PRIVACY NOTICE

Tecate Pa'l Norte

Last updated: February 27, 2026

In compliance with the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, and other applicable provisions (the "Applicable Law"), REPRESENTACIONES ARTÍSTICAS APODACA, S.A. DE C.V. ("Apodaca Group"), with registered address at Jerónimo Treviño Oriente #1549, Colonia Centro, Monterrey, Nuevo León, C.P. 64000, makes this Privacy Notice available to inform you about the processing that will be given to your personal data.

Apodaca Group is responsible for the lawful, controlled, and informed processing of the personal data it collects from attendees, ticket purchasers, guests, staff, volunteers, talent, artists, suppliers, sponsors, business partners, members of the media, users of the official website, users of mobile applications and digital platforms, including social networks, as well as any individual or legal entity that, by any means, provides personal data related to Festival Pa'l Norte (the "Festival"); guaranteeing at all times the proper use, confidentiality, and protection of such information in accordance with applicable law.

Apodaca Group may collect your data through physical, electronic, digital, telephone, audiovisual, web-platform, social-media, mobile-application, ticketing, video-surveillance, Festival registration, or direct means.

For any matter related to this Privacy Notice, you may contact us through the following:

CONTACT INFORMATION

  • Address: Jerónimo Treviño Oriente #1549, Col. Centro, Monterrey, Nuevo León.
  • Phone: 81 82 622700
  • Website: http://www.tecatepalnorte.com
  • Email: [email protected]
  • Business hours: Monday through Thursday, 10:00 a.m. to 3:00 p.m.

PERSONAL DATA WE COLLECT

To fulfill the purposes described in this Privacy Notice, Apodaca Group and the Festival collect the following personal data, according to the nature of the relationship you maintain with us.

1. IDENTIFICATION AND CONTACT DATA

Full name, copy of a valid official identification (voter ID, passport, professional license), birth certificate, Unique Population Registry Code (CURP), home address and proof of address, landline and mobile phone number, email address, handwritten signature, photograph, and image captured by video-surveillance systems.

2. DATA COLLECTED THROUGH DIGITAL MEANS

IP address, browsing data, cookies and similar technologies, information provided in electronic forms, surveys, Festival registrations, databases, digital platforms, and/or social networks.

3. DISSOCIATED DATA

Statistical and demographic information, aggregated browsing and behavior data on digital platforms, attendance and participation metrics at events and festivals, and consumption and preference analysis.

4. BIOMETRIC AND AUDIOVISUAL DATA

Image captured by security cameras, audio recordings, and video recordings.

PURPOSES OF PROCESSING

We collect a wide variety of information concerning your person ("Personal Data"). The purposes are those that motivate the processing of your personal data; for clarity and by legal provision they are classified as primary and secondary, with the primary purposes being those necessary for the development of a legal obligation or the main reason for which a relationship exists between the Data Subject (you) and the Controller (us); a secondary purpose is one that is not necessary for the development of a legal relationship, which is why you may tell us that you do not authorize the processing of your personal data for one or all of those mentioned.

Your personal data have been provided voluntarily.

PRIMARY PURPOSES

  1. Identification, verification, and contact;
  2. Confirmation of the identity of the Personal Data Subject, as necessary to fulfill the purposes set forth in this Notice, and verification of the Data Subject's age of majority prior to entry into any of Apodaca's official pages, applications, and platforms and/or participation in activities promoted or organized by Apodaca Group or by the Festival, whether in person or online.
  3. To carry out an activity aimed at complying with a legal obligation or requirement, or with an authority recommendation to which Apodaca Group, its affiliates, or subsidiaries are subject, including the disclosure of Personal Data to government or supervisory authorities, such as tax, administrative, and/or judicial authorities.

SECONDARY PURPOSES

  1. Advertising, marketing, and promotions, including the development and sending of campaigns to offer you products and/or services from Apodaca Group;
  2. Sending newsletters and invitations;
  3. Satisfaction surveys;
  4. Commercial and marketing profiling through the creation of audience segments in order to send you personalized offers and content;
  5. Statistics and consumption analysis;
  6. Use of image, voice, or video for promotional, advertising, or publicity purposes;
  7. Commercialization of products and services.
  8. Participation in events and promotions that include purchase promotions, raffles, and sweepstakes (including giveaways), in person, online, through mobile devices, social networks, and applications, as well as geolocation-based activities and promotions (including SMS text messages and gamification).

ACCESS, RECTIFICATION, CANCELLATION, OBJECTION, QUESTIONS, AND COMPLAINTS

If you do not wish your data to be used for these secondary purposes, you may request this by email at: [email protected]; likewise, through this email you may communicate regarding cancellation, objection, questions, and complaints related to this Privacy Notice.

USE OF COOKIES

Apodaca Group and the Festival, through the latter's website, use cookies and other similar technologies to improve your browsing experience, analyze site traffic, and personalize content. Cookies are small text files stored on your device. You may configure your browser to reject or disable cookies; however, some website functionalities could be affected.

USE OF IMAGE, VOICE, AND AUDIOVISUAL CONTENT

During the Festival and during activities held before or after it, recordings, photographs, and live broadcasts may be made directly and/or indirectly for different media outlets, digital platforms, social networks, and/or any other means of dissemination; likewise, statistical data related to the use of image, voice, and audiovisual content may be collected.

