In compliance with the provisions of Articles 15 and 16 of the Federal Law on Protection of Personal Data Held by Private Parties, we inform you that Aramburo & Asociados, S.C., Carlos Aramburo Romero, and/or Notary Public No. 3 of the State of Baja California Sur are jointly responsible for the processing of your personal data, as we jointly participate in the processes of real estate mediation, administrative services, and operations (hereinafter, “The Notary” or “Responsible Party”), located at Isabel La Católica No. 2100-1, corner of Allende, Colonia Centro, Postal Code 23000, La Paz, Baja California Sur, with office hours from Monday to Friday (only business days) from 9:00 AM to 5:00 PM and Saturday from 9:00 AM to 1:00 PM. We are responsible for processing your personal data, ensuring its use as well as its confidentiality and protection through the necessary and sufficient measures for its safeguarding.

In compliance with the Federal Law on Protection of Personal Data Held by Private Parties (the “Law”), its regulations, and the principles of legality, purpose, loyalty, consent, quality, proportionality, information, and responsibility, we make this Privacy Notice available to you so that you are informed about the conditions and generalities of the collection and processing of your data:

1. Data We Collect and Process To comply with a potential employment relationship or an existing employment relationship, we collect and process, among others:

Personal Data:

• Identification Data: Full name, complete address (street, number, neighborhood, city, state, and postal code), personal and/or mobile phone numbers, personal email address, marital status, date of birth, nationality, age, Federal Taxpayer Registry (RFC) key, Social Security number, Unique Population Registry Code (CURP), and social media profiles such as LinkedIn, Instagram, or Facebook.
• Emergency Contact Information: Name, phone or mobile number, email, position, and workplace of designated emergency contacts (spouse, parents, children, or other close relatives).
• Work History: Position and functions previously held at other organizations, as well as contact details of individuals from whom we may request professional references.
• Academic Background: Information related to your academic background and profession, including certificates, professional licenses, and academic records.
• Migration and Travel: Information regarding your travel within the country, if necessary to comply with legal or employment requirements, such as work permits, visas, or residence permits.

Sensitive Data:

• Biometric Data: The Responsible Party will collect employees’ fingerprints to manage access to the Responsible Party’s facilities and systems. This data processing is intended to ensure the security, confidentiality, and appropriate safeguarding of Personal and Sensitive Data in compliance with applicable legal provisions.
• Financial and Property Data: The Responsible Party will collect bank account numbers, interbank CLABE numbers, and the corresponding bank name to make deposits of compensation owed to employees, in accordance with the terms of their employment contract.

2. Purposes of Processing Your Personal Data: Your data will be processed for the following purposes:

Purposes that do not require the holder’s authorization:

1. Identification: We collect and process the necessary personal data to identify the candidate or employee, including verification of their academic and work history, to fulfill administrative and employment requirements.
2. Management of Employment Relationship: Personal data will be used to manage the hiring process, development, and termination of the employment relationship. This includes drafting employment contracts, task assignments, performance monitoring, compliance with legal and fiscal obligations, and payment of salaries and benefits.
3. Personnel and Security Management: Personal data will be used for personnel management, including the assignment of work tools, access to facilities and computing systems, and to ensure the security of the Notary’s premises.
4. Compliance with Legal and Contractual Obligations: The Responsible Party may collect and process personal data to comply with employment and fiscal obligations, such as those contained in the Federal Labor Law, Social Security Law, National Workers Housing Fund Law, and Income Tax Law, among others.
5. Compliance with Authorities’ Requests: Personal data will be processed to comply with resolutions, requests, or mandates from judicial, fiscal, and administrative authorities, as well as to establish or participate in judicial, administrative, or fiscal procedures in which the Notary must intervene.

Purposes that require the holder’s authorization:

1. Transfer of Personal Data to Third Parties: Personal data collected may be processed and transferred to third parties, such as external professionals (accountants, trainers, etc.), to facilitate the compliance with legal obligations derived from the employment relationship.
2. Training and Performance Evaluation: Personal data may also be processed for training, development, performance evaluation, granting employment benefits, and work-related contact purposes.

3. How can you limit the use or disclosure of your personal information?

You can limit the use and disclosure of your personal information through the following means:

1. By submitting your request personally at our address to the Department of Personal Data at Aramburo & Asociados, S.C., Carlos Aramburo Romero and/or the Notary Public No. 3 of Baja California Sur.
2. By sending an email to: info@notaria3bcs.com
3. By calling the phone number (612) 1752700

4. How can you access, rectify, cancel, or oppose the processing of your personal data?

You can exercise your rights of access, rectification, cancellation, opposition, or revoke consent in accordance with the procedures for exercising your ARCO Rights, dissociation, limitation of disclosure, and revocation of consent described below.

In accordance with the Law, if you wish to revoke the processing of your personal data and there is a contractual relationship between us and the Data Subject, this may make it impossible to continue the relationship, without retroactive effects. Once the data has been processed and included in public documents under our responsibility, in accordance with the applicable legal provisions, no retroactive effects will be given to your request. However, you have the right to prevent further processing of your data and to block it for subsequent deletion from our systems after the retention period.

Procedures for exercising your ARCO Rights, dissociation, limitation of disclosure, and revocation of consent:

You or your legal representative may exercise any of the rights of access, rectification, cancellation, or opposition (hereinafter, “ARCO Rights”), as well as request dissociation, disclosure, or revocation of consent for the processing of your personal data by: (i) sending an email to info@notaria3bcs.com; (ii) at our address; or (iii) calling (612) 1752700.

