In compliance with Articles 15, 16, and other related provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter LFPDPPP), the LFPDPPP regulations, guidelines, and principles of personal data protection, we provide you with this Comprehensive Privacy Notice. Its purpose is to define the scope and general conditions of data processing, as well as to inform data subjects so that they can make informed decisions about the use of their personal data and maintain control and disposition of their personal data by the legal entity Coordinadora Budowa, S.A. de C.V. (hereinafter “PENÍNSULA”), in accordance with the following points:

I. IDENTITY AND ADDRESS OF THE DATA CONTROLLER.

PENINSULA is a legal entity duly incorporated under Mexican laws, with full legal capacity, acting as the data controller for the processing of your personal data, as well as collecting, protecting, and preserving it, including sensitive, patrimonial, and financial data. It is worth mentioning that the data controller is dedicated to contacting leaders and expert professionals in the business area. Its address for receiving all types of documents and notifications is Av. México, esquina Diag. San Jorge 3555-P1, Vallarta San Jorge, C.P. 44690 Guadalajara, Jal., with telephone number +52 (33)3121 2201.

II. METHOD OF OBTAINING PERSONAL DATA.

We may obtain information through the following means:
a) When you provide it directly in writing.
b) Verbally;
c) Online or electronic forms;
d) Social Media;
e) When you visit our website, and
f) When we obtain information through other sources permitted by law.

III.- THE DATA WE COLLECT.

The data we obtain through these means are Personal data:
– Full Name
– Cell phone
– Position or role held
– Work address
– Institutional email
– Institutional phone
– Contact details
– Employment data
In accordance with the relevant legislation, we will consider that you have given us your tacit consent regarding your personal data. We inform you that you may object at any time through the procedure established in point VI of this privacy notice.

IV. PURPOSES OF DATA PROCESSING.

The data subject’s personal data will be used for the following purposes:

A) Main Purposes.

– Provide contracted services;
– Means to fulfill contracted obligations;
– For sending invoices;
– Quotations;
– Follow up on the collection process
– Account Statements
– Transfers
– Any other compatible or analogous purpose to those previously established.
If you do not wish your personal data to be processed for these purposes, you may send your request at this time to the Personal Data Protection Officer via email to: info@peninsula.mx, to express your refusal.

B) Secondary Purposes.

Additionally, we will use your personal information for the following secondary purposes, which are not necessary for the requested service but allow and facilitate us to provide you with better service:

a) Informative circulars;
b) To send you commercial information, services, or promotions;
c) To invite you to events and festivals to be held;
d) For your personal image to be used and disclosed in the creation of advertising material;

If you do not wish your personal data to be processed for these secondary purposes, you may send your request at this time to the Personal Data Protection Officer via email to: info@peninsula.mx, to express your
refusal. Refusal to use your personal data for secondary purposes will not be a reason for us to deny you the services you request or contract with us.

V. OPTIONS AND MEANS WE OFFER TO DATA SUBJECTS TO LIMIT THE USE OR
DISCLOSURE OF DATA.

PENÍNSULA, in order to safeguard your information in the best possible way, commits to processing your personal data under strict security measures to guarantee its confidentiality. Administrative, legal, and
technological security standards have been established to prevent unauthorized third parties from seizing your personal data. It is worth mentioning that the data subject can initiate an Access, Rectification, Cancellation, or Opposition (ARCO) procedure to limit the use or disclosure of their data in accordance with Chapter VI of this privacy notice. In addition, there are governmental administrative procedures through which you can limit advertising by phone calls, called: Public Registry to Avoid
Advertising, provided by the Federal Consumer Protection Agency (PROFECO), which you can consult and assert your right to avoid unwanted calls on the website: http://rpc.profeco.gob.mx/Solicitudnumero.jsp

VI. MEANS TO EXERCISE THE RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION, OR OPPOSITION (ARCO) TO THE PROCESSING OF PERSONAL DATA.

