PRIVACY NOTICE

BUFETE JURÍDICO PAZOS CHÁVEZ S.C., hereinafter (Bufete Jurídico Pazos Chávez), a legal entity constituted under Mexican law, with address for receiving notifications at Av. Insurgentes Sur # 3155, 2nd Floor, Col. Jardines del Pedregal Cuicuilco, Coyoacán Borough, C.P. 04510, Mexico City, is aware of the importance of the legitimate, controlled and informed processing of your personal data. Therefore, Bufete Jurídico Pazos Chávez makes available to you this Privacy Notice so that you may know its practices when obtaining, using, disclosing or storing your personal data, in accordance with the Federal Law on Protection of Personal Data Held by Private Parties.

PURPOSE OF DATA PROCESSING

The personal data we collect from you will be used for the following purposes, which are necessary for the services you request or which will be provided to you:

Primary purposes:

Recruitment, selection and hiring of personnel

To carry out the process of recruitment, selection and hiring of personnel.

Likewise, the information will form part of the company's job pool, and may be transferred for the evaluation and hiring of a third party, or for the evaluation of third parties to whom Bufete Jurídico Pazos Chávez provides services. It will also be shared with Bufete Jurídico Pazos Chávez personnel involved in the hiring process, for the purpose of analyzing the results of their functions and producing statistics.

The information may be transferred to a third party, outsourcing provider or Financial Institution to process payment for the services rendered to Bufete Jurídico Pazos Chávez.

• To generate professional profiles and labor structures, produce statistical reports and evaluate performance.
• To request personal and labor references of the applicant.
• Where applicable, to compile the collaborator's file, administer the consideration for services and comply with contractual obligations.
• To maintain communication with the applicant during the recruitment process.

Evaluation and selection of suppliers (individuals)

Registration and video recording of visitors to the facilities for security reasons

It will be processed for statistical, security and surveillance purposes during the time you remain in the building, where applicable, to detect any unlawful activity, or to prove in disputes or judicial and/or administrative requirements the presence or absence of said persons.

In case of refusal to be registered and video-recorded, for security reasons you will be denied access to the facilities and, consequently, the continuation of the process.

This procedure is indispensable due to internal security policies. The access and candidate registration logs will be kept for 3 months, for the aforementioned purposes.

Secondary purposes:

No secondary purposes are determined.

WHAT PERSONAL DATA DO WE COLLECT AND USE FROM YOU?

The categories of personal data to be collected and subject to processing are:

• Identification data: full name, age, date of birth, gender, marital status, address, nationality, email address, home, landline and mobile phone numbers, Federal Taxpayer Registry (RFC), Unique Population Registry Code (CURP), immigration document (where applicable), Social Security Number, photograph, image, signature.
• Academic data: education, languages, aptitudes and skills.
• Labor data: employment history and labor references.
• Economic data: Those derived from socio-economic studies.
• Third-party data: labor history, personal and labor references.
• Tax data: in the case of provision of services as a supplier to Bufete Jurídico Pazos Chávez, a copy of your Tax Registration.

SENSITIVE DATA:

Health data: collected through the psychometric studies carried out on the candidate.

CONSENT:

In accordance with the above, the data subject grants their consent in writing for their personal data to be processed in accordance with the terms of this privacy notice.

MEANS BY WHICH BUFETE JURÍDICO PAZOS CHÁVEZ OBTAINS YOUR DATA

We inform you that Bufete Jurídico Pazos Chávez will obtain your personal data through the following means:

1. In person: when you are a collaborator or apply for employment, by filling out the job application form that Bufete Jurídico Pazos Chávez provides.
2. Direct: when you provide us with your data to apply for employment through the electronic portals on which Bufete Jurídico Pazos Chávez publishes its job offers, or when you send us your curriculum vitae as a candidate for a vacancy, via email to any of the addresses of our Human Resources department.
3. Indirect: from any other available source of information or one that is permitted by Law.

USE OF COOKIES AND WEB BEACONS

We inform you that at Bufete Jurídico Pazos Chávez we do not collect personal data through the use of Cookies or Web Beacons, or other technologies to obtain personal information from you.

SECURITY MEASURES IMPLEMENTED

For the protection of your personal data we have implemented administrative, physical and technical security measures with the purpose of preventing loss, misuse or alteration of your information.

TRANSFER OF PERSONAL DATA

We inform you that your personal data may be transferred to Mexican and/or foreign third parties and for the following purposes:

1. Competent authorities for the fulfillment of legal obligations arising from the contractual relationship between the data subject and the controller.
2. Third parties, clients of Bufete Jurídico Pazos Chávez, to comply with the contractual obligations acquired by Bufete Jurídico Pazos Chávez for the provision of the service.
3. Third parties requesting labor references for employees and former employees of Bufete Jurídico Pazos Chávez.
4. Third parties arising from corporate restructuring, including merger, consolidation, sale, liquidation or transfer of assets.
5. Other transmissions provided for in the aforementioned Law and its Regulations.

