PRIVACY POLICY

At VINSSA, you are our top priority. In alignment with our values, we are committed to protecting your personal data, privacy, and trust. To uphold this commitment, we continually review and enhance our physical and electronic security measures to safeguard your information.

For this reason, we would like to share our privacy policy with you, detailing how we protect the integrity, confidentiality, and security of your personal data in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (the Law), published in the Official Federal Gazette on July 5, 2010. You may access this privacy notice at any time on our website: www.vinssa.com , and you can review the full text of the Law through the Federal Government's official portal, managed by the Ministry of the Interior, at www.ordenjuridico.gob.mx.
Additionally, you have the right to limit the use or disclosure of your personal data at any time by exercising your rights of access, rectification, cancellation, or opposition, as stipulated by the Law. To do so, you must submit a written request. If you do not express any objections after reviewing this notice, it will be understood that you, as the data subject, have implicitly consented to the processing of your personal data under the terms outlined herein.

1. Identity of the data controller:
VINSSA is the entity responsible for processing your personal data as outlined in this privacy notice.

2. VINSSA's Address
For the purposes of this privacy notice, our registered address is: Blvd. Vito Alessio Robles No. 5830, Saltillo, Coahuila, Mexico, C.P. 25107.

3. Collection and use of personal data:
We collect and process personal data necessary for the proper execution of our services and for fulfilling legal and corporate obligations. Your personal data may be collected directly from you in person, through electronic, optical, auditory, visual, or other technological means, or from legally authorized third-party sources. The data we collect may include, but is not limited to:

• Identification and Contact Information: Full name, address, home phone, mobile and work phone, marital status, signature, electronic signature, email, username and password, IP address, tax ID (R.F.C.), personal ID number (C.U.R.P.), place and date of birth, age, family members' names, dependents, beneficiaries, and their addresses.
• Employment Information: Occupation, job title, department, work address, phone number, email, work references, personal references, and business references.
• Financial and Asset Information: Movable and immovable property, credit history, income and expenses, bank accounts, insurance, pension funds, bonds, and contracted services

4. Purpose of Personal data processing:
Your personal data, including sensitive data where applicable, will be processed for the following purposes:

• Carrying out all activities related to the services we provide.
• Conducting surveys and implementing analytical and statistical processes related to our operations and services.
• Complying with legal requests from competent authorities
• Performing any necessary or auxiliary activities required to fulfill the above purposes
• Conducting investigations and reviews in response to complaints or claims.
• Contacting you regarding matters related to the provided service, your personal data, or this privacy notice.

The processing of your personal data will be strictly limited to:

• The fulfillment of the purposes outlined in this privacy notice.
• Other purposes that are compatible or analogous to those stated in this notice, without requiring additional consent from you.

5. Data transfers:
To achieve the purposes stated in this privacy notice, we may transfer your personal data within and outside of Mexico. We are committed to ensuring that all necessary legal safeguards are in place for such transfers and that our privacy notice is adhered to by us and our business partners. By accepting this privacy notice, you acknowledge and agree that:

• Your personal data may be transferred to third parties, both domestic and international, outside of VINSSA, who will be informed of this privacy notice and the purposes for which your data has been collected.
• The receiving third party will assume the same obligations as VINSSA regarding data protection, ensuring that your data is processed in accordance with this privacy notice.

6. Personal data department:
VINSSA has designated a Personal Data Department to address and process requests regarding the exercise of ARCO rights (Access, Rectification, Cancellation, and Opposition) in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties.

7. Procedure to exercise ARCO Rights (Access, Rectification, Cancellation, and Opposition).
Starting January 6, 2012, you or your legally authorized representative may exercise your ARCO rights by submitting a written request.

8. Options to limit the use or disclosure of data and revoke consent:
You may:
Request limitations on the use or disclosure of your personal data; Revoke your consent for the processing of your personal data. However, it is important to note that data processing may continue in cases where exceptions under the Law apply.

9. Cookies and online security:
By accessing our website, you agree to receive files sent by VINSSA’s servers. These "cookies" are data files stored on your computer’s hard drive, containing information such as your user identification or navigation history.

10. Modifications to the privacy notice:
VINSSA reserves the right to update or modify this privacy notice at any time in response to legal, regulatory, or policy changes, as well as market practices or other factors. Any changes will be published on our website: www.vinssa.com.

11.- How to exercise your ARCO Rights
To exercise your ARCO rights, you may submit a written request to info@vinssa.com or directly to our registered address. Your request must include:

• Your full name and contact details or an alternative means to receive a response.
• Documents proving your identity or, where applicable, the legal representation of the requesting party.
• A clear and precise description of the personal data you wish to access, rectify, cancel, or oppose.
• En el caso de solicitudes de rectificación de Datos Personales, el Titular deberá indicar, además de lo señalado en esta sección, las modificaciones a realizarse y aportar la documentación que sustente su petición, y;
• In the case of a rectification request, the specific changes you wish to make, along with supporting documentation.