You may exercise your rights of access, rectification, cancellation, or opposition of your personal data (ARCO rights) by submitting a request in accordance with the following procedure: Submit a written request addressed to the Personal Data Protection Officer via email to: info@peninsula.mx, whose address is Av. México, esquina Diag. San Jorge
3555-P1, Vallarta San Jorge, C.P. 44690 Guadalajara, Jal., with telephone number +52 (33)3121 2201, who is responsible for protecting your data and handling ARCO procedures on behalf of the data controller. The data that must be included and the documents that must be attached to your request are:

a) The name of the personal data subject:

b) The address of the data subject and, if applicable, the address
of the legal representative;

c) An alternative means to communicate the response to your request;

d) Documents proving the identity of the personal data subject or, if a third party is acting, proof of legal representation;

e) A clear and precise description of the personal data regarding which one of the ARCO rights is sought to be exercised; and

f) Any other element or document that facilitates the location of your Personal Data;

g) In the case of requests for rectification of personal data, the data subject must indicate the modifications to be made and provide documentation supporting their request. If any information is missing from your request, you will be asked to remedy the omission as soon as
possible.

If there is any doubt about your identity, PENÍNSULA reserves the right to request any other document to verify your identity. If all required formalities for said procedure are met, a response will be provided within a maximum period of twenty days, counted from the date your request was received or from the date you have fully remedied any deficiencies. The aforementioned period may be extended once for an equal period, provided that the circumstances of the case justify it, in accordance with Article 32 of the LFPDPPP. It is important to note that we may not always be able to fulfill your request or terminate the use immediately, as we may be legally required to continue processing your personal data. Likewise, you should consider that, for certain purposes, the revocation of your consent will imply that we cannot continue to provide the service you requested or the termination of your relationship with us. If you have any questions regarding procedures, requirements, and deadlines, you can contact our Personal Data Protection Officer via email
at: info@peninsula.mx or also call: +52 (33)3121 2201.

VII. WHERE APPLICABLE, DATA TRANSFERS THAT ARE CARRIED OUT.

We inform you that PENÍNSULA does transfer personal data to third parties. In addition, transfers may be made without your consent in accordance with Article 37 of the LFPDPPP, as well as to carry out this transfer under the terms established by law, to which we establish the following cases:

a) When the transfer is provided for in a Law or Treaty to which Mexico is a party;
b) When the transfer is necessary for medical prevention or diagnosis, the provision of healthcare, medical treatment, or the management of health services;
c) When the transfer is made to controlling companies, subsidiaries, or affiliates under the common control of the data controller, or to a parent company or any
company of the same Group as the data controller that operates under the same internal processes and policies;
d) When the transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the data subject, by the data controller and a third party;
e) When the transfer is necessary or legally required for the safeguarding of a public interest, or for the procurement or administration of justice;
f) When the transfer is precise for the recognition, exercise, or defense of a right in a judicial process; and
g) When the transfer is precise for the maintenance or fulfillment of a legal relationship between the data controller and the data subject.

VIII. REVOCATION OF YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA.

You may revoke the consent you may have given us for the processing of your personal data, so we ask that you send your request to the Personal Data Protection Officer via email at: info@peninsula.mx.
However, it is important to note that we may not always be able to fulfill your request or terminate the use immediately, as we may be legally required to continue processing your personal data.
Likewise, you should consider that, for certain purposes, the revocation of your consent will imply that we cannot continue to provide the service you requested or the termination of your relationship with us.
To learn about the procedure and requirements for revoking consent, you may call: +52 (33)3121 2201.

IX.- USE OF COOKIES, WEB BEACONS, OR ANY OTHER ANALOGOUS TECHNOLOGY.

We inform you that PENÍNSULA does not use cookies, web beacons, or any other analogous technology.

X.- THE MEANS AND PROCEDURE BY WHICH THE DATA CONTROLLER WILL COMMUNICATE TO DATA SUBJECTS CHANGES TO THE PRIVACY NOTICE, IN ACCORDANCE WITH THE PROVISIONS OF THE LFPDPPP.

PENÍNSULA reserves the right to make modifications and/or updates to the Notice at any time, in response to new legislative provisions and/or new internal policies; such modifications will be available at the address and on the websites: www.peninsula.mx
Publication Date: 2024