Privacy Notice

In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and other applicable provisions, this Privacy Notice is made available to the public.

1. Data Controller

Banco Actinver, S.A., Institución de Banca Múltiple, Grupo Financiero Actinver, acting solely and exclusively in its capacity as trustee of trust number 6088, with address at: Antonio Dovalí Jaime 70, Tower D, 13th Floor, Zedec Santa Fe, Álvaro Obregón 01210, Mexico City, shall be responsible for the processing of your personal data (the "Controller").

2. Purposes of Personal Data Processing

Your personal data will be used by the Controller for the following purposes:

• To identify and verify your identity.
• To compile client files.
• To provide security and legal certainty to the acts you enter into, such as reservation agreements, promissory purchase and sale agreements, and property transfer operations related to sales.
• To fulfill obligations arising from these agreements.
• To carry out deed procedures before a notary public.
• To comply with tax, legal, and regulatory obligations.
• To comply with obligations regarding money laundering prevention.
• To verify the information you provide to us.
• To coordinate procedures with financial institutions, trustees, and applicable authorities.
• To provide customer service and follow-up on real estate transactions.

Additionally, we will use your personal information for the following purposes, which allow us to provide you with better service:

• To share information related to the real estate project.
• To share commercial or promotional information about our services.
• To conduct marketing, segmentation, market, and statistical studies.

3. Personal Data That May Be Collected

To carry out the purposes described in this Privacy Notice, the Controller may collect the following personal data ("Personal Data"):

Identification Data

• Full name, nationality, marital status, date and place of birth.
• Articles of incorporation and its amendments, if applicable.
• Power of attorney of the legal representative, if applicable.
• Proof of address (no older than 3 months).
• Tax status certificate or its equivalent.
• Unique Population Registry Key (CURP).
• Valid official identification of the individual(s) and/or legal representative.
• Immigration status (if necessary).
• Any biometric data that allows identification, if applicable.

Contact Data

• Address.
• Telephone number.
• Email.

Financial or Patrimonial Data

• Bank information, information on economic capacity, income statements, tax information.

Data Necessary for Regulatory Compliance

• Anti-money laundering information, corporate documentation in the case of legal entities, information required by financial or notarial authorities.

In relation to the Personal Data mentioned above, the Controller commits that the processing will be strictly necessary for the purposes stated and will be carried out under appropriate administrative, technical, and physical security measures to protect confidentiality against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

In any case, the legitimate, controlled, and informed processing of your Personal Data will be conducted for the time strictly necessary to allow the processing described above and will be retained only for the period strictly necessary to carry out such processing.

4. ARCO Rights

It is important to mention that you have the right to know what Personal Data the Controller holds, for what purposes it is used, and under what conditions it is processed (Access). You also have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to request its deletion from records or databases when you consider that it is not being used in accordance with the principles, duties, and obligations established by the regulations (Cancellation); and to object to the use of your personal data for specific purposes (Opposition). These rights are known as "ARCO Rights."

The Controller is not obligated to cancel your Personal Data because the primary purpose of such data is to provide a service, which is subject to a private contract, and your Personal Data is necessary for its execution and fulfillment.

To exercise these ARCO Rights, you must submit a request ("ARCO Request") in writing addressed to the Controller via the following email: ventasresidencial@phh.com.mx

The ARCO Request must include:

• Name of the data subject
• Contact information
• A clear description of the right you wish to exercise
• A copy of official identification and/or any document or information that facilitates the location of your Personal Data.

The Controller shall respond within the timeframes established by applicable law.

5. Transfer of Personal Data

The Controller may transfer your personal data, without requiring your consent, in the cases provided for under applicable law, to the following entities:

• Public notaries involved in the formalization of real estate transactions.
• Financial institutions or trustees related to the transaction.
• Administrative or judicial authorities as required by applicable law.
• Condominium or residential project administrators.
• Developers or companies associated with the project.

Likewise, your Personal Data may be transferred to entities located abroad when such transfer is necessary for the structuring of the real estate transaction, including trustees and legal or financial advisors of either the data subject or the project.

In the event of transfers that require consent, such consent will be obtained in advance from the data subject.

6. Revocation of Consent

You may revoke the consent granted for the processing of your Personal Data at any time, provided that there is no legal obligation preventing such revocation.

The request must be submitted using the same procedure established for exercising ARCO Rights.

7. Limitation on the Use or Disclosure of Data

In order for you to limit the use and disclosure of your personal information, you may register in the Public Registry to Avoid Advertising, which is managed by the Federal Consumer Protection Agency ("PROFECO"), so that your Personal Data is not used to receive advertising or promotional communications from companies offering goods or services. For more information regarding this registry, you may consult PROFECO's website or contact such authority directly.

If you do not wish your Personal Data to be used for any of the purposes mentioned above, you must:

• Submit your request in person at our address, addressed to the Controller; or
• Send an email to the following address: ventasresidencial@phh.com.mx

8. Changes to the Privacy Notice

This Privacy Notice may be modified, changed, or updated due to new legal requirements, our own needs related to the products or services we offer, our privacy practices, changes in our business model, or other reasons, accordingly, the Controller undertakes to keep you informed of any changes to this Privacy Notice.

The modifications will be made available at: the project sales center, the real estate development's website, or any other communication channel of the project.

9. Data Subject Consent

The data subject acknowledges having read and understood this Privacy Notice and grants consent for the processing of their Personal Data in accordance with the terms set forth herein.

10. Disclaimer

"Conrad" is a registered trademark of Hilton Worldwide Manage Limited (together with its affiliates, "Hilton"). The residences are not owned, developed, or sold by Hilton, and Hilton does not make any representations, warranties or guaranties whatsoever with respect to the residences or the Conrad Residences Los Cabos. Parks Hospitality Holdings, together with its affiliates, subsidiaries and related entities within its corporate family and group of entities worldwide ("Developer") uses the "Conrad" brand name and certain "Conrad" trademarks (the "Trademarks") under a limited, non-exclusive, non-transferable license from Hilton. The license may be terminated or may expire without renewal, in which case the residences will not be identified as a "Conrad" branded project and the Developer will not have any rights to use the Trademarks.