Privacy notice and general data protection

Volaris México - Privacy Notice of Concesionaria Vuela Compañía de Aviación S.A.P.I de C.V.

Privacy Notice of Concesionaria Vuela Compañía de Aviación S.A.P.I de C.V.

Identity and address.

In compliance with the provisions of Mexico’s Federal Law for the Protection of Personal Data Held by Private Parties, we would like to inform the following: On the website www.volaris.com, at the Call Center, mobile applications for iOS and Android and social media belonging to Concesionaria Vuela Compañía de Aviación, S.A.P.I. de C.V. (“Volaris”), located on Antonio Dovalí Jaime, No. 70, Torre B, Piso 13, Colonia Zedec Santa Fe, Delegación Álvaro Obregón, C.P. 01210, México, Distrito Federal, we are fully committed to protecting your privacy. This Privacy Notice explains how we gather, use, and protect the information that you provide as a Customer.

Contact Information.

Feel free to reach us by email at datos.personales@volaris.com or by postal mail at Antonio Dovalí Jaime No. 70, Torre B, Piso 13, Col. Zedec Santa Fe, C.P. 01210, México, D.F., Addressed to "Protección de Datos Personales".

Why do we gather and use your personal information?

To provide services or products purchased with Volaris, to provide follow-up to the process of the service or product purchased, to carry out billing, collection and debt recovery procedures, as well as any clarification regarding your payment and/or the contracted services, identify you as a member of our memberships, send you quotes and information regarding our services or products, send notifications and notices about the services or product contracted, respond to inquiries, requests for information and/or claims in relation to the services or products contracted, follow-up via social networks, telephone or email to processes initiated with us.

Additionally, we will use your personal information for the following purposes, which are not required for provision of contracted services or products, however, it will allow us to provide better customer attention and offer our products and services: integrating a history about your consumption and preferences, as well as sending publicity regarding the services and products we offer; provide assistance during the process of purchase, attention to doubts or clarifications regarding the products and/or services we offer through our channels available for customer service.

Should you prefer that your personal data not to be used for any such additional purposes, you can limit its use by emailing us at datos.personales@volaris.com or writing to: Antonio Dovalí Jaime, No. 70, Torre B, Piso 13, Colonia Zedec Santa Fe, Alcaldía Álvaro Obregón, C.P. 01210, México City, Attention to: "Protección de Datos Personales".

If you request to stop using your personal information and data for these purposes, it will not be a reason for us to deny any of the services or products we provide to you per your request.

Personal data gathered and how we obtain them.

The personal data we gather for the purposes described in this Privacy Notice, is obtained in the following ways:

1. When you provide it directly to us, meaning when you provide it through any means, including electronic, optical, visual or other technological means, by mail, via the Internet or telephone, including when you purchase our products or services or when you participate in promotions, special offers, and sponsorships, surveys of health for the effect of implementation procedures required by federal authorities due to sanitary contingency and related activities.

2. When you browse our website and submit your information.

3. When using our Call Center service.

4. When we obtain the information through other sources permitted by applicable law.

Information recolletect

To carry out the purposes described in this Privacy Notice, we will use the following personal data:

Contact:

• Full Name

• E-mail

• Home phone number

• Office phone number

• Mobile phone number

• User Registration

• Name

• Last name

• Gender

• Address (street, number, city, state, zip code, country)

• Country of residence

• Language

• Citizenship

• Date of birth

• Marital status

• Pastimes

• Occupation

• Travels

• Credit Card Information

• Credit Card Number

• Cardholder Name

• Expiration Date

In accordance with Articles 8, 10, and 37 of Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, financial data such as credit card information, do not require express consent to be used.

Sensitive Personal Data

We hereby inform you that, in order to comply with the purpose set forth in this Privacy Notice, in addition to the abovementioned personal data, we may be gather sensitive data, such as physical condition, disabilities and medical documentation, as well as banking information, among others, all of which require special protection.

Due to the implementation of measures imposed by the health authorities in this act, your expressly accept that we may collect sensitive personal data, which will be treated with absolute confidentiality, only for the purposes mentioned in this privacy notice and in accordance with the legal framework contained in the Ley Federal de Protección de Datos Personales en Posesión de Particulares (LFPDPPP).

We are committed to using and managing your sensitive data under the strictest security measures, guaranteeing their confidentiality.

Limiting the Use of Personal Data

You can limit the use of your personal information and data to avoid receiving information on promotions, special offers, and additional services by telephone or email, by emailing your request to datos.personales@volaris.com or in writing to: Antonio Dovalí Jaime, No. 70, Torre B, Piso 13, Colonia Zedec Santa Fe, Alcaldía Álvaro Obregón, C.P. 01210, México City, Attention - "Protección de Datos Personales".

Transferring Personal Data

Your Personal Data may be transferred and managed both in and outside of the country, with the following people, companies, organizations, and authorities, all of which are independent from us, for the following purposes:

We inform you that for transfers of personal data to the organizations marked with an * we require your consent. Unless you expressly deny such consent, it is understood that you have granted the consent required for such transfers.

Personal data can only be transferred to third parties different from the abovementioned by: (i) express consent, (ii) by resolution or order from any judicial or administrative authority, and (iii) in the case of personal information, which by provision of a law is considered public information.

Volaris will ensure through agreements and/or other binding documents, that such third parties maintain adequate security, administrative, technical and physical measures to protect your personal data, and that said third parties use your personal data solely and exclusively for the purposes for which it was gathered and in accordance with this Privacy Notice.

How can you access, rectify, cancel, and object to the use of your personal data, or, if applicable, revoke consent?

You have a right to know which of your personal data we hold, the purposes for which we use it, and the conditions of use (Access). Moreover, you have the right to request any correction or clarification of your personal data, should this information be outdated, incomplete or somehow incorrect (Rectification); you also have the right to request the elimination of your personal data from our records and data bases if you consider that this information is not being used according to the guidelines, duties and obligations, set forth in applicable law (Cancellation); as well as oppose to the use of your personal data for specific purposes (Objection). Collectively, these rights are known as ARCO Rights (Access, Rectification, Cancellation, and Objection).

You can revoke the consent which you granted us for the management of your personal data, including sensitive data. However, it is important that you be aware that in certain cases we may not be able to fully comply with your request, or cease the use immediately, as we may be obligated under applicable law to continue managing your personal data. Likewise, we ask that you please consider that for certain purposes, revocation of consent would mean we may not able to continue providing the contracted services, or it might imply the termination of your relationship with Volaris.

