Privacy Policy

Arias y Asociados, S.C. is a company aware of the responsibility and trust you place in us. For this reason, it is committed to the proper processing of your Personal Data, and will at all times keep the information provided to it confidential and act in accordance with the national and international regulations applicable to Personal Data.

Likewise, Arias y Asociados, S.C. thanks you for your interest in the website www.ariasyasociados.com and in this Privacy Notice, and remains at your disposal for any question or comment you may have about this Privacy Notice through the contact identified at the end of this document.

Now then, in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and the Privacy Notice Guidelines published in the Official Gazette of the Federation (Diario Oficial de la Federación) on January 17, 2013, this Privacy Notice is made known to you.

I. Purposes

The purposes for which Arias y Asociados, S.C. may request, obtain, store and/or use Personal Data are the following:

• To maintain a relationship with users, clients, or anyone interested in the services and research carried out by Arias y Asociados, S.C.
• For statistical control of the use of the services of Arias y Asociados, S.C. and its affiliated companies.
• To develop adequate quality control and a measurement of contact levels through quality assessment surveys and market studies.
• Sending information, magazines, news from the real estate, valuation, and machinery and equipment industries, as well as communications and advertising.
• To respond to requests for information, products, services, complaints, questions or comments.
• Creation of databases for research and development of products and/or services.

II. Means of obtaining Personal Data

In person: Arias y Asociados, S.C. may obtain Personal Data through the company's personnel, which, upon request for information, will make the privacy notice available to you through the same means by which it is obtained.

Directly from the Data Subject: The means used by Arias y Asociados, S.C. are electronic, optical, audio and visual means, or any other technology.

If data is obtained by telephone, you will hear that Arias y Asociados, S.C. makes the privacy notice available within the portal www.ariasyasociados.com, so that the Data Subject has the information necessary for their own security.

In any case, Arias y Asociados, S.C. will make known the means by which the privacy notice will be available to you and, for your security, before data is collected you will be informed of the identity and address of Arias y Asociados, S.C., as well as the purposes of the data processing.

III. Consent for the use of Personal Data

The processing of Personal Data will always be subject to the Data Subject giving their consent, either expressly, by manifesting their will verbally, by electronic or optical means, by any other technology or by unequivocal signs, or tacitly, tacit consent being understood as when, the Privacy Notice having been made available to the Data Subject, they express no objection.

For both types of consent, the Data Subject has a period of 5 days to express their objection to the processing of such Personal Data; if no objection is expressed, consent will be understood to have been given.

Consent will not be required for the processing of Personal Data when:

1. It is provided for by Law;
2. The data appears in publicly accessible sources;
3. The Personal Data undergoes a prior dissociation procedure;
4. Its purpose is to fulfill obligations arising from a legal relationship between the Data Subject and the controller;
5. There is an emergency situation that could potentially harm an individual in their person or property;
6. It is indispensable for medical care, prevention, diagnosis, the provision of health care, medical treatment or the management of health services, while the Data Subject is not in a condition to give consent, under the terms established by the General Health Law and other applicable legal provisions, and such data processing is carried out by a person subject to professional secrecy or an equivalent obligation, or
7. A resolution is issued by a competent authority.

IV. Personal Data requested

Arias y Asociados, S.C. may request the following Personal Data:

• First name and last names.
• Email address.
• Telephone number.
• The web page from which you have visited us.
• Preferences on the subjects about which you would be interested in receiving information and/or advertising.
• Line of business.

V. Data storage

Arias y Asociados, S.C. stores Personal Data for the period of time required to perform the service for which the data was collected and for the purpose for which it was requested.

VI. Data protection

Arias y Asociados, S.C., in compliance with the regulations on Personal Data Held by Private Parties, has adopted the legally required security measures for the protection of Personal Data; likewise, Data Subjects are informed that Arias y Asociados, S.C. has additional technical means and measures to prevent the loss, misuse, alteration, unauthorized access or theft of the User's Personal Data that is provided to it.

Notwithstanding the foregoing, and because security measures may be susceptible to breaches by acts beyond the control of Arias y Asociados, S.C., it undertakes, without liability, to inform the Data Subject if there are breaches of its security measures, so that the Data Subject may take the corresponding measures to defend their rights.

