In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter, the "LFPDPPP") and the Regulations of the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter, the "REGULATIONS"), SERA MÉXICO, S.A. DE C.V. (hereinafter, the "CONTROLLER"), commercially known as "SERA," with address at Boulevard Miguel de la Madrid No. Ext. 426, No. Interior 24, Colonia Tapeixtles, Manzanillo, Colima, C.P. 28239, and website https://sera.com.mx/, hereby informs you that it is responsible for the use, processing, and protection of your personal data, which will be processed in accordance with the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and accountability set forth in the LFPDPPP.

Purpose of the Processing of Personal Data

The personal data we collect from you will be used for the following primary purposes:

• For suppliers: to establish evaluations for supplier agreements; quotations for goods and services whose supply is required by "SERA MÉXICO, S.A. DE C.V."; provision of the goods and services supplied to us; payment of consideration; and invoicing.
• For customers: monitoring, updating, and confirming the services contracted; providing the contracted services; notifying you of changes thereto; informing you about new services; and, in general, fulfilling the contractual obligations undertaken.
• For third parties: purely identifying data necessary to control access to different premises for security purposes. If you do not wish to provide such data, "SERA MÉXICO, S.A. DE C.V." reserves the right to deny access.

If you do not want your personal data to be processed for marketing, advertising, or commercial prospecting purposes, you may express your decision at any time by sending an email to: info@sera.com.mx.

Personal Data Collected

We collect your personal information directly when you provide it to us through various means, such as your full name, email address, contact telephone number, and address. No sensitive data are collected; however, if the data subject voluntarily provides sensitive personal data or financial or patrimonial data, it will be understood that the data subject grants express consent for their processing in accordance with Article 9 of the LFPDPPP.

Transfer of Personal Data

Your personal data will not be transferred to third parties without your consent, except in the cases provided for in Article 36 of the LFPDPPP, such as when it is established in a Law or Treaty, when it is necessary for the provision of medical care, diagnosis, or health services, when it is required by competent authorities, when it is necessary to comply with a contractual relationship, when it is for the recognition or defense of a right in a judicial proceeding, or when there is an existing legal relationship with the data subject. In all of the foregoing cases, the receiving third party shall assume the same obligations as the controller pursuant to Article 35 of the LFPDPPP.

Exercise of ARCO Rights

You have the right to Access, Rectify, Cancel, or Oppose the processing of your personal data (ARCO rights). To exercise these rights, you must send a written request to the email address info@sera.com.mx, indicating your full name, attaching documents that prove your identity or legal representation, a clear description of the personal data with respect to which you seek to exercise any of these rights, and the means by which you wish to receive the response.

The controller will communicate the decision adopted within a maximum period of 20 (twenty) days counted from the date the request is received. If appropriate, it will be made effective within the 15 (fifteen) days following the date on which the response is communicated. These periods may be extended once for justified cause.

Revocation of Consent

You may revoke the consent that, where applicable, you have granted for the processing of your personal data by following the same procedure described above.

Limitation on the Use and Disclosure of Personal Data

You may limit the use or disclosure of your personal data by sending your request to info@sera.com.mx. If applicable, you will be registered in the company's own exclusion list.

Use of Cookies and Similar Technologies

Our website https://sera.com.mx/ uses cookies and other technologies to improve the user experience. You may configure your browser to reject the use of cookies. By using our website, you consent to their use as stated in this notice.

Security Measures

"SERA" has adopted the technical, administrative, and physical security measures necessary to protect your personal data, in accordance with the principles established in Articles 19 and 20 of the LFPDPPP. All data will be processed under strict standards of confidentiality and data minimization, and in accordance with the principle of proportionality provided for in Article 6, Section III of the LFPDPPP.

Competent Authority

If you believe that your right to the protection of personal data has been violated, you may contact the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI), which is the public institution responsible for safeguarding your rights and verifying compliance with the Law, in accordance with Article 38 of the LFPDPPP. Website: www.inai.org.mx.

Changes to the Privacy Notice

"SERA MÉXICO, S.A. DE C.V." reserves the right to make, at any time, modifications or updates to this Privacy Notice. Any such modifications will be made available to the public through any of the following means: visible notices at our establishments, our website and/or the Site, email sent to the most recent address we have on file, publications in newspapers of nationwide circulation, magazines, posters, audio recordings, or personally through our representatives when you visit any of our facilities.

This Privacy Notice is subject to the terms and conditions of the services provided by "SERA," which constitutes a legal agreement between the latter and its users, business partners, suppliers, or customers. If you use our services, it means that you have read, understood, and agreed to the terms set forth above. Refusal to accept this Privacy Notice will result in the inability to provide the service.