Privacy Notice

Date of the most recent update: October 19, 2023.

In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties, we make available to you this privacy notice, and we inform you as follows:

1. Person responsible for the protection of personal data.

PLM Premier, S.A.P.I. de C.V. (referred to as "Aeromexico Rewards Business") with an address for receiving notifications at Av. Paseo de la Reforma No. 243, 26th Floor, Colonia Cuauhtémoc, Cuauhtémoc Borough, C.P. 06500, Mexico City, CDMX, is responsible for the processing and protection of your personal data, and/or those of your child or ward, if collected (hereinafter "personal data").

2. Information about our privacy officer and how to contact them.

Our privacy officer is the person within Aeromexico Rewards Business who, in compliance with Article 30 of the Federal Law on the Protection of Personal Data Held by Private Parties, has been formally designated to:

• Address requests from data subjects for the exercise of their rights.

• Promote and ensure the protection of the personal data we hold.

For all matters related to the processing and protection of personal data, you can contact our privacy officer by sending an email to the following address: [email protected]

3. Personal data we collect.

To fulfill the purposes outlined in paragraph 4 of this privacy notice, we will collect the following categories of personal data: (i) Identification; (ii) Contact; (iii) Financial; (iv) Consumer behavior; (v) Biometric (facial recognition); and (iv) sensitive data. Regarding this last category, we inform you as follows:

3.1. Sensitive personal data.

We do not collect sensitive personal data through direct or indirect channels but only when you voluntarily provide them to us to ensure proper attention regarding air transportation services. The sensitive personal data that we may collect are as follows:

• Disabilities and/or reduced mobility.

• Medical conditions that need to be taken into consideration for flying, as determined by the treating physician.

• For pregnant women, information to determine the stage of gestation.

• Medical certificates for refund requests.

To do so, it will be necessary to have your prior express written consent by signing this privacy notice, which should be sent to [email protected]

3.3. Personal data of minors and persons under interdiction.

We inform you that it ccess special interest to protect the personal data of minors and persons under interdiction. These personal data must, without exception, have the authorization of the parent, guardian, or legal representative and will be treated with strict security and confidentiality measures.

3.4. Personal data of third parties.

Access personal data of third parties that you provide to us, you must have the prior consent of the data subject and inform them of where to ccess this privacy notice.

4. Purposes of processing the collected personal data.

Personal data is collected for the following primary and secondary purposes:

a) Primary purposes. Purposes that give rise to and are necessary for the legal relationship between you and Aeromexico Rewards Business:

• Enroll your company in the Aeromexico Rewards Business program.

• Provide you with the products, services, and/or benefits offered by Aeromexico Rewards Business.

• Inform you and follow up on the products, services, and/or benefits you have acquired.

• Allow you access to our facilities and Premier Lounges.

• Accumulate and/or redeem Reward Points.

• Provide you with quotes, reservations, purchases, cancellations, modifications, refunds, ticket issuance, and receipt of the same.

• Collect payment for the products and/or services you contract with us.

• Handle your prize ticket refund requests.

• Identify you as an Aeromexico Rewards Business member before, during, and after the accumulation and/or redemption of Reward Points. To identify you, facilitate the update of your information on our website, and provide you with greater security, we may use facial recognition if you choose this option.

• Enable your participation in the contests and draws we organize; in the event of winning, award you the corresponding prize.

• Enable your participation in the auctions we organize.

• Address your queries and clarifications made via chat and/or any other means.

• Monitor the quality of the telephone service we provide by recording the calls handled in our call center.

• Comply with the applicable legal provisions in relation to the benefits, products, and services we provide.

In the case of sensitive personal data, these will be used so that Aeromexico and/or any of the airlines or ground transport companies with which we have an agreement can provide you with the following services: Travel assistance and support; priority in boarding and disembarking the aircraft; wheelchairs in their various forms; oxygen bottles or tanks; use of respiratory assistive devices; boarding and disembarking the aircraft, moving to your seat, disembarking, and moving to the baggage delivery area; and special requirements. On the other hand, sensitive personal data may be used to process refund requests and requirements from competent authorities.

b) Secondary purposes. Different purposes that do not give rise to the legal relationship between you and Aeromexico Rewards Business but are very useful for providing you with better service and developing our legitimate commercial interests:

• Offer you banking, financial, and commercial products, as well as services and promotions, through email, printed forms, telephone, and/or mobile applications (our own, from any of the companies belonging to the Aeromexico Group, or from third-party companies).

• Send you service and benefit evaluation surveys by email.

• Marketing and advertising.

• Commercial prospecting, either individually or jointly with companies affiliated with Aeromexico Rewards Business.

• Inform you or invite you to participate in our non-profit social commitment activities with altruistic purposes.

4.1. Refusal to process personal data for secondary purposes.

If you do not want your personal data to be processed for the secondary purposes mentioned, or any of them, you can deny us your consent from this moment by sending your request to our privacy officer, who will indicate the procedure to exercise your right. Your refusal in this regard will not be a reason for us to deny you the services and products you request or contract with us.

5. Transfer of personal data.

To fulfill the primary purposes outlined in paragraph 4 of this privacy notice, personal data may be transferred to the following natural or legal persons, without requiring your consent under Article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties:

• Companies or institutions with which we have entered into or will enter into a contract that is in their interest: In order to provide you with benefits.

• Authorities: To comply with the relevant legal provisions, as well as for the clarification of incidents or the exercise of any right.

• Companies that are part of Grupo Aeroméxico, which operate under our same processes and internal policies on privacy: In order to provide you with a better service, allow these companies, including Aerovías de México S.A. de C.V. to contact you directly to carry out advertising activities, product offerings, commercial prospecting and own and third party services, as well as to comply with our internal regulations. These companies will establish the administrative, technical and physical security measures that allow us to protect personal data against damage, loss, alteration, destruction or use other than that indicated in this privacy notice.

