ABOUT PROSPECTS, CUSTOMERS, AND USERS -WEP PAGE AND SOCIAL NETWORKS-

Welcome to the Comprehensive Privacy Notice for Prospects, Clients, and Users of Social Networks (LinkedIn and CINDU's Facebook) and the website: https://mx.cindu.com/mx_en/. This document provides information regarding the use of your data when you purchase services, request commercial information, subscribe to our periodic communications, or when you browse any of the Social Networks and the website indicated in the previous paragraph.

In this order of ideas and in compliance with the provisions of the Federal Law on Protection of Personal Data (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) Held by Private Parties (hereinafter, referred to as the Law), its Regulations and other applicable regulations on the matter, we make available, through this Privacy Notice, the extent and main characteristics of the treatment to which your personal data will be exposed to so that you can exercise your rights to self-determine the information you want to share, your privacy, and protection of personal data.

Identification and Address of the Responsible Party
CINDU DE MÉXICO, SA DE CV, commercially known as CINDU, is in charge of processing of your personal data, with address at Avenida Miguel Alemán Number 1901 - C, Colonia Cándido Aguilar, Postal Code 91789, Municipality of Veracruz, State of Veracruz, Mexico.

Personal Data Collected by the Responsible Party
To fulfill the purposes that we describe later, CINDU collects the following data:

1. Identification data;
2. Contact information;
3. Browsing and device data, such as IP address, geographical location, browser type, system type, content, and pages visited.

We may collect these personal data directly or indirectly; Therefore, our Privacy Notice will always be made available for your consultation whenever you require or request it.

Do we process sensitive personal data?
To fulfill the purposes described in this Notice, we inform you that CINDU does not process or request sensitive personal data.

Do we process data from third parties or minors?
If you provide the identification and contact data of third parties for customer service or commercial information purposes, you must inform them about the way we process their personal data and the content of this Privacy Notice.

When you provide the personal data of third parties, you confirm with such delivery, that you have the consent of its owners to provide their information to CINDU.

For the purposes established in this Privacy Notice, CINDU does not request personal data from minors through forms or questionnaires. If despite the previous information, you provide the personal data of minors, or they provide them directly to CINDU, we will understand that their parents or guardians have consented to the delivery of said data.

Parents and guardians may at any time exercise the ARCO rights or revoke the consent for the processing of the personal data of minors that they have provided to CINDU in those cases where current legislation allows it.

Purposes of the processing of your personal data
We process personal data for two types of purposes: primary and secondary.

CINDU will process your personal data for the following PRIMARY PURPOSES:

1. To offer products and services that we make available to you through our social networks and website.
2. Contact you to provide information about the services and products that we make available to you when requested on our website, by phone, email, or through instant text messaging.
3. Follow up on complaints, suggestions, doubts, and/or clarifications.
4. Manage your corresponding registration in our communication channels such as newsletters or bulletins and communicate the publication of new content in said channels.
5. Control and administration over the registration and management of our relationship with clients.
6. Where appropriate, data analysis through the use of analytics, artificial intelligence, and/or big data technologies to evaluate the use of our online services, improve their presentations, and/or correct errors.
7. To comply with legal or administrative obligations and requirements, including delivering information on fraud or identity theft.
8. Information file on the use of our services to comply with the applicable legal provisions, including the defense of the interests of CINDU before judicial or administrative instances.

Additionally, if you have not expressed your opposition, CINDU may process your personal data for the following SECONDARY PURPOSES:

1. Sending commercial, advertising, promotional and informative communications, as well as personalized offers based on your interests and consumer history related to the services and products that CINDU sells or brands of our business partners. Such communications include sending emails, SMS, telephone calls, and other electronic or postal communication forms.
2. Survey of satisfaction, consumption habits, and/or studies to improve our services.
3. Sending invitations to events, fairs, exhibitions, presentations, contests, training, promotions, or other types of activities organized or sponsored by CINDU.
4. Generating user profiles through the use of analytical technology or big data.

If you change your mind, you can oppose the processing of your personal data for the secondary purposes indicated above, and you can even revoke your consent for such purposes. In such cases, you may communicate your decision through the procedure provided in the section "ARCO Rights and/or Revocation of Consent for the Processing of Personal Data" of this Privacy Notice.

Who can we share your personal data with?
CINDU may share your information (carry out transfers of personal data), both within and outside of Mexico, in the following cases and for the purposes indicated:

a. To our parent company, affiliated companies, or subsidiaries of CINDU, with the purpose of centralized safeguarding of information or archiving of information on the use of our services.
b. Judicial or administrative authorities, for the fulfillment of legal obligations of information or information requirements duly founded and motivated in the regulations that apply.

The Law establishes that the aforementioned transfers of personal data do not require your consent to be carried out, but we are obliged to inform you about them.

We will previously inform you about any transfer of your personal data that requires your consent to be carried out through the corresponding communication and by updating this Privacy Notice.

ARCO Rights and/or Revocation of Consent for the processing of personal data.
In all legally appropriate cases, you or your legal representative may exercise any of the Rights of Access, Rectification, Cancellation, and Opposition (hereinafter, ARCO Rights), as well as Revoking your Consent for the treatment or transfer of your data. You can send a request to our Personal Data Protection Department at any time to the following email: alagunes@cindu.com.mx.

