Legal Notice – México

In compliance with the Federal Law of Protection of Personal Data Held by Private Parties (“LFPDPPP” by its initials in Spanish, or “The Law”), the Regulation of the Law (“The Regulation”), and the Guidelines for Privacy Notices (“The Guidelines”), among other applicable and current provisions in the United Mexican States (“Mexico”), the following is made available to the personal Data Holder through the corporate network and/or at any of our offices and service centers: PRIVACY NOTICE INTENDED FOR SUPPLIERS, CLIENTS, AND EMPLOYEES As the Data Holder, we inform you of the terms and conditions under which Generación M (hereinafter the "Overseer") will process the personal data that you provide to us, which are under our control and reasonable decision-making authority. Furthermore, we outline the methods and means by which you can exercise your rights to privacy, control over your personal data, and its protection in compliance with the Law, the Regulations, the Guidelines, and other applicable provisions, with the purpose of ensuring adherence to the principles of legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility as provided by the Law. For purposes of the present Privacy Notice, the address of Generación M (in its capacity as the Overseer) is located at Cracovia #72, Torre A, piso 2, San Ángel, 10100, Mexico City. For GENERACION M, the information of its suppliers, clients, and employees constitutes one of the most critical elements for its operations. Therefore, such information is treated with confidentially and is further protected through various internal administrative processes and procedures aimed at ensuring its security in accordance with the provisions set forth by the LFPDPPP and its Regulation. In light of the aforementioned and in your capacity as a supplier, client, and/or employee, through this Privacy Notice, GENERACION M reiterates that all information concerning your person, including sensitive data (those referring to the most intimate aspects of the Data Holder, of which the improper use may give rise to discrimination or entail a serious risk to the individual, such as racial or ethnic origin, health condition, genetic information, religious, philosophical, and moral beliefs, union membership, political opinions, sexual preferences, and biometric data – including fingerprints – [the “Personal Data”]), which you provide in writing, electronically, optically, or through any other technological means, or through unequivocal signs to GENERACION M, will be handled with absolute confidentiality. Consequently, the collection, use, disclosure, and storage of your Personal and/or sensitive Data by any means (the "Processing") will be carried out for two (2) purposes, which are described below to include, but not limited to: Cracovia #72, torra A, piso 2, San Ángel, 10100, Ciudad de México As a first instance for necessary purposes, those that give rise to or are indispensable for the establishment of a potential, present, or past commercial relationship between you and GENERACION M, namely to: (a) negotiate, plan, and conduct the business and commercial activities we undertake with you or your representatives; or to (b) fulfill the necessary purposes arising from the established business relationship with you, as set forth below: (a) For suppliers: (i) carry out their registration and onboarding as a supplier (or, as applicable, the registration of contact employees or legal representatives), for the proper fulfillment of the rights and obligations arising from the legal relationship that may exist between you and GENERACION M, (ii) comply with applicable legislations, (iii) prepare orders, purchase orders, payment instructions with financial information, service requests, commercial evaluations, budgets, contests, awards, terms and conditions, RFPs, RFIs, general hiring conditions, and any other precontractual activity, (iv) provide support and assistance regarding the actions that must be taken as a supplier, (v) offer due attention to any follow-up requests made by you or any authority to GENERACION M, (vi) compare the characteristics of their products and/or services with others of similar or equivalent characteristics in the market, (vii) transfer this data to subsidiaries, affiliates, parent companies, whether national or foreign, or third parties designated by GENERACION M to carry out the aforementioned purposes. (b) For clients: (i) carry out their registration and onboarding as a client for the proper fulfillment of the rights and obligations arising from the legal relationship that may exist between you and GENERACION M, (ii) comply with applicable legislation, (iii) conduct any pre-contractual activity (such as project development, proposals, or commercial offers), (iv) offer due attention to any follow-up to requests made by you or any authority to GENERACION M, (v) conduct satisfaction surveys for statistical, financial, administrative, or quality purposes, (vi) transfer this data to subsidiaries, affiliates, parent companies, whether national or foreign or third parties designated by GENERACION M to carry out the aforementioned purposes. (c) For employees: (i) comply with legal obligations; (ii) provide training and professional development; (iii) payroll management and allocation; (iv) payment administration of benefits, salaries, compensations, bonuses, reimbursements, pensions, insurance, and other’s; (v) conduct studies, analyses, or reviews to ensure workplace safety and the confidentiality of information owned by GENERACION M. For these purposes, GENERACION M may randomly review information contained on company computers, other devices and provided work tools, as well as monitoring Internet usage; (vi) investigate violations committed against the law, the code of conduct, and GENERACION M’s policies; (vii) management and logistics of business trips; (viii) conducting audits; (ix) issuing company identifications, assignation of employee’s number, creation of internal network and email accounts, as well as any other work tools designated by GENERACION M; (x) execute socioeconomic assessments. As second instance for non-essential purposes, those that do not pertain to the business or employment relationship between you and GENERACION M, namely: (i) to assess the quality of the Cracovia #72, torra A, piso 2, San Ángel, 10100, Ciudad de México products and/or services provided; and (ii) to contact you personally, by phone, or via email for marketing, advertising, or commercial prospecting purposes, in