VII. Transfer of Personal Data

Arias y Asociados, S.C. may transfer Personal Data in order to maintain a relationship with the Data Subject regarding the services and research carried out by Arias y Asociados, S.C., or for statistical control of the use of the services that Arias y Asociados, S.C. provides and to develop adequate quality control and a measurement of contact levels through quality assessment surveys and market studies. It may also send information, magazines, news from the real estate, valuation, and machinery and equipment industries, as well as communications and advertising, and respond to requests for information, products, services, complaints, questions or comments; creation of databases for research and development of products and/or services.

Pursuant to articles 36 and 37 of the Federal Law on the Protection of Personal Data Held by Private Parties, Personal Data may be lawfully transferred, for the Purposes established in this Privacy Notice, to:

1. The subsidiary, affiliated, related, parent and/or controlled companies of Arias y Asociados, S.C. within national territory or abroad,
2. Processors in matters of customer service and studies related to the provision of the products and services of Arias y Asociados, S.C.;
3. The transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the Data Subject, by Arias y Asociados, S.C. and a third party;
4. The transfer is necessary or legally required to safeguard a public interest, or for the administration or procurement of justice;
5. The transfer is required for the maintenance or fulfillment of a legal relationship between Arias y Asociados, S.C. and the Data Subject; and
6. Third parties such as marketing agencies that participate with Arias y Asociados, S.C. in order to offer its products and services under the terms established by the applicable regulations on Personal Data.

VIII. ARCO Rights

Data Subjects whose Personal Data is held by Arias y Asociados, S.C. may, at any time, exercise the rights of access, cancellation, rectification and opposition (ARCO rights).

In order to exercise ARCO rights, the Data Subject must submit a request meeting the requirements detailed below: (i) the name and address or email address of the Data Subject, to communicate the response to the request; (ii) the documents that prove the identity of the Data Subject or, where applicable, the legal representation of the person acting on their behalf; (iii) the clear and precise description of the Personal Data with respect to which the Data Subject seeks to exercise any of the aforementioned rights; (iv) any other element or document that facilitates locating the Data Subject's Personal Data; (v) clearly specifying whether the request is for access, rectification, cancellation or opposition; (vi) the reason for the request; and (vii) the modifications to be made if the request is for the rectification of Personal Data.

This request must be sent to Arias y Asociados, S.C. by any of the following means:

• By email.
• By postal mail.
• In person at the offices of Arias y Asociados, S.C.
• Through the website www.ariasyasociados.com

The procedure that Arias y Asociados, S.C. will follow once it has received the request is as follows:

It will inform you, within a maximum period of 20 (twenty) calendar days counted from the date on which it received the request, of the determination adopted and, if the request proves to be admissible, it will be carried out within the 15 (fifteen) calendar days following the date on which its admissibility is communicated.

You are informed that Arias y Asociados, S.C. may extend the aforementioned periods when the particularities of the case so warrant. This will be notified to the Data Subject by the same means by which the request was made.

Arias y Asociados, S.C. may deny access, rectification, cancellation or opposition to the processing of the data in the following cases:

1. When the applicant is not the owner of the personal data, or the legal representative is not duly accredited to act as such;
2. When the applicant's personal data is not found in its database;
3. When the rights of a third party are harmed;
4. When there is a legal impediment, or a resolution of a competent authority that restricts access to the personal data or does not allow its rectification, cancellation or opposition;
5. When the rectification, cancellation or opposition has previously been carried out.

IX. Collection of information by third parties

The Portal www.ariasyasociados.com contains links to other sites whose information practices may differ from those of the Portal.

If you visit other sites, it is the Data Subject's responsibility to consult the privacy conditions of those sites. Arias y Asociados, S.C. shall in no case and under no circumstance be responsible for the Processing that sites other than the Portal give to the User's Personal Data.

X. Updates to the notice

Arias y Asociados, S.C. reserves the right to modify this Privacy Policy in order to adapt it to legislative or case-law developments, as well as to industry practices. In such cases, Arias y Asociados, S.C. will announce on the Portal the changes introduced with reasonable advance notice before they are put into practice.

XI. Contact

If you have questions or suggestions, contact the Corporate Privacy Officer or our Personal Data Officer, who have been specially designated by Arias y Asociados, S.C. to handle requests related to the processing of Personal Data.

arias@ariasyasociados.com

Last updated: September 4, 2023