Website

OMA, with address at Avenida Patriotismo number 201, Floor 5, Colonia San Pedro de los Pinos, Alcaldía Benito Juárez, C.P. 03900, Mexico City, Mexico, is responsible for safeguarding the privacy of the data that you provide us as a user, letting you know that your information will be processed exclusively for the purposes specified below, in accordance with the provisions of the Law, its Regulations, and other applicable legal provisions.

Our personal data protection and processing department is located at:

• Attention: Juan Fernando Espinosa

• datospersonales@oma.aero

• Patriotismo number 201, Floor 5, Colonia San Pedro de los Pinos, Benito Juárez Mayor's Office, C.P. 03900, Mexico City, Mexico.

OMA does not collect personally identifiable data about individuals except when users of the Internet sites www.oma.aero and www.parking.oma.aero (the “OMA Sites”) voluntarily provide information by registering with such sites, logging into social networks such as Facebook and Twitter, or sending an email or other communication to OMA.

The personal data collected may be used to respond to technical or service needs; be able to provide the user with an update on the status of the flights operated at the thirteen airports managed by OMA, as well as the airlines and routes; inform about the different establishments located within the airports; travel information, security procedures, immigration and customs; hotel reservations; information about the services provided at airports such as monetary services, luggage packaging; business services and related activities and information subject to OMA. In turn, your personal data may be used to carry out surveys about the contracted service, receive e-mail or through social networks promotional information about the products and services offered by OMA, or its partners and affiliated companies, the above in order to provide you with better service.

Personally identifiable data collected by the OMA Sites will not be sold or provided to third parties without the consent of the users of said Sites. Additionally, users of the OMA Sites will have the opportunity to “opt out” of receiving promotional information about products and services offered by OMA or its partners and affiliated companies.

Despite its general policy not to disclose personally identifiable information to third parties, OMA may disclose certain personal information: (a) when OMA has reason to believe that disclosure of such information is necessary to identify, communicate with, or bring legal action against someone who may be harming and hindering (whether intentionally or unintentionally) the rights or property of OMA, other users of the OMA Sites, or any third party; (b) as necessary to enforce and comply with the Terms and Conditions of use of the OMA Sites; (c) as required by law; or (d) as otherwise indicated by OMA on the OMA Sites.

Upon request, OMA will take reasonable steps to allow users to update or correct personal data they have previously submitted that is no longer valid. Additionally, when requested by the user, OMA will take commercially reasonable measures to systematically delete the user's record and personal data from the database; However, it may be impossible to completely erase user data due to backups and records of deleted data.

You are advised that the OMA Sites collect aggregate statistical data about visitors, and that such data may be used to conduct market research and other activities. Additionally, OMA may share aggregated and anonymous data with promotional, business or advertising partners. Not including any request by a user to “opt out” of receiving promotional information, OMA reserves the right to contact an affiliate regarding the status of their account, changes to the affiliate agreement, and other matters relevant to the Site and/or information provided by a user.

You are informed that, if you do not agree with the processing of your personal data for the aforementioned purposes, you have a period of 5 days from the date on which you reveal your personal data to us to express your refusal expressly to the personal data protection and processing department of OMA through the means indicated in this notice, since, if you fail to do so, you will be considered tacitly consented.

Among the personal data that OMA may request are, among others, those listed below:

• Full name
• Contact telephone numbers
• Email address
• Other contact information

You are informed that the data collected by OMA is not sensitive in nature, so it is necessary that if you do not agree with the treatment that OMA will give to your personal data, you express your opposition through the means indicated in this notice, since, if you fail to do so, you will be considered tacitly consented.

OMA is guided by the principles of legality, quality, consent, information, purpose, loyalty, proportionality and responsibility established by the Law and its Regulations, with the purpose of collecting the data that the user himself voluntarily provides such information when registering on the OMA Sites, or when sending an email or other communication addressed to OMA. In turn, OMA may obtain personal information through lawful means established by law, such as public databases or any other agency or public source of information.

The OMA Sites use cookies in connection with certain features or functions. Cookies are text files automatically downloaded and stored on the hard drive of the user's computer when browsing a specific Internet page, which allow the Internet server to remember some data about this user, including their preferences for viewing pages on that server, name and password.