compliance with applicable legal provisions. Should you disagree with the processing of your data for non-essential purposes, please be informed that you have a period of no more than 5 (five) calendar days from the date this Privacy Notice is made available to you to express your refusal via email to our Personal Data Protection Committee at the following address: datospersonales@genm.mx If you do not express your refusal regarding the processing of your Personal Data prior to its submission or use, your rights to revoke consent or object to the processing will remain preserved. GENERACION M will process your Personal Data for the period established by the LFPDPPP and any other applicable legal provisions. Upon the conclusion of this period, the processing of your data will be blocked and subsequently deleted in accordance with the provisions set forth in such regulations. In consideration of the aforementioned and pursuant to Article 8 of the LFPDPPP, once GENERACION M obtains your Personal Data for the Processing referred to in the present Privacy Notice, it will be understood that your consent has been granted unless you expressly, formally, and in writing state otherwise. Consequently, GENERACION M may retain and process all information related to your Personal Data in both physical and electronic records. It is important to inform you that GENERACION M will refrain from transmitting your Personal Data to any third party by any means or action of different nature without your prior consent. GENERACION M may disclose or transfer the Personal Data you provide to us in accordance with applicable legislation or upon request by the competent authority, for which the express consent of the Data Holder of such Personal Data is not required, as defined by the Law and its Regulations. In addition, GENERACION M reserves the right to transfer your Personal Data for commercial purposes to any of its parent companies, subsidiaries, affiliates, and/or controlled entities that operate under the same standards, processes, and/or internal policies regarding personal data protection as those of GENERACION M. Furthermore, GENERACION M hereby informs you of the possibility of a partial or total transfer of your Personal Data to its own advisors or auditors, who will, at all times, be bound by confidentiality clauses, by the guidelines of this Privacy Notice, and by applicable legal provisions, including, but not limited to, the LFPDPPP and its Regulations. Exempting the stipulated in the preceding paragraph, GENERACION M will not transfer your personal information to third parties without your prior consent when legally required. The Personal Data you provide to GENERACION M may be compiled and stored in a database exclusively owned by GENERACION M, which will be used solely for the purposes outlined in this Privacy Notice and in accordance with applicable regulations. GENERACION M, along with its executives, employees, and business partners, is obligated at all times to fully comply with this Privacy Notice. In like manner, GENERACION M hereby informs you that, as part of its commitment to the proper Processing and care of your Personal Data, it maintains various administrative, technical, physical, Cracovia #72, torra A, piso 2, San Ángel, 10100, Ciudad de México and technological mechanisms, procedures, and security measures aimed at protecting such information from damage, loss, alteration, destruction, or unauthorized use. On the other hand, clients, suppliers, and/or employees hereby acknowledge their obligation that, in the event they receive Personal Data of the executives or employees of GENERACION M by virtue of the commercial or contractual relationship they have with it as the Overseer Party, they will receive such information solely for the purpose for which it was transmitted, holding GENERACION M harmless from any claims in this regard. Similarly, the client, supplier, and/or employee shall retain the information/documentation only for the period necessary to fulfill its purpose, and after its use, in accordance with the security measures established in the applicable LFPDPPP, they shall provide proof or notification to GENERACION M of its destruction or return through records that attest to the secure method of destruction. In accordance with the provisions of the LFPDPPP, GENERACION M has internally designated the Personal Data Protection Committee as responsible for processing any requests that may arise. This internal body will also be responsible for overseeing the proper Handling of your Personal Data, in accordance with the terms of this Privacy Notice. For the preceding reasons, any request to exercise your ARCO rights ―Access, Rectification, Cancellation, and Opposition― to which you are entitled by law, or to revoke the consent you have granted to GENERACION M, as well as any clarification or update of your Personal Data, if applicable, must be addressed to the Personal Data Protection Committee via email at the following address: datospersonales@genm.mx, in compliance with the requirements outlined in Article 29 of the LFPDPPP, which will be acknowledged through the same means. Additionally, please be informed that the hours for receiving ARCO rights requests are Monday to Friday, from 9 a.m. to 6 p.m. In this regard, once the request meets the necessary requirements, GENERACION M must notify the Data Holder within a maximum period of twenty (20) business days, starting from the date on which the ARCO rights request was acknowledged as received (GENERACION M may extend this period by an additional twenty (20) business days when the case justifiably warrants it), of the made determination. If the request is deemed appropriate, the decision shall be implemented within fifteen (15) business days following the date the response is communicated. If, after the period established by the LFPDPPP and its Regulations, GENERACION M does not respond to your request, you may initiate the Rights Protection procedure with the National Institute of Transparency, Access to Information, and Protection of Personal Data (INAI, by its initials in Spanish), located at Insurgentes Sur No. 3211, Colonia Insurgentes Cuicuilco, Alcaldia Coyoacán, Postal Code 04530, Mexico City. GENERACION M reserves the right to modify this Privacy Notice at any time, making such modifications available to you through any of the following means: (i) visible notices at our offices, (ii) the Human Resources department, or (iii) on the website: www.genm.mx Last Updated: September 11, 2024