To exercise any of the abovementioned ARCO Rights, respond to any question you may have with respect to the management of your personal data, the mechanisms we have implemented are by sending a Request Form (format available for download) to the following email address at datos.personales@volaris.com or in writing to the following address: Antonio Dovalí Jaime, No. 70, Torre B, Piso 13, Colonia Zedec Santa Fe, Alcaldía Álvaro Obregón, C.P. 01210, México City, Attention: "Protección de Datos Personales".)

In accordance to Article 29 in Mexico's Federal Law on the Protection of Personal Data held by Private Parties, the request must contain information requested on all required fields and marked as mandatory, including: full name (including last name(s)), email address or postal address for notices, a telephone number to contact you, and a clear and exact description of the personal data for which ARCO rights are being exercised. The form should be accompanied by a copy of your official ID, or include it in a legible electronic file (scanned).

The term to reply to your request will be no more than 20 business days, as of the date the request to access, rectify, cancel or oppose to your personal data is received. We will inform you whether the request is applicable to the email address from where the request was received, addressed to you, or via a letter by postal service to the address you listed for such purposes (and in such case, the twenty day period will end on the delivery date).

Modifications to the privacy notice

We reserve the right to make, at any time, changes or updates to this Privacy Notice, to include changes derived from new legislation, internal policies or new requirements to offer and provide our services and products.

These modifications will be available to the public through the following means: (i) visible announcements on our establishments or customer service modules; (ii) pamphlets or brochures available in our establishments or customer service modules; (iii) in our website [Privacy Notice section].

Use of Cookies and Web Beacons

Cookies are text files that are automatically downloaded and saved in the hard drive of the user's computer devices when browsing a specific website, and that enable the server to remember data for that particular user, including among other details, their viewing preferences on such server. As a user, you are not obligated to accept the cookies we send, and you are always free to modify your browser to block them.

Web beacons are images that are inserted on a website or an email message and that can be used to monitor a visitor's behavior, as well as store information regarding their IP address, their length of interaction with the site, and the type of browser they are using, among other information.

On our website, Volaris uses cookies to track a session's information, including services that are added to the original booking, or specific information on the pages visited by users.

When browsing our site, our server will record the IP address plus the date, time, and length of your visit. An IP address is an assigned number, similar to a telephone number, which enables your computer to connect to the Internet.

Links to Third Party Websites

The Volaris Privacy Notice applies exclusively to our company's website. The Privacy Notice does not extend to links for third party websites. The use of the information collected by such websites is solely the responsibility of these third party websites. We ask that you please consider that other organizations have their own Privacy Notices in place, regarding their collection and use of personal data as well as their use of cookies. If you are concerned about the use that such websites may give to your information, we recommend that you please review their policies or contact the website’s owner.

Protection

The safety and confidentiality of the information provided by users when contracting a service or purchasing a product online will be protected by a Secure Socket Layer (SSL), therefore any information that is submitted will be encrypted to guarantee its safety.

To verify you are navigating in a secure environment, make sure the letter S appears on the browser bar. For example: httpS://

However, and despite the fact that there are increasingly more tools for safety purposes for any information submitted via the Internet, its safety may not be guaranteed in its entirety. Once any information is submitted, we will do everything in our power to safeguard it.

Improper Use of your Personal Data

If you think that your right to protection or your personal data has been harmed by the behavior of our employees, our performance, or responses, or if you consider that any part of the treatment given to your personal data is in violation of what is set forth in the Federal Law on the Protection of Personal Data held by Private Parties, you may file a complaint before Mexico's INAI with an official complaint. For more information, please visit their website at www.inai.org.mx

Volaris México - Privacy notice for California Residents

This Privacy Notice for California Residents applies solely to our customers, passengers, and other individuals who reside in the State of California, United States of America (hereinafter referred to as “Client” or “you”), from whom we collect personal information on our website, www.volaris.com, the Volaris mobile applications for iOS and Android, social media and at the Call Center (collectively, the “Services”), all belonging to Concesionaria Vuela Compañía de Aviación, S.A.P.I. de C.V. (“Volaris”). We adopt this Notice to comply with the California Consumer Privacy Act of 2018 (Cal. Civ. Code § 1798.100 et seq), including any implementing regulations (“CCPA”). Any terms not otherwise defined herein, shall have the meaning given to them in the CCPA..

This Privacy Notice is a statement that we make available to our Clients which describes Volaris’ practices regarding the collection, use and disclosure of personal information through the Services.. If you would like to learn more information regarding your California privacy rights, and Volaris´ privacy practices in general, please find our Privacy Policy for California Residents on our website www.volaris.com

Categories of Personal Information Collected

The categories of personal information Volaris may collect from time to time or may have collected within the last twelve (12) months are the following:

1. Identifiers

2. Commercial information such as products or services purchased.

3. Internet or other electronic network activity information (such as browsing history, search history, and information regarding your interaction with a Website, application or advertisement).*

4. Geolocation data.

* 5. Professional or employment information

6. Inferences about behaviors and preferences drawn from any of the above information to create a profile about you reflecting your preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitude, intelligence, abilities and aptitudes. *

*On the Services, Volaris uses cookies to track a session information, including services that are added to the original booking, or specific information on the pages visited by users.

Purpose for which Personal Information may be used or disclosed

In general, the information we collect will be used to provide air transportation services or additional products and services that you may request on the Services, whether they are provided by Volaris or by our commercial partners or airlines with whom we have entered into code-share agreements and/or similar alliances, as well as with respect to related activities. Your information may also be used for the following purposes:

Changes to our privacy notice

Concesionaria Vuela Compañia de Aviación, S.A.P.I. de C.V. (d/b/a Volaris) reserves the right to amend this Privacy Notice at any time. When we make changes to this Privacy Notice, we will post the updated Notice on the website, mobile application and call-center and update the Notice´s effective date.

