PRIVACY AND CONFIDENTIALITY POLICY DEPRAG MEXICO S. DE R.L DE C.V.

In DEPRAG MEXICO S. DE R.L DE C.V. we respect the privacy needs and we inform you of the appropriate conditions of use in this Site; the use of this Site implies your full and unreserved acceptance of each and every one of the provisions included in this Legal Notice, so we ask all our visitors and users of this Web Site to read previously, detailed and carefully this privacy policy and conditions of use before starting its exploration or use. By using the Web Site, the user agrees, without limitation, to be bound by this Privacy Statement; the Web Site user agrees to know, abide by and comply with all national and international laws, regulations and customs related to its obligations and duties set forth in this privacy policy.

In the event that you do not agree with any of the terms and conditions set forth herein, please refrain from using and/or accessing this Site. By accessing the Site, users and visitors to the Site agree to each and every one of the terms and conditions set forth in this privacy policy when;

• Provided data or information in the Site’s registration forms
• When making inquiries about any content available on the Site, and in general
• By using any of the services available on the Site.

Therefore, we would like to share with the user the general aspects of the collection, care and handling of Information Data, including but not limited to, the following:

a) The Site you enter, its information and contents are of public knowledge, therefore it is mandatory and indispensable that the User fully accepts the terms and conditions of the Legal Notice.

b) All personal data and information provided or entered freely and voluntarily by the user or visitor in any of the forms on the Site are (Customers, professional service providers and employees) of DEPRAG MEXICO S. DE R.L DE C.V. to carry out administrative, technical and commercial management.

c) Once the terms and conditions set forth in this Legal Notice have been accepted, users and/or visitors expressly grant their authorization to DEPRAG MEXICO S. DE R.L DE C.V. to automate and use the personal data and information provided to the Site and to DEPRAG MEXICO S. DE R.L DE C.V. as expressed herein.

d) All information that is entered and/or collected on the Site is private and is not shared with other persons or companies, except with the authorization of the person who provides it, and will be used only to comply with the objectives stated therein.

e) Under no circumstances will our Clients’ personal data be transferred to third parties outside DEPRAG MEXICO S. DE R.L DE C.V. without the express consent of the person providing it. DEPRAG MEXICO S. DE R.L DE C.V. undertakes to cancel the personal data collected when they are no longer necessary or relevant for the purpose for which they were collected.

f) The access of DEPRAG MEXICO S. DE R.L DE C.V. authorized personnel to customer data is done in a controlled and hierarchical manner, according to the internal policy of access and treatment of user and/or visitor data.

g) During the registration process, the user and/or visitor will be told what information must be provided as mandatory and what information is optional.

h) The user or visitor who provides or enters personal data or information in the Site’s forms shall have the right to access, rectify and/or cancel at any time what has been provided.

i) DEPRAG MEXICO S. DE R.L DE C.V. assures the absolute confidentiality and privacy of the personal data collected and therefore essential security measures have been adopted to avoid the alteration, loss, knowledge, treatment or unauthorized access and thus guarantee its integrity and security. However, the company does not guarantee that unauthorized third parties who carry out any type of attack to the system may have knowledge of the characteristics of the use that users make of the Site, in which case DEPRAG MEXICO S. DE R.L DE C.V. will not be liable for any damages that may be caused.

j) DEPRAG MEXICO S. DE R.L DE C.V. will in no case be responsible for the incidents that may arise regarding personal data when they are derived from an attack or unauthorized access to the Site’s systems, in such a way that it is impossible to detect it by the current security measures or when it is due to a lack of diligence of the user regarding the guard and custody of his passwords or his own personal data.

k) The user and/or visitor guarantees that the data and/or information provided will be truthful and authentic and it will be his/her responsibility to keep it updated on the Site. Likewise, the user and/or visitor shall be solely responsible for any damages caused to the Site, DEPRAG MEXICO S. DE R.L DE C.V. or third parties in case of providing or supplying false or inaccurate data.

l) The user and/or visitor will be able to download content from the Site, however, it will be absolutely necessary that he/she enters his/her personal data and all the information required by DEPRAG MEXICO S. DE R.L DE C.V. through the Site. Likewise, once the user and/or visitor decides to download any content from the Site, he/she will be expressly accepting the terms and conditions set forth in this Legal Notice.

