PRIVACY POLICY Your privacy is important to us. This Privacy Policy explains what information we collect when you use the Discover Aruba mobile application, how we use that information, how we store it, and what choices you have. We believe you must understand what happens to your data when you use our App. Discover Aruba is a location-based travel discovery app that helps visitors explore restaurants, attractions, tours, shopping, transportation options, and other points of interest across Aruba. To make this possible, the App uses basic account information and location services to show nearby places, trigger alerts, and provide directions. This Privacy Policy explains how that data is handled. We do not collect sensitive personal data. We do not process payments inside the App. We do not allow users to post content. We collect only limited information that is necessary for the App to function properly. By creating an account or using Discover Aruba, you agree to the practices described in this Privacy Policy. If you do not agree with this Policy, you must not use the App. Company Information: Company Name: Fuchsoto Group LLC Registered Office: 15170 SW 112th Terr, Miami Florida 33196 If you have any questions about this Privacy Policy or how your information is handled, you can contact us at privacy@discoveraruba.com or by mail at 15170 SW 112th Terr, Miami Florida 33196. 1. INFORMATION WE COLLECT • Information You Provide to Us: When you create an account, you must provide your first name and a valid email address. We do not collect passwords. You must provide accurate information and keep it updated inside the App. • Location Data: When you enable location services, the App collects your approximate device location while the App is open. This is used to show nearby places, trigger geofencing alerts, and provide directions. Location tracking does not continue when the App is closed. • App Usage Information: We collect limited information about how you use the App. This includes interactions such as profile views, offer redemptions, and outbound clicks to third-party websites. This helps us understand how the App is used and improve its functionality. • Device and Technical Information: We may collect basic technical details such as device type, operating system version, and general diagnostic information. This helps us ensure the App functions properly across different devices. • Analytics Data: We collect anonymized or aggregated analytics data to understand usage trends. This data does not identify you personally. 2. LOCATION SERVICES AND GEOFENCING Discover Aruba uses your device’s location services to provide nearby recommendations, alerts, and directions. Location access is optional, but certain features of the App will not function properly unless location permissions are enabled. When location services are turned on, the App collects your approximate location while the App is open. This allows the App to display nearby restaurants, attractions, tours, shops, transportation options, and other points of interest based on where you are. The App also uses geofencing technology. Geofencing allows the App to trigger alerts or offers when your device enters a specific area. These alerts may appear as pop-ups and may include sound notifications. Geofencing works only while the App is open and location permissions are active. Location data may be temporarily stored in Firebase (Google Cloud) as required for the App’s functionality and analytics. We do not continuously track your movements in the background, and we do not sell your location data. You can disable location permissions at any time through your device settings. If you disable location access, location-based features, nearby alerts, and geofencing notifications will not operate. 3. PUSH NOTIFICATIONS Discover Aruba uses push notifications to send you nearby alerts, directions, travel information, and promotional offers. These notifications may appear as pop-ups on your device and may include sound alerts. Push notifications are used to enhance your experience by informing you about relevant locations or offers based on your activity and location when the App is open. From time to time, notifications may also include general promotions or updates about the App. You must grant permission on your device to receive push notifications. If you do not enable notifications, you will not receive alerts or promotional updates. You can disable push notifications at any time through your device settings. Disabling notifications will not affect your ability to use the App, but you may miss nearby alerts or special offers. 4. LEGAL BASIS FOR WHICH WE USE YOUR INFORMATION We process your personal information only when we have a valid legal reason to do so. These include: • Performance of a Service: We use your name, email address, and location data because it is necessary to operate the App and provide you with its core features. Without this information, we cannot create your account, show nearby locations, trigger alerts, or provide directions. • Your Consent: We rely on your consent when you enable location services and push notifications. You can withdraw your consent at any time by disabling these permissions in your device settings. If you withdraw consent, certain features of the App will stop working. • Legitimate Interests: We may use limited usage data, device information, and analytics to improve the App, fix technical issues, understand how users interact with features, prevent misuse, and maintain security. We do this in a balanced way that does not override your privacy rights. • Legal Obligations: We may process or retain certain information if required to comply with applicable laws, regulatory requirements, or lawful requests from authorities. 