We remind you that the ARCO Rights and/or Revocation of Consent can only be exercised by the owner or his legal representative after proof of identity, which is why the request you send us must be accompanied by the digitization of some official identification, as can be one of the following: INE, Passport or Immigration Document that confirms the legal stay of the foreigner in the country

Likewise, we inform you that in order for your request to proceed, it is essential that you complete all the information that we set out below, which will be used to prove your identity:
• DATA OF THE HOLDER: Full name, telephone, and email (where the answer to your request will be communicated).

• REPRESENTATIVE INFORMATION (ONLY IF APPLICABLE): Full name. In the case of being the holder's legal representative, the original corresponding public instrument must be attached to the document or, where appropriate, a power of attorney signed before two witnesses.

• ARCO RIGHTS: Indicate the right(s) you wish to exercise: Access, Rectification, Cancellation, and/or Opposition. Likewise, to exercise the right(s) mentioned above, a description must be made of the personal data you want the rights to apply to and/or any other comment that will help us better attend to your request.

• OTHER NECESSARY DOCUMENTATION: Please attach the documentation you consider to support your request to help us process it properly. In particular, in the request for Rectifying personal data (incorrect data, correct data, and document that proves your information).

In the event that the information provided in your application is erroneous or insufficient, or the corresponding accreditation documents are not accompanied, the Department of Protection of Personal Data of CINDU, within five (5) business days following receipt of the application, may require you to provide the elements or documents necessary to process it. You will have ten (10) business days to meet the request, counted from the day after you received it. If no response is given within said period, the corresponding request will be deemed not submitted.

The Department of data protection of CINDU will communicate the adopted decision in a maximum lapse of twenty (20) business days counted from the date the request was received so, if it proceeds in the criteria of the aforementioned department, it will enter in effect within fifteen (15) business days counted from the reception of the answer. The answer will be sent, via email, to the address specified in the request.

If you revoke your consent and said revocation is appropriate, CINDU will stop processing your personal data for the purposes indicated in this Notice.

Regarding requests to exercise the right of Cancellation, it is essential to point out that the right is not absolute; please take into account that we must store information that allows us to comply with legal obligations. In this case, your personal data will remain blocked and will only be disclosed at the request of competent authorities when there is a duly founded and motivated request.

Means to limit the use or disclosure of your data
You may limit the use or disclosure of your personal data by directing the corresponding request to our Personal Data Protection Department through the email: alagunes@cindu.com.mx. The requirements to prove your identity and the procedure to meet your request will be the same as those indicated for the exercise of ARCO Rights.

CINDU has means and procedures to ensure the inclusion of some of your data in its own exclusion lists when you expressly request its inclusion in them. CINDU will grant the holders who request their registration the corresponding registration certificate.

We inform you that there are other mechanisms to limit the use and disclosure of your personal data by registering with the Public Registry of Users, which is in charge of the National Commission for the Protection and Defense of Users of Financial Services (CONDUSEF). For more information on the registry mentioned above, you can consult the CONDUSEF REUS website (www.condusef.gob.mx).

Additionally, we inform you that there is a Public Registry to Avoid Advertising, which is in charge of the Federal Consumer Protection Agency (PROFECO) so that your data is not used to receive advertising or promotions of goods or services. For more information on the said registry, you can consult the PROFECO Internet portal (http://rpc.profeco.gob.mx) or directly contact the body mentioned above at 01800-962-8000.

Use of Cookies

On our website http://mx.cindu.com/mx_en/ we use cookies and other means that allow us to collect information when you visit and navigate through it.

The cookies used by CINDU make it possible to collect, analyze, and preserve electronic information related to your browsing habits and the use of our communication channels and forms for online purchases. Cookies allow information to be collected automatically at the same time that the user makes use of the website and our online services.

For more detailed information about cookies and how you can disable them depending on your browser and operating system, we recommend that you visit the site www.allaboutcookies.org, which explains how to disable them step by step.

You should know that if you disable cookies or prevent their installation, you may not be able to fully or correctly use some functions of our website: http://mx.cindu.com/mx_en/.

Authority for the Protection of Personal Data

In case you consider it necessary, we inform you that you have the right to go to the National Institute of Transparency, Access to Information, and Protection of Personal Data (INAI), to assert any disagreement related to your Right to Protection of Personal Data.

Contact for questions or clarifications

Our Department of Protection of Personal Data is at your service to provide you with any additional information you require or, where appropriate, to resolve any questions that may arise regarding privacy and protection of personal data, for which you can contact us by email. Email: alagunes@cindu.com.mx.

Modifications and Updates
This Privacy Notice may undergo modifications, changes, or updates derived from new legal requirements; of our own needs for the services we offer; of our privacy practices; of changes in our business model, for which CINDU undertakes to keep you informed about the changes that this Privacy Notice may undergo.

You may request this document at any time from the CINDU Personal Data Protection Department by contacting: alagunes@cindu.com.mx, or you may consult its publication in the "Privacy Notice" section and that it will be available on the website: https://mx.cindu.com/mx_en/.

ATTENTIVELY

 -CINDU-

 CINDU DE MÉXICO, S.A. DE C.V.

 https://mx.cindu.com/mx_en/

 Avenida Miguel Alemán Número 1901 – C, Colonia Cándido Aguilar, Código Postal 91789, Municipio de Veracruz, Estado de Veracruz, México

 Last Updated:

November 1, 2021

ABOUT COOKIE USE POLICY, SDK, TRACKING TECHNOLOGIES, AND THE LIKE

ABOUT PRIVACY POLICY AND PERSONAL DATA MANAGEMENT