Comprehensive Privacy Notice

SRL SOLUCIONES E IMPLEMENTACIONES, S.A. DE C.V. (hereinafter, "SRL", a person who, for the purposes of this privacy notice, will be referred to as Responsible) in order to respect the rights and interests of individuals in relation to their privacy and personal data, based on the principles and guidelines prescribed by the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter, the "Law"), this privacy notice related to privacy policies is made available to all employees, collaborators, clients, suppliers, subcontractors of SRL, and the denominations SRL SOLUCIONES E IMPLEMENTACIONES, S.A. DE C.V., who, due to their relationship with the company's activities, have provided or are about to provide personal data, through physical or digital means, for which the following is stated:

1. Identity and address of the person responsible for the Processing of Personal Data

The Responsible person indicates as their address, the one located at Bosque de Duraznos 55, floor 1, office 102, Colonia Bosques de las Lomas, Miguel Hidalgo Mayor's Office, C.P. 11700, through this document informs you that the personal data you provide us as an active or potential "holder" will be treated strictly for the purposes indicated below, being the only person responsible for the processing of such data, the data management, located at the referred address, with email canalsrl@srlsoluciones.com

2. Personal Data we collect and its purpose

The data that SRL SOLUCIONES E IMPLEMENTACIONES, S.A. DE C.V. collects through the portal https://srlsoluciones.com/ and/or in the celebration of contracts intended to fulfill its corporate purpose are: voter ID, passport, professional license, C.U.R.P., R.F.C., NSS, birth certificate, articles of incorporation, email, address, bank account number, commercial and/or tax address, phone number, usernames for platforms and systems, access passwords, client system and telecommunications information.

The personal data collected by the responsible person will be processed only for the following purposes, as applicable, to each holder, according to their legal relationship with the same:

• To send the newsletter of our solutions, as well as marketing efforts.
• Billing, supply, distribution, and sale of our products.
• Providing information about changes or new products or services related to SRL;
• Fulfilling our contractual obligations with suppliers, clients, and employees;
• Conducting statistics that allow us to improve your experience as a user in future operations.
• Personal information will be processed consistently with the purpose for which it was collected or for which you gave your consent;
• Reasonable commercial and security measures will be taken to ensure that your personal information is reliable, accurate, complete, and, when necessary, up-to-date;
• Document archiving and control of backgrounds of our trainers, suppliers, associates, and workers, and, where applicable, hiring procedures and opening a physical file for document control and archiving.
• For the purposes of drafting and executing the contract(s) that, according to the corresponding legal relationship, may be required;
• Fulfilling obligations arising from the corresponding legal relationship.
• Promoting, acquiring, receiving, and providing the required services and/or products;
• Evaluating the quality of the products and/or services;
• Extrajudicial collection proceedings in the case of delinquent clients or any other debtor, and/or notices to judicial, administrative, or labor authorities for fulfilling obligations arising from the particular relationship with each "holder".
• SRL may share your personal information with trusted external providers who help us provide the Services. We will ensure that these service providers are obligated to protect your personal information under contractual terms that are no less protective than those set out in this Privacy Policy.

Personal data will be kept and protected under strict confidentiality and may not be used for purposes other than those mentioned above unless there is a change in this Privacy Notice.

Once the purpose of processing personal data is fulfilled, it will be blocked solely for the purpose of determining possible responsibilities in relation to its processing, until the legal or contractual prescription period of these. During this period, personal data may not be processed and, after this period, it will be canceled in the corresponding database.

The confidentiality of your personal data will be maintained by establishing and maintaining effective administrative, technical, and physical security measures to prevent damage, loss, alteration, destruction, use, access, or unauthorized disclosure.

3. Collection of Personal Data

For the collection of personal data, the Responsible person follows all the principles established by the Law, such as legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility.

