ARBITRAJE CORPORATIVO, SOCIEDAD CIVIL, hereinafter "OERRE ABOGADOS" located at office one hundred two of the house one hundred thirty-eight of the 17th Street Prolongation, Concepción Las Lajas neighborhood of the city of Puebla, Puebla is responsible for the use and protection of the Owner's personal data, and for the purposes of the provisions of section I of the Article 16 of the Federal Law on Protection of Personal Data Held by Individuals LFPDPPP (for their initials in spanish), the address of the Responsible is the one established in this section of this Notice, due to the above, it informs you of the following:

Through this document, this Privacy Notice has been generated, hereinafter the Notice, in compliance with the LFPDPPP and its Regulations (RLFPDPPP) and other applicable provisions on the matter, which makes available to the Owner of the Personal Data in its capacity Responsible for the personal data it collects.

The purpose of this Notice is to establish the terms and conditions under which "OERRE ABOGADOS" (i) will receive and protect the Personal Data of the Owner, in order to protect their privacy and their right to informational self-determination; (ii) will use the Owner's Personal Data for the purposes established in this Notice, and (iii) will transfer Personal Data to third parties, if applicable.

CONSENT OF THE OWNER

For the purposes of the provisions of the LFPDPPP and in particular in its Article 17, the Holder declares (i) that this Notice has been made known to him by the Responsible Party, (ii) having read, understood and agreed to the terms set forth in this Notice, for which you grant your consent regarding the processing of your Personal Data for the purposes of the LFPDPPP and other applicable legislation. In the event that the Personal Data collected includes Financial Personal Data, by signing the corresponding contract, either in printed format, or using electronic means and their corresponding processes for the formation of consent, acts will be carried out that constitute the express consent of the owner in terms of the second paragraph of article 8 of the LFPDPPP and (iii) that he grants his consent for "OERRE ABOGADOS" or its Managers to make transfers of Personal Data to national third parties, in the understanding that the treatment that said third parties give to Your Personal Data must comply with the provisions of this Notice.

In the event that the Owner does not oppose the terms of the Notice, its content will be considered agreed and consented to. The Owner's consent may be revoked at any time by the latter without retroactive effects being attributed to it in accordance with the procedures established later in this Notice.

At any time you may revoke the consent you have given us for the processing of your personal data, so that we stop using them. For this, it is necessary that you submit your request via email to the address notificaciones@arbicorp.com; where you will be provided with additional information, as well as requirements that your request must meet. However, it is important that you take into account that not in all cases we will be able to attend to your request or terminate the use immediately, since it is possible that due to some legal obligation we need to continue processing your personal data. Likewise, you must consider that, for certain purposes, the revocation of your consent will imply that we cannot continue to provide you with the service you requested, or the conclusion of your relationship with us.

COLLECTION OF PERSONAL DATA

For the purposes indicated in this Privacy Notice, we collect your personal data in different ways: (i) when you provide it to us directly; and (ii) when we obtain information through contact via email or instant messaging services.

The collection of Personal Data is carried out when the Owner communicates directly with the Responsible Party or with its Managers via email or instant messaging services or by direct delivery to the Responsible Party in person.

The following data is necessary to collect according to the legal relationship established with "OERRE ABOGADOS":

• Identification data. Information concerning you as a natural person that allows you to differentiate it from others in a community, such as: name; civil status; signature; Federal Taxpayer Registry, RFC (for their initials in spanish); Unique Population Registry Code, CURP (for their initials in spanish) ; place and date of birth; nationality; photo and age.  In the case of legal persons; Full name of the legal representative and, if applicable, the constitutive act, as well as its Federal Taxpayer Registry (RFC).

• Contact information. Information that allows you to maintain or contact you, such as: address; email; landline and cell phone.

• Patrimonial or financial data. Information concerning your assets, rights, charges or obligations subject to economic valuation.

Within the documentation that can be collected by "OERRE ABOGADOS" for the verification of the identity of the Holder of the Personal Data there is an official identification (it can be a voter credential; professional license or Mexican passport) the registration card in the RFC , the registration card with the CURP, the proof of address, as well as the birth certificate. You may also be requested the Personal Data of your guarantors, joint obligors or beneficiaries and the supporting documentation.

PURPOSE OF PERSONAL DATA

We will use the personal data that we collect from you for the following purposes that are necessary for the legal relationship established with "OERRE ABOGADOS": To confirm your identity and financial situation, for the provision of contracted professional legal services, contracting of other services that are offered by "OERRE ABOGADOS", preparation of contracts for the provision of services, control of registrations in the database to process payments, as a means of contact and customer service, issuing digital tax receipts online, sending CFDI and collection of the same, conditions and method of payment, sending budgets and quotes, sending reports and account statements, customer service contact  for complaints and suggestions.

In addition, we will use your personal information for the following purposes that are not necessary for the requested service, but that allow and facilitate us to provide you with better service: as an informative means to provide you with news, as well as to contact you and organize events for marketing and monitoring quality service.

In the event that you do not want your data to be used for such purposes, you must expressly express it to the Responsible Party, otherwise, if you do not do so, it is understood that you have given your consent, and you can expressly revoke it to the email address indicated for this purpose in this Privacy Notice.

DATA TRANSFER

"OERRE ABOGADOS" as responsible for your personal data may transfer your identification and contact data to third parties within the national territory for marketing, advertising or commercial prospecting purposes, as well as, where appropriate, the preparation of surveys and compliance with legal obligations and/or prosecutors.

In the understanding that the recipient of the data will act as subject regulated by the LFPDPPP and its regulations; will treat the personal data transferred for the purposes established in accordance with the agreement in this Privacy Notice. The recipient of the data will be Mexican tax authorities and polling houses.