Updated January 26, 2020

Volaris México - Privacy Policy for US residents

Privacy Policy for US residents

This Privacy Policy applies to United States residents and is applicable exclusively to our consumers, passengers, and other persons residing in the United States of America (hereinafter, the "Consumer" or "you"), from whom we collect personal information on the www.volaris.com website, via the iOS and Android mobile apps, at airports, through our Call Center, and from Social Media (hereinafter the "Services"), all owned by Concesionaria Vuela Compañía de Aviación, S.A.P.I. de C.V. ("Volaris"). This Policy is issued in compliance with applicable laws in the United States including the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”), including any supplemental regulations. Terms not defined herein shall have the meaning described to them in the CCPA.

CATEGORIES OF PERSONAL INFORMATION COLLECTED

Volaris may collect, from time to time, and may have collected in the previous 12 (twelve) months, the following categories of personal information:

1. Identifiers and contact information (Name; Address; Phone number; Email address; Date of birth; Gender).

2. Internet or other electronic network activity information.

3. Commercial information, such as products and services purchased.

4. Geolocation data.

5. Usage data.

6. Payment information.

7. Profile or purchasing habits inferred from your personal information.

8. Information from third parties that you provide at the time of purchase of our products and/or services.

9. Sensitive personal information, as described below.

SENSITIVE INFORMATION

To provide the Services and comply with law, Volaris may require you to provide some of the following information that is classified as "sensitive" under some applicable laws, including:

• Medical information

• Passport information

• Information associated with the payment method of your choice

• Citizenship or immigration status

• Banking information

When we collect sensitive information, we use such information only for lawful purposes in compliance with applicable law, such as to perform the Services or provide the goods and services requested by you or to resist malicious, deceptive, fraudulent, or illegal actions. We do not use such information to infer characteristics about individuals.

Your sensitive information will not be sold or shared.

Sensitive personal information is used for the purposes described in this Privacy Policy. We do not sell or share sensitive personal information for purposes of cross-context behavioral advertising. We do not “sell” or “share” sensitive personal information as the terms “sell” and “share” are defined under the CCPA.

HOW WE COLLECT YOUR DATA

We collect your personal information in the following ways:

Direct Collection. When you use our mobile apps or website, when you provide personal information at airports, when you contact our Call Center, or through our social media pages.

Automated Collection. Via cookies and similar tracking technologies when you interact with our website or mobile app.

Third-Party sources. We may receive information from suppliers, such as travel agents, marketing firms, and other airlines, as well as from public databases and social media platforms.

PURPOSE FOR WHICH PERSONAL INFORMATION MAY BE USED OR DISCLOSED

We use your personal information to:

Provide Services and Products. Provide air transportation services or additional products and services that you may request through the Services, whether provided by Volaris or by our business partners, or airlines with whom we have a shared code agreement and/or similar alliances. Process payments or refunds. Notification of issues related to your flight. Handle complaints or claims.

Improve Our Services. Analyze usage patterns to enhance our offerings and user experience.

Marketing and Personalization. Send tailored offers, promotions, and advertisements based on your preferences and behaviors.

Security and Fraud Prevention. Ensure the safety of our Services and detect fraudulent activities.

Compliance and Legal Obligations. Comply with applicable laws and orders from authorities.

We may disclose your personal information to:

Service Providers. Companies that assist us with payment processing, customer service, IT support, marketing, and other operational services.

Business Partners. Travel agencies, hotel chains, car rental companies, Hopper, Spin Premia, codeshare partners, surety companies, and other partners for coordinated services.

Corporate Event. We reserve the right to transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction.

Government Authorities. For security, customs, immigration, regulatory, and other legal compliance purposes.

Other airlines. Other airlines to fulfill your booking requests relating to your flights.

SELLING AND/OR SHARING YOUR PERSONAL INFORMATION/TARGETED ADVERTISING

Volaris does not engage in activities related to the sale of your personal information in exchange for monetary or any other type of consideration, share your personal information with third parties for the purpose of executing cross-contextual behavioral advertising, or disclose your personal information to thirdparties for the purpose of targeted advertising.

The categories of personal information may be disclosed to and managed by, both in and outside of Mexico, in the preceding 12 months, the following people, companies, organizations and authorities, all of which are independent from us:

Volaris will ensure through the signing of agreements and/or the adoption of other binding documents, that such third parties maintain adequate security, administrative, technical, and physical measures to safeguard your personal information, as well as that such third parties only use your personal information for the purposes for which they were collected and in accordance with this Privacy Policy.

YOUR RIGHTS REGARDING PERSONAL INFORMATION AND HOW TO EXERCISE THEM

Residents of California and certain other states are entitled to certain privacy rights. These rights are not absolute, and we reserve our right to decline to act on some or all of your request to the extent permitted by law. These privacy rights include:

Right to Know

You may have the right to request information about:

- The categories of personal information we have collected about you.

- The categories of sources from which the personal information is collected.

- The business or commercial purpose for collecting, selling, or sharing personal information.

- The categories of third parties to whom we have disclosed, sold, or shared personal information; and

- The specific pieces of personal information we have collected about you.

Right to Delete

You may have the right to request the deletion of any personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, detecting security incidents, complying with a legal obligation).

Right to Correct Inaccurate Personal Information

You may have the right to request the correction of inaccurate personal information that we maintain about you, taking into account the nature of the personal information and the purposes of the processing of such personal information. Upon verification, we will correct any inaccuracies in your personal information.

Right to Opt-Out of the Sale or Sharing of Personal Information

You may have the right, at any time, to direct Volaris not to sell or share the Consumer’s personal information. Because Volaris does not sell or share personal information of Consumers, you are already opted-out.

Right to Limit the Use of Sensitive Personal Information

You may have the right to limit the use and disclosure of your sensitive personal information to only what is necessary for providing services or as otherwise required by law. We do not use personal information defined as sensitive to infer characteristics about you, and so this right is not applicable to our current operations.

Right to Opt-Out of Targeted Advertising and Automated Decision-Making

You may have the right to opt-out of the use and disclosure of your personal information for purposes of targeting advertising and/or automated decision-making.

Right of No Retaliation Following Opt Out or Exercise of Other Rights.

Volaris shall not discriminate against a Consumer because the Consumer exercised any of the Consumer’s rights under state comprehensive privacy law and this Privacy Policy.

HOW TO EXERCISE YOUR RIGHTS.

To exercise your rights, please submit a request through one of the following methods:

• Webform: Privacy Center

• Phone: Call our toll-free number at 1855 551 8789

We will verify your identity through the information provided in your request or through an authorized agent before proceeding.

