SECURITY & PRIVACITY

Based on Articles 15 and 16 of the Federal Law on Protection of Personal Data Held by Private Parties (the "Law") and its regulations, GRUPO CLISA, S. DE R.L. DE C.V. ("GRUPO CLISA"), with address at Avenida Lázaro Cárdenas, Number 2400, Interior Number B15, Colonia Valle Oriente, San Pedro Garza García, Nuevo León, Mexico, C.P. 66269, presents this Privacy Notice, being responsible for the use and protection of your personal data, subject to the contents of this.

The Personal Data that we collect from the Owner will be used for the following primary purposes: (i) integrate them as customers or business partners of GRUPO CLISA by registering in our databases, (ii) evaluating all types of commercial proposals and business, (iii) meet legal requirements of competent authorities, (iv) the preparation of all types of contracts and agreements that will come to be generated by any service relationship and (v) require compliance with the obligations derived from them. The denial of the Holder's consent for these purposes may be a reason for us to deny him the services and products he requests or contracts with GRUPO CLISA.
Additionally, GRUPO CLISA may collect Personal Data for the following secondary purposes: (i) statistics; (ii) marketing, and (iii) commercial prospecting. The denial of the Holder's consent for these purposes may not be a reason for us to deny him the services and products he requests or contracts with GRUPO CLISA.
To carry out the purposes described above, we may request, where appropriate, the following personal data (hereinafter the "Personal Data"): General identification data such as name, marital status, Federal Taxpayers Registry (RFC), Unique Code of Population Registration (CURP), place of birth, date of birth, nationality, address, private telephone, cell phone, personal email, handwritten signature, electronic signature, age, photograph, fingerprint, position or position held , work address, institutional email, institutional telephone, work references, information generated during the recruitment, selection and hiring processes, job training, educational trajectory, degrees, professional identification, certificates, recognitions, entry to the country, departures from the country, length of stay in the country, migratory quality, residence rights, insurance, repatriation, personal property, real estate, tax information, income, expenses, bank accounts, identification data, contact data, biometric data, labor data, academic data, migratory data, patrimonial and / or financial data.

Such data may be collected in any means, including electronic, which will be subject at all times to the strictest confidentiality measures.
Based on Articles 36 and 37 of the Law, GRUPO CLISA informs you that Personal Data may be shared inside and outside the country with the following persons for Primary and Secondary Purposes, and whose transfer does not require consent: competent authorities for compliance with the legal obligations deriving from the contractual relationship between the Owner and GRUPO CLISA; the affiliated companies and subsidiaries of GRUPO CLISA, both in Mexico and abroad; third party service providers for compliance with the legal obligations acquired by GRUPO CLISA or its affiliates and subsidiaries; third-party service providers for purposes of research, data analysis, statistical reports, promotions, benefits and services related to employees or candidates for employees of GRUPO CLISA, its affiliates and subsidiaries; business partners with which GRUPO CLISA or any of the CLISA GROUP companies, carry out agreements or contracts focused on the development of new products and / or financial services for employees of affiliated companies and subsidiaries of GRUPO CLISA focused on the improvement and agreement to your needs and background research and credit history; third parties requesting employment references from former employees of any of the affiliated and subsidiary companies of GRUPO CLISA; third parties derived from a corporate restructuring; or other transmissions foreseen and permitted in the Law and its Regulations. The third parties and the entities that receive personal data assume the same obligations and / or responsibilities of GRUPO CLISA, in accordance with what is described in this Privacy Notice.

Personal Data will be implemented the administrative, technical and physical security measures necessary to ensure the integrity of the same, against damage, loss, alteration and / or destruction. Likewise, the strictest confidentiality will be kept with respect to the Personal Data and will not be given a different use to the aforementioned.
The Holder has the right to know what personal data we have of the Holder, for what we use them and the conditions of use that we give them (ACCESS). It is also your right to request the correction of your personal information if it is outdated, inaccurate or incomplete (CORRECTION); that we remove it from our records or databases when it considers that it is not being used properly (CANCELLATION); as well as oppose the use of your personal data for specific purposes (OPPOSITION). These rights are known as ARCO rights.
For the exercise of any of the ARCO rights, or to limit the use of their Personal Data, the Owner must submit an application through the email datospersonales@clisa.com addressed to the Department of Personal Data. The owner and, where applicable, their representative, can prove their identity through any means, including electronic means. The request to exercise any of the ARCO rights must contain: the name of the Holder, his address, and / or any other contact information to communicate the response to said request, documents that prove his identity (in the form of a copy of the IFE or passport of the Holder), as well as the clear and precise description of the Personal Data with respect to which one seeks to exercise any of the ARCO rights, and any other element or document that facilitates the location of the Personal Data claimed. GRUPO CLISA will respond to requests received within the next 20 (twenty) business days, and may communicate said response by any means, including electronic means.
The Holder may revoke the consent that has been granted for the processing of his Personal Data. However, it is important that you keep in mind that in all cases we will not be able to meet your request or terminate your use immediately, as it is possible that due to some legal obligation we need to continue treating your personal data. Likewise, the Holder must consider that for certain purposes, the revocation of their consent will imply that we can not continue to provide the service you requested, or the conclusion of your relationship with us.
This Privacy Notice may suffer modifications, changes or updates derived from new legal requirements; of our own needs for the products or services we offer; of our privacy practices; of changes in our business model, or for other similar causes, these changes can be consulted through our website: http://www.grupoclisa.com.mx/es/avisoprivacidad, and for which the modifications will also be available by means of visible advertisements in our establishments and, by request of the Holder, it may be sent to the email address that it provides.

For the purposes of Article 8 of the Law, as well as its regulations and other applicable legislation, in case there is no opposition to this Privacy Notice, it will be considered as the total consent of the Holder regarding the indicated treatment, of the Personal Data that are provided.