Privacy Notice

In compliance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties ("LFPDPPP") and other applicable provisions, Compras Fashion, S.A. de C.V. ("GO2SPORTS"), domiciled in Mexico City, Mexico, is responsible for the processing of your personal data and makes this Privacy Notice available to you.

1. Personal data we collect

For the purposes described in this Notice, GO2SPORTS may collect the following data from you (the "Data Subject"):

• Identification data: first and last name.
• Contact data: email address and phone number.
• Data related to the trip or event of your interest: seating, lodging and transportation preferences, and number of people.
• Financial data: if you make a payment through the Site, the payment is processed through a certified third-party payment gateway; GO2SPORTS does not directly store your full payment card details.

GO2SPORTS may also automatically collect your IP address and browsing data through cookies and similar technologies, for statistical and security purposes and to improve the Site.

GO2SPORTS does not collect sensitive personal data.

2. Purposes of the processing

Your personal data will be used for the following purposes, which are necessary for our legal relationship with you:

• Process and confirm the purchase of tickets, travel packages and other Services offered on the Site.
• Handle the reservation of those Services with the corresponding Third-Party Providers (hotels, transportation companies, ticket outlets, event organizers), where applicable.
• Contact you to follow up on your request, quote or purchase.
• Fulfill the obligations arising from the commercial relationship with you.
• Handle inquiries, complaints or clarifications.
• Comply with applicable legal obligations.

In addition, and provided that you do not object, your data may be used for the following secondary purposes, which are not essential to the legal relationship:

• Send you information about new events, promotions, packages and offers from GO2SPORTS.
• Conduct satisfaction surveys and internal studies on Data Subject preferences.

If you do not want your data to be processed for these secondary purposes, you can let us know at any time by writing to contacto@go2sports.com.mx, without affecting the Services you have already purchased.

3. Transfer of personal data

To be able to provide the requested Service, GO2SPORTS may share the strictly necessary data with the Third-Party Providers involved in your trip or experience (for example, hotels, airlines, ground transportation companies, ticket outlets or Event organizers), solely to confirm and deliver the purchased Service.

GO2SPORTS may also transfer your personal data without requiring your consent in the cases provided for by the LFPDPPP, including, among others: when the transfer is provided for in a law or treaty; is necessary to perform a contract entered into in your interest; is required by a competent authority; or is needed for the recognition, exercise or defense of a right in a judicial proceeding.

In any other case involving a transfer different from the above, GO2SPORTS will request your prior consent.

4. Use of cookies and similar technologies

The Site uses cookies and similar technologies to recognize the User, improve the browsing experience and obtain usage statistics. You can disable cookies from your browser settings; however, this may limit some functionality of the Site.

5. ARCO Rights

You have the right to Access, Rectify and Cancel your personal data, as well as to Oppose its processing for specific purposes ("ARCO Rights"), under the terms provided by the LFPDPPP.

To exercise your ARCO Rights, send your request to contacto@go2sports.com.mx, including: (i) your full name and contact details; (ii) a document proving your identity; (iii) a clear description of the data regarding which you seek to exercise the corresponding right; and (iv) any element that helps us locate your data. GO2SPORTS will respond to your request within the maximum period provided by the LFPDPPP.

6. Revocation of consent

You may revoke at any time the consent you may have given us for the processing of your personal data by sending your request to contacto@go2sports.com.mx. Please note that, for certain purposes, revoking your consent may make it impossible to continue providing the purchased Service.

7. Security measures

GO2SPORTS implements reasonable administrative, technical and physical measures to protect your personal data against damage, loss, alteration, destruction or unauthorized use, access or processing, including the use of an SSL security certificate on the Site.

8. Changes to this Privacy Notice

GO2SPORTS may modify this Privacy Notice at any time. Any change will be published at www.go2sports.com.mx, so we recommend that you review it periodically.

9. Competent authority

If you believe that your right to the protection of personal data has been violated, you have the right to go before the Secretaría Anticorrupción y Buen Gobierno (Mexico's Ministry of Anti-Corruption and Good Governance), the authority responsible for the protection of personal data held by private parties.

Contact

Any question regarding this Privacy Notice can be sent to contacto@go2sports.com.mx.

Last updated: [publication date].