5. HOW WE USE YOUR INFORMATION • To Create and Manage Your Account: We use your first name and email address to create your account and allow you to access the App. • To Provide Location-Based Features: We use your location data while the App is open to show nearby places, trigger geofencing alerts, and provide directions. • To Send Alerts and Notifications: We use your information to send push notifications about nearby offers, travel alerts, updates, and promotional messages, if you have enabled notifications. • To Improve the App: We use anonymized analytics and usage data to understand how users interact with the App, improve features, fix technical issues, and enhance overall performance. • To Maintain Security and Prevent Misuse: We may use technical and usage information to detect abuse, prevent fraud, protect the App’s systems, and ensure compliance with our Terms. • To Communicate With You: We may use your email address to send important service-related communications, such as updates to the App, policy changes, or account-related notices. 6. RETENTION AND DELETION • How Long We Keep Your Information: We keep your personal information only for as long as it is necessary to operate the App and provide its services. This includes maintaining your account, enabling location-based features, and supporting analytics and security functions. • Account Information: Your name and email address are stored in Firebase (Google Cloud) for as long as your account remains active. • Location Data: Location data is stored only as required for the App’s functionality and related analytics. We do not continuously track your movements in the background. • Deletion Requests: Users are not currently able to delete their accounts directly inside the App. If you wish to delete your account and associated personal data, you must contact us at privacy@discoveraruba.com from your registered email address. We will process your request within a reasonable time, unless we are required to retain certain information for legal or legitimate operational reasons. • Inactive Accounts: We may delete or anonymize inactive accounts after a reasonable period of non-use, at our discretion. Once your data is deleted, it will no longer be accessible in active systems, although limited information may remain in secure backups for a temporary period as part of routine system processes. 7. INFORMATION SHARING • No Sale of Personal Data: We do not sell your personal information to advertisers, partners, or third parties. • Service Providers: We may share limited information with trusted service providers who help us operate the App. This includes Firebase and Google Cloud, which are used to store data and support core functionality. These providers must process data only on our instructions and must maintain appropriate security standards. • Analytics and Technical Services: We may use third-party tools to support analytics, infrastructure, and technical operations. These services process data only as necessary to provide their functionality. • Legal Requirements: We may disclose information if required by law, court order, legal process, or governmental request. We may also disclose information if necessary to protect our rights, prevent fraud, enforce our Terms, or ensure the safety of users or the public. • Business Transfers: If Fuchsoto Group LLC is involved in a merger, acquisition, restructuring, or sale of assets, user information may be transferred as part of that transaction. If this happens, we will take reasonable steps to ensure your information remains protected. 8. DATA STORAGE AND SECURITY • Where Your Data Is Stored: Your account information and related data are stored using Firebase Firestore, which operates on Google Cloud infrastructure. These systems use industry-standard security practices to protect stored information. • Security Measures: We implement reasonable technical and organizational safeguards to protect your data against unauthorized access, misuse, loss, or alteration. This includes controlled access to systems and secure cloud storage environments. • Access Controls: Access to user data is limited to authorized personnel who must access the information strictly for operational purposes. • No System Is Completely Secure: While we take appropriate steps to protect your data, no digital system can be guaranteed to be completely secure. You understand that you use the App at your own discretion and that data transmission over the internet always carries some level of risk. • Your Responsibility: You are responsible for maintaining the security of your device and email account. If you believe your account has been compromised, you must contact us immediately at privacy@discoveraruba.com. 9. INTERNATIONAL DATA TRANSFER Discover Aruba is operated by Fuchsoto Group LLC in the United States, and your data is stored using Firebase and Google Cloud infrastructure, which may process and store information in the United States or other countries where Google operates its data centers. By using the App, you understand that your information may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we take reasonable steps to ensure that your data remains protected in accordance with applicable data protection laws. 10. THIRD-PARTY LINKS The App may include links or reservation buttons that redirect you to third-party websites or services. Once you leave the App, those third parties operate under their own privacy policies and terms. We do not control and are not responsible for their content, security practices, or handling of your data. You should review their privacy policies before providing any personal information. 