By entering the facilities where the event/festival is held and/or participating in the activities carried out there, you authorize the use of your image and voice for informational, promotional, advertising, and/or commercial purposes, acknowledging that such authorization is granted without compensation and/or remuneration of any kind.

COLLECTION OF PERSONAL DATA

Apodaca Group and the Festival may collect your personal data in the following ways:

  • When you provide them directly by any physical, electronic, digital, registration, and/or telephone means.
  • Through our digital platforms, social networks, satisfaction surveys, mobile applications, and websites.
  • By email.
  • Through video-surveillance systems placed in our facilities for security reasons.
  • Through images and videos collected during events and/or festivals in which you attend or participate.
  • From public and generally accessible sources permitted by law.
  • From authorized third parties or lawful sources whenever permitted by law.

DATA TRANSFERS

The data collected by Apodaca Group and related to the Festival may be transferred to its affiliated or subsidiary companies, national or foreign business partners, and competent authorities in the cases established in Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties, for which your consent is not required.

SECURITY

Apodaca Group undertakes to establish and maintain administrative, technical, and physical security measures in order to protect Personal Data against damage, loss, alteration, destruction, or unauthorized use, access, or processing, taking into account possible risks. These measures will at all times be aligned with legal and industry standards.

ARCO RIGHTS

WHAT ARE ARCO RIGHTS?

ARCO Rights are the legal mechanism that allows you to exercise your rights of Access, Rectification, Cancellation, and Objection.

You have the right to access the personal data we hold about you and learn the details of its processing; to rectify it if it is inaccurate, incomplete, or outdated; likewise, you may cancel it when you consider it is not required for any of the stated purposes, is being used for non-consented purposes, or the relationship has ended; and to object to its processing for specific purposes. To that end, you may consult the section "PROCEDURE TO EXERCISE YOUR ARCO RIGHTS," which is detailed below.

PROCEDURE TO EXERCISE YOUR ARCO RIGHTS

To exercise any of the ARCO Rights, you must submit a request as described below to the following email address:

Your request must include at least the following information:

  1. Date of the request;
  2. Full name of the data subject, date of birth, RFC, address to hear and receive notices (including postal code) and/or email address to receive a response;
  3. Documents proving your identity;
  4. Clear and precise description of the personal data regarding which you seek to exercise any ARCO right;
  5. Any other element or document that facilitates locating the personal data;
  6. In the case of Rectification requests, you must indicate the modifications to be made and provide the documentation supporting your request.

RESPONSE DEADLINES

Apodaca Group will inform you within 5 (five) business days counted from the receipt of your request if additional information is required to process it. You will have 10 (ten) business days to provide the requested information. If you do not provide the required information within that period, the corresponding request will be deemed not submitted.

Once all the necessary information is available, Apodaca Group will communicate the decision adopted within a maximum period of 20 (twenty) business days counted from the date on which the complete request was received. If the request is found admissible, it will be made effective within the 15 (fifteen) business days following the date on which the response was communicated.

The above-mentioned periods may be extended only once for an equal period whenever the circumstances of the case justify it.

MEANS OF RESPONSE.

  1. Email: to the address you provided in your request
  2. In person: by prior appointment at our offices located at Jerónimo Treviño Oriente 1549, Col. Centro, Monterrey, Nuevo León, C.P. 64000.

REVOCATION OF CONSENT

At any time, you may revoke the consent you have granted for the processing of your personal data. It is important to note that we may not be able to fulfill your request or stop the use immediately in all cases, as we may need to continue processing your personal data due to a legal or contractual obligation.

To revoke your consent, you must submit a written request by email to [email protected] including the information indicated in items (i) through (v) of the ARCO Rights section, specifying "REVOCATION OF CONSENT" in the subject line and clearly indicating the purposes for which you revoke your consent.

Apodaca Group will respond to your request within a maximum period of 20 (twenty) business days and will inform you of whether it is admissible in accordance with the Applicable Law.

RETENTION PERIOD

Your personal data will be retained for the time necessary to fulfill the purposes established in this Privacy Notice and, subsequently, for the legally required periods in accordance with the applicable tax, labor, commercial, and other laws that may apply.

CHANGES TO THE PRIVACY NOTICE

Apodaca Group reserves the right to make modifications or updates to this Privacy Notice at any time, arising from new legal requirements, changes in the business model, internal policies, new services or products, or any other cause.

Changes to this Privacy Notice will be made known through the website http://www.tecatepalnorte.com indicating the date of the latest update, so we recommend that you review this Privacy Notice periodically to stay informed of any changes.

CONSENT

By voluntarily providing your personal data to Apodaca Group, whether physically, electronically, or by any other means, you expressly accept and acknowledge that you have read, understood, and accepted the terms set forth in this Privacy Notice, granting your consent for Apodaca Group to process your personal data as established herein, acknowledging under oath that you state you know the contents of this Notice, and by accessing or otherwise using Apodaca's official websites, applications, and platforms, participating in the Festival, and using the services or products that are marketed, you grant your consent through the following statement:

"I agree with the use and processing of my personal data, under the terms of this Privacy Notice, in accordance with its conditions."