Consumers may exercise their rights with respect to their personal information in accordance with this Privacy Policy, if applicable, by submitting a verifiable request. In addition, if you wish to unsubscribe from e-mail newsletters of Volaris, you may do so in whole or in part by clicking on the 'Unsubscribe' link located at the bottom of the e-mails.

The verifiable consumer request must include at minimum: Name of the Consumer owner of the personal information on which a right is to be exercised, e-mail address, clear and precise description of the request, and any other data allowing the location of the personal information (e.g., the place where the data were collected or your flight record). Volaris may require authentication of the Consumer that is reasonable for the nature of the request. To verify your request, Volaris will perform reasonable measures to ensure that the person making the request is the person from whom we are collecting the information. We may ask you for your name, e-mail address, and/or contact telephone number. We may also ask you to send us identification issued by your state of residence.

The time to respond to a request will be within 45 days of receiving a verifiable consumer request from the Consumer. Volaris will take reasonable steps to determine whether the request is a verifiable consumer request. We may extend time to provide the required information once by an additional 45 days when reasonably necessary, and we will provide you with a notice of the extension. Disclosure of the required information will be in writing and will be delivered to the Consumer's e-mail address through which the request was sent, or through which indicated in the request.

Please note that your request may be denied or not proceed immediately because your request may not be verifiable, consent may not be demonstrated, or because of legal obligation. Also, you should consider that for certain purposes, the revocation or limitation of your consent will imply that we can no longer provide you with the service you requested or will imply the termination of the relationship with us.

In the event we deny your request, you may have the right to appeal our decision by sending a request in the Webform: Privacy Center section "Personal Information queries".

CALIFORNIA SHINE THE LIGHT

California residents also have the right to request information regarding third parties to whom Volaris has disclosed certain categories of personal information during the preceding year for the third parties' direct marketing purposes under California's "Shine the Light" law (Cal. Civ. Code § 1798.83). Personal information under this California law means "any information that when it was disclosed identified, described, or was able to be associated with an individual." We do not disclose this type of personal information to third parties for their own purposes and we permit you to opt out of any disclosures of nonidentifiable personal information. However, if you are a California resident and would like to inquire further, please submit your request in: Privacy Center.

PERSONAL INFORMATION OF THIRD PARTIES

If you purchase services for other Consumers or Consumer companions, you must make sure that you have the right to provide their personal information to us and that those other Consumers have accepted how we use their information as stated in this Policy. Personal information of other Consumers is collected only for the purpose of providing such personal information to fulfill the requested service, or as otherwise may be required or permitted by applicable law.

MINORS

You must be 18 years or older to use the site. Our Services are not directed at or intended for use by children. We do not knowingly collect information from children under 18 years of age. The limited circumstances we might need to collect the personal information of children under 18 years old include: as part of a reservation, the purchase of other flight-related services, or in other exceptional circumstances. This will only be used and collected as provided by a parent or guardian and with their consent. If you become aware that your child or any child under your care has provided us with personal information without your consent, please contact us.

AUTHORIZED AGENT

Certain state residents may designate an authorized agent to make requests about your personal information on your behalf. The authorized agent or the Customer must provide to Volaris written Consent (means any freely given, specific, informed, and unambiguous indication of the Consumer) by the Consumer to act on the Consumer’s behalf, including by a statement or power of attorney and to verify their identity directly with us.

COMPLAINT CHANNEL

At Volaris, we take the protection of your personal information very seriously. If at any time you have any concerns or suspicions about improper handling of your personal information, we ask that you report them to us immediately through our Whistleblower Channel.

Our Whistleblower Channel is designed to provide you with a secure and confidential resource to report any incident related to the privacy and security of your personal information. You can use this channel to report any concerns, such as unauthorized access to your personal information, accidental loss of your personal information, misuse of your data or any other suspicious activity that may affect the privacy and security of your personal information.

To file a complaint or report an incident, you may contact us by sending a request in the Webform: Privacy Center section "Personal Information queries" or by telephone at 1 855 551 8789.

Any report received through our Whistleblower Channel will be treated with the utmost confidentiality and will be investigated in a diligent and timely manner. We are committed to taking the necessary steps to address and resolve any concerns related to the protection of your personal information.

USE OF COOKIES, WEB BEACONS AND SIMILAR TECHNOLOGIES

Our website and applications allow us to make use of cookies, web beacons and other tracking technologies that serve to fulfill the purposes informed in this Privacy Policy.

The different types of cookies we use to obtain identifying data and data related to the Consumer’s purchase behavior and use of services on the Internet are:

Essential Cookies. These technologies allow proper use of the technological functionalities of our website, so they cannot be disabled.

Cookies to remember preferences and experience of the owner. Through these technologies we obtain browsing hours, browsing time on our website, sections consulted, and Internet pages accessed prior to ours. These cookies allow us to remember your preferences, navigation options, and personalized functions.

Cookies for performance and analytics purposes. We may use our own and third-party cookies (including Google Analytics) to obtain technical and statistical data that allow us to identify how you use our services to improve their performance and future developments.

Own and third party advertising cookies. We may place our own and third-party advertising cookies to obtain information regarding your shopping, consumption, and website viewing preferences to show you advertising that we consider relevant to you.

Some of the cookies we use on our website are necessary to enable its operation and cannot be disabled from our systems.

However, you can disable those non-essential cookies by following the applicable procedure according to the type of browser you use to access our website. Internet Explorer:

• Tools ® Internet → Options ® → Privacy → ® Settings. For more information, you can consult the following link.

• Firefox: Tools ® → Options ® → Privacy and Security. For more information, you can consult the following link.

• Chrome: Settings ® Security check → ® and/or ® → Privacy and security. For more information, you can consult the following link.

• Safari: Preferences ® → Security. For more information, you can consult the following link.

• Opera: Settings ® → Privacy, search and services and/or Site permissions. For more information, you can consult the following link.

To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by clicking here.

Through your Internet browser, you will also be able to view the cookies that are on your device and delete them as you see fit.

In addition, the Volaris platform also uses cookies for mobile devices, so if you wish to disable them, we recommend that you follow the instructions specified by the developer of the Internet browser for your mobile device.

For more information about the use of cookies, we recommend that you consult our Cookies Policy at the following link.

