This document constitutes the "Privacy Notice" of Competimex, S.C.

In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties and its respective guidelines and regulations, COMPETIMEX, S.C. (COMPETIMEX), located at Calle Iglesia 2, Torre E, Despacho 1201, Colonia Tizapán San Ángel, Alcaldía Álvaro Obregón, C.P. 01090, Mexico City, provides this comprehensive privacy notice. This Privacy Notice has been prepared to inform data subjects about the type of information that COMPETIMEX collects from them, how it will be processed, the means to limit the use or disclosure of personal data, the process for exercising the rights of Access, Rectification, Cancellation, and Opposition, possible transfers, and the procedure for notifying changes to this notice.

The purpose of this notice is to keep data subjects informed and protected. COMPETIMEX will be responsible for managing, safeguarding, and processing personal data provided by users.

The personal data collected by COMPETIMEX will be processed in accordance with the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties.

DEFINITIONS

This Privacy Notice is subject to the definitions established in Article 3 of the Federal Law on the Protection of Personal Data Held by Private Parties.

COLLECTED PERSONAL DATA

COMPETIMEX may collect information from the data subject in person or directly through the website or other electronic or telephone means. In these cases, the processing and exercise of the rights contained herein will be the same. COMPETIMEX may collect the following personal data:

1.- Full name

2.- Place and date of birth

3.- Marital status

4.- Personal address

5.- Local and mobile contact phone numbers

6.- Contact email address

7.- Economic activity

8.- Personal photograph

9.- Languages spoken

10.- Academic background, studies, dates, institution, and location

11.- Employment information, previous jobs, professional objectives, and salary expectations.

For employees and job applicants, all the personal data mentioned above will be necessary to maintain the legal relationship.

For clients to whom COMPETIMEX provides services or has provided quotes or service proposals, all the aforementioned personal data of the responsible parties or individuals related to the contracted projects will be necessary to maintain the legal relationship, with the purpose of fulfilling obligations arising from the existing legal relationship.

DATA PROCESSING PURPOSES

The purposes for processing the personal data collected by COMPETIMEX will be as follows:

1.- Recruitment processes, selection, management of hired personnel, and the creation of a database of previous non-selected candidates for future hiring.

2.- Provision of services offered by COMPETIMEX to its clients.

3.- Historical, statistical, and/or scientific purposes.

4.- Maintain a record of service providers and suppliers of COMPETIMEX, whether active or inactive.

5.- Contact data subjects to provide information about products and services.

6.- Notifications related to the legal relationship between the data subject and COMPETIMEX.

7.- Sending newsletters and informational updates.

Personal information will be retained for the period necessary to fulfill the purposes established in this privacy notice, until the data subject requests its cancellation, unless the law requires or authorizes a longer retention period.

SENSITIVE PERSONAL DATA

Given the nature of some personal data collected by COMPETIMEX, and in accordance with Article 3, Section VI of the Law, the following will be considered sensitive personal data:

- Place and date of birth

- Personal photograph

- Languages spoken

COMPETIMEX will collect these sensitive data for purposes such as integrating candidate databases for employment, compiling labor files, and providing services. In all cases, COMPETIMEX will obtain the explicit consent of the data subject, except as provided in Article 18 of the Federal Law on the Protection of Personal Data Held by Private Parties.

CONSENT TO DATA PROCESSING

By reading and accepting this Privacy Notice, the data subject agrees to the processing of their personal data as outlined in this document and in compliance with Article 8 of the Law, with the exceptions provided by law.

DATA TRANSFERS

In accordance with Articles 36 and 37 of the Law, the personal data collected from data subjects may be transferred nationally or internationally to third parties for historical, statistical, and/or scientific purposes. By accepting this Privacy Notice, the data subject agrees to such transfers for the purposes outlined here.

Additionally, COMPETIMEX may transmit personal data to third parties without the consent of the data subject as outlined in Article 37 of the Law.

**ARCO Rights: Access, Revocation, Limitation of Use and Disclosure of Personal Data**

Data subjects have the right to know the status of their personal data, including how it is used and the conditions under which it is processed (access). They also have the right to request corrections to their personal information if it is outdated, inaccurate, or incomplete (rectification). The information provided by users may be deleted from the database if it is not used according to the principles, duties, and obligations set out in this privacy notice and the Law (cancellation); or to oppose the use of their personal data for specific purposes (opposition).

To exercise ARCO rights or revoke consent, data subjects may submit a written request to the email address: juridico@competimex.com, which should include the following information:

- Full name of the data subject and their address or any other means to receive notifications.

- Documents proving the identity of the data subject and, if applicable, the identity and authority of their representative.

- A clear description of the personal data for which any of the ARCO rights are being exercised, unless it is an access request.

- A description of the ARCO right being exercised or a request made by the data subject.

- Any other information or documents that will facilitate the location of the personal data.

If rectification is requested, the necessary official documentation supporting the request must be provided. In the case of cancellation, the reasons for the request must be explained. In the case of opposition, the reasons for terminating the data processing and the harm or disadvantage caused must be specified. If the opposition is partial, the specific purposes with which the data subject disagrees must be stated, provided that they are not mandatory requirements.

COMPETIMEX will respond to the request via the email address from which it was made within 30 business days, which may be extended by 10 more business days, upon notification. The response will indicate whether the access, rectification, cancellation, or opposition request is granted and, if applicable, will be effective within the following 15 business days. COMPETIMEX may request additional information to clarify the data subject’s requirements.

If the data subject wishes to limit the use or disclosure of their personal data, they may also request their inclusion in the Public Consumer Registry to prevent their data from being used for marketing or advertising purposes, or request inclusion in the COMPETIMEX exclusion registry. These procedures are free of charge and a certificate of inclusion in the registry will be issued.

**Changes to the Privacy Notice**

COMPETIMEX reserves the right to modify this Privacy Notice at any time. Any changes will be communicated to the data subjects through announcements on its website or any other physical or electronic means. The data subject’s consent will be deemed granted in accordance with Article 8 of the Federal Law on the Protection of Personal Data Held by Private Parties.

**ARCO Rights**

If you wish to exercise your ARCO Rights, please download the form here:  

​

ARCO RIGHTS EXERCISE AND CONSENT REVOCATION FORM