For their part, web beacons are images inserted into an Internet page or email, which can be used to monitor the behavior of a visitor, such as storing information about the user's IP address, duration of interaction time on said page and the type of browser used, among others.

It is established that the installation, permanence and existence of cookies on the computer of the client or user of the Site depends on their exclusive will and can be eliminated whenever they wish.

OMA may allow other companies that present advertisements or other features on the OMA Sites to access cookies on your computer. You are informed that OMA does not control the third-party cookie policy.

We inform you that we may use cookies and web beacons to obtain personal information from you, such as the following:

• Your browser type and operating system;
• The Internet pages you visit;
• The links you follow;
• The IP address; and
• The site you visited before entering any of the OMA sites

At any time, you may prohibit the use of cookies and web beacons, so that we stop using them. To do this, you must expressly express your opposition to the personal data protection and processing department of OMA through the means indicated in this notice, since, if you fail to do so, you will be considered tacitly consented.

In order for you to limit continuing to receive information about promotions, offers and additional services that we offer by email or through social networks, such as Facebook or Twitter, as well as the use and disclosure of the data collected by OMA, we make the following means available to you: (i) the registration of the data in the Public Registry, which is in charge of the Federal Consumer Protection Agency ("PROFECO"), so that your personal data is not used to receive advertising or promotions of goods and services companies. For more information about this registry, you can consult the PROFECO Internet portal or contact said organization; (ii) your registration on an exclusion list, so that your personal data is not processed for marketing, advertising or commercial prospecting purposes by OMA.

If you require more information or want your data to be included in an exclusion list, it is necessary to follow the following procedure:

1. Make a written request addressed to the OMA personal data protection and processing department, which must contain at least the following information:
   1. Full name of the owner.
   2. Address of the owner of the personal data or email, by which the response to your request can be sent.
   3. Official documents that prove the identity of the owner or his representative, as well as the powers and faculties in which the due representation of the legal representative is recorded.
   4.  Make the express request that your data be registered on an exclusion list.
2. Send the request to the department of protection and processing of personal data, located at Avenida Patriotismo number 201, Floor 5, Colonia San Pedro de los Pinos, Alcaldía Benito Juárez, C.P. 03900, Mexico City, Mexico or email:  datospersonales@oma.aero

You have the right to access your personal data that we have and the details of its processing, you can also request rectification of your personal information if it is inaccurate or incomplete, cancel it from our records and databases when you consider that they are not required or are being used for any of the purposes indicated in this privacy notice, finally, you can oppose the use and processing of your personal data when they are being used for non-consensual purposes or the contractual or service relationship has ended.

To exercise your rights of access, rectification, cancellation or opposition, it is necessary to follow the following procedure, in accordance with article 29 of the Law:

1. Make a written request addressed to the OMA personal data protection and processing department, which must contain, at least, the following information:
   1. Full name of the owner.
   2. Address of the owner of the personal data or email address designated for notifications.
   3. Official documents that prove the identity of the owner or his representative, as well as the powers and faculties in which the due representation of the legal representative is recorded.
   4. Clear and precise description of the personal data, with respect to which you seek to exercise any of your rights.
   5. Any other element or document that facilitates the location of personal data, as well as any other document required by current legislation at the time of submitting the application. 
   6. A contact telephone number.
2. Send the request to the department of protection and processing of personal data, located at Avenida Patriotismo number 201, Floor 5, Colonia San Pedro de los Pinos, Alcaldía Benito Juárez, C.P. 03900, Mexico City, Mexico or email:  datospersonales@oma.aero

OMA will have a period of twenty business days following the date of receipt of the request, to resolve the admissibility or inadmissibility of the request, the resolution of which will be made by means of an email addressed to you, sent to the email address that you have indicated in the request itself or by sending a letter to the physical address that you have indicated for such purposes.

OMA will at all times have the right to extend the aforementioned term on a single occasion for an equal period, as long as it is justified and the circumstances of the case so warrant.