RETENTION PERIOD

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, as described in this Policy, or as required by law. Specifically:

• Transaction Data: Retained for as long as needed to complete your transactions, maintain your accounts, or comply with legal obligations.

• Marketing Data: Retained until you opt-out or request deletion.

• Legal and Compliance Data: Retained for the duration required by applicable laws and regulations, such as for tax and audit purposes.

After the retention period expires, we will securely delete or anonymize your personal information in accordance with applicable laws and regulations.

THIRD PARTY LINKS

This Privacy Policy only concerns our proprietary Services. It does not include links to third-party Web sites, we are not responsible for the content or privacy practices of those sites. The use of information collected by these sites is, in its entirety, the responsibility of the third-party Web sites. You should be aware that other organizations have their own privacy notices regarding the collection and use of personal information, as well as the use of cookies. If you are concerned about how other Web sites may use your information, we encourage that you read their privacy policies or contact the organization that owns the Web site.

CONTACT US

If you would like more information about our Privacy Policy or have any questions regarding the exercise of your rights, please contact us through our interactive web form (tuexperiencia.volaris.com), by sending a request through Webform: Privacy Center or by phone at 1 855 551 8789. The means set forth in this policy are for the purposes stated in this policy. For any other doubt or question not related to our Privacy Policy or Personal Information, please contact us through our official contact channels for customer service https://cms.volaris.com/en/travel-info/contactus/?countryflag=United+States+_+English

CHANGES TO OUR PRIVACY POLICY

Volaris reserves the right to amend this Privacy Policy at any time. When changes are made to this Privacy Policy, the updated Policy will be posted on our website, mobile app, and call center.

Update: March 3, 2025.

Volaris Costa Rica - Privacy Notice of Vuela Aviacion, S.A.

Privacy Notice of Vuela Aviacion, S.A.

At Vuela Aviación, S.A. (hereinafter “Volaris”) we recognize the importance of the security and privacy of the personal data you provide us with when purchasing any of our products, so we are committed to guaranteeing the right to informational self-determination and the appropriate processing of your personal data.

The purpose of this Privacy Notice is to detail the information that you provide and collect as a Client, who will be able to consult it, what we do with it, how we protect it, the rights that assist you and before whom you can exercise those rights.

Identity and means of contact of the person responsible for the database.

Vuela Aviación, S.A. is responsible for the database as part of the commercial or commercial interest group which is made up of the following companies: Controladora Vuela Compañía de Aviación, S.A.B. de C.V.; Concesionaria Vuela Compañía de Aviación, S.A.P.I. de C.V.; Comercializadora Volaris, S.A. de C.V.; Operaciones Volaris, S.A. de C.V.; Servicios Administrativos Volaris, S.A. de C.V.; Servicios Corporativos Volaris, S.A. de C.V.; Viajes Vuela, S.A. de C.V.; Servicios Earhart, S.A.; Guatemala Dispatch Service, S.A.; Vuela, S.A.; and Vuela El Salvador, S.A. de C.V., principally (all, hereinafter, either individually or collectively “Volaris”), whose domicile is located at Parque Empresarial Aerocentro, Piso 2, Radial Francisco J. Orlich, Río Segundo, Alajuela, Costa Rica, C.P. 20109.

Also, in case you wish to contact us by email, we have enabled the following address: privacidad.q6@volaris.com.

For what purposes do we collect and use your personal data?

The personal data collected will be used solely and exclusively for the following purposes: to provide you with the air transport service for passengers, cargo and contracted mail, to follow up on your reservation, to provide you with additional products or services contracted, to carry out surveys of the service received, to carry out billing, collection and debt recovery procedures, as well as any clarification related to your payment and/or the contracted service, Identify you as a member of our memberships, send you notifications and notices about the contracted service or product, respond to queries, requests for information and/or complaints in relation to the contracted services or products.

Additionally, we inform you that we will use your personal information for the following purposes that are not necessary for the requested service, but that allow and facilitate us to provide you with better service and offer you our products and services, such as: To integrate a history of your consumption and preferences, to send you advertising, quotes and information regarding promotions and discounts on the services or products we offer, provide advice on the purchase process, answer questions or clarifications regarding the products and/or services we offer through our available channels for Client service, coordinate the renewal of your memberships, and follow up via social networks, telephone or email on processes initiated with us.

Means of obtaining personal data.

The means of obtaining personal data collected for the purposes set out in this Privacy Notice are obtained in the following ways:

1) When you provide them directly to us, understood as any electronic, optical, sound, visual or other technology such as postal mail, Internet or telephone, including the contracting of a product or service with Volaris, participation in promotions, offers, sponsorships, and related activities;

2) When you visit our websites and enter your data;

3) When you use our Call Center services; and

4) When we obtain information from other sources that are permitted by law.

Information collected.

To carry out the purposes described in this Privacy Notice, we will use the following personal data:

Contact:

• Full name

• Email

• Cell phone

• Address (street, number, neighborhood, city, state, zip code, country)

Official ID:

• Identity card, passport (passport number and validity).

• Visa (visa number and validity).

User Registration:

• Names

• Surnames

• Date of birth

• Gender

• Nationality

• Country of residence

• Language

• Marital status

Credit card details:

• Credit card number

• Name of the holder

• Expiration date

• Security Code

Sensitive personal data.

We inform you that, in order to comply with the purposes, set forth in this privacy notice, in addition to the personal data mentioned above, sensitive personal data may be collected and processed, such as: physical condition, disability and medical documents, banking information, which require special protection.

In the case of the implementation of measures imposed by the health authorities in this act, you expressly accept that we may collect sensitive personal data, which will be treated with absolute confidentiality, only for the purposes mentioned in this Privacy Notice and in accordance with the applicable legal framework for the protection of personal data.

You hereby expressly accept that we may collect sensitive data, which will be treated with absolute confidentiality, only for the purposes mentioned in this Privacy Notice and in accordance with the applicable and current law on personal data. We undertake that they will be treated under the strictest security measures that guarantee their confidentiality and will only be processed for the purposes contained in this Privacy Notice.

Treatment that will be given to personal data.

The personal data you provide us with will be collected, recorded, organized, stored, consulted, shared and collated through automated or manual procedures within Volaris, with different administrative areas involved in the provision of the product or services you have purchased with us.

