Privacy Notice - Social Networks

In compliance with the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and other applicable provisions, we provide the following information:

1. Identity and Address of The Person in Charge of Personal Data.

Link Conexión Aérea, S.A. de C.V., Commercial Name TAR Regional Air Transport (hereinafter "Carrier"), with address to hear and receive notifications on Blvd. Bernardo Quintana CS9800, B-706C, Centro Sur, Querétaro, Querétaro 76090, Mexico, is responsible for the use and protection of your personal data that may be collected (hereinafter "personal data") through Facebook, Twitter, YouTube and Linkedin, among others (hereinafter "Social Networks")

2. Purpose of Use.

a) Original and necessary purposes

1. Identification, verification and investigation of Prospects and/or Customers.
2. Additional Purposes.
3. Management, control and administration of followers in social networks (Facebook, Twitter, Google+, etc.).
4. Communication of Carrier notifications, activities, services and promotions.
5. Statistics of followers in social networks.

b) Secondary Purposes.- If you do not object, Carrier will use your personal data for secondary purposes, related to the improvement and promotion of business (such as sending of congratulations and other celebrations and special days). Also, your personal image (be it photo, video, etc.) can be used in the development of informative and promotional material of the company, as well as publications in magazines and newspapers.

2.1. Negative to the Use of Personal Data for Secondary Purposes.

In case you do not want your personal data to be used for the aforementioned secondary purposes, or any of them, you can express your refusal by sending your request to our Committee for Protection of Personal Data (“Committee”), who will indicate the procedure to be followed to exercise your right. The refusal to use your personal data for secondary purposes may not be a reason to deny the requested services or terminate the relationship established with us.

3. Personal Data Collected and Submitted To Use.

For the purposes indicated in this Privacy Notice, the Responsible party uses the following categories of personal data:

1. Data of identifying nature and that are contained in your personal description or public Facebook profile: (i) Full name, (ii) Date and place of birth, (iii) Sex, (iv) Domicile, (v) Landline and/or cell phone, (vi) Nationality, (vii) Marital status, (viii) Geolocation , (ix) academic record, (x) hobbies, (xi) number of friends, relationships or followers, (xii) emails, (xiii) news posted on your wall or status updates, (xiv) notes, (xv) companies worked or general work history, (xvi) groups, interests, games, applications or events that he/she attends or forms part of, (xvii) photos, videos he/she shares or publications that he/she likes, and (xviii) professional or personal website.

3.1.- Sensitive Personal Data.

We also access through your profile on Facebook or social networks to various data that are considered sensitive by Mexican law, which may be disclosed by Facebook to Carrier for the mere fact of linking your Facebook account with your Carrier account and which consist of the following: (i) sexual preference, (ii) religious beliefs, (iii) political ideology, (iv) state of health, (v) union affiliation, (vi) ethnic origin and/or (vii) socioeconomic status.

These data can be disclosed voluntarily through your profile on Facebook and that they may be used, in conjunction with other types of personal data of an identifying or financial or patrimonial nature that are disclosed to us, for evaluate the credit risk you have, your identity or carry out statistics. You can at any time limit our access to your profile on your Social Networks or limit the information you share on Social Networks. Please visit the privacy policies of Social Networks for these purposes.

3.2.- Personal Data of Third Parties.

For personal data of third parties that you provide us, you must previously have the consent of the owner of said data and let said owner know the site where our privacy notice is available.

4. Transfer of Personal Data

Your personal data may be used by persons other than Carrier’s in the following cases:

• Carrier’s holding companies, subsidiaries or affiliates, or to a parent company; with purposes of centralized protection of information, control of additions and deletions; as well as for the statistics of Carrier users, in order to evaluate, improve and design new services for these users.
• Non-Affiliated Third Parties (service providers), with the sole and exclusive purpose that they work with Carrier in the execution of services related to Carrier itself.
• Administrative, judicial or governmental authorities of any kind in Mexico or abroad, provided that this is established by judicial or administrative mandate or that a law so determines, as well as to Credit Information Companies or that according to the applicable regulations we are required to provide.
• When subcontracting to third parties, be lawyers, auditors, accountants or system managers who require processing your information on behalf of and under the instructions of Carrier.

Carrier does not require your consent for the aforementioned uses.

4.1.- Consent for the Transfer of Data.

Your personal data will not be transferred to third parties without your consent, except as provided in article 37 of LFPDPPP and in any case fulfilling the conditions provided for in article 17 of LFPDPPP Regulation.

5. Responsibility of Carrier, Users of Social Networks and providers of Social Network services.

Carrier uses personal data of the users of social networks by accessing and managing information that they publish through profiles they have created in each of the social networks they use to link with Carrier. This use also includes personal data for purposes of releasing Carrier activities.

Carrier accesses, manages and uses personal data of users of social networks only during the period in which they remain linked to profiles that Carrier administers in each of the social networks involved.

Users are responsible for accuracy and update of personal data they publish in their social network profiles, as well as the degree of dissemination of their information and access to it that they allow or authorize third parties through said profiles. Carrier recommends all users of social networks to continually review privacy settings of their profiles on each of the websites they use to link to Carrier.

Providers of social network services are responsible for databases created with such networks of users’ personal data. These service providers are in turn responsible for the security measures they adopt to safeguard personal data of their users.

In accordance with the above, Carrier is responsible for the adequate access, management and use of personal data of the users that are linked to profiles administered by Carrier in various social networks. Carrier does not create new databases with information and/or personal data of social networks users.

6. Committee for the Protection of Carrier Personal Data.

This Committee has been formally designated to attend requests of users to exercise their rights, as well as to encourage and protect personal data we have in our possession.

For everything related to the use and protection of personal data, you can contact this Committee by sending an email to: privacidad@tarmexico.com

7. ARCO Rights.

To exercise any of the rights of access, rectification, cancellation and opposition (hereinafter, "ARCO Rights"), you must submit the respective request through an email addressed to our Committee for the Protection of Personal Data, at privacidad@tarmexico.com.

In order for this Committee to follow up on your request, you or your legal representative must correctly prove your identity for which it is necessary to complete all the fields indicated in the Application and accompany it with a copy of any of the IDs so requested.

In case information provided in such Request is erroneous or insufficient, or the corresponding ID documents are not accompanied, the Committee, within five (5) business days, may require that you provide the elements or documents necessary to process it. You will have ten (10) business days to meet such requirement, counted from the day after you received it. If there is no response within that period, the corresponding request will be deemed not filed.

The Committee will communicate the adopted decision, within a maximum period of twenty (20) business days from the date received, so that, if appropriate, it becomes effective within fifteen (15) business days following the response. The response will be given electronically to the email specified in the Request.

8. Mechanisms and Procedure to Revoke Your Consent.

In the terms of the applicable regulations, you can revoke the consent that you have given us. However, it is important that you keep in mind that your request will not be applicable in all cases, as it is possible that due to some legal obligation we may continue to use your personal data.

To revoke your consent, you must email to privacidad@tarmexico.com addressed to our Committee for the Protection of Personal Data.

9. Limit the Use or Disclosure of Personal Data.

You may limit the use or disclosure of your personal data by sending your request to the Committee at: privacidad@tarmexico.com

The requirements to prove your identity, as well as the procedure to meet your request, will be governed by the same criteria in 6 above. If approved, the Committee will proceed to its exclusion.

10. Modifications to This Privacy Notice.

Any change or modification to this notice may be made by Carrier at any time and will be made known through its website http://www.tarmexico.com and/or through print media of nation-wide circulation in Mexico.

Last update: June 2016