This Privacy Notice is issued in compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter the “Law”) and its regulations (the “Regulations”).

RESPONSIBLE

SEKURA CONTROLADORA, S.A.P.I. DE C.V. and/or its affiliates and/or subsidiaries (hereinafter jointly referred to as “SEKURA”) with registered office in Artz Pedregal Torre 2, Piso 7, Periférico Sur 3720, Colonia Jardines del Pedregal, Alc. Álvaro Obregón, Ciudad de México., C.P. 01900 and web site www.sekura.mx, is responsible for collecting the personal data that you provide, as well as for their use and processing and for the protection thereof. The above derived from the relationship that SEKURA has with you as a customer or supplier. Our Responsible for Data Protection is the Personal Data Department and is located at the address mentioned above; you can contact them both at the address indicated, as well as by e-mail at the following address: privacidad@sekura.mx. One of SEKURA’s priorities is to respect your privacy and keep the information and personal data it collects safe.

WHICH PERSONAL DATA WILL BE COLLECTED?

SEKURA will collect the personal data you provide through the use of any of our online services, specifically the website www.sekura.mx, in writing and/or by telephone including but not limited to: personal data, full name, male or female, date of birth, address, telephone numbers, employment data, company, title, e-mail, financial information, tax identification number (RFC), credit card data, vehicle information, vehicle identification number, etc.

The information must be true and complete. You will be responsible at all times for the data provided and in no case SEKURA will be responsible for the accuracy thereof. In order to have your data updated SEKURA may collect information from other sources such as credit bureaus.

PURPOSES OF THE PERSONAL DATA

The personal data we collect from you will be used for the following purposes that are necessary for the service you request:

• Providing assistance service

• Provision of administrative services

This Privacy Notice observes at all times the principles of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility in the processing of personal data. We inform you that, if necessary, in order to provide the Services properly, your personal data may be shared within or outside the country with the following individuals, companies, organizations or authorities, other than us, and thus support us in carrying out our professional activity:

• Companies applying for the Service

• Companies or Related Parties, affiliates and business partners

• Authorities

Likewise, we inform you that, only in the event of an assumption established in Article 37 of the Federal Law
on Protection of Personal Data Held by Private Parties, we may share your data without your consent.

USE OF TRACKING TECHNOLOGIES ON OUR WEBSITE

We inform you that we use cookies, web beacons or other technologies on our website www.sekura.mx we,
through which it is possible to monitor your behavior as an Internet user, as well as to provide you with a
better service and experience when browsing our website.

The personal data we collect through these technologies will be used for the following purposes:
• Issuance of tax receipts..
• Billing.
• Request for services, consultations or quotations, relating to the services we provide.

The personal data we obtain from these tracking technologies are as follows:
Full name, username, file number, e-mail, login passwords, date of birth and tax identification number (RFC).

Cookies are small pieces of information that are sent by a website to your browser and stored on your
computer’s hard drive and they are used to determine your preferences when you connect to services on our
sites, as well as to track certain behaviors or activities you carried out within our websites.

In some sections of our website we need that you have cookies enabled since some of the functionalities
require them to function. Cookies allow us to: a) recognize the user when he/she enters our websites and
provide you with a personalized experience, b) know the personal settings of the website specified by the user,
for example, cookies allow us to detect the user bandwidth when entering the home page of our websites,
so that we know what information type is advisable to download, c) calculate the size of our audience and
measure some traffic parameters, because each user who accesses our websites gets a cookie that is used
to determine the frequency of use and sections of the websites visited, thus reflecting their habits and
preferences, information that is useful to us to improve content, headlines and promotions for users.

Cookies also help us to track some activities, for example, in some of our online surveys, we may use cookies
to detect whether you have already filled out the survey and avoid displaying it again, if you have.However,
cookies will allow you to take advantage of the more beneficial features we offer, so we recommend
that you let them enable.

The use of cookies will not be used to identify users, except in cases where possible fraudulent activities are
investigated.

When using cookies, the “help” button on the toolbar of most browsers will tell you how to avoid accepting
new cookies, how to enable the browser to notify you when you receive a new cookie, or how to disable all
cookies.

USE OF INFORMATION

SEKURA will use the information and personal data to be able to carry out, identification and verification
purposes, contact, offer and deliver our products and services, as well as to inform about discounts, promotions,
changes in conditions and identify purchase history, to carry out internal surveys on demographic data,
interests and behavior of its users as a whole, to prevent, detect and report the acts, omissions or operations
that could favor, provide aid, assistance or cooperation in any way in the commission of the crime, among
others.

