1. CONTROLLER IDENTITY AND DOMICILE

This Privacy Notice (referred as the “Notice”) establishes the terms and conditions by which Cultura y Arte Contemporáneo Zeta, S.A. de C.V., commercially know as “Zona México Arte Contemporáneo” or “ZⓈONAMACO” (referred as “ZⓈONAMACO”), located at Aristóteles 92, Col, Polanco 11560, Mexico City, as controller, will process your personal data as data holder, in order to protect your privacy and your information self-determination right, in accordance to the Mexican Data Protection Law -“Ley Federal de Protección de Datos Personales en Posesión de los Particulares”- (referred to as “LFPDP”), its Regulations and Privacy Notice Guidelines issued by the Secretariat of Economy (referred to as “Regulations”).

2. DEFINITIONS

For this Privacy Notice the definitions of the terms “Personal Data”, “Sensitive Personal Data”, “Days”, “Processing”, “Data Holder”, “Controller”, “Processor”, “Transfer”, “ARCO Rights” – “Access Right”, “Rectification Right”, “Cancellation Right”, “Opposition Right”, “Cookies”, “Web-Beacons”, as well as other elements provided in the Notice, will have the same meaning as indicated in the Regulations.

3.- PERSONAL DATA COLLECTED AND PROCESSED

ZⓈONAMACO collects and processes the following personal data:

A. Guests, Prospects, Clients and Exhibitors

a) General data

Complete name, complete domicile, telephone (home or office), mobile phone number and email address.

b) Data to access ZⓈONAMACO services

Password and user number administered in ZⓈONAMACO Website located in www.zsonamaco.com to have access to our online services.

c) Tax data

Register and folio of the Federal Taxpayer Register, as well as tax domicile.

d) Data linked to credit and/or debit cards

Personal data related to your method of payment: credit card holder name, credit and/or debit card number, expiration date, type of card and security code, CLABE, bank account number, and origin bank.

Hereby you express your consent so that your personal data be processed in accordance to this Privacy Notice, which is available at any time in the Webpage www.zsonamaco.com/avisodeprivacidad/. In any case, you may oppose to the processing of your personal data through the email protecciondedatos@zonamaco.com.

B. Data from automatic capture tools and public access sources

a) Personal data collected by automatic capture tools on ZⓈONAMACO Websites

Data regarding the type of browser you use, the language you use, the means of identifying the session with our websites, passwords to access the ZⓈONAMACO Website, access times, IP address, browser type and operating system, computer system or device that you used to access the ZⓈONAMACO Website, the interaction with our emails and our Website.

b) Personal data that are part of an automated decision-making process

ZⓈONAMACO does not treat your personal data in automated decision-making processes without the intervention of the valuation of natural persons.

c) Personal data from sources of public access and received via consented transfers

Data from public records, directories, social networks and other legal sources available.

d) Personal data from social media networks

ZⓈONAMACO will be able to collect and process personal data and information that you have shared as public on social media networks (such as Facebook®, Twitter®, Linkedin®, among others), particularly the one you have shared in the ZⓈONAMACO social media profile, as provided by the terms and conditions of use and the policies and declarations of the mentioned social media networks.

The personal data described in the aforementioned sections are collected through: i) the use of printed forms or documents; ii) the use of emails; iii) the voluntary provision of information and personal data via our Website, as well as iv) the use of public access sources and other sources available in the market.

Data collection when browsing the ZⓈONAMACO websites

ZⓈONAMACO can collect personal data through its Website, or through the use of automatic data capture tools. Within the automatic data capture tools used by ZⓈONAMACO on its websites cookies, web beacons, and links in emails are used.

Use of Cookies.- The correct functioning of the ZⓈONAMACO Websites require enabling of “cookies” in your Internet browser. “Cookies” are small data files transferred by the website to the hard drive of your computer or mobile device when you browse our Web sites. In most browsers cookies are automatically accepted in view of their default settings, you can adjust your browser preferences to accept or reject cookies. The deactivation of cookies can disable various functions of ZⓈONAMACO websites or that such websites are not correctly displayed. In case you prefer to delete cookies, you can delete the file at the end of each of browser session.

