By accessing this internet page (the “Site”), you accept the terms of the Privacy Notice and become the “Holder.”

In accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (the “Law”), the Regulation of the Federal Law on the Protection of Personal Data Held by Private Parties (the “Regulation”), and the Privacy Notice Guidelines published by the Ministry of Economy in the Official Gazette of the Federation (the “Guidelines”), we ask you as the Holder (a term defined later on) to read the privacy notice detailed below:

Comprehensive Privacy Notice GENERAL INFORMATION

Last update date: April 28, 2021

Holder of Personal Data (the “Holder”):

An individual who can be identified directly or indirectly by any information provided, either (i) directly, (ii) indirectly, or (iii) personally, to LIP Innovación, S.A.P.I. de C.V.

Personal Data:

Any information concerning the Holder, expressed in numerical, alphabetical, graphic, photographic, acoustic, or any other form.

Responsible for Holder’s Data:

LIP Innovación, S.A.P.I. de C.V. (the “Company”) is responsible for the use and protection of the Holder’s Personal Data.

Responsible’s Address:

Paseo de los Tamarindos #400 Torre A – Piso 21, Oficina A.

Col. Bosques de las Lomas

Del. Cuajimalpa de Morelos

C.P. 05120.

Processing:

The Company is responsible for obtaining and/or collecting the Holder’s Personal Data, as well as for the use, protection, storage, or disclosure given to them. The Holder’s Personal Data will be collected, stored, processed, organized, analyzed, and transferred by the Company under the terms of this notice.

PURPOSES AND USES OF PERSONAL DATA

The Company will use the Personal Data collected and/or obtained from the Holder for the following purposes necessary for the requested service and/or product:

Primary Purposes

(i) Fulfilling the Company’s obligations arising from the legal relationship between the Holder and the Company,

(ii) Managing and creating records and a directory of the Company.

Additionally, the Company will use the Holder’s Personal Data for the following secondary purposes that are not necessary for the requested service and/or product but allow the Company to provide better service:

Secondary Purposes

(i) Conducting commercial evaluations,

(ii) Conducting satisfaction surveys, and

(iii) Sending advertising and news to the Holder about new services and/or products available.

Within 5 (five) business days following the receipt of this privacy notice, you can express your refusal for the Processing of your personal data for secondary purposes by submitting a Request (a term defined later).

PERSONAL DATA COLLECTED

To carry out the Primary and, where applicable, Secondary Purposes, the Company will obtain and/or collect Identification Personal Data.

Personal Data include:

Full name, date of birth, email address, address, federal taxpayer registry, type of browser, operating system, reference page, path through the page, ISP domain, browsing schedule, time spent on the Site, sections consulted, and previously accessed internet pages, phone numbers, social security numbers, federal taxpayer registry, official photo identification, marital status, nationality, for which the Holder gives the Company express consent for Processing.

DATA COLLECTION

The Holder’s Personal Data may be collected and/or obtained in writing, verbally, or graphically, by electronic, telephone, or electromagnetic means.

Cookies and Web Beacons

The Site uses Cookies, Web Beacons, and other technologies through which it is possible to (i) monitor the behavior of the Holder as a user of the Site, (ii) provide the Holder with better service and a user experience while browsing the Site, (iii) offer new products and services based on the Holder’s preferences.

The Personal Data obtained from these tracking technologies include: browsing schedule, time spent on the Site, sections consulted, and previously accessed internet pages. On the other hand, information contained in the hard drive cannot be extracted through a Cookie. Cookies usually have a temporary duration, and, if necessary, the Holder can configure their browser to accept or reject the cookies received and/or notify them of their receipt.

To disable Cookies and Web Beacons, follow these instructions:

On a PC: Open the internet browser, go to the “Tools” menu, enter “Internet Options,” choose the “Privacy” tab, move the setting cursor to “Block all cookies.”

On a Mac: Open the internet application, go to “Preferences,” choose the “Security” option, choose “Never” in the “Accept cookies” option.

DATA SECURITY

The Company will implement the necessary security measures to ensure the protection of your personal data to prevent their damage, loss, alteration, destruction, or unauthorized use, access, or processing, in accordance with the Law, the Regulation, and the Guidelines.

