Privacy Policy

KORU Website

Last updated: Last updated

1. Introduction

AJL INFRAESTRUCTURA, S.A.S. DE C.V., operating under the brand KORU, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website. By using our website, you agree to the practices described in this policy.

2. Data Controller

The data controller for your personal data is: AJL INFRAESTRUCTURA, S.A.S. DE C.V. RFC (Tax ID): AIN190126E15 Registered address: Calle Marie Curie 303, Int. 13, Col. Reforma y Ferrocarriles Nacionales, C.P. 50070, Toluca, State of Mexico, Mexico Operational location: Puerto Escondido, Oaxaca, Mexico Email: info@korurent.com

3. Data We Collect

We may collect the following types of information: Information you provide: • First and last name • Email address • Phone number • Information included in contact messages Automatically collected information: • IP address • Browser and device type • Pages visited and time spent • Cookie information (see our Cookies Policy) We do not request or store financial or payment card information through this website. Sensitive data: KORU does not request or collect sensitive personal data (such as health data, ethnic origin, religious beliefs, sexual orientation, or biometric data) through this website.

5. How We Use Your Data

We use the collected information to: • Respond to your inquiries and information requests • Provide information about our vehicle rental services • Improve user experience on our website • Analyze site traffic and usage through analytics tools • Maintain security and prevent fraud • Comply with applicable legal obligations

6. Sharing Information with Third Parties

We may share your information with the following third parties: Service providers: • Hostinger (web hosting) - Location: United States • Google Analytics (web analytics) - For usage statistics • Amazon Web Services (AWS) - Cloud services Other third parties: • WhatsApp Business - For direct communication We do not sell, rent, or share your personal information with third parties for marketing purposes without your explicit consent.

7. International Data Transfers

Since our website is hosted on servers located in the United States (through Hostinger), your information may be transferred and processed outside of Mexico. We also use third-party services such as Google Analytics and AWS that may process data in different jurisdictions. When international transfers occur, we endeavor to ensure that appropriate safeguards are in place to protect your information.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected: • Contact form data: Up to 2 years after last contact • Analytics data: According to Google Analytics settings • Security logs: As necessary for security purposes After these periods, your data will be securely deleted or anonymized.

9. Your Rights

You have the following rights regarding your personal data (ARCO Rights under Mexican law): • Right of Access: Request information about what personal data we hold about you • Right of Rectification: Request correction of your personal data when inaccurate or incomplete • Right of Cancellation: Request the deletion of your personal data • Right of Opposition: Object to the processing of your personal data for specific purposes To exercise any of these rights, send an email to: info@korurent.com Your request must include: full name, a clear description of the right you wish to exercise, and any documents that help locate your data. We will respond within a maximum of 20 business days.

10. Information for European Union Users

If you access our website from the European Union, KORU acknowledges and respects the data protection principles applicable to European users. Although KORU is a Mexican company without a physical presence in the EU, we strive to respect your privacy and offer the following guarantees: Additional rights: • Right to access your personal data • Right to request deletion of your data You may exercise these rights by contacting: info@korurent.com Legal basis for processing: • Consent (for forms and cookies) • Legitimate interest (for analytics and security) Note: We do not have a designated Data Protection Officer.

11. Security Measures

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: • Secure connection (HTTPS) • Restricted access to personal data • Website security monitoring However, no method of Internet transmission or electronic storage is 100% secure.

12. Children's Privacy

Our website is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal information, please contact us so we can take appropriate action.

13. Changes to this Policy

We may update this Privacy Policy occasionally. Any changes will be posted on this page with a revised "last updated" date. We recommend reviewing this policy periodically.

14. Contact

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, you may contact us at: AJL INFRAESTRUCTURA, S.A.S. DE C.V. RFC (Tax ID): AIN190126E15 Registered address: Calle Marie Curie 303, Int. 13, Col. Reforma y Ferrocarriles Nacionales, C.P. 50070, Toluca, State of Mexico, Mexico Operational location: Puerto Escondido, Oaxaca, Mexico Email: info@korurent.com