Comprehensive Privacy Notice for Users Based on the Federal Law for the Protection of Personal Data Held by Private Parties (hereinafter the Law) we inform you that ZZAS Soluciones Tecnológicas de México, SA de CV, (hereinafter ZZAS), with address at Av Insurgentes 1216 office 405, Colonia Tlacoquemecatl del Valle, Mayor's Office Benito Juárez, CP 03200, Mexico City, is responsible for the use and protection of your personal data. In this regard, we inform you the following: For what purposes will we use your data? The personal data that we will collect from you will be used for the following purposes that are necessary for the service you request:

• Attend to your doubts, complaints, clarifications, claims and suggestions;

• Keep your information to comply with the legal provisions and requirements of various authorities and / or regulatory entities;

• Identify you and corroborate your identity;

• Integrate your registered customer file for subsequent contact in the offer of any of our products;

• To carry out investigations in order to verify through third parties hired for it, dependency or authority, the veracity of the data you provide us;

• Provide, manage, operate and monitor the services and products that you requested or contracted with us; Additionally and as secondary purposes, we will use your personal information for the following purposes that are not necessary for the requested service, but that allow us to provide you with a better service:

• Prepare product use analysis, market segmentation, statistics, records and information analysis;

• Sending newsletters, news, offers, promotions, advertising (of products and services), thanks and congratulations derived from the relationship with us and the companies that are part of ZZAS;

• Purposes of image use in advertising and support media, corporate image, marketing, advertising campaigns, videos / photography and publications in any other means of communication;

• Telemarketing purposes, quality and satisfaction surveys; In case you do not want your personal data to be processed for the additional purposes indicated in this notice, from this moment you can call the following telephone number: 01 (55) 6123-5210; Or, express your refusal by sending an email to the account contacto@zzas.com.mx The refusal to use your personal data on secondary purposes may not be a reason for us to deny you the products and / or services that request or contract with us. What personal data will we use for these purposes? To carry out the purposes described in this privacy notice, we will use the following personal data:

• Personal information;

• Details of the company it represents:

• Products of your interest.

  We inform you that, in accordance with the provisions of this privacy notice, ZZAS will not request personal data considered sensitive in terms of the Federal Law on Protection of Personal Data Held by Private Parties. The processing of your personal information will be carried out based on the principles of legality, quality, consent, information, purpose, loyalty, proportionality and responsibility described or indicated in the Federal Law on Protection of Personal Data Held by Private Parties. With whom do we share your personal information and for what purposes? We inform you that in terms of the legislation on the protection of personal data, it is empowered to transfer your personal data to third parties, without obtaining your consent, when it is given only under any of the following assumptions: (i) it is provided for in a Law or Treaty to which Mexico is a party; (ii) is necessary for the prevention or medical diagnosis, the provision of health care, medical treatment or the management of health services; (iii) is made to holding companies, subsidiaries or affiliates under the common control of ZZAS and that operate under the same internal processes and policies; (iv) is necessary by virtue of a contract entered into or to be entered into in your interest, by the person in charge and a third party; (v) is necessary or legally required for the safeguarding of a public interest, or for the administration or administration of justice; (vi) is necessary for the recognition, exercise or defense of a right in a judicial process; and, (vii) is necessary for the maintenance or fulfillment of a legal relationship between ZZAS and you. Recipient of Personal Data Purpose Authorities and Regulatory Entities Comply with the information requirements requested by various authorities and / or regulatory entities. How can you access, rectify or cancel your personal data, or oppose its use? You have the right to know what personal data we have about you, what we use them for and the conditions of use that we give them (Access). Likewise, it is your right to request the correction of your personal information if it is outdated, inaccurate or incomplete (Rectification); that we delete it from our records or databases when it considers that it is not being used in accordance with the principles, duties and obligations provided for in the regulations (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights. To exercise any of your ARCO rights, you must send a written request to the email contacto@zzas.com.mx