Likewise, we inform you that your personal data may be transferred and processed inside and outside the country, with the following people, companies, organizations and authorities other than us for the following purposes:

By purchasing our services and products, Volaris interprets that you have read, understood and give us your consent for these purposes. If you do not express your refusal for said transfer, we will understand that you have granted it to us.

Personal data may only be transferred to third parties other than those mentioned in the table above by: (i) express consent, (ii) by resolution or order of a judicial or administrative authority and (iii) when it is personal data of unrestricted access, contained in public databases of general access, or that by legal provision is considered public.

Volaris will ensure, through the signing of agreements and/or the adoption of other binding documents, that said third parties maintain adequate security, administrative, technical and physical measures to safeguard your personal data, as well as that said third parties only use your personal data for the purposes for which they were collected and in accordance with this Privacy Notice.

How long will your personal data be kept?

Personal data is kept for a maximum period of ten (10) calendar years. Once this period has expired, the information will be deleted within a maximum period of fifteen (15) business days, unless there is a legitimate purpose or interest that justifies its conservation, or there is a technical contingency that reasonably justifies the postponement of the deletion of the information.

Protection.

The security and confidentiality of the data that users provide when contracting a service or purchasing a product online will be protected by a secure server under the Secure Socket Layer (SSL) protocol, in such a way that the data sent will be transmitted encrypted to ensure its safekeeping.

To verify that you are in a protected environment, make sure that an S appears in the navigation bar. Example: httpS://.

However, and despite having more secure tools every day, the protection of data sent over the Internet cannot be guaranteed 100%; so once received, everything possible will be done to safeguard the information.

Modifications to the Privacy Notice.

We reserve the right to make modifications or updates to this privacy notice at any time, in response to new legislation, internal policies or new requirements for the provision or offer of our services or products. These modifications will be available to the public through the following means: (i) visible advertisements in our establishments or Client service centers; (ii) leaflets or brochures available in our establishments or Client service centers; and (iii) on our website (“Privacy Notice” section).

How can you access, rectify, cancel or oppose the use of your personal data, or where appropriate, revoke your consent?

As the owner of the information, you have the right to exercise the following rights related to your personal data (data subject rights):

• Right of access to information about your personal data, when exercising this right, you may request: (i) to obtain confirmation of the existence of your data in Volaris files or databases, in an accurate and understandable manner, (ii) to know what personal data we have about you, (iii) the purpose for which they were collected, (iv) general conditions of the use that has been given to your personal data; (iv) have knowledge of the process used in the processing of your personal data, and (v) of the system, program, method or process used in the processing of your personal data.

• Right to rectification of your personal data, when exercising this right, you may request: the updating, correction and incorporation of personal information in the event that it is outdated, inaccurate or incomplete.

• Right to the cancellation or elimination of your personal data, when exercising this right, you can request: the deletion, cancellation and/or elimination of the personal data found in Volaris' files or databases.

• Right to object to the processing of your personal data, when exercising this right, you can request: provided that, by law, it is not provided otherwise and when you have not given consent, that the processing of your personal data not be carried out or that it ceases.

To exercise these rights, you must indicate: a) Name of the owner; b) e-mail or other means of contact; c) documents that prove identity and character of representative; (d) a clear and precise description of the request; (e) any other data that allows the location of the data (i.e. the place where the data were collected or your flight record); f) if they are rectification: the modifications and documentation that supports them; and g) the document that certifies the personality of the representative or third party making the request on behalf of the holder.

You may also revoke the consent you have given us for the processing of your personal data, including your sensitive personal data. However, it is important that you bear in mind that this means the cessation of the processing of personal data from a blocking of these and their subsequent deletion. However, in not all cases we will be able to respond to your request or conclude the use immediately, since it is possible that due to some legal obligation we require us to continue processing your personal data, in which case we will inform you.

For the exercise of any of the rights indicated above, or attention to any doubt you may have regarding the processing of your information, the mechanisms that have been implemented are through the submission of the respective request in which it must be through our privacy portal by clicking here, or to the email address privacidad.q6@volaris.com; or in writing to the following address: Parque Empresarial Aerocentro, Piso 2, Radial Francisco J. Orlich, Rio Segundo, Alajuela, Costa Rica, C.P. 20109 - Protection of Personal Data.

Volaris will acknowledge receipt within five (5) business days, counted from the day following receipt of the request. In those cases, in which the request made merits a longer period, the holder will be acknowledged, and the holder will be acknowledged, as well as the reasons that justify the extension.

In the event that your request is not clear enough and/or you do not provide the documentation that allows us to prove ownership of the data you wish to exercise, Volaris may contact you and request that you correct them within a maximum period of twenty (20) business days. If the indicated period has elapsed without the correction occurring, your application will be considered not to have been submitted.

Once Volaris has all the necessary information to attend to your request, it must resolve within eight (8) business days from the date of receipt of a request that meets all the requirements indicated, in which case, you will be given a response about the origin or not of the same to the means of communication that you have indicated to receive notifications. Additionally, in the event that the owners of personal data wish to unsubscribe from sending email newsletters, they may do so in whole or in part by clicking on the 'Unsubscribe' link located at the bottom of the emails.

Additionally, in the event that the owners of personal data wish to unsubscribe from sending email newsletters, they may do so in whole or in part by clicking on the 'Unsubscribe' link located at the bottom of the emails.

Use of cookies and web beacons.

Cookies are text files that are automatically downloaded and stored on the hard drive of the user's computer when browsing a specific Internet page, which allow the Internet server to remember some data about this user, including their preferences for viewing the pages on that server. You are not obliged to accept cookies that we send you, and you can modify your browser to not accept cookies.

On the other hand, web beacons are images inserted into an Internet page or email, which can be used to monitor the behavior of a visitor, such as storing information about the user's IP address, duration of interaction time on that page and the type of browser used, among others.

Volaris uses cookies on its website to record session information, such as services added to the reservation or specific information about which pages you visit as a user.

When you visit our website, our server records your IP address along with the date, time, and duration of your visit. An IP address is an assigned number, similar to a phone number, that allows your computer to connect to the Internet.

For more information on the use of cookies, we recommend that you consult our Cookies Policy at the following link: Cookies Policy.

Links to Third-Party Websites.

The Volaris Privacy Notice only concerns the website that we own. This does not include links to third-party websites. The use of information collected by these sites is, in its entirety, the responsibility of the third-party websites. You should be aware that other organizations have their own privacy notices regarding the collection and use of personal information, as well as the use of cookies. If you are concerned about how other websites might use your information, we recommend that you read their privacy policy or contact the organization that owns the website.

