procedure stipulated in numeral 5 of this notice.

Likewise, you can register for the following registers, in case you do not wish to obtain publicity of any kind: Public Registry to Avoid Advertising, for more information consult the PROFECO website and the Public User Registry, check as well the CONDUSEF website.

we inform you that in our website we use IP, Cookies, web beacons or other technologies, through which it is possible to monitor your behavior as an internet User, with the intention to provide you with a better service and experience when browsing our page.

Use of IP addresses: (Internet Protocol): An IP address is a unique number that is automatically assigned to your computer equipment, each time you access the Internet, so that the main computers, known as "web servers", identify where precisely the web pages are "served", so they identify your computer. This mechanism allows us to identify and obtain information about the User's personal data.

"Avis" collects IP addresses in order to help diagnose problems with our main computers for administration purposes of our systems; notify aggregate information to our business partners and audit the use of our website. When Users request access to Internet pages, from our website, our web servers register the IP address of the User. Usually, we do not link IP addresses with anything that personally identifies the User; this means that although the User's access is registered, it remains anonymous, meaning, that we obtain and/or track the domain name of the source server, the computer equipment model and the type of browser that you use to access to our website, so we obtain that information while you browse our website, however, we only use that information for the purposes of our business.

We may and will use, IP addresses to identify a specific User, when we consider that such use is necessary, to ensure compliance with the conditions of use of our website or to protect our services, sites, Users or other channels of access and information.

Cookies: what are Cookies? These are data that a website sends to the User's computer for recording purposes. This information is stored in a file folder that is located on the hard disk of a user's computer. Cookies facilitate the user's browsing activity on the internet, since they retain information about the user's most preferred sites, which allows us to properly use the information stored to facilitate user access when making subsequent visits to our website. Cookies do not disclose the user's personal information to “Avis”, unless the user so determines.

"Avis" never registers or saves cookies, passwords or information about the user's credit or debit cards. The use of cookies is a common norm of the cyber industry, which you will be able to verify when you observe that the most important websites use them.

Because cookies tell us how and when users use our website, they also allow us to verify which are the areas and sections of our website that represent the greatest interest with respect to other sections with less user access. This practice leads to "Avis" making improvements and updates to our website based on various records, such as the total number of visitors and pages visited.

"Avis" allows its advertisers to place cookies on the computers of those who use our website; however, the use that such advertisers give to their own cookies is subject to their corresponding privacy guidelines and not to this privacy notice. Our advertisers do not have any access to "Avis" cookies. For more information about our third-party advertising server, cookies and how to disable this feature, visit: https://www.google.com/intl/es-419/policies/technologies/ads/

What happens when you use a link that leads to the website of a third party?: You should be aware that while you are visiting the website of "Avis" and/or any of its subsidiaries, you may be using hyperlinks that can lead to other websites that are beyond our control and our service. These other websites may send their own cookies to users, obtain data or request information.

"Avis" and its affiliated companies do not control mentioned websites and, consequently, is not responsible for the content, hyperlinks or advertising that such sites decide to display. “Avis” and/or its affiliates including hyperlinks to those websites does not imply any kind of mutual treatment of the material present in those websites or any link with their operators. Our Privacy Standards do not extend to anything inherent in the operation of the internet system.

The security of the Personal Data of our users, is an aspect of most importance to Us. We provide them with a very careful treatment in order to guarantee a secure transmission of the user information from your computer equipment to our servers.

Keep in mind that every time you provide some information through the internet, your personal data may be obtained by some people you do not know. According to it, “Avis” and its subsidiaries committed to your security, strives at all times to protect your information centrally in databases with a high level of security and uses private communication links with encryption technology superior to the Mexican standard for data transmission between branches and uses SSL (Secure Socket Layer) security protocols for their web pages, however and because the Internet is a common mean of data transmission that we do not own, it is impossible to guarantee 100% of security in the information that is transmitted by this means. The communication channels and the security of the banking transactions in pages and offices of rent, are implemented, maintained and insured by the banking entities themselves under their security protocols and standards, so if you provide information via internet, it is at your own risk.

By accessing or visiting our website(s), it is understood that you expressly grant us the use of your data.

“Avis” may use cameras or video recorders in its facilities for security reasons, for which the comprehensive Privacy Notice of the “AVIS” Video Recording System is made available at www.avis.mx

In case someone violates the security of our systems, we will notify you via email in less than 24 hours.

This privacy notice may be modified, changed or updated, derived from new legal requirements; of our own needs for the products or services we offer; of our privacy practices; of changes in our business model, or other causes. We commit ourselves to keeping you informed about the changes that may be made to this privacy notice, through our website: www.avis.mx.

We recommend that you permanently review the contents of this Privacy Notice on our internet portal or directly at any of our branches within the Mexican Republic, we reserve the right to make modifications or updates to this Privacy Notice at any time.

By using our services, website or visiting us personally, you agree, and expressly consent that your personal data could be treated in accordance with the terms and conditions reported in this Privacy Notice.