Privacy Notice

PRIVACY NOTICE In accordance with the publication in the Official Gazette of the Federation (Diario Oficial de la Federación) dated March 20, 2025, which published the new law entitled the “Federal Law on the Protection of Personal Data Held by Private Parties” (LFPDPPP). 1. Identity and address of the data controller: Calleja, Antúnez y Asociados, S.C., with registered address at Av. Insurgentes Sur 1853, 6th Floor, Col. Guadalupe Inn, Álvaro Obregón Borough, C.P. 01020, Mexico City, is responsible for the processing of your personal data in accordance with the 2025 LFPDPPP, which replaced the prior legislation as of March 21, 2025, and in compliance with the constitutional reform of December 20, 2024. By virtue of that reform, personal data protection functions that previously corresponded to the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI) have been transferred to the Secretariat of Anti-Corruption and Good Government. 2. Personal data we collect We collect, directly and/or indirectly, the following information for the purposes described below (the list is illustrative and not limited to): • Full name • Business name (as applicable) • Landline and/or mobile phone • Email address • Address • Tax ID (RFC) and CURP • Academic and employment history (as applicable) • Any other information that, directly or indirectly, allows your identification 3. Purposes of processing Your personal data will be used for the following purposes: • To conduct the prospective client questionnaire and verify the existence of possible independence conflicts. • To create the client file in order to provide the requested services. • To inform you about new services, changes to contracted services, and provide relevant information of interest. • To perform internal evaluations aimed at improving the quality of our services. Important: If, in the future, we intend to use your data for purposes other than those stated above, we will expressly request new consent, in accordance with the new LFPDPPP. 3.1 Sensitive personal data We inform you that, to fulfill the purposes described above, it is NOT necessary to collect sensitive personal data from you. 4. Options and means to limit disclosure At all times, the data subject may limit the use or disclosure of their personal data. To do so, please contact us via email at aantunez@casc.lat 5. ARCO rights and how to exercise them You have the right to: • Access your personal data. • Rectify it if it is inaccurate or incomplete. • Cancel it when you consider it is no longer needed for the stated purposes or when it was obtained with consent you wish to revoke. • Object to the processing of your data, especially when it is subject to automated processing that may significantly affect your rights and freedoms. To exercise any of these rights, please send your request in writing to our address or via email to aantunez@casc.lat and confirm your request by phone at +52 55 9150 3000. 6. Security and confidentiality measures We undertake to implement appropriate security controls, procedures, and technologies to protect your personal data, ensuring confidentiality even after the legal relationship ends. However, no security system can guarantee absolute protection on the Internet. In the event of any breach of these security measures that affects or may affect the data subjects’ property or moral rights, we will inform you immediately. 7. Updates and modifications to this notice This Privacy Notice may be modified or updated in the future. If changes are made that significantly affect the purposes of processing or the way consent is obtained, we will request new consent prior to implementing such changes. 8. Institutional references For any complaint or additional information regarding the processing of your personal data, or any question related to the Federal Law on the Protection of Personal Data Held by Private Parties, and in light of the dissolution of INAI, all references to that body for personal data protection matters have been replaced by the Secretariat of Anti-Corruption and Good Government, the new competent authority.