• Doctors, paramedics or health service providers, in the event of an accident, medical emergency or health situation: In order to assist you.

• Also, personal identification and contact information may be transferred to the following legal entities, in which cases we do require your consent:

• Companies with commercial activities: For the purpose of commercial prospecting and / or sale of products or services themselves and / or such companies.

• Companies with commercial, recreational, advertising and/or informative activities: In order to allow you to participate in contests and/or sweepstakes that we jointly organize, as well as to grant you the corresponding prize in case you are a winner.

• Companies with marketing and advertising activities: In order to conduct studies, market surveys and disseminate advertising on travel and destinations.

• Companies with financial activities: In order to offer you products and services of such companies or co-branded products and services.

• Companies with promotional activities: In order to inform you about travel promotions, destinations and tickets.

• Companies with touristic activities: In order to promote their lodging and broadcasting services in national and international destinations.

If you do not express your refusal for us to carry out these transfers, or any of them, we will understand that you have given us your consent. You can express your refusal from this moment by sending an email to our privacy officer, who will indicate the procedure to follow to exercise your right.

6. ARCO Rights.

Under the terms of the applicable regulations, you have the right to know what personal data we have about you, what we use them for and the conditions of the use we give them (Access). Likewise, it is your right to request the correction of your personal information in case it is outdated, inaccurate or incomplete (Rectification); that we remove it from our records or databases when you consider that it is not being used properly (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights.

To exercise any of the ARCO rights, you must submit the respective request through an email addressed to our privacy officer, who will inform you about the procedure and requirements for the exercise of these rights, response deadlines, the way in which we will enforce your right, and will address any questions, complaints or comments you may have in this regard.

7. Mechanisms and procedure to revoke your consent.

Under the terms of the applicable regulations, you may revoke the consent that you may have given us. However, it is important to note that not in all cases your request will be admissible or we can conclude the use immediately, since it is possible that for some legal obligation we may need to continue processing your personal data.

To revoke your consent you must submit your request via email to our privacy officer, who will inform you about the procedure and requirements for the exercise of this right, response times, the way in which we will enforce your right, and will address any questions, complaints or comments you may have in this regard.

8. Options available to the holder to limit the use or disclosure of Personal Data.

In addition to the procedure and exercise of the rights set forth in paragraphs 6 (six) and 7 (seven) of this privacy notice, you can limit the use or disclosure of personal data in the following ways:

• For our emails for marketing and advertising purposes, either for Aeromexico Rewards Business products and services or those we promote from third party companies, you can express your refusal by entering the link that will be indicated in the email itself, with which you will stop receiving them.

• You may also send an e-mail to our privacy officer requesting your registration in the "Aeromexico Rewards Business Advertising Exclusion List", so that we do not use your personal information for promotional, advertising or marketing purposes. For more information, please contact our privacy officer via e-mail.

9. Use of cookies and web beacons.

We inform you that we have electronic technologies (cookies, tags, web beacons and other elements for web analytics), which allow us to collect data on your activity electronically and simultaneously with the time you contact us through our website: business.aeromexicorewards.com. The information we collect is as follows:

• Information on the type of browser you use.

• Information about the time and time spent on our website and/or mobile application.- Sections consulted on our website and/or mobile application.

• Information of the pages you visited prior to entering to: business.aeromexicorewards.com.

• Information about the pages you visited after you visited: business.aeromexicorewards.com.

• Your IP address.

We will use the data collected through these technologies to improve your user experience, optimizing our website and mobile applications, as well as to offer you products, destinations and services based on your preferences. The data collected will be for the exclusive use of Aeromexico Rewards Business, therefore, such data will not be subject to national or international transfers.At any time you can disable the use of these technologies. You will be able to consult this procedure from:

Internet Explorer (in Windows):

http://windows.microsoft.com/es-es/windows-vista/block-or-allow-cookies

Firefox:

https://support.mozilla.org/es/kb/habilitar-y-deshabilitar-cookies-que-los-sitios-we

Google Chrome:

http://support.google.com/chrome/bin/answer.py?hl=es&answer=95647

Opera:

http://help.opera.com/Windows/11.50/es-ES/cookies.html

Safari on Mac:

http://www.apple.com/legal/privacy/es/cookies/

10. Modifications to this privacy notice.

We reserve the right to make changes or updates to this privacy notice at any time in response to new legislation, internal policies or new requirements for the provision or offering of our services or products. The updated version will be available to the public through the following means:

• Visible announcements in our establishments.

• On our website, which we suggest you visit frequently.

• We can send it to the last e-mail address you have provided us.

The procedure regarding the notification via Internet is as follows: (i) Enter our website: business.aeromexicorewards.com. In case there are modifications or updates to this privacy notice, there will be a notification to let you know; (ii) access the privacy notice link; (iii) there you will find the current version with the date of the most recent update.

11. Improper treatment of personal data.

If you consider that your right to the protection of personal data has been violated by any conduct or omission on our part, or presume any violation of the provisions of the Federal Law for the Protection of Personal Data Held by Private Parties, its Regulations and other applicable laws, you may file a complaint or claim before the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI). For more information, we suggest you visit its official website at www.inai.org.mx.

Privacy Notice Applicable to SkyTeam Alliance Treatments

We inform you that Aeromexico Rewards Business is a member of SkyTeam Alliance, a global network of airlines that process personal data to provide passengers with a more seamless travel experience. The treatments derived from this program will be treated in terms of the joint SkyTeam Alliance Privacy Notice that we make available to you at the following link: https://www.aeromexicorewards.com/www.skyteam.com