Comprehensive Privacy Notice

Consent of the Data Subject

For the purposes of the Federal Law on Protection of Personal Data Held by Private Parties (the "LFPDPPP") and other applicable legislation, the Data Subject states that (i) this Notice has been made available by the Controller, (ii) they have read, understood, and agreed to the terms set forth in this Notice, thus granting their consent to the processing of their personal data. In the event that the collected personal data includes financial or asset-related data, by signing the corresponding contract, whether in printed format or using electronic means and corresponding consent formation processes, acts constituting the express consent of the Data Subject will be carried out, and (iii) they grant their consent for "CREAI" or its Data Processors to carry out transfers and/or remissions of personal data under the terms of this Notice.The user of "CREAI" is solely responsible for updating their personal data, as well as its accuracy and truthfulness. It is always assumed in good faith that the information has been provided by its legitimate owner or a person with the legal rights to do so, and therefore, "CREAI" will not be responsible for it beyond the terms set forth in this NOTICE.

Personal data we collect

"CREAI" may collect personal data such as: full name, phone number (landline and mobile), email, address, Federal Taxpayer Registry (RFC), number of employees, and reason for the Data Subject.

"CREAI" will not collect the Data Subject’s financial or asset-related data.

Purpose of personal data

The Controller collects personal data for the following purposes:a. Identification;b. Statistical purposes;c. To contact you via email, social networks, or telephone;d. Services offered on the "CREAI" portal and any of its brands;e. To offer services and products from "CREAI"'s business partners.

Additionally, the Data Subject's personal data will be processed to carry out activities and management actions focused on fulfilling obligations arising from any legal or commercial relationship established in the course of service provision.

Data transfers and/or remissions

"CREAI" requires sharing the Data Subject's personal data to comply with its legal and/or commercial obligations, for which it has entered or will enter into various commercial agreements. The recipients of the personal data are contractually bound to maintain the confidentiality of the provided personal data and to observe this Notice.

Web banner and other technologies

The Controller's websites and online services use Web Banner images inserted in web pages or portals and emails that, among other things, can store information such as the user’s IP address and interaction time on websites, allowing the Controller to automatically collect personal data.The Data Subject is informed that by entering and continuing to use the Website, they consent to the Controller collecting and processing their personal data. The use of these technologies is necessary for operational, technical, and security reasons.The Controller will process the Data Subject's Personal Data strictly in accordance with the terms of this Privacy Notice, which governs the relationship between the Controller and the Data Subject.

Cookies

We use cookies to improve your experience on our chatbot and website. By continuing to browse, you accept the use of these technologies in accordance with our Cookie Policy.

ARCO Rights

These are a set of rights established in the Federal Law on Protection of Personal Data Held by Private Parties, ensuring the Data Subject's control over their personal data. ARCO refers to four rights:

• Right of access: The Data Subject may access their personal data held by the Controller at any time and review the Privacy Notice governing its processing.
• Right of rectification: The Data Subject has the right to rectify their data when it is inaccurate or incomplete.
• Right of cancellation: The Data Subject has the right to cancel their personal data at any time. After a blocking period, the data will be deleted from the Controller's database.
• Right of opposition: The Data Subject may oppose the processing of their data at any time and for legitimate reasons. If appropriate, the Controller will no longer process the Data Subject's data, which may result in the inability to provide the service.

‍

Means to limit the use or disclosure of your personal data

"CREAI" ensures that personal data will be protected with strict administrative, technical, and physical security measures implemented under the LFPDPPP regulations to safeguard against damage, loss, alteration, destruction, or unauthorized use, access, or processing.However, "CREAI" cannot guarantee that unauthorized third parties will not gain access to the physical or logical systems of the Data Subjects or the Controller, nor to electronic documents and files stored within its systems. Therefore, "CREAI" shall not be liable for any damages resulting from such unauthorized access.The Data Subject or their duly accredited legal representative may limit the use or disclosure of their personal data through the same means and procedures provided for the exercise of ARCO Rights.

Duration of the notice

This Privacy Notice is effective from the moment the Data Subject grants their consent, including through electronic means, for the use and processing of their personal data until they exercise their right of revocation, cancellation, or opposition.

Changes to the notice

"CREAI" reserves the right to modify this Privacy Notice in the future. Any modification will be communicated via email and/or publication on the website [***]."CREAI" will not be responsible if the Data Subject does not receive the change notification due to issues with their email account or internet data transmission. For security reasons, the current Privacy Notice will always be available on the aforementioned website.

If the Data Subject does not express opposition, it will be understood that they have read, understood, and agreed to the terms set forth, thereby consenting to the changes and/or updates regarding the processing of their personal data.

CREAI TECHNOLOGIES, S.A. DE C.V.Valladolid 50, RomaCuauhtémoc Borough, C.P. 06700 CDMX, Mexico.Contact: Phone []Email: []