Improper processing of your personal data.

If you believe that your right to personal data protection has been infringed by any conduct of our employees or our actions or responses, or you suspect that there is a violation of the applicable provisions on the protection of personal data in the processing of your personal data, you may lodge the applicable appeal with the competent authority. In the case of Costa Rica you can do it before the Agency for the Protection of Inhabitants' Data (Prodhab), for more information you can visit the www.prodhab.go.cr/ website. In the case of Colombia you can file the corresponding complaint or complaint with the Superintendence of Industry and Commerce, for more information you can visit the https://www.sic.gov.co/ website. In the case of Peru, you can request the protection of your rights before the National Authority for the Protection of Personal Data, for more information you can visit the https://www.sic.gov.co/ website.

Update March 3, 2025

Volaris Costa Rica - Privacy Policy for US Residents

This Privacy Policy applies to United States residents and is applicable exclusively to our consumers, passengers, and other persons residing in the United States of America (hereinafter, the "Consumer" or "you"), from whom we collect personal information on the www.volaris.com website, via the iOS and Android mobile apps, at airports, through our Call Center, and from Social Media (hereinafter the "Services"), all owned by Vuela Aviación, S.A. ("Volaris"). This Policy is issued in compliance with applicable laws in the United States including the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”), including any supplemental regulations. Terms not defined herein shall have the meaning described to them in the CCPA.

CATEGORIES OF PERSONAL INFORMATION COLLECTED

Volaris may collect, from time to time, and may have collected in the previous 12 (twelve) months, the following categories of personal information:

1. Identifiers and contact information (Name; Address; Phone number; Email address; Date of birth; Gender).

2. Internet or other electronic network activity information.

3. Commercial information, such as products and services purchased.

4. Geolocation data.

5. Usage data.

6. Payment information.

7. Profile or purchasing habits inferred from your personal information.

8. Information from third parties that you provide at the time of purchase of our products and/or services.

9. Sensitive personal information, as described below.

SENSITIVE INFORMATION

To provide the Services and comply with law, Volaris may require you to provide some of the following information that is classified as "sensitive" under some applicable laws, including:

• Medical information

• Passport information

• Information associated with the payment method of your choice

• Citizenship or immigration status

• Banking information

When we collect sensitive information, we use such information only for lawful purposes in compliance with applicable law, such as to perform the Services or provide the goods and services requested by you or to resist malicious, deceptive, fraudulent, or illegal actions. We do not use such information to infer characteristics about individuals.

Your sensitive information will not be sold or shared.

Sensitive personal information is used for the purposes described in this Privacy Policy. We do not sell or share sensitive personal information for purposes of cross-context behavioral advertising. We do not “sell” or “share” sensitive personal information as the terms “sell” and “share” are defined under the CCPA.

HOW WE COLLECT YOUR DATA

We collect your personal information in the following ways:

Direct Collection. When you use our mobile apps or website, when you provide personal information at airports, when you contact our Call Center, or through our social media pages.

Automated Collection. Via cookies and similar tracking technologies when you interact with our website or mobile app.

Third-Party sources. We may receive information from suppliers, such as travel agents, marketing firms, and other airlines, as well as from public databases and social media platforms.

PURPOSE FOR WHICH PERSONAL INFORMATION MAY BE USED OR DISCLOSED

We use your personal information to:

Provide Services and Products. Provide air transportation services or additional products and services that you may request through the Services, whether provided by Volaris or by our business partners, or airlines with whom we have a shared code agreement and/or similar alliances. Process payments or refunds. Notification of issues related to your flight. Handle complaints or claims.

Improve Our Services. Analyze usage patterns to enhance our offerings and user experience.

Marketing and Personalization. Send tailored offers, promotions, and advertisements based on your preferences and behaviors.

Security and Fraud Prevention. Ensure the safety of our Services and detect fraudulent activities.

Compliance and Legal Obligations. Comply with applicable laws and orders from authorities.

We may disclose your personal information to:

Service Providers. Companies that assist us with payment processing, customer service, IT support, marketing, and other operational services.

Business Partners. Travel agencies, hotel chains, car rental companies, Hopper, Spin Premia, codeshare partners, surety companies, and other partners for coordinated services.

Corporate Event. We reserve the right to transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction.

Government Authorities. For security, customs, immigration, regulatory, and other legal compliance purposes.

Other airlines.Other airlines to fulfill your booking requests relating to your flights.

SELLING AND/OR SHARING YOUR PERSONAL INFORMATION/TARGETED ADVERTISING

Volaris does not engage in activities related to the sale of your personal information in exchange for monetary or any other type of consideration, share your personal information with third parties for the purpose of executing cross-contextual behavioral advertising, or disclose your personal information to thirdparties for the purpose of targeted advertising.

The categories of personal information may be disclosed to and managed by, both in and outside of Mexico, in the preceding 12 months, the following people, companies, organizations and authorities, all of which are independent from us:

Volaris will ensure through the signing of agreements and/or the adoption of other binding documents, that such third parties maintain adequate security, administrative, technical, and physical measures to safeguard your personal information, as well as that such third parties only use your personal information for the purposes for which they were collected and in accordance with this Privacy Policy

YOUR RIGHTS REGARDING PERSONAL INFORMATION AND HOW TO EXERCISE THEM

Residents of California and certain other states are entitled to certain privacy rights. These rights are not absolute, and we reserve our right to decline to act on some or all of your request to the extent permitted by law. These privacy rights include:

Right to Know

You may have the right to request information about:

- The categories of personal information we have collected about you.

- The categories of sources from which the personal information is collected.

- The business or commercial purpose for collecting, selling, or sharing personal information.

- The categories of third parties to whom we have disclosed, sold, or shared personal information; and

- The specific pieces of personal information we have collected about you.

Right to Delete

You may have the right to request the deletion of any personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, detecting security incidents, complying with a legal obligation).

Right to Correct Inaccurate Personal Information

You may have the right to request the correction of inaccurate personal information that we maintain about you, taking into account the nature of the personal information and the purposes of the processing of such personal information. Upon verification, we will correct any inaccuracies in your personal information.