These cookies can be disabled. To learn how to disable cookies, you can consult the following link or electronic address:

•Internet Explorer: http://windows.microsoft.com/es-MX/windows-vista/Block-or-allow-cookies

•Google Chrome:

http://support.google.com/chrome/bin/answer.py?hl=es&hlrm=en&answer=95647

Use of Web beacons.- Also known as Internet tags, pixel tags and clearGIFs) .- ZⓈONAMACO can use Web Beacons on their websites and in their HTML-formatted emails, alone or in combination with cookies, to collect information regarding the use of the Websites and their interaction with email. The Web beacon is an electronic image, called a single pixel (1×1) or GIF that can recognize information that is processed on your computer, as in the case of cookies, the time and date on which the site and its sections are displayed.

Links in ZⓈONAMACO emails.- Emails that include links that allow ZⓈONAMACO to know if you have activated this link and visited the destination website, this information may be included in your profile.

Protection of minors, persons in a state of interdiction or incapacity: ZⓈONAMACO does not collect or process personal data of minors, persons in an interdicted or incompetent state and encourages parents and / or guardians to take an active role in your children and / or represented online activities. In the event that ZⓈONAMACO becomes aware that the personal data has been provided by a minor, a person who is incapable or in an interdicted state, in violation of this Notice, we will proceed to eliminate such personal data in accordance to our data processing policies. If you are aware that such personal data has been provided by a person under 18 years of age, or by an incapacitated person or in an interdicted state, please send us an email to: protecciondedatos@zonamaco.com.

4. PURPOSES

ZⓈONAMACO processes your personal data for the purposes of carrying out the activities and administration directed to comply with the obligations derived from any cultural, commercial or legal relationship that constitute primary purposes, as follows:

i) Register in databases and directories of guests, prospects, clients, and / or exhibitors;

ii) Register in temporary database of guests, prospects, clients and / or exhibitors;

iii) Register in visitors database;

iv) Manage events;

v) Monitor and control your access to events;

vi) Manage your security in the events organized by ZⓈONAMACO, through video recording of activities and the management of security incidents;

vii) Facilitate sending invitations from our clients and / or exhibitors to their guests for ZⓈONAMACO events;

viii) Prepare your badge to access the events;

ix) Manage the delivery of badges to your home;

x) Manage the payment of services through credit card and other methods of payment;

xi) Manage the user and password keys to authenticate the identity of the exhibitors and VIP visitors, in order to allow them to use the online services and their tools, including the Exhibitors Manual;

xii) Carry out the administrative management of the event – payments, technical assistance and operations, and

xiii) Prepare and deliver tax receipts.

In addition, we will process your personal data for other secondary purposes that do not generate nor are necessary for the legal relationship we establish with you, as follows:

i) Send you newsletters and information through print and electronic media about ZⓈONAMACO events, invitations, promotions, services and products, as well as other Art Fairs in Mexico and / or abroad – or from suppliers, exhibitors and / or sponsors we estimate of your interest;

ii) Send you communications for marketing, advertising or commercial prospecting purposes related to ZⓈONAMACO events, either through print or electronic means, and

iii) Carry out market studies and for statistical purposes.

In case you do not want your personal data to be processed for commercial prospection purposes, you can send a Request for Limitation of Processing of Personal Data to the email address protecciondedatos@zonamaco.com. The refusal to secondary purposes process of your personal data will not be grounds for ZⓈONAMACO to deny the provision of services.

In any case, you can limit the use and disclosure of your personal data by registering in the Public Registry to Avoid Advertising by the Federal Consumer Procurator –“Procuraduría Federal del Consumidor”-.

5. TRANSFERS TO THIRD PARTIES

ZⓈONAMACO will no carry out any personal data transfers to third parties within or out Mexico.

