CANNIZZO, ORTÍZ Y ASOCIADOS, S.C. (hereinafter referred to as “CANNIZZO”) with domicile at Moliere No. 39, 11th Floor, Colonia Polanco, Delegación Miguel Hidalgo, C.P. 11560 with telephone number (+52-55) 55-52-79-59-80 is responsible for obtaining, using, disclosing, storing, accessing, handling, exploiting, transferring and disposing of (hereinafter and collectively referred to as the “Processing”) any information that is provided concerning an identified or identifiable individual (hereinafter referred to as the “Personal Data”). In view of the above and in order to guarantee the privacy and the right to informational self-determination of individuals, Cannizzo makes this privacy notice (hereinafter referred to as the “Privacy Notice”) available to you.

In compliance with the provisions of the Federal Law on the Protection of Personal Data in Possession of Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) (hereinafter referred to as the “Law”), the Regulations thereunder (hereinafter referred to as the “Regulations”) and other applicable legal provisions, Cannizzo shall observe, at all times, the principles of legality, purpose, loyalty, consent, quality, proportionality, information and liability.

1. Consent.

This Privacy Notice must be consulted by the subject of the Personal Data (hereinafter referred to as the “Data Subject”) prior to providing any kind of Personal Data to Cannizzo.

The mere fact that the Data Subject provides Cannizzo with Personal Data, will imply (i) the granting of his/her consent to the Processing of his/her Personal Data under the terms set forth in this Privacy Notice; (ii) that he/she knows the purpose of the Processing of his/her Personal Data; and (iii) that he/she knows the procedure for the exercise of his/her ARCO Rights (as defined below) and for limiting the use and disclosure of his/her Personal Data.

In order to revoke his/her consent, the Data Subject shall send his/her request to the following e-mail account: [email protected] or directly to the Cannizzo offices located at Moliere No. 39, 11th Floor, Colonia Polanco, Delegación Miguel Hidalgo, C.P. 11560. The same procedure will be applicable in case the Holder wishes to express his/her refusal for the Processing of his/her Personal Data in relation to the purposes that are not necessary for the legal relationship with Cannizzo.

2. Personal Data.

     a) Purpose of the Personal Data Processing.

Cannizzo processes the Personal Data in order to provide the services foreseen in its corporate purpose, including professional services in legal and representation matters and to invoice the services provided. Cannizzo also processes the Personal Data in order to control access and maintain security in its facilities. As secondary purposes, Cannizzo uses the Personal Data to provide information about the various services it provides and to follow up its customers for the purposes of monitoring and commercial prospecting.

Cannizzo informs the Data Subjects that, when the Personal Data are no longer necessary for the fulfillment of the above mentioned purposes, Cannizzo will proceed with the cancellation of these data.

In case Cannizzo wants to modify or extend the above mentioned purposes, it shall modify this Privacy Notice and make it available to Data Subjects through its website.

     b) Personal data that will be Processed by Cannizzo

Cannizzo processes the following Personal Data: name, address, date of birth, gender, marital status, signature, telephone number and/or mobile phone number, fax, e-mail, image, educational background, title, professional card number, specialty, certificates, job position, work address, invoicing data, tax address, Federal Taxpayers Registry (Registro Federal de Contribuyentes) number and Unique Population Registry Number (Clave Única de Registro de Población).

Since the Personal Data is provided directly by the Data Subject, it shall be presumed that they comply with the quality principle until the Data Subject states and proves otherwise, or until Cannizzo has objective evidence that contradicts it.

     c) Transfer of Personal Data by Cannizzo

Cannizzo represents that the Personal Data to which it has access may be transferred to third parties with whom it has a legal relationship in order to comply with this Privacy Notice.

3. ARCO rights, use and disclosure.

The Data Subject shall have the rights set out below (hereinafter referred to as the “ARCO Rights”):

(i) The right to know what Personal Data Cannizzo has of the Data Subject (Access);

(ii) The right to request the rectification of his/her Personal Data when these are outdated, inaccurate or incomplete (Rectification);

(iii) The right to have your Personal Data deleted from Cannizzo’s records or databases (Deletion)

(iv) The right to oppose, for legitimate reasons, the Processing of your Personal Data (Opposition). If such opposition is appropriate, Cannizzo may not process the Personal Data concerning the Data Subject.

In order to exercise any of the ARCO Rights, the Data Subject must submit the respective request via e-mail to the following e-mail account: [email protected]. For further information regarding the procedure and requirements for the exercise of ARCO Rights, the Data Subject may call the following telephone number (+52-55) 55-52-79-59-80; or contact Cannizzo’s Personal Data Area, which will process the requests for the exercise of these rights, and will answer any questions you may have regarding the Processing of your Personal Data. The contact details of the Cannizzo Personal Data Area are as follows: Moliere No. 39, 11th Floor, Colonia Polanco, Delegación Miguel Hidalgo, C.P. 11560 with telephone number (+52-55) 55-52-79-59-80, e-mail: [email protected]

If the Data Subject considers that his/her right to the protection of his/her Personal Data has been damaged by any conduct or omission on the part of Cannizzo, or presumes any violation of the provisions set forth in the Law, the Regulations and other applicable regulations, he/she may file his/her disagreement or complaint with the National Institute of Transparency, Access to Information and Protection of Personal Data (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales) (INAI). For further information, the Data Subject may visit its official website www.inai.org.mx.

4. Modifications to the Privacy Notice.

This Privacy Notice may be modified, changed or updated due to new legal requirements; Cannizzo’s own needs; its privacy practices; changes in its business models or for other reasons.

Any changes to this Privacy Notice will be communicated to the Data Subjects by making the Privacy Notice available at www.cannizzo.com.mx.

Date this Privacy Notice was last updated on: January 21, 2020.