The person in charge reserves the right to transfer personal data in the event of selling, assigning or transferring part or all of the business or its assets, where it will notify the new owner of the obligations it assumes based on this Notice. If you do not want your personal data to be used by the new manager, you must notify the latter.

We inform you that, for the indicated transfers, we need to obtain your consent. If you do not express your refusal for said transfers, we will understand that you have granted it to us.

En cualquier momento usted podrá revocar el consentimiento que nos ha otorgado para la transmisión de sus datos personales, a fin de que el tercero receptor deje de hacer uso de los mismos. Para ello, es necesario que presente su petición vía correo electrónico a la dirección  aeprp@telmexmail.com;  donde se   le brindará información adicional, así como requisitos que deberá cumplir su petición.

At any time you may revoke the consent you have given us for the transmission of your personal data, so that the third-party recipient stops using them. For this, it is necessary that you submit your request via email to the address aeprp@telmexmail.com; where you will be provided with additional information, as well as requirements to fulfill your request.

LIMITATION OF USE AND DISCLOSURE OF PERSONAL DATA

The person in charge and/or his managers will keep the personal data of the owner for as long as necessary in accordance with the provisions of the commercial, civil, fiscal or other applicable legislation, or as necessary to process the requests of the owner based on the legislation applicable for data protection.

The holder can request that the notification of promotions, services and offers be limited or canceled both to his landline or cell phone, or to his email, which will only be sent to the holder or the persons authorized by him; in any case, to request the cancellation, it must be done in accordance with the provisions of the section on the exercise of your ARCO rights.

"OERRE ABOGADOS" has adopted adequate processes and measures to protect the owner’s personal data against any act of an unauthorized third party, but this does not guarantee that third parties can access the database, so illegal access by a third party does not hold "OERRE ABOGADOS" responsible for any damage or harm that such action could cause, as long as it is demonstrated that "OERRE ABOGADOS" had adopted all the sufficient and necessary mechanisms to protect personal data of such actions. "OERRE ABOGADOS" undertakes as soon as it becomes aware of such a fact, to notify the owner, and inform the Authorities, and if applicable, proceed in accordance with the laws provided against the responsible.

ARCO RIGHTS EXERCISE

You have the right to know what personal data we have about you, what we use them for and the conditions of use that we give them (Access). Likewise, it is your right to request the correction of your personal information in case it is outdated, inaccurate or incomplete (Rectification); that we eliminate it from our records or databases when it considers that it is not being used in accordance with the principles, duties and obligations set forth in the regulations (Cancellation); as well as oppose the use of your personal data for specific purposes or revoke the consent that you have provided us for that purpose by submitting (Opposition) a request with the following information and documentation:

1. Name of the Holder and address or other means to communicate the response to your request;

2. The documents that prove your identity (simple copy in printed or electronic format of your voter identification card, military card or Mexican passport) or, where appropriate, the legal representation of the Holder (simple copy in printed or electronic format of the letter simple power of attorney with autograph signature of the Holder, the agent and their corresponding official identifications – voter identification card, military card or Mexican passport);

3. The clear and precise description of the Personal Data with respect to which you seek to exercise any of the ARCO Rights, and

4. Any other element or document that facilitates the location of the Owner's Personal Data.

In the case of requests for rectification of Personal Data, the respective Owner must also indicate the modifications to be made and provide the documentation that supports their request.

For the reception, registration and attention of requests to exercise your ARCO rights, as well as to limit the use or disclosure of your data, and the other rights provided for in the LFPDPPP, contact via email at notificaciones@arbicorp.com, where additional information will be provided.

The Responsible Party or its Managers will respond to the respective Owner within a maximum period of twenty days, counted from the date the request was received, so that if appropriate, it becomes effective within the fifteen days following the date of communication of the response. The aforementioned terms may be extended only in terms of the LFPDPPP.

The delivery of Personal Data will be free, it will only be up to you to cover the justified shipping costs or the cost of reproduction in copies or other formats. In the event that the Holder reiterates his request in a period of less than twelve months, he must cover the corresponding costs equivalent to 1.5 days of the Current Minimum Wage in terms of the LFPDPPP unless there are substantial modifications to the Notice that motivate new consultations.

For the purposes of requests for cancellation of Personal Data, in addition to the provisions of this Notice, the person in charge will not be obliged to cancel personal data when:

1. It refers to the parts of a private, social or administrative contract and are necessary for its development and fulfillment;

2. They must be treated by legal provision;

3. Obstructs judicial or administrative actions related to fiscal obligations, the investigation and prosecution of crimes or the updating of administrative sanctions;

4. Are necessary to protect the legally secured interests of the holder;

5. They are necessary to carry out an action based on the public interest;

6. They are necessary to comply with an obligation legally acquired by the owner, and

7. Are subject to treatment for prevention or medical diagnosis or management of health services, provided that said treatment is carried out by a health professional subject to a duty of secrecy.

The presentation of a request to oppose the use of Personal Data by the Holder thereof, will give the Responsible the power to oppose the use of Personal Data that as Holder has delivered to the opponent.

MODIFICATIONS TO THE PRIVACY NOTICE

We reserve the right to make modifications or updates to this Privacy Notice at any time, to attend to new legislation or jurisprudence, internal policies, new requirements for the provision or offering of our services or products and market practices.

These modifications will be available to the public through the following means: (i) visible announcements at our address; (ii) attachments in email messages; (iii) on our website oerre.com.mx in the Privacy Notice section.

The Responsible will understand that if they do not express otherwise, it means that the Owner has read, understood and agreed to the terms set forth therein, which constitutes their consent to changes and/or updates regarding the processing of their Personal Data.