In compliance with the various provisions set forth in the Federal Law for the Protection of Personal Data in Possession of Individuals (LFPDPPP or the Law), and the regulations derived therefrom; Desarrolladora Mexicana de Inmuebles S.A. de C.V. (hereinafter “The Company” or “Plaza Andares”, indistinctly) with address at Avenida Acueducto number 4851; 17th floor; Colonia. Real Acueducto; Zapopan, Jalisco; Postal Code 45116; makes available this Privacy Notice, stating that it is responsible for the processing of the following personal data:

1.PERSONAL DATA COLLECTED

• Identification data.
• Contact data.
• Financial or property data.

1.1 SENSITIVE PERSONAL DATA

The Company collects sensitive personal data only to attend medical emergencies.  In this sense, if you require the first aid services provided by the Company, you will also be provided with the Privacy Notice before we provide such first aid, which includes the corresponding categories of sensitive personal data collected and purposes.

If you wish to know the detailed list of the personal data collected in the previously mentioned categories, you may contact our Privacy Officer and exercise your right of access, using the mechanism provided in the section called “Means and procedure for the exercise of ARCO rights” of this Privacy Notice.

It is important to note that the personal data we collect are only obtained when you provide them directly when requesting or hiring any of our services, or through our social networks.

The aforementioned personal data will be used by The Company to carry out the following activities -called purposes in the LFPDPPP-:

2.PURPOSES

2.1 PURPOSES ORIGINATING FROM THE SERVICES PROVIDED BY THE COMPANY (originated by, and necessary for, the fulfillment of the legal relationship)

• To identify the user to whom any of our services are provided.
• To prepare quotations for the services offered by the Company.
• To prepare diverse contracts, as well as to carry out those activities necessary to guarantee the fulfillment of such contracts.
• To guarantee to the clients and visitors, the provision or contracting of the services provided by The Company.
• To carry out satisfaction surveys concerning the services provided or contracted.
• Implement surveillance measures to ensure the safety of customers and visitors during their stay in the Company premises.
• To comply with the obligations assumed by The Company, under various regulatory provisions at Federal, Local and Municipal level.

2.2 PURPOSES OTHER THAN THOSE ORIGINATING FROM THE SERVICES PROVIDED BY THE COMPANY (secondary purposes)

• Marketing, advertising or commercial prospecting purposes
• To send advertising and updates of the services provided by the Company.
• To register persons interested in the different sweepstakes held by The Company, as well as to contact the winners.
• Offer promotions and discounts on the services provided by The Company.
• To make phone calls and send emails to congratulate customers who have contracted any of the services of The Company.

To carry out our marketing, advertising or commercial prospecting purposes, we use direct contact channels (email and telephone) as well as our social media channels.

In this sense, if you wish to refusal consent for the Company to use your personal data for purposes other than those that originate with the services provided by the company (secondary purposes), you may exercise your right to oppose the processing of your personal data or revoke your consent if it has been previously provided; for this, you must use the mechanism provided in the section called “Means and procedure for the exercise of ARCO rights” of this Privacy Notice.

3.TRANSFERS MADE BY THE COMPANY

We hereby inform our customers and visitors that we only transfer personal data in the following cases:

• By order of competent authorities – In this case, we will transfer your personal data to the competent authorities, by prior written instruction.
• To carry out procedures before a Notary Public – When you hire or purchase some of our services to acquire real estate; it is necessary for us to carry out procedures before a Notary Public. In this sense, we will transfer your personal data to Notary Public 130 of Guadalajara, Jalisco; located at Reforma Street N° 2715, Fraccionamiento Circunvalación Vallarta, Guadalajara, Jalisco, C.P. 44680.

It is important to clarify that when you provide your data to other companies located within the Plaza Andares property, they are responsible for the use they make of your data; therefore, The Company limits its responsibility to those services that are inherent to the purposes described in section 2 of this Privacy Notice, as well as to the transfers mentioned in this section.

Likewise, we inform our customers and visitors that in order to carry out collection activities, we communicate their personal data to other companies that are contracted by Plaza Andares. This communication of data is denominated in the Law as REFERRAL.

If you wish to know more details about the referrals made by The Company, please contact our privacy officer at the e-mail address specified in the following item.

4.MEANS AND PROCEDURE FOR THE EXERCISE OF ARCO RIGHTS AND REVOCATION OF CONSENT

In accordance with the LFPDPPP you have the right to Access the personal data held by The Company; to Rectify or change such data when they are inaccurate or incomplete; to Cancel them or Oppose their use by The Company to carry out the purposes set forth in section 2.2 of this Privacy Notice (ARCO Rights) at any time that; or otherwise, Revoke your consent for the use of such data.

To do so, you must send a request to our Privacy Officer via email (indicate email) stating the following:

• Your desire to Access, Rectify, Oppose, Cancel or Revoke your consent for the use of your personal data;
• Describe clearly and precisely, the personal data on which you seek to exercise any of the aforementioned rights, e;
• Indicate your name and address or other means to communicate our response.

By provision of the Law, you must also attach to your request a document that proves your identity or, if applicable, your legal representation and only in case of rectification, attach a document that allows us to identify the personal data to be corrected.

As of the moment you send your request, the deadlines for responding to such request will be as follows:

• In the event that the information provided in your request is insufficient or erroneous to respond or the previously mentioned documents are not attached, The Company will require you to provide the necessary elements or documents to process you request within the following 5 (five) business days; in this case, you will have 10 (ten) business days to meet the request for information. If you do not comply with this requirement, your request will be considered as not submitted.
• If no additional information is required, The Company has 20 (twenty) business days to communicate the determination adopted in order for, if appropriate, your request to become effective within 15 (fifteen) business days after the date on which the response is communicated.

Privacy Officer Information and How to Contact the Privacy Officer.

Our privacy officer is the person within The Company who has been formally designated to promote and ensure the protection of the personal data we have in our possession, as well as to attend to the rights of the holders of such personal data.

For all matters related to the treatment and protection of your personal data, you may contact our privacy officer at the email address previously mentioned in this section.

5.OPTIONS AND MEANS THAT THE CONTROLLER OFFERS THE HOLDER TO LIMIT THE USE OR DISCLOSURE OF THEIR PERSONAL DATA.

In compliance with the provisions of the LFPDPPP, The Company has internal means to limit the use and disclosure of your personal data, as well as administrative, physical and technological security measures to ensure proper processing of your personal data.

6.USE OF MECHANISMS IN REMOTE OR LOCAL MEANS OF ELECTRONIC COMMUNICATION THAT ALLOW THE AUTOMATIC COLLECTION OF PERSONAL DATA.

The Company has the following website https://www.andares.com through which we collect personal data, using remote electronic communication mechanisms that allow us to obtain your data automatically, these mechanisms are called “cookies”. In case you require information to disable cookies from our website, please contact our Privacy Officer through the email specified in the section “Means and procedure for the exercise of ARCO rights” and including, as the subject of your email: “Information to disable cookies from the Internet Site”.

7.PROCEDURES AND MEANS BY WHICH WE WILL COMMUNICATE TO THE OWNERS ANY CHANGES TO THE PRIVACY NOTICE.

Any changes to our privacy notice will be made known to you through our Internet site https://www.andares.com/ in the “Privacy Notice” section and then by locating the Comprehensive Privacy Notice for Clients and Visitors.