In the event that the request is declared inadmissible, the respective evidence must be attached to it. When the request is appropriate, the exercise of the requested right will be effective within fifteen business days following the day in which the adopted resolution was communicated.

OMA may deny the exercise of ARCO rights, in the following cases:

1. When the applicant is not the owner or the legal representative of the legal entity does not prove the legal existence of its client or its powers and faculties are not sufficient to exercise the rights in question.
2. When the applicant's personal data is not found in the OMA databases.
3. When the rights of a third party are violated.
4. When there is a legal impediment or resolution of a judicial or administrative authority.
5. When the rectification, cancellation or opposition has been previously made so that the request lacks substance.

Likewise, OMA will not be obliged to cancel your personal data, when it comes to any of the following cases:

• That refers to the parties of a private, social or administrative contract and are necessary for its development and fulfillment.
• When they must be treated by legal provision.
• When judicial or administrative actions linked to tax obligations, the investigation and prosecution of crimes or the updating of administrative sanctions are hindered.
• When necessary to protect the legally protected interests of the owner.
• Are necessary to carry out an action based on the public interest.
• Are necessary to comply with an obligation legally acquired by the owner, and
• Are subject to treatment for prevention or for medical diagnosis or management of health services, provided that said treatment is carried out by a health professional subject to a duty of secrecy.

If you consider that your personal data has been violated, or that your request to exercise ARCO Rights was not duly attended to by OMA, you have the right to go to the National Institute of Access to Information to initiate a data protection procedure.

At any time, you may revoke the consent you have given to OMA for the processing of your personal data through the following procedure:

1. Make a written request addressed to the personal data protection and processing department of OMA, which must contain, at least, the following information:
   1. Full name of the owner.
   2. Address of the owner of the personal data or email address, through which the response to your request can be sent. 
   3. Official documents that prove the identity of the owner or his representative, as well as the powers and faculties in which the due representation of the legal representative is recorded.
   4. Expressly indicate the request to revoke consent for the processing of personal data, expressing the reasons why you wish to do so.
2. Send the request to the department of protection and processing of personal data, located at Avenida Patriotismo number 201, Floor 5, Colonia San Pedro de los Pinos, Alcaldía Benito Juárez, C.P. 03900, Mexico City, Mexico or email:  datospersonales@oma.aero

Within a maximum period of twenty days we will respond to your request and inform you about its origin through the means indicated in your request.

OMA hereby informs you that your personal data may only and exclusively be transferred to third parties through: (i) your express consent, (ii) by resolution or order of a judicial or administrative authority and (iii) in the case of personal information that by provision of a law that is considered public.

The OMA Sites may contain links to other Internet sites. The use of information collected by these sites, as well as the use of cookies and web beacons, is entirely the responsibility of the third-party websites. This Privacy Notice is solely and exclusively valid and applicable to the OMA Sites.

OMA reserves the right to make modifications or updates to this privacy notice at any time, which may be made in order to address legislative developments, internal policies or new requirements for the provision or offering of our services.

These modifications will be available to the public through the following means: (i) through the OMA Sites; or (ii) physically at the address of OMA's personal data protection and processing department, which will be at the discretion of OMA. The modifications will take effect immediately upon the occurrence of any of the events established in this paragraph.

You are informed that once the purpose(s) of the processing of personal data has been fulfilled, and when there is no legal or regulatory provision that establishes otherwise, said data will be canceled after blocking them, for their subsequent deletion.

OMA has implemented physical, technological and administrative security measures to protect your personal data from unauthorized processing. To do this, the information you provide us is kept in databases that have the necessary security technology to prevent information leaks.

OMA will do everything in its power to protect the privacy of the information and your personal data. It may happen that, by virtue of court orders or legal regulations, OMA is forced to disclose information to authorities or third parties, in which case OMA will not be responsible for the information that is revealed in such ways.

By using the OMA Sites, you indicate your acceptance of this Privacy Notice. If you do not accept the Privacy Notice, do not use the OMA Sites. This Privacy Notice does not create any legal or contractual rights, nor is it intended to do so.

This Privacy Notice complies with all current provisions stipulated in the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, and other applicable legal provisions.