Data Protection Policy

---

This Privacy Policy regulates Users' access to and use of the services included on the Website as the holders of data eligible for protection, in accordance with the personal data protection regulations in force.

en.Yumping.com.mx fully complies with the personal data protection legislation in force and with the confidentiality commitments typical of its activity.

1. Controller

We hereby inform you that YUMPING ADVENTURE, S.L., with registered office at Paseo de la Castellana, 184 - 4º planta, 28046 Madrid (Madrid), España and email address info@yumping.com.mx, is the Controller of your personal data.

2. en.Yumping.com.mx acting as Data Processor

en.Yumping.com.mx shall act as the Data Processor in the following services and any others that may arise in the future:

• Images published by the Users.
• Videos published by the Users.
• Vendors’ contact details provided by users as part of the content provided by such users.
• Users’ personal data used by the vendors while they use en.Yumping.com.mx tools.
• Data of the users that use the services of purchase of bonds and friends

The Controller of the data provided in relation to those services rendered by en.Yumping.com.mx shall be the actual User and consumer, who must comply with the data protection regulations, must have obtained consent from the data subjects for processing their personal data and must have applied all the guarantees required for processing their personal data.

The User shall be responsible at all times for the images published and the names included. Notwithstanding the foregoing, en.Yumping.com.mx has the power to remove the content if it is illegal.

en.Yumping.com.mx shall handle the data according with the standard contractual clauses set forth by the European Comission.

3. Categories of the personal data processed

The personal data to be processed shall be the personal data that the User has provided to en.Yumping.com.mx when completing the online registration form, through social media, through the customer service or through any other means (chats, telephone calls, emails, etc.).

Regarding social media, the privacy policy envisaged therein shall be applied.

The categories of data which en.Yumping.com.mx can have at its disposal are as follows:

Users consumers (users/friends/guests):

Identification data: First name, last name, image, identity number, social media username (full name if the person accesses or interacts through social media).

Contact data: Telephone number, email address, postal address, social media username (email if the person accesses or interacts through social media).

Personal data: Date of birth, place of birth, nationality, gender.

Economic-financial data: Bank data (if this applies).

Professional users:

Identification data: First name, last name.

Corporate contact data: Telephone number, email address, registered office.

Business data: Activity and business. Data included in the professional's data sheet/profile.

Users accept that, once they register, their photographs and user profile will be publicly visible for the other users of en.Yumping.com.mx as well as on the various Internet search engines.

In the event that Users' data are collected through social media, the applicable privacy policy shall be that of the specific social media.

4. Mandatory or optional information provided by Users and veracity of the data

The fields marked with an asterisk (*) in the registration form to be completed by the Users are mandatory so that the request can be met; the other fields are voluntary.

Likewise, when the data are provided through any other means, at the time of processing the Users shall be notified whether or not it is mandatory to provide such data.

The Users guarantee that the personal data provided to en.Yumping.com.mx are truthful and updated, and they are responsible for notifying any changes thereto, where the Users are the only parties responsible for providing inaccurate or false data and for the harm that this may cause to en.Yumping.com.mx or to third parties as a result of using the services provided by en.Yumping.com.mx. Likewise, en.Yumping.com.mx states that the data that it collects are adequate, pertinent and not excessive in relation to its specific scope, purposes and services.

5. Purpose and legitimacy of the processing

The Users' data provided to en.Yumping.com.mx through any means so that it can render the services required by them are collected for the following purposes:

• Enable Users to rapidly and easily search for companies that provide the services and products related to the activity by province, activity sector, type of service and location.
• Advertise the services and products of adventure activities companies by creating a data sheet with their contact details, location, service and/or product description and photographs, where applicable.
• Facilitate contact between the companies which advertise their products or services on the Website and the users interested in them via information requests through emails, forms and telephone calls.
• Enable Users to create a personal data sheet that can be accessed by the other Website users.
• Provide Users with all the information required to hold a adventure activity through articles and advice published on the Website.
• Create a Website community for participation so that all the Users, whether or not they are registered, can access it.
• Maintain regular and dynamic communication with the Users through any means, including social media and instant messaging. In such cases, without prejudice to applying en.Yumping.com.mx's Privacy Policy, the privacy policy of the corresponding social media or instant messaging service shall also be applied. Our recommendation is to analyze the privacy policy in detail.
• Record the telephone calls with the aim of ensuring the service quality and monitoring how the incidents are resolved.

en.Yumping.com.mx is legitimized to process the Users' data with the aforementioned purposes so that it can comply with its contractual obligations as a result of the requests made by Users.

The Users' data provided to en.Yumping.com.mx through any means shall also be collected with the following purposes:

• Analyze the data for training and/or statistical purposes. Carry out the basic activities to analyze the content of the information provided and draft the profiles to appropriately manage the activities and services provided by en.Yumping.com.mx.
• Record the telephone calls with the aim of ensuring the service quality and monitoring how the incidents are resolved.

en.Yumping.com.mx is legitimized to process the Users' data with the aforementioned purposes since it has a legitimate interest that is expressly acknowledged in the privacy regulations, so that it can provide the service properly.

