Privacy Notice

PRIVACY NOTICE

In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (the “Data Protection Law”) Geolis,S.A de C.V. (hereinafter “GEOLIS”) makes the following privacy notice available regarding the handling of your personal data:

1.- Information Controller: “GEOLIS”, its subsidiaries, affiliates and/or controlled entities, with address at Framboyanes, number 3303, Ciudad Industrial Bruno Pagliai, Veracruz, Veracruz. Postal Code 91697, are responsible for collecting your personal data, for the use given to it and for its protection in terms of the provisions of the Data Protection Law. For any questions you may have about the handling of your personal data, you may contact our Legal Department at contacto@geolis.mx

2.- Purposes for the use of Personal Data: “GEOLIS”, in accordance with the Data Protection Law, informs you that the processing of the personal data provided will be that which is necessary for the following purposes:

1. To provide the services you have requested or are interested in acquiring, and/or to market other products or services offered by “GEOLIS”
2. To inform about the products or services offered by “GEOLIS.”
3. To analyze potential negotiations or the execution of Contracts.
4. To evaluate the quality of the products and services offered by “GEOLIS.”
5. To comply with requirements made to “GEOLIS”, its affiliates and/or subsidiaries, by governmental authorities.
6. To update the databases of the Human Resources departments of “GEOLIS”
7. To update the employees’ emergency contact lists of “GEOLIS”
8. To validate fulfillment of your obligations contracted with “GEOLIS,” as well as the obligations arising from your contractual relationship with “GEOLIS.”
9. In general, any other purpose permitted by the Data Protection Law.

3.- Data to be obtained.For the aforementioned purposes, “GEOLIS” may collect your personal data in different ways—provided directly by you in person, by telephone, electronically, and/or when we obtain information through other sources permitted by law. The personal data that “GEOLIS” may request in order to carry out the purposes mentioned above are the following: name, nationality, address, marital status, Federal Taxpayers Registry code (where applicable), email address, landline number, mobile number, age, names of family members, their landline and mobile numbers, place of birth, sex, C.U.R.P., Professional License number, address, occupation, academic background, and work experience.

“GEOLIS” does not collect sensitive personal data from users. However, if such a case arises, express written consent from the data subject will be obtained for its processing through a handwritten signature, electronic signature, or any authentication mechanism, and we will commit to: (i) Justify at all times the storage of such sensitive data in accordance with the provisions of Article nine (9) of the Law, (ii) process them under the strictest security measures, responsibility, and absolute confidentiality, and (iii) obtain your express written consent, in accordance with Article 9 of the Data Protection Law.

4.- Security measures.“GEOLIS”, as the party responsible for processing and protecting your personal data, guarantees proper use as well as protection and confidentiality thereof; to that end, “GEOLIS” has established administrative, technical, and physical security measures to comply with applicable regulatory provisions and “GEOLIS” internal policies.

5.- Exercise of the Rights of Access, Rectification, Cancellation, and Opposition (ARCO Rights).We inform you that you may, at any time, exercise your ARCO rights and/or revoke the consent you have granted us for the processing of your personal data, except in the cases of exception set forth in the Data Protection Law. To learn about the procedures, requirements, and timeframes dictated by the Data Protection Law, as well as to submit a request to exercise your ARCO rights, you may contact us via email at contacto@geolis.mx Within a maximum period of 20 days from receipt of the request, we will address your petition and inform you of its admissibility via email to the address provided.

6.- Data transfers.Your personal data may be transferred and processed inside and outside the country by (i) the affiliates and/or subsidiaries of “GEOLIS”; (ii) at the request of governmental authorities; as well as (iii) in the cases mentioned in Article thirty-seven (37) of the Data Protection Law. The third party recipient to whom your personal data is transferred will assume the same obligations applicable to “GEOLIS” under this privacy notice and the applicable legislation. If you do not agree with the transfer of data, you may apply what is established in the following section; otherwise, it will be understood that you agree with what is stated herein.

7.- Use of Cookies.- All information obtained through this website is stored by means of “cookies.” “Cookies” are files used to obtain information to improve the user experience and facilitate browsing on our website.

Cookies may be deleted, accepted, or blocked as you wish; to do so you only need to configure your web browser accordingly. Please note that certain parts of our website may not function properly if “cookies” are not accepted.

8.- Consent: The data subject will be deemed to have consented to the processing of their personal data if they do not express their refusal for such purpose through the contact links referred to in this Privacy Notice.

9.- Amendments to the privacy notice.“GEOLIS” reserves the right to make any modifications it deems appropriate to this privacy notice, in order to adapt, improve, and/or update it according to new legislative provisions, internal policies, or new requirements of “GEOLIS”.