m) DEPRAG MEXICO S. DE R.L DE C.V. expressly prohibits the reproduction, distribution, public communication, total or partial transformation, or any other activity that can be carried out with the contents and/or software of the Site, not even quoting the sources, except with the written consent of DEPRAG MEXICO S. DE R.L DE C.V.

n) The resolution of any dispute, controversy or claim arising from the use of the Site, its content or any of the products and/or services offered, shall be subject to the applicable legislation in force in the Mexican Republic. Purposes of the processing of personal data:

The responsible will process the personal data collected for the following purposes:

• ) The rendering of services, as well as the execution of other acts that each responsible party may perform in accordance with the law and its bylaws;
• The promotion of products, services, additional benefits, discounts, promotions, and advertising in general, all offered by or related to the responsible party.
• To comply with the requirements of any competent authority;
• The performance of any complementary or auxiliary activity necessary to achieve the above purposes;
• Contacting you to discuss any matter relating to your personal data or this privacy notice. The processing of personal data will be limited:

(i) to the fulfillment of the purposes set forth in this privacy notice; and

(ii) for purposes other than those that are compatible or analogous to those set forth in this privacy notice, without being required to obtain again, if applicable, the consent of the owner. Likewise, the processing of personal data will be that which is necessary, adequate and relevant in relation to the purposes set forth in this privacy notice, as well as to the different purposes that are compatible or analogous. The User has at his disposal, at all times, this privacy notice in our application. Likewise, the User may at any time limit the use or disclosure of his personal data by exercising the rights of access, rectification, cancellation or opposition that the Law provides by submitting his request in writing at the point called DEPRAG MEXICO S. DE R.L DE C.V. domicile.

It will be understood that you as the owner tacitly consent to the processing of your personal data as set forth in this privacy notice, when having made it available to you, you do not express your opposition. Identity: The company DEPRAG MEXICO S. DE R.L DE C.V. and who for the purposes of this privacy notice has the quality of responsible before the user, as owner of the personal data. Address of DEPRAG MEXICO S. DE R.L DE C.V.: For the purposes of this privacy notice, DEPRAG MEXICO S. DE R.L DE C.V. indicates its address at Carretera a Nogales 4935 interior circuito la Primavera Poniente 2 exterior 325, San Juan de Ocotan C.P. 45019 Zapopan, Jalisco Mexico.

Transfer of data: In order to comply with the purposes set forth in this privacy notice, as well as with the different purposes that are compatible or analogous, the responsible party undertakes to ensure that all legal principles of protection regarding the transfer of your personal data are complied with and expresses its commitment to ensure that DEPRAG MEXICO S. DE R.L DE C.V. respects this privacy notice at all times.

By virtue of this privacy notice, the owner accepts the transfer of his/her data, with the understanding that: the responsible party will assume the obligations corresponding to the treatment of the data as agreed in this privacy notice. National or international data transfers may be carried out without the consent of the owner, among other cases, provided that the transfer:

• Is made to controlling companies, subsidiaries or affiliates under the common control of the responsible party in question, or to a parent company or any company of the same group of the responsible party that operates under the same internal processes and policies.
• It is required by virtue of a contract entered into or to be entered into in the interest of the owner, by the person in charge and a third party; and
• Is necessary for the maintenance or performance of a legal relationship between the data controller and the data subject.

The User may at any time: (i) choose to limit the use or disclosure of their personal data; or (ii) revoke their consent to the processing of their personal data, with the understanding that all processing of personal data will be subject to the consent of the owner, except for the exceptions provided by the Federal Law on Protection of Personal Data Held by Private Parties. Procedure and means by which changes to the privacy notice will be communicated: We reserve the right to make changes or modifications to this privacy notice at any time, whether in response to legislative, regulatory or jurisprudential developments, internal policies, market practices or for any other reason. Any change made to this privacy notice will be incorporated to it by the responsible parties and will be made known through any of the following means: (i) visible announcements in our stores or customer service centers; (ii) leaflets or brochures available in our stores or customer service centers.