6. PROCEEDING TO EXERCISE ARCO RIGHTS AND REVOKE CONSENT

At all times you have the right to access, rectify and cancel your personal data, as well as to oppose the processing thereof or revoke your consent regarding the treatment for all or certain purposes that you authorized at the time (” ARCO Rights “), either directly or through your legal representative, for which you must submit the corresponding application with the Information and documentation that is indicated below:

1. Your full name, address or other means – such as your email address – to communicate the response to your request;

2. Documents proving your identity – simple copy in printed or electronic format of your ID, passport or visa, as appropriate, or as the case may be, of your legal representative and the means through which you conferred such legal representation – simple copy in printed or electronic form of the limited power of attorney with your handwritten signature, that of two witnesses and the agent, with their corresponding official IDs – ID, passport or visa-);

3. Clear and precise description of the personal data in regards to which you seek to exercise any of the ARCO rights; and

4. Any other element or document that facilitates the location of your personal data.

In the case of requests for access to personal data, ZⓈONAMACO will proceed with the delivery of your information, via electronic means, after proof of your identity or that of your legal representative, as applicable.

In the case of requests for rectification of personal data, you must also indicate the modifications to be made and provide the documentation supporting your request.

ZⓈONAMACO will respond to you within a maximum period of twenty days, counted from the date we receive your request for access, rectification, cancellation or opposition, the decision we adopt, so that, if it is appropriate, it becomes effective within the fifteen days following the date on which we communicate you relevant response. In all cases, the response of ZⓈONAMACO will be given to you by the same means by which you submitted your request, or in case, by any other means agreed with you. The aforementioned periods of time may be extended once for an equal period, as long as the circumstances of the case justifies such extension, as provided in the LFPDP.

The provision of material supports that contain personal data derived from the exercise of the access right will be free, you only have to cover the justified shipping costs or the cost of reproduction in copies or other formats, according to the Regulations. In the event that you reiterate an application within a period of less than twelve months, you must cover the corresponding costs in terms of the LFPDP, unless there are substantial modifications to the privacy notice that motivate further consultations.

For the reception, registration, attention and response of requests to exercise your ARCO Rights and other rights provided in the LFPDP, we designate the Data Protection Officer, which you can contact at the domicile provided in section 7, or via email at the email address protecciondedatos@zonamaco.com.

In case the information provided in your request is erroneous or insufficient, or the corresponding accreditation documents are not accompanied, we can ask you, within five days of receiving your request, to provide the necessary elements or documents to process it. You will have ten days to meet our requirement, counted from the day after you received it. If there is no response within that period, the corresponding request will be deemed as not filed.

7. DATA PROTECTION OFFICER

For any consultation you may have regarding the protection of your personal data, as well as to exercise your ARCO Rights, please contact ZⓈONAMACO Data Protection Officer through written communication addressed to your attention at: Luis G. Urbina 4, Int. 104, Col. Polanco, 11560, Mexico City or via email at protecciondedatos@zonamaco.com.

8. LIMITATION OF USE AND DISCLOSURE OF INFORMATION

ZⓈONAMACO will keep your personal data for as long as it is necessary to comply with the obligations deriving from the cultural, commercial, and/or legal relationship with you, as well as to maintain the records required by the LFPDP, its Regulations, mercantile, administrative, fiscal and administrative in force legislation, as appropriate.

The personal data collected by ZⓈONAMACO is protected by adequate administrative, technical and physical security measures against damage, loss, alteration, destruction or unauthorized use, access or processing, in accordance with the provisions of the LFPDP and its Regulations. For additional information regarding the security measures adopted by ZⓈONAMACO, you can contact us at the email address protecciondedatos@zonamaco.com.

To limit the use and disclosure of your personal data, please send an email communicating your request to our Data Protection Officer at protecciondedatos@zonamaco.com.

9. CHANGES TO THE NOTICE

ZⓈONAMACO reserves the right to update this Notice in order to reflect the changes in our practices regarding data protection derived from our continuous improvement process, as well as the legal, regulatory and administrative changes that take place. We invite you to periodically review the content of the Privacy Notice on our website www.zsonamaco.com/avisodeprivacidad/, where we will post the changes made together with the date of the last update.

Last update: July 2018