Personal data will be collected directly from the holder personally through physical and digital means through the website https://srlsoluciones.com/; BambooHR, Servicenow, printed forms or through other lawful optical, sound, visual, or any other technology.

The information we receive from our website when you leave and provide your data is registered in our database, for which we use "cookies". (A "cookie" is a small text file that a website or email can save in your browser and store it on your hard drive). Additionally, we may obtain information from the holder from other sources permitted by law, such as phone directories, references from companies or individuals, public databases of any public or private entity, among others.

4. Options and means to limit the use or disclosure of data

The Responsible person has the necessary and sufficient administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, use, access, or unauthorized processing.

Personal data is safeguarded in databases and computer equipment that have the necessary security to prevent information leaks, physical and logical access controls, passwords, intrusion protection systems (IPS, Firewall), antivirus protection tools, among others, some of the tools used to maintain data security in the Responsible's information systems.

The computer security tools mentioned in the previous paragraph are supported by an internal information security policy that explains to employees the security considerations they should take into account when using a computer system and is constantly reinforced.

Therefore, you are informed that you can request the limitation of the use or disclosure of your personal data, subject to this Notice, through a written request sent to the Responsible's email and/or the address indicated in section I of this notice.

5. Means to exercise the rights of access, rectification, cancellation, or opposition of your personal data (ARCO), in accordance with the provisions of the Law

The "holders" by their own right or through their duly accredited and identified legal representative, may exercise their rights of access, rectification, cancellation, and/or opposition of their personal data (ARCO), through a free written request, addressed to the data manager, personally at the office indicated in this privacy notice or via email to: canalsrl@srlsoluciones.com indicating the following:

• Name of the "holder", accompanied by documents proving their identity, in case of legal representatives or representatives, attach the document(s) that prove this, including a simple power of attorney, signed before two witnesses.
• Address or email to receive notifications.
• A clear and precise description of the personal data and the right you intend to exercise over it.
• Elements that facilitate the location of the data whose right is intended to be exercised, such as the date on which the data was obtained.

For the corresponding purposes, once your request is received, the Responsible person, through the corresponding area, will respond to the appropriateness or inappropriateness of the request, within a period not exceeding twenty days, informing you in writing at the address indicated by the "holder", or at the email indicated for such purpose.

This procedure will not generate any charge or compensation for any concept for the "holder".

As a result of the above, the Responsible person will not be obliged to cancel the personal data when it is one of the cases established in the Law.

6. Data transfers that are made

Personal data will not be disclosed or shared with third parties, national or foreign, except when it comes to work references and data transfers for recommendation and evaluation purposes of acquisition, receipt, and provision of services; in light of the above, the Responsible person's affiliated companies, which are part of "SRL SOLUCIONES E IMPLEMENTACIONES, S.A. DE C.V.", are not considered third parties, and require personal data for the aforementioned purposes.

7. Revocation

The "holders" may revoke their consent for the processing of personal data at any time, only for such purposes, by sending a written request to the data manager, at the Responsible's address, who will inform the "holder" of the appropriateness of their request within a maximum period of eight business days, which, if appropriate, will become effective from the day the "holder" is notified.

For this purpose, the Responsible person may communicate to the "holder" about the appropriateness of their request by any means, the resolution that falls on their revocation request.

8. Consent of the Holder

In terms of the provisions of article 8 of the Federal Law on the Protection of Personal Data Held by Private Parties.

It will be understood that the holder tacitly consents to the processing of their data, when having made this Privacy Notice available, they do not expressly and in writing express their opposition. Likewise, where appropriate, there will be express consent when signing the consent that underpins this comprehensive and/or simplified privacy notice.

9. Modifications to the Privacy Notice

We reserve the right to change this Privacy Notice at any time. These modifications will be available through any of the following means:

• Visible announcements at our offices;
• On our website.

We will not be responsible if you do not receive the notification of change in the Privacy Notice if there is any problem with your email account or internet data transmission.

Last update date: 14/06/2024