You consent to the processing of your personal data in accordance with the terms and conditions of this
Privacy Notice. You consent to the collection, use, disclosure, processing and transfer of your personal
information in accordance with the terms of this Privacy Notice.

If you provide any personal information relating to another person, you hereby state and agree that you have
obtained the appropriate legal consent from that person.

SEKURA may transfer or share your information and personal data to third parties, either national or foreign,
to subsidiaries and affiliates of SEKURA; service providers for promotion and marketing activities of our
products and services; at the request of an authority and for the fulfillment of obligations arising from a legal
relationship between the personal data holder and any of SEKURA’s companies.

In this sense, SEKURA may hire one or several third parties to support the promotion and marketing activities
of our products and services, handling and management of personal data through any means, so SEKURA
may even provide them to these third parties only to comply with the provision of the contracted services.

RESTRICTION ON USE AND DISCLOSURE OF INFORMATION

In our notification program of promotions, offers and services sent by e-mail, only SEKURA has access to the
information collected. This type of advertising is carried out by means of notices and promotional e-mails,
which will only be sent to users and those contacts registered for this purpose. You can modify this specification
at any time by sending an e-mail to privacidad@sekura.mx. In the e-mails sent, we may occasionally include
offers from third parties who are our business partners.

PROTECTION

The security and confidentiality of the data that Users provide when contracting a service or buying a product
online will be protected by a secure server under the Secure Socket Layer (SSL) protocol, so that the data
sent will be transmitted in encrypted format to ensure their safekeeping.

To verify that you are in a protected environment, make sure that an S appears in the URL bar. e.g.: httpS://.
However, despite having safer tools every day, data transmissions across the Internet are never 100% secure
or error-free. Consequently, SEKURA does not guarantee the security, accuracy or veracity of personal
information. However, it applies reasonable physical, electronic and administrative procedures to protect
personal information from accidental or unlawful destruction, accidental loss or alteration, and unauthorized
disclosure or access.

The privacy protection of children’s personal data is especially important for SEKURA, so, as soon as we
become aware of children’s personal data, their processing will be carried out in compliance with the
Seguros, Fianzas y Afinidad
guidelines and requirements provided by Law and its Regulations.
SEKURA is not responsible for the content and privacy policies of websites other than its website.

RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION AND OPPOSITION (“ARCO”)

You have the right to access, rectify and cancel your personal data at any time, as well as to oppose the
processing of such data or revoke the consent you have given for this purpose, by sending an e-mail to
privacidad@sekura.mx or by mail to SEKURA’s address, by written request including the following information:

1. The full name of the personal data holder, address and e-mail address, so that SEKURA can communicate
the answer to his/her request.
2. The documents that prove the identity and, where appropriate, the legal representation of the personal
data holder.
3. A clear and precise description of the personal data in respect of which one of the above-mentioned rights
is sought to be exercised.
4. Any other element or document that facilitates the location of personal data.
5. In the case of requests for rectification of Personal Data, the holder must specify the modifications to be
made and provide the documentation supporting his/her request.

Any of your requests will be answered to within 20 (twenty) business days.
SEKURA undertakes to comply with all the provisions of the Law and to observe at all times the principles
of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility included therein.

SEKURA will take reasonable organizational and technical security measures to prevent the loss, misuse,
alteration or unlawful disclosure of your personal information and data, which we require to be complied with
by the service providers we engage, including the services provided by SEKURA’s subsidiaries or affiliates.

REVOCATION OF CONSENT FOR THE USE OF PERSONAL DATA

You may revoke the consent you may have given us for the processing of your personal data. However, it is
important to note that NOT in all cases we will be able to conclude the use immediately, as it is possible that
due to some legal obligation, we may require further processing of your personal data. You should also note
that for certain purposes, revoking your consent shall imply that we cannot continue to provide the service
you requested, or the termination of your relationship with us.

CHANGES TO THE PRIVACY NOTICE

SEKURA has the right to modify or update this Privacy Notice at any time, in order to comply with new
legislation or jurisprudence, internal policies or new requirements for the provision or offer of our services,
in this case, the changes will be notified to you by this same means or by any other means that SEKURA
considers appropriate.

CONSENT

You consent to the processing of your personal data in accordance with the terms and conditions of this
Privacy Notice. Likewise, it is understood that you have given your consent to the transfer of your personal
data, if you do not express your objection to their transfer.

AUTHORITY

If you consider that your rights regarding the protection of personal data have been infringed, you have the
right to appeal to the corresponding authority to defend their exercise. The authority is the National Institute
of Transparency, Access to Information and Protection of Personal Data (INAI), its website is:
www.inai.org.mx

Last update date of this Privacy Notice: December 2019