Only personnel designated and authorized by the Company may participate in the Processing of your personal data. This personnel is prohibited from providing access to unauthorized persons and using your personal data for purposes other than those established and accepted in this notice.

RETENTION PERIOD OF PERSONAL DATA

Once the Primary Purposes of the Processing have been fulfilled, and when there is no legal or regulatory provision stating otherwise, the Company will proceed to cancel the Data in its possession after blocking them, for later deletion, as established by the Law.

TRANSMISSION OF PERSONAL DATA

The Holder’s Personal Data may be transferred and processed with affiliated companies and other companies in the same commercial group, clients, and suppliers of the Company.

If you do not express your opposition to the transfer of Personal Data, it will be understood that, upon signing this Privacy Notice, the Holder has given the Company express consent for its transmission.

CHANGES TO THE PRIVACY NOTICE

This privacy notice may undergo modifications, changes, or updates due to new legal requirements, the Company’s own needs, or other reasons. The Company undertakes to keep the Holder informed of the changes that this privacy notice may undergo through the Site.

The procedure through which notifications about changes or updates to this privacy notice will be made is through a notice when the Holder accesses the Site.

HOLDER’S RIGHTS REGARDING PERSONAL DATA

The Holder can revoke the consent that, if applicable, they have granted to the Company for the Processing of their Personal Data. However, it is important for the Holder to consider that, in some cases, the Company may not be able to attend to their Request (a term defined later) or conclude the use immediately, as it is possible that the Company may need to continue Processing the Holder’s Personal Data due to a legal obligation.

Likewise, the Holder should consider that, for the Primary Purposes, revoking their consent will mean that the Company cannot continue providing the services that the Holder contracted, without this constituting a breach by the Company of the obligations arising from the legal relationship between the Company and the Holder of Personal Data.

The Holder of Personal Data, through a request sent to the email address hola@lip.lat or to the Company’s address (the “Request”), may:

(i) Express their refusal to the Processing of their personal data for Secondary Purposes (as this term is defined later).

(ii) Exercise their right to access, rectify, and cancel their personal data, as well as to oppose their Processing (“ARCO Rights”).

(iii) Limit the use of their data (“Right of Limitation”).

(iv) Revoke the consent to the Processing of data granted for the referred purposes (“Right of Revocation”).

The Request must contain and include the following:

(i) The Holder’s full name and their address or any other means by which they wish to receive notifications regarding the Request.

(ii) Documents proving their identity as the Holder, through the presentation of a copy of their official identification document, having exhibited the original for verification.

(iii) A clear and precise description of the Holder’s personal data regarding which they seek to exercise any of the rights established in subparagraph a).

(iv) Any element or document that facilitates the location of the Holder’s personal data.

(v) In the specific case of a request for rectification of personal data, the Holder must indicate, in addition to what is stated in the previous subparagraphs, the modifications to be made and provide the documentation supporting their request.

The Company will respond through the means indicated by the Holder in the Request, within 20 (twenty) business days following its receipt. The Company may retain the Holder’s personal data exclusively for the purposes of the responsibilities arising from the Processing.

DOUBTS AND ADDITIONAL INFORMATION

If you have any questions about this privacy notice or any matter related to the Processing of your data under the terms of this notice or how to exercise your ARCO Rights, Limitation, and Revocation, you can contact the Privacy Department at the email address hola@lip.lat.

ACCEPTANCE OF THE PRIVACY NOTICE

I declare that I have read and understand this notice and give my Consent (as defined in the Law) for the Processing of my Identification Personal Data for Primary and Secondary Purposes, as well as for their transfer, under the terms of this notice. Likewise, I declare that by entering the Site and using it, I express my agreement with this privacy notice.

I declare that my personal data are accurate, authentic, and complete, and therefore, I acknowledge that I am solely responsible for the accuracy, truthfulness, and authenticity of my personal data. By entering the Site and using it, you express your agreement with this privacy notice.

If you believe that your right to the protection of your personal data has been violated by any conduct or omission of the Company, or if you suspect a violation of the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulation, and other applicable regulations, you may file your complaint or report with the National Institute of Transparency, Access to Information, and Protection of Personal Data (INAI). For more information, we suggest visiting their official website.