Privacy Notice

This document constitutes the “Privacy Notice” of PROPIMEX and its affiliates and subsidiaries (hereinafter referred to as “PROPIMEX”), outlining how your information will be handled by PROPIMEX, as well as the purpose for which it was collected, in accordance with Articles 15 and 16 of the Federal Law on Protection of Personal Data Held by Private Parties (the “Law”).

PROPIMEX respects your right to privacy and the protection of personal data, including sensitive personal data, such as financial or patrimonial data, which are protected by the Law. The database containing your information is the responsibility of PROPIMEX, and your information is duly protected in accordance with administrative, technical, and physical security measures established by the Law to safeguard it from potential damage, loss, alteration, or unauthorized access.

Sensitive Data

The Information Holder acknowledges and accepts that, due to their relationship with PROPIMEX, they have not provided, nor will they provide, “sensitive personal data,” i.e., intimate personal data that, whether disclosed properly or improperly, could lead to discrimination or pose a serious risk to the individual. In the event that the Information Holder provides data of the sensitive nature, they must agree to provide such data beforehand and relieve PROPIMEX of any related complaints or claims.

Requests

The data subject may exercise the rights of access, rectification, cancellation, or opposition regarding personal data concerning them, as well as request the revocation of their consent, by submitting a request to PROPIMEX through the website www.propimex.mx or via email at info@propimex.mx, providing at least their name and full address or any other data or document that allows their identification, along with the purpose of their request and/or action to be taken. This should be done in accordance with the Law and its Regulations.

Purpose

Your personal data and customer history will be used by PROPIMEX or any of its subsidiaries and/or affiliates, and will be recorded in our database, along with any other personal, sensitive, or other type of information, provided that the provisions of the Law and its Regulations are complied with for each type of information. PROPIMEX may use this information for any of the following purposes:

Commercial Purpose

(i) Information Holder’s name, address, tax ID, phone number, billing account number, date of birth, bank information.

This information may be used, among other things, to: (1) offer products and services through physical, telephone, electronic, or any other technology or means available to PROPIMEX; (2) inform you of new products or services that may be of interest related to the contracted service; (3) conveniently process automatic billing charges; (4) issue purchase orders or work requests, as applicable; and/or (5) take any other action necessary to fulfill PROPIMEX’s interests regarding the agreement reached with the Information Holder.

Employment Purpose

(i) In relation to job offers or applications by submitting a curriculum vitae, information such as name, address, contact phone number, email address, educational level, personal references, professional experience, tax ID, social security number, CURP, official identification may be requested.

This information may be used, among other things, for: (1) evaluating potential candidates for vacant positions; (2) preparing the relevant Service Provision Contract and/or Individual Employment Contract, if applicable; (3) providing references in case other individuals or companies request them about candidates.

Security Purpose for Facility Access

This information may be used, among other things, to: (1) support, record, and/or control the registration of individuals accessing or visiting PROPIMEX facilities; (2) comply with security guidelines established in PROPIMEX’s internal policies. Regarding the information requested for access to PROPIMEX facilities, information such as full name, signature, official identification, and information about electronic equipment to be brought into PROPIMEX premises may be requested.

Transfer

The Information Holder understands and accepts that PROPIMEX and/or any of its subsidiaries and/or affiliates may transfer their personal data to third parties contracted by PROPIMEX to perform certain tasks related to commercial activities and promotion of its products and/or services on its behalf. These third parties may process the data following PROPIMEX’s instructions or make decisions regarding the data as part of their service provision. In either case, PROPIMEX will select providers it deems reliable and who commit, through a contract or other applicable legal means, to implement the necessary security measures to ensure an adequate level of protection for your personal data. As a result, PROPIMEX will require its providers to comply with security measures that guarantee the same levels of protection as PROPIMEX implements during the processing of your data as a PROPIMEX customer. These selected third parties will have access to your information for the purpose of carrying out the tasks specified in the applicable service contract you have entered into with PROPIMEX. If PROPIMEX determines that a provider is not fulfilling their obligations, appropriate actions will be taken immediately.

If the data subject does not accept the transmission of their personal data in accordance with the provisions in the paragraph above, they can contact PROPIMEX through any of the means established in this Privacy Notice.

Exceptions

Additionally, in accordance with the provisions of Articles 10, 37, and other related articles of the Law and its Regulations, PROPIMEX will be exempt from obligations regarding consent for the Treatment and Transfer of data when:

It is provided for by Law; The data is sourced from publicly accessible sources;

I. Personal data has undergone a dissociation process;

It is necessary to fulfill obligations arising from a legal relationship between the data subject and the responsible party; There is an emergency situation that could potentially harm an individual’s person or property; It is indispensable for medical care, prevention, diagnosis, healthcare provision, medical treatments, or healthcare services management;

II. A resolution from a competent authority is issued;

III. When the transfer is necessary for the recognition, exercise, or defense of a right in a judicial process, and

When the transfer is necessary for the maintenance or fulfillment of a legal relationship between the responsible party and the data subject. Modifications If any modification to the provisions of this Privacy Notice is required, PROPIMEX undertakes to inform you of any necessary changes through any means, including electronic means, with prior notice given to you to express your response. In the absence of an express written refusal or any response from you, it will be understood that you accept the changes made.

Data Subject’s Consent

The Information Holder acknowledges and accepts that if this “Privacy Notice” is available through an electronic page (website, internet page, or similar) or any other electronic device, clicking “accept” or otherwise continuing to browse the site, or providing their data through the same or through any electronic means (email, etc.), constitutes a manifestation of their consent for PROPIMEX to process their data in accordance with this Privacy Notice.

Likewise, the Information Holder also manifests that if this “Privacy Notice” is available in writing, their signature, rubric, name, or fingerprint, or providing their data, constitutes a manifestation of their consent for PROPIMEX to process their data in accordance with this “Privacy Notice.”

Notice of Notice Changes

If PROPIMEX changes this privacy notice, such changes will appear on the website www.propimex.mx

If you have any questions or wish to exercise any rights related to this privacy statement, please contact PROPIMEX and/or its affiliate companies at the following address: info@propimex.mx

This privacy notice has been created based on the rules issued by the Federal Law on Protection of Personal Data Held by Private Parties, based on Articles 16, 17, and 36 of the Law and corresponding Regulations.