The third parties and entities receiving personal data assume the same obligations and/or responsibilities as Bufete Jurídico Pazos Chávez, in accordance with the provisions of this Privacy Notice.

Bufete Jurídico Pazos Chávez undertakes not to transfer your personal information to third parties without your consent, except for the exceptions provided in article 37 of the Federal Law on Protection of Personal Data Held by Private Parties, and to carry out such transfer in the terms set forth in said law.

OPPOSITION TO THE TRANSFER OF YOUR PERSONAL DATA

Should you wish to oppose the transfer of your personal data, you will have 5 calendar days from the moment you become aware of this privacy notice to express your opposition by written document addressed to the officer indicated in this instrument for the exercise of the ARCO Right, established in this privacy notice. Otherwise, it will be understood that you grant your consent to transfer your data.

ARCO RIGHTS

You or your legal representative have the right to know what personal data we have about you, what we use it for and the conditions of the use we give it (Access). Likewise, it is your right to request the correction of your personal information in case it is outdated, inaccurate or incomplete (Rectification); that we delete it from our records or databases when you consider that it is not being used in accordance with the principles, duties and obligations provided for in the Law (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights and are described in article 29 of the Federal Law on Protection of Personal Data Held by Private Parties.

The procedure and requirements for exercising the ARCO rights are as follows:

Complete the ARCO right request form FOR GDP 007 (available on the website of Bufete Jurídico Pazos Chávez: www.pazoschavez.mx) in original and copy bearing the applicant's signature, and deliver it personally at Av. Insurgentes Sur # 3155, 2nd Floor, Col. Jardines del Pedregal Cuicuilco, Coyoacán Borough, C.P. 04510, Mexico City, or by email to privacidad@asecon2006.com.mx, attaching the following documentation:

1. Official identification proving your identity (Voter card issued by the INE, valid Passport, Professional License, or, if you are of foreign nationality, your valid immigration document).
2. If the application is not submitted by the data subject, the document evidencing the representation, together with the identification of the data subject and the legal representative.
3. A clear and precise description of the personal data with respect to which you wish to exercise your ARCO Rights.
4. Any document or information that facilitates the location of your personal data held by Bufete Jurídico Pazos Chávez.
5. In the event of requesting the rectification of data, indicate the modifications to be made and provide the documentation supporting your petition.
6. Indicate the means and manner in which we may contact you to notify you of the response to your request.

OFFICER IN CHARGE OF HANDLING THE REQUEST

The Legal Department of Bufete Jurídico Pazos Chávez is responsible for processing requests from data subjects to exercise the rights contained in the Federal Law on Protection of Personal Data Held by Private Parties.

TIMEFRAME FOR HANDLING REQUESTS

The Legal Department of Bufete Jurídico Pazos Chávez will respond to your request within 20 (twenty) days from the date on which the acknowledgment of receipt is sent. If the request is admissible, the timeframe to carry out the request will be 15 (fifteen) days from the affirmative response.

REFUSAL TO EXERCISE ARCO RIGHTS

Bufete Jurídico Pazos Chávez may refuse the exercise of ARCO Rights in the following cases:

• When you are not the data subject or have not proven the representation of the data subject.
• When your personal data does not exist in the company's database.
• When third-party rights would be infringed.
• When there is a legal impediment or the decision of a competent authority that restricts your ARCO Rights.
• When the cancellation or opposition has previously been carried out.

REVOCATION OF CONSENT

You may revoke any consent you may have granted to Bufete Jurídico Pazos Chávez for the processing of your personal data by means of a written document delivered personally to the Officer, provided that such data is not necessary to fulfill the indispensable purposes described above.

OBLIGATIONS AS PROCESSOR OF PERSONAL DATA

Bufete Jurídico Pazos Chávez receives from third parties transfers of personal data of data subjects who have pending legal relationships with them, or in order to comply with the various services for which third parties hire us. With respect to such data, Bufete Jurídico Pazos Chávez acts as a PROCESSOR and by Law is prevented from resolving ARCO rights. In these cases, if you wish to exercise your ARCO rights, you must do so before the Controller of such processing.

RETENTION OF INFORMATION

• Recruitment, selection and hiring of personnel: Will be destroyed no later than twelve months after the conclusion of contractual obligations.
• Visitor Registration: Will be destroyed and/or deleted within the period that the organization stipulates from the date of the data subject's visit.

ACCEPTANCE OF TERMS

This Privacy Notice constitutes a legally valid agreement. Any change to this privacy notice will be communicated by publication on its website www.pazoschavez.mx