This Privacy Notice (the “Notice”) is intended to comply with the provisions set forth in the Federal Law on the Protection of Personal Data Held by Private Parties (the “Law”). Therefore, Asistencia Gerencial y Directiva, S.C. (“AGD”) makes the following Notice available to you:

Party Responsible for the Protection and Processing of Your Personal Data

Asistencia Gerencial y Directiva S.C., with address at Avenida Bonampak, Supermanzana 6, Manzana 1, Lote 1, Corporativo Malecón Américas, Floor 9, Offices 904 and 905, Cancún, Quintana Roo, C.P. 77503.

Purpose of the Personal Data Collected

Your personal data will be collected for the following purposes:

• When its processing is required to provide the professional advisory services you request from AGD.
• Processing, tracking, and confirmation of the advisory services requested by you, whether through our website www.agdglobal.com.mx (the “Website”) or by any other means.

Measures to Limit Use or Disclosure

Your personal information will be safeguarded under strict confidentiality, and to reasonably prevent its improper use or disclosure, we have implemented physical, technical, and administrative security measures, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties and other applicable regulations.

Mechanisms to Exercise ARCO Rights and Revoke Consent for the Processing of Your Data

To exercise your rights of Access, Rectification, Cancellation, and Opposition, or your right to revoke consent for the processing of your personal data, you must complete and send the ARCO RIGHTS EXERCISE FORM, which you may download here, and submit it to AGD via the following email address: datospersonales@agdglobal.com.mx, or deliver the form in person to the following address: Avenida Bonampak, Supermanzana 6, Manzana 1, Lote 1, Corporativo Malecón Américas, Floor 9, Offices 904 and 905, Cancún, Quintana Roo, C.P. 77503, attention: Legal Department; alternatively, you may submit your request in writing, in Spanish, and in compliance with the requirements set forth in Article 29 of the Regulations of the Federal Law on the Protection of Personal Data Held by Private Parties.

AGD will follow up on your request within 20 business days from receipt of said FORM or request, with complete documentation, to inform you of its admissibility. If admissible, the Website will have a maximum period of 15 business days to make your ARCO right effective.

Data Transfers

Your personal data may be transferred and/or shared with holding companies, subsidiaries, or affiliates under AGD’s common control, or with a parent company or any company within AGD’s same group, as well as with third parties that enable AGD to provide professional advisory services and that operate under the same internal processes and policies, in the following cases:

• When the transfer is necessary by virtue of a contract entered into or to be entered into in your (the data subject’s) interest, by the controller and a third party;
• When the transfer is necessary for the maintenance or fulfillment of a legal relationship between AGD and you (the data subject); and
• When necessary for AGD to provide you with professional advisory services.

It is important to note that, in the event your personal data is transferred to a third party, such party will be bound under the same terms of this Notice and will comply with the corresponding security and confidentiality measures.

For an AGD employee to transfer and/or share your personal data, a clear, direct, and written instruction from an AGD director is required; if such documentary support is not available, it will be understood that the employee did so in a personal capacity.

Amendments to this Privacy Notice

AGD may, at any time, make amendments or updates to this Privacy Notice. Any amendments or updates made will take effect at the time they are published on the Website or through any communication medium used for publication; therefore, continuous review is recommended.

Express Acceptance of the Privacy Notice

If you do not expressly object to this notice and its updates, it will be understood that you have granted your tacit consent pursuant to Article 8 of the Federal Law on the Protection of Personal Data Held by Private Parties.