Right to Opt-Out of the Sale or Sharing of Personal Information

You may have the right, at any time, to direct Volaris not to sell or share the Consumer’s personal information. Because Volaris does not sell or share personal information of Consumers, you are already opted-out.

Right to Limit the Use of Sensitive Personal Information

You may have the right to limit the use and disclosure of your sensitive personal information to only what is necessary for providing services or as otherwise required by law. We do not use personal information defined as sensitive to infer characteristics about you, and so this right is not applicable to our current operations.

Right to Opt-Out of Targeted Advertising and Automated Decision-Making

You may have the right to opt-out of the use and disclosure of your personal information for purposes of targeting advertising and/or automated decision-making.

Right of No Retaliation Following Opt Out or Exercise of Other Rights

Volaris shall not discriminate against a Consumer because the Consumer exercised any of the Consumer’s rights under state comprehensive privacy law and this Privacy Policy.

HOW TO EXERCISE YOUR RIGHTS.

To exercise your rights, please submit a request through one of the following methods:

• Webform: Privacy Center

• Phone: Call our toll-free number at 1855 551 8789

We will verify your identity through the information provided in your request or through an authorized agent before proceeding.

Consumers may exercise their rights with respect to their personal information in accordance with this Privacy Policy, if applicable, by submitting a verifiable request. In addition, if you wish to unsubscribe from e-mail newsletters of Volaris, you may do so in whole or in part by clicking on the 'Unsubscribe' link located at the bottom of the e-mails.

The verifiable consumer request must include at minimum: Name of the Consumer owner of the personal information on which a right is to be exercised, e-mail address, clear and precise description of the request, and any other data allowing the location of the personal information (e.g., the place where the data were collected or your flight record). Volaris may require authentication of the Consumer that is reasonable for the nature of the request. To verify your request, Volaris will perform reasonable measures to ensure that the person making the request is the person from whom we are collecting the information. We may ask you for your name, e-mail address, and/or contact telephone number. We may also ask you to send us identification issued by your state of residence.

The time to respond to a request will be within 45 days of receiving a verifiable consumer request from the Consumer. Volaris will take reasonable steps to determine whether the request is a verifiable consumer request. We may extend time to provide the required information once by an additional 45 days when reasonably necessary, and we will provide you with a notice of the extension. Disclosure of the required information will be in writing and will be delivered to the Consumer's e-mail address through which the request was sent, or through which indicated in the request.

Please note that your request may be denied or not proceed immediately because your request may not be verifiable, consent may not be demonstrated, or because of legal obligation. Also, you should consider that for certain purposes, the revocation or limitation of your consent will imply that we can no longer provide you with the service you requested or will imply the termination of the relationship with us.

In the event we deny your request, you may have the right to appeal our decision by sending a request in the Webform: Privacy Center section "Personal Information queries".

CALIFORNIA SHINE THE LIGHT

California residents also have the right to request information regarding third parties to whom Volaris has disclosed certain categories of personal information during the preceding year for the third parties' direct marketing purposes under California's "Shine the Light" law (Cal. Civ. Code § 1798.83). Personal information under this California law means "any information that when it was disclosed identified, described, or was able to be associated with an individual." We do not disclose this type of personal information to third parties for their own purposes and we permit you to opt out of any disclosures of nonidentifiable personal information. However, if you are a California resident and would like to inquire further, please submit your request in: Privacy Center.

PERSONAL INFORMATION OF THIRD PARTIES

If you purchase services for other Consumers or Consumer companions, you must make sure that you have the right to provide their personal information to us and that those other Consumers have accepted how we use their information as stated in this Policy. Personal information of other Consumers is collected only for the purpose of providing such personal information to fulfill the requested service, or as otherwise may be required or permitted by applicable law.

MINORS

You must be 18 years or older to use the site. Our Services are not directed at or intended for use by children. We do not knowingly collect information from children under 18 years of age. The limited circumstances we might need to collect the personal information of children under 18 years old include: as part of a reservation, the purchase of other flight-related services, or in other exceptional circumstances. This will only be used and collected as provided by a parent or guardian and with their consent. If you become aware that your child or any child under your care has provided us with personal information without your consent, please contact us.

AUTHORIZED AGENT Certain state residents may designate an authorized agent to make requests about your personal information on your behalf. The authorized agent or the Customer must provide to Volaris written Consent (means any freely given, specific, informed, and unambiguous indication of the Consumer) by the Consumer to act on the Consumer’s behalf, including by a statement or power of attorney and to verify their identity directly with us.

COMPLAINT CHANNEL

At Volaris, we take the protection of your personal information very seriously. If at any time you have any concerns or suspicions about improper handling of your personal information, we ask that you report them to us immediately through our Whistleblower Channel.

Our Whistleblower Channel is designed to provide you with a secure and confidential resource to report any incident related to the privacy and security of your personal information. You can use this channel to report any concerns, such as unauthorized access to your personal information, accidental loss of your personal information, misuse of your data or any other suspicious activity that may affect the privacy and security of your personal information.

To file a complaint or report an incident, you may contact us by sending a request in the Webform: Privacy Center section "Personal Information queries" or by telephone at 1 855 551 8789. Any report received through our Whistleblower Channel will be treated with the utmost confidentiality and will be investigated in a diligent and timely manner. We are committed to taking the necessary steps to address and resolve any concerns related to the protection of your personal information.

USE OF COOKIES, WEB BEACONS AND SIMILAR TECHNOLOGIES

Our website and applications allow us to make use of cookies, web beacons and other tracking technologies that serve to fulfill the purposes informed in this Privacy Policy.

The different types of cookies we use to obtain identifying data and data related to the Consumer’s purchase behavior and use of services on the Internet are:

• Essential Cookies. These technologies allow proper use of the technological functionalities of our website, so they cannot be disabled.

• Cookies to remember preferences and experience of the owner. Through these technologies we obtain browsing hours, browsing time on our website, sections consulted, and Internet pages accessed prior to ours. These cookies allow us to remember your preferences, navigation options, and personalized functions.

• Cookies for performance and analytics purposes. We may use our own and third-party cookies (including Google Analytics) to obtain technical and statistical data that allow us to identify how you use our services to improve their performance and future developments.

• Own and third party advertising cookies. We may place our own and third-party advertising cookies to obtain information regarding your shopping, consumption, and website viewing preferences to show you advertising that we consider relevant to you.