11. RIGHTS OF EU, EEA, SWITZERLAND, AND UK USERS This section supplements the other provisions of this Privacy Policy and applies to users located in the European Union (EU), the European Economic Area (EEA), Switzerland, or the United Kingdom. For the purposes of applicable law, your DATA CONTROLLER for the data collected by us to provide you with our services is: Company Name: Fuchsoto Group LLC Registered Office: 15170 SW 112th Terr, Miami Florida 33196 ALL YOUR USER INFORMATION WILL BE COLLECTED, STORED, PROCESSED AND SHARED STRICTLY IN ACCORDANCE, IN LINE AND FULL COMPLIANCE WITH THE FOLLOWING REGULATIONS: EU and EEA: • General Data Protection Regulation (GDPR) • ePrivacy Regulation Switzerland • Federal Act on Data Protection (FADP) United Kingdom (UK) • UK General Data Protection Regulation (UK GDPR) • Data Protection Act 2018 • Privacy and Electronic Communications Regulations (PECR) We process personal data under the lawful bases specified in Section 4 above. Where we transfer personal data outside the EEA, UK, or Switzerland, we ensure an adequate level of protection by relying on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms approved by regulators. Depending on the applicable law, you may have one or more of the following rights in respect of your personal information: ● Right to obtain information: to obtain information about how and on what basis your personal information is processed and to obtain a copy; ● Right to rectification: You have the right to have any incomplete or inaccurate information we hold about you rectified and corrected. ● Right of Erasure: to erase your personal information in limited circumstances where (a) you believe that it is no longer necessary for us to hold your personal information; (b) we are processing your personal information on the basis of legitimate interests and you object to such processing, and we cannot demonstrate an overriding legitimate ground for the processing; (c) where you have provided your personal information to us with your consent and you wish to withdraw your consent and there is no other ground under which we can process your personal information; and (d) where you believe the personal information we hold about you is being unlawfully processed by us; ● Right of restriction: to restrict processing of your personal information where: (a) the accuracy of the personal information is contested; (b) the processing is unlawful but you object to the erasure of the personal information; (c) we no longer require the personal information for the purposes for which it was collected, but it is required for the establishment, exercise or defense of a legal claim or (d) you have objected to us processing your personal information based on our legitimate interests and we are considering your objection; ● Right to object: to object to decisions which are based solely on automated processing or profiling; ● Right to ask for a copy: where you have provided your personal information to us with your consent, to ask us for a copy of this data in a structured, machine-readable format and to ask us to share (port) this data to another data controller; or to obtain a copy of or access to safeguards under which your personal information is transferred outside of the UK or EEA. ● Right to withdraw your consent. You have the right to withdraw your consent on using your personal data. If you withdraw your consent, we may not be able to provide you with access to certain specific functionalities of our services. ● Request the transfer of your Personal Data. We will provide to you, or to a third-party you have chosen, your personal data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. Under certain circumstances, you may have the right to object, on grounds relating to your particular situation, to the processing of your personal data by us and we may be required to no longer process your personal data. Moreover, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your personal data will no longer be processed for such purposes by us. In addition to the above, you have the right to lodge a complaint with a supervisory authority for data protection. Please note that the right of access and the right to erasure do not constitute absolute rights and the interests of other individuals may restrict your right of access or erase in accordance with local laws. We will ask you for additional data to confirm your identity and for security purposes, before disclosing data requested by you. We reserve the right to charge a fee, where permitted by law. We will decline to process requests that jeopardize the privacy of others, are extremely impractical, or would cause us to take any action that is not permissible under applicable laws. Additionally, as permitted by applicable laws, we will retain where necessary certain personal information for a limited period of time for record-keeping, accounting and fraud prevention purposes. To make such requests, please contact us at privacy@discoveraruba.com. Estimated Timeframe for Response: We aim to respond to all valid privacy-related requests within one (01) month of receipt, or within a longer period if the request is complex or involves multiple records. In such cases, we will inform you of the delay and explain the reason for it. Exercising your rights is free of charge, unless the request is manifestly unfounded, repetitive, or excessive, in which case we may charge a reasonable fee or refuse to act on the request. Complaints If you are located in the European Union, the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with your local data protection authority if you believe your personal data has been handled in a way that breaches applicable laws. Examples of supervisory authorities include: • United Kingdom: Information Commissioner’s Office (ICO) – www.ico.org.uk • European Union: Data Protection Commission (Ireland) – www.dataprotection.ie • Switzerland: Federal Data Protection and Information Commissioner (FDPIC) – www.edoeb.admin.ch • Other EEA countries: You can find your national data protection authority via the official EU website at https://edpb.europa.eu/about-edpb/board/members_en We encourage you to contact us first at privacy@discoveraruba.com so we can address your concern promptly before you reach out to a supervisory authority. 