Privacy Notice

This Privacy Notice aims to protect the personal data collected by Enertec Integritas S.A. de C.V., or its affiliates and subsidiaries (after this referred to as "Grupo Avantech" or the "Recipient" interchangeably) from members of the user community (from now on referred to as the "User").

The processing of Personal Data (understood as any information concerning an identified or identifiable individual) (from now on referred to as "Personal Data") will be handled by "Grupo Avantech" in a legitimate, controlled, and informed manner by applicable legislation to guarantee, at all times, the right to informational self-determination.

• By the Federal Law on the Protection of Personal Data Held by Private Parties (from now on referred to as the "LFPD") and other applicable provisions, Enertec Integritas S.A. de C.V., better known as "Grupo Avantech," with its registered office at Av. Paseo de las Palmas 936, Lomas de Chapultepec, Miguel Hidalgo, Mexico City, C.P. 11000, is committed to protecting your privacy and may collect your data in various ways:

• Information You Provide to Us: We receive and store all the information you enter on our website or provide it to us through any other means. You can choose not to provide certain information, but if you do, you may not be able to enjoy many of the features we offer.

• Automatic Information: We receive and store certain types of information every time you interact with us. Through "cookies," we collect certain types of information when your internet browser accesses http://grupoavantech.com

Email Communications: Part of this information is provided by you through our website or by any other means. Information is collected from photos, audio, videos, or recordings that the user entered on our website.

Information Collected from Other Sources: We may receive information about you from other sources.

Social Networks: We collect data that you authorize us to obtain from your social networks (Facebook, Twitter, LinkedIn, Google, etc.), as well as information obtained through other means permitted by applicable laws.

PROCESSING OF PERSONAL DATA

The personal data we collect from you will be used for the following purposes necessary for the service you request:

To provide the services and products we offer

• Conduct related activities

• Commercial prospecting

• Management, control, administration, and updating of information related to clients and users for the provision of contracted services.

• Management, control, and administration of communications between Grupo Avantech staff and users, clients, and employees.

• Billing for services and products provided, as well as judicial or extrajudicial collection.

• Inform about changes, modifications, or new services.

• Fulfill obligations contracted with Users.

• Evaluate service quality.

• Customer service and support through electronic means.

Additionally, we will use your personal information for the following secondary purposes, which are not necessary for the requested service but allow us to provide you with better service, such as offering promotions and commercial products, special services, newsletters, and surveys. By applicable law, the User's Personal Data may be transferred and processed by persons other than Grupo Avantech only in the cases specified in Article 37 of the LFPD.

Grupo Avantech has implemented administrative, technical, and physical security measures to protect your data, which we also require from the service providers we hire and our technology partners.

If you do not want your data to be used for these secondary purposes, please send an email to the following address: contacto@grupoavantech.com Refusing the use of your data for these purposes cannot be a reason for denying you the services and products you request or contract with us.

PURPOSES OF PERSONAL DATA

To carry out the purposes described in this privacy notice, we will use the following personal data:

• Identification and contact details: name(s), surname(s), address, home, cell, and/or work phone number, marital
  status, signature, email address, gender, age, date of birth, username, password, photos, videos, recordings, and
  identifications.

• Financial Data: cardholder's name, credit card number, and expiration date (in case of online transactions).

• Billing Data: name or denomination or business name, RFC, tax address.

PERSONAL INFORMATION WITH THIRD PARTIES

With your consent to this Privacy Notice, you agree to share your information as follows:

Third-Party Service Providers: We hire other companies and individuals to perform certain functions on our behalf. Some examples include processing credit card payments. These will have access to the personal information necessary to perform their functions, but they may not use it for other purposes. In no case will we grant rights to use your data to third-party service providers that are broader than those you have consented to under this Privacy Notice.

Federal, State, Municipal Government: Before sharing information provided by you, we will inform you of the existence of agreements or contracts with these entities so that you can agree to share information under this Privacy Notice.

It is important to note that third parties to whom Grupo Avantech transfers your data are committed under the same terms as this Privacy Notice and comply with the corresponding security and confidentiality measures.

INFORMATION AND REVOCATION OF YOUR DATA

You have the right to know what personal data we have about you, such as:

• Request and be informed about your data, its origin, the treatment it is subject to, the assignments made or to be made, and to have access to the privacy notice under which the treatment is subject (Access).

• Request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification);

• Request the deletion of your data from our records or databases when you consider that it is not being used properly (Cancellation);

• Object to the use of your data for specific purposes (Opposition).

These rights are known as ARCO rights. To exercise any of the ARCO rights, you must submit the respective request through means: Email: contacto@grupoavantech.com, from Monday to Friday (business days) from 09:00 to 18:00 hours.

Necessary documents for exercising ARCO rights:

Request to exercise rights that indicate:

• Name and address of the holder

• Data on how contact will be made for notifications of the request.

• A clear and precise description of the personal data regarding which one seeks to exercise any of the aforementioned
  rights.

• Data that helps to locate the data (service acquired).

• Copy of the accreditation documents of the holder or representative.

• Contact details (of the holder)

• Name

• Address

• Email

• Phone

The holder and/or their representative must send their request with the requested documentation to the legal area. If the information provided in the request is insufficient or incorrect to process it, or if the requested documents are not attached, the legal area will request the holder to provide the necessary elements or documents for processing. The holder will have ten (10) business days to respond to the request, counted from the day following the receipt. If no response is given within that period, the request will be considered not submitted. Once the documentation and information are complete, the legal area will have twenty (20) business days to respond to the request from the holder and/or representative. The head of the legal area will register the request and in the acknowledgment delivered to the holder, will register the receipt date from which the deadlines established for the response will be counted. If applicable, it will be made effective within fifteen days following the date the response is communicated. In the case of requests for access to personal data, the delivery will proceed after verifying the identity of the applicant or legal representative, as appropriate.

The head of the legal area will respond to ARCO rights requests and/or consent revocation received, regardless of whether the holder's data is in its databases, by the established deadlines.

It is important to note that we may not be able to process your request or terminate the use immediately, as it may be necessary to continue processing your data due to some legal obligation. Additionally, you should consider that for certain purposes, revoking your consent may mean that we can no longer provide the service you requested or the termination of your relationship with us.

We inform you that on our website, we use cookies, web beacons, or other technologies through which it is possible to monitor your behavior as an internet user, as well as provide you with better service and experience when browsing our website. The personal data obtained from these tracking technologies are as follows:

Identifiers, usernames, and session passwords

The region in which the user is located

The date and time of the start and end of a user's session

AUTHORITY

If the user considers that their rights regarding the protection of personal data have been violated, they have the right to approach the relevant authority to defend their rights. The authority is the National Institute of Transparency, Access to Information, and Protection of Personal Data (INAI).

MODIFICATIONS TO THE PRIVACY NOTICE

Grupo Avantech may modify or update this Privacy Notice at any time to address legislative changes, internal policies, or new requirements for managing customer complaints and claims. These modifications will be available to the public through the following means: a) visible announcements at our establishment; b) on our website https://www.grupoavantech.com/; c) or we will send them to the last email you provided us.

The Information Holder acknowledges and agrees that this Privacy Notice is available through an electronic page (website, Internet page, or similar) and that by clicking “accept” or otherwise continuing to browse the site, or by providing your Data through the same or any electronic means (email, etc.), you are providing an express manifestation of your consent for the processing of your Personal Data under the terms established herein.