To process your ARCO rights and additional rights, and facilitate the search and correct location of your information, please include the following in your request:

• The subject of the message should read: “LABOR PRIVACY NOTICE: Request to exercise my ARCO rights.”
• Addressed to the Department of Personal Data at Aramburo & Asociados, S.C., Carlos Aramburo Romero, and/or Notary Public No. 3 of Baja California Sur.
• The name of the Data Subject and their email address to communicate the response to the request.
• Attach a document to prove the identity of the Data Subject or, if applicable, the legal representation.
• A clear and precise description of the personal data for which you wish to exercise any of the aforementioned rights.
• Any other element or document that may help locate the personal data.
• In the case of rectification requests, the Data Subject must specify the modifications and provide documentation to support the request.

The Department will communicate the adopted decision within a maximum period of ten (10) business days from the date the request was received, so that, if the request is approved, it can be implemented within the following fifteen (15) business days. The response will be provided electronically to the email specified in the request.

In case you do not have an email, the response will be available at our address during the specified business hours and in accordance with the times established in this section.

5. Data Retention Period

The retention period for the collected personal data will depend on the duration of the employment relationship with the Responsible Party and for the strictly necessary time to fulfill the purposes for which the data was collected, in accordance with the established deadlines by current legislation.

Once the employment relationship has ended, and as long as there is no legal or contractual obligation requiring its retention, the data will be blocked to prevent further processing, and will remain available to the competent authorities for a period of up to 5 years from the termination of the employment relationship, in accordance with applicable legal provisions.

After this period, the data will be securely and definitively deleted, in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and its regulations.

In the event that personal data must be retained to comply with a legal or contractual obligation, the Notary ensures that the information will be safeguarded, kept, and protected in accordance with current legislation, ensuring the confidentiality of such information and in compliance with the applicable Protection Measures. During this period, the processing of the data will be limited exclusively to fulfilling the corresponding legal or contractual obligations.

6. Transfer of Personal Data

Your personal data will be processed only by authorized personnel from the Notary and will not be transferred to third parties, except in the following cases:

In all cases mentioned, the third parties receiving the information are committed to keeping it confidential and secure. These third parties acknowledge and agree to comply with the terms and conditions established in this Privacy Notice.

7. Modifications to the Privacy Notice

This Privacy Notice may be modified at any time. If modifications occur, they will be shared via email from the specified address and published at the entrance of our office.

We recommend periodically reviewing this notice to stay informed about how we handle your personal data.

8. Protection Measures

We implement reasonable administrative, technical, and physical security measures to comply with applicable legal requirements and protect your personal data to ensure the absolute security of your information.

The personnel responsible for processing your data, in compliance with the purposes, are the only individuals authorized to access your information, with prior authorization from the Responsible Party and a confidentiality agreement.

However, we are not responsible for the security of information considered public, i.e., information made available through any public media, public records, or sources accessible to the public.

9. Contact

If you have any questions or requests regarding the processing of your personal data, you can contact us at:

• Hours of Operation: Monday to Friday (only business days) from 9:00 AM to 5:00 PM and Saturday from 9:00 AM to 1:00 PM
• Email: info@notaria3bcs.com
• Phone:: (612) 1752700
• Address: Isabel La Católica No. 2100-1, corner of Allende, Colonia Centro, La Paz, Baja California Sur
• Postal Address: To Lic. Carlos Aramburo Romero.

We also have copies of this privacy notice available at our office located at Isabel La Católica No. 2100-1, corner of Allende, Colonia Centro, Postal Code 23000, La Paz, Baja California Sur, and on our website at www.notaria3bcs.com

The content of this email and its attachments is confidential. If you have received this message by mistake, please do not forward it and delete it immediately.

10. Tacit Consent

By providing your personal data, you expressly, freely, specifically, and knowingly consent to the processing of this data in accordance with the purposes and conditions described in this Privacy Notice, except for those Data and Purposes that require your express consent, obtained through electronic, telephone, or in-person means.

The Data Subject or their representative acknowledges that the data they enter and/or provide to Aramburo & Asociados, S.C., Carlos Aramburo Romero, and/or Notary Public No. 3 of the State of Baja California Sur, whether through: website, telephone, electronic, digital, and/or in-person methods, is true and accurate, and if they do not wish to provide the data, they may and must voluntarily stop doing so. Furthermore, the Data Subject or their representative agrees to be cautious with the information provided, absolving Aramburo & Asociados, S.C., Carlos Aramburo Romero, and/or Notary Public No. 3 of the State of Baja California Sur from the privacy policies of third-party service and/or product providers.

For data provided electronically (via website, email, pages, and content of Aramburo & Asociados, S.C., Carlos Aramburo Romero, and/or Notary Public No. 3 of the State of Baja California Sur), it will be understood that by entering and sending us your data, you have read this privacy notice and consent to the processing of your personal data in accordance with the terms and conditions of this Privacy Notice.

For data provided by telephone, it will be understood that by providing your data orally, you have read this privacy notice and consent to the processing of your personal data in accordance with the terms and conditions of this Privacy Notice.

For data provided in person, it will be understood that you have read this privacy notice and consent to the processing of your personal data in accordance with the terms and conditions of this Privacy Notice through your handwritten signature.

11. Express Consent

Based on Article 8 of the Federal Law on the Protection of Personal Data Held by Private Parties, by selecting the checkboxes below, I give my express, free, and informed consent for the processing of my personal data, including sensitive data, and for the transfer of the same as follows:

☐ I authorize the processing of Sensitive Data (fingerprint and financial and asset data)
☐ I authorize that my data be processed for the purpose of transferring Personal Data to external service providers.
☐ I authorize that my data be processed for the purpose of Training and Performance Evaluation.

Except for (if applicable, otherwise write “None”): __________________________