Likewise, the Users' data provided to en.Yumping.com.mx through any means shall also be collected with the following purpose:

• Send electronic communications of the promotions and information about the services provided by the companies with which en.Yumping.com has commercial agreements (this also includes its own commercial communications as well as those of professional users and third parties), related to the these activity, given the nature and purpose of the services provided by en.Yumping.com. For such purpose, it is understood that the products or services are all the products and services included on the Website at present and in the future as well as any products, services or campaigns specifically aimed at adventure activity.
  
  Such promotional electronic communications shall be sent throughout the relationship between the Users and en.Yumping.com.mx and even after it has ended, provided that the Users have not stated otherwise.
  
  en.Yumping.com.mx has established two mechanisms through which the Users who request this can change or delete such services in a simple and fast way and free of charge: (i) through the user menu by disabling the “Send” option in the “Preferences” subsection included in the “My account” section, or (ii) following the instructions stated at the bottom of the electronic communications.

en.Yumping.com.mx is legitimized to process the Users' data with the aforementioned purposes, as expressly acknowledged in the legislation in force, (i) in the event that the Users gave their consent and/or (ii) in the event that the information is about products and services similar to those addressed by a previous sale or negotiation, provided that the Users did not decide to stop receiving such communications.

6. Automated decisions

en.Yumping.com.mx shall not adopt decisions which may affect the Users based only on the automated processing of their personal data. All the decision-making processes related to the aforementioned purposes of the processing are carried out with human involvement.

7. Assignment of personal data to third parties

As a result of the nature of the service and with the aim of complying with the obligations arising from the services arranged by the Users, it shall be necessary to share their data with all the recipients stated in the first paragraph of section 5. The legitimacy for this resides in complying with the contractual obligations.

Likewise, the Users' data can be assigned to the recipients stated below for the following reasons:

• Public authorities: to comply with the legal obligations to which en.Yumping.com.mx is subject as a result of its activity.
• Suppliers which need to access the data to provide the services which en.Yumping.com.mx has arranged with those suppliers and with which en.Yumping.com.mx has signed the necessary confidentiality and personal data processing agreements required by the privacy protection regulations.

In the event that en.Yumping.com.mx has to assign personal data in the future, it will notify the Users accordingly.

8. Retention period

The Users' data shall be retained while the relationship with en.Yumping.com.mx is maintained and, once that relationship ends for whatever reason, during the applicable legal statute of limitations with respect to the legitimate purposes for processing that personal data.

After the relationship ends, the personal data shall be processed for the sole purpose of accrediting complying with our legal or contractual obligations. Once those statute-of-limitation periods end, the Users' data shall be deleted or, alternately, anonymized.

When the Users request to unsubscribe from the service, en.Yumping.com.mx shall deal with this by deleting the Users' profile photo and identification data from the Website (first name, last name and email address), while retaining the rest of the content which the Users have published on the Website.

9. Data subjects' rights and claims

The Users can exercise their right of access, rectification, erasure, portability, restriction and/or objection to the processing.

Such rights can be made effective through the Website settings themselves. In the event that problems occur when making this effective online or if doubts or controversies arise regarding our data protection policy, you can directly contact YUMPING ADVENTURE, S.L. (en.Yumping.com.mx) at - Paseo de la Castellana, 184 - 4º planta, 28046 Madrid (Madrid), España or by email to info@yumping.com.mx, stating the subject.

If you consider that the processing of your personal data breaches the regulations or your rights, you can file a claim at en.Yumping.com.mx or at the Spanish Data Protection Agency, either through its Website or by writing to it at:

Agencia Española de Protección de Datos.

C/ Jorge Juan, 6. 28001 - Madrid

https://www.aepd.es/es

10. Data of minors

Providing the personal data of minors and, in particular, their image to the Website expressly implies that, without reservation, the Users who provide them:

• Hold the necessary rights to use the data or image of the minors.
• Ensure that the stated data do not jeopardize the minors in any way whatsoever or harm any of their rights.
• Expressly exonerate en.Yumping.com.mx from any potential claims arising from this, where the Users assume that they provided the information with the full liabilities arising from such claims.

11. Security

en.Yumping.com.mx notifies the Users that it has adopted the necessary technical and organizational measures to ensure the security of the personal data and prevent their alteration, loss or unauthorized processing or access, based on the state of the technology, the nature of the supplied data and the risks to which they are exposed.

12. Cookies and IPs

The Users accept the use of cookies and IP tracking.

Our Website traffic analyzer uses cookies and IP tracking which enable us to collect data for statistical purposes such as the date of the first visit, the number of visits made, the date of the last visit, the URL and the domain name of the previous Website, the browser used and the screen resolution. Nevertheless, if the Users wish, they can disable and/or delete such cookies by following the instructions on their Internet browser.

If you want to know more about our Cookie Policy, you can access it through the following link: https://en.yumping.com.mxcookies_EN.php.

13. Contact

You can contact en.Yumping.com.mx by writing to the aforementioned email or postal address or calling the telephone number stated in the Legal Terms.

If you make a phone call, en.Yumping.com.mx hereby informs you that your call may be recorded with the aim of ensuring the service quality and monitoring how the incidents are resolved.