12. RIGHTS OF USERS FROM OTHER STATES AND COUNTRIES Your data controller with respect to the personal information collected on the App is: Company Name: Fuchsoto Group LLC Registered Office: 15170 SW 112th Terr, Miami Florida 33196 Depending upon the laws of your specific country, you may be eligible for some or all the following rights in respect of your personal information: i. ii. iii. iv. v. vi. vii. viii. Right to obtain information: You may have a right to obtain information about how and on what basis your personal information is processed and to obtain a copy. Right to rectification: You may have the right to have any incomplete or inaccurate information we hold about you rectified and corrected. Right of Erasure: You may have the right to erase your personal information in limited circumstances where (a) you believe that it is no longer necessary for us to hold your personal information; (b) we are processing your personal information on the basis of legitimate interests and you object to such processing, and we cannot demonstrate an overriding legitimate ground for the processing; (c) where you have provided your personal information to us with your consent and you wish to withdraw your consent and there is no other ground under which we can process your personal information; and (d) where you believe the personal information we hold about you is being unlawfully processed by us. Right of restriction: You may have the right to restrict processing of your personal information where: (a) the accuracy of the personal information is contested; (b) the processing is unlawful but you object to the erasure of the personal information; (c) we no longer require the personal information for the purposes for which it was collected, but it is required for the establishment, exercise or defense of a legal claim or (d) you have objected to us processing your personal information based on our legitimate interests and we are considering your objection. Right to object: You may have the right to object to decisions which are based solely on automated processing or profiling. Right to ask for a copy: Where you have provided your personal information to us with your consent, you may have the right to ask us for a copy of this data in a structured, machine-readable format and to ask us to share (port) this data to another data controller; or to obtain a copy of or access to safeguards under which your personal information is transferred outside of your jurisdiction. Right to withdraw your consent. You may have the right to withdraw your consent on using your personal data. If you withdraw your consent, we may not be able to provide you with access to certain specific functionalities of our services. Request the transfer of your Personal Data. If you so have this right, we will provide to you, or to a third- party you have chosen, your personal data in a structured, commonly used, machine-readable format. Please note that this right may only apply to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. To make such requests, please contact us at privacy@discoveraruba.com. Please note, we reserve the right to reject the request if you are not entitled to the right that you request to enforce. 13. RESPONDING TO LEGAL REQUESTS We may access, preserve, or disclose your personal information if we are required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that such action is necessary to comply with applicable legal obligations, enforce our Terms and Conditions, protect our rights and property, investigate fraud or security concerns, or ensure the safety of our users and the public. Any disclosure will be limited to what is legally required, and we will make reasonable efforts to notify you where permitted by law before releasing your information. 14. CHILDREN PRIVACY The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information as soon as possible. Please contact us at privacy@discoveraruba.com if you believe we knowingly or unknowingly collected information described in this Section. 15. DO NOT TRACK SIGNALS Some browsers and devices offer a “Do Not Track” feature that signals to websites and applications that you do not want your online activity tracked. Because Discover Aruba is a mobile application and does not track users across third party websites for advertising purposes, we currently do not respond to “Do Not Track” signals. You can manage location services and notification preferences directly through your device settings at any time. 16. OPTING OUT You have control over certain types of data collection and communications within the App. • Location Services: You can disable location access at any time through your device settings. If you turn off location permissions, nearby recommendations and geofencing alerts will stop working. • Push Notifications: You can disable push notifications through your device settings. If you opt out, you will not receive alerts, offers, or promotional notifications. • Email Communications: If we send service-related emails, you may follow the unsubscribe instructions included in the email where applicable. Please note that you must continue to receive essential account or legal notices related to your use of the App. • Account Deletion: If you wish to stop all data processing related to your account, you must request account deletion by contacting us at privacy@discoveraruba.com from your registered email address. 17. GOVERNING LAW AND DISPUTE RESOLUTION This Privacy Policy is governed by and shall be interpreted in accordance with the same governing law and dispute resolution provisions set out in our Terms of Service. Any dispute arising out of or in connection with this Privacy Policy shall be resolved in accordance with those Terms. 18. QUESTIONS ABOUT THIS PRIVACY POLICY In the event you have any grievance regarding anything related to this Privacy Policy, or with any content or service of Discover Aruba, in that case you may freely write your concerns through your registered email to Grievance Officer/Designated Representative at below: • Name: Ewald Fuchs • Email: info@fuchsotogroup.com • Postal Address: 15170 SW 112th Terr, Miami Florida 33196 19. UPDATES TO THIS POLICY We may update this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, or the way we handle your personal information. When we make changes, we will revise the “Last updated” date at the bottom of the Policy and, if the changes are significant, we may notify you by email or through a notice on our App. We encourage you to review this Privacy Policy periodically so you stay informed about how we protect your information and your rights. Your continued use of the App after any changes to this Policy will constitute your acceptance of those changes. 20. WELCOMING OF SUGGESTIONS We welcome your comments regarding this Privacy Policy. Please write to us at privacy@discoveraruba.com. Last updated on February 24, 2026