For the request to exercise your ARCO rights, you must consider the following requirements: The requesting person must be the Owner of the data, or their legal representative, so in both cases their identity must be documented (Voting Credential, Passport, Military Card, Professional ID); In the event of the existence of a legal representative, their identity must be proven, presenting the personality with which they hold, attaching to the request the documents that prove it (Public Instrument: Power of Attorney, Declaration in Personal Appearance of the holder, or in your case, Power of Attorney signed in front of two witnesses). The name of the owner and the means to communicate the response to your request must be indicated. In addition to the documentation that proves your identity and personality, a clear and precise description of the personal data with respect to which you seek to exercise any of the aforementioned rights is required, and where appropriate, any other element or document that facilitates the location of personal data; Likewise, the documentation that is required according to the right that you wish to exercise and in the terms provided by the Law on Protection of Personal Data in Possession of Individuals must be considered. You must consider the following particularities for the exercise of each of the ARCO rights: ACCESS: Indicate the data to which you want to have access that you consider to be found in our databases. RECTIFICATION: Indicate the specific modifications to be made, attaching the documentation that supports your request. CANCELLATION: Refer the personal data that requires to be canceled. OPPOSITION: Specify the personal data on which you want to oppose your treatment and the reason for the damage we cause you when treating them. In the event that the information provided in the application is insufficient or erroneous to attend to it, or the necessary and indispensable documents for your attention are not attached, ZZAS may request the information and / or or documentation necessary to process it. Therefore, you will have 10 business days after receipt, to meet this request. In the event that the information provided in the application is sufficient, the time to issue a resolution corresponds to a period of 20 (twenty) business days from the date of receipt of your application. It is important to mention that in terms of the Law on Protection of Personal Data Held by Individuals, the aforementioned term may be extended only once for an equal period, as long as the circumstances of the case justify it. If the resolution to your request is appropriate once you have been notified, it will become effective within the following 15 business days. This period may be extended only once for an equal period, as long as the circumstances of the case justify it, which will be made known to you through the previously chosen means of contact. The mode or means of reproduction through which you can obtain the information or personal data requested through the exercise of the right of access corresponds to the issuance of simple copies, electronic documents or any other selected means. How can you revoke your consent to the use of your personal data? You can revoke the consent you have given us for the processing of your personal data. However, it is important that you bear in mind that not in all cases we will be able to respond to your request or terminate the use immediately, since it is possible that due to some legal obligation we will need to continue treating your personal data. Likewise, you must consider that, for certain purposes, the revocation of your consent will imply that we cannot continue to provide the service you requested, or the conclusion of your relationship with us. To revoke your consent you must request it by sending an email to contacto@zzas.com.mx To make the request for Revocation of Consent, it is essential that the requesting person is the Owner of the data, or their legal representative, so in In both cases, you must document your identity (Voting Credential, Passport, Military Card, Professional ID); In the event of the existence of a legal representative, their identity must be proven, presenting the personality with which they hold, attaching to the request the documents that prove it (Public Instrument: Power of Attorney, Declaration in Personal Appearance of the holder, or in your case, Power of Attorney signed in front of two witnesses). The time to issue a resolution to your request will be delivered within 20 (twenty) business days from the date of receipt of your request. How can you limit the use or disclosure of your personal information? In order for you to limit the use and disclosure of your personal information, we offer you the following means: • Register in our exclusion list called "Exclusion of Promotion and Advertising (LEX)", which aims to register your refusal to processing of your personal data for marketing and advertising purposes; by sending an email to the account: contacto@zzas.com.mx Additionally, we inform you that you have the following alternatives in charge of Government Institutions: • Request your registration through the Internet page of the Federal Consumer Prosecutor's Office (PROFECO ) whose address is profeco.gob in the Public Registry to Avoid Advertising (REPEP), a register that contains information about consumers who do not want to be bothered with unwanted advertising and that their information is not used for marketing or advertising purposes. How can you know the changes to this privacy notice? This privacy notice may undergo modifications, changes or updates derived from new legal requirements; for changes to new products or services that we offer; of our privacy practices; changes in our business model. We promise to keep you informed about the changes that this privacy notice may undergo, through our website www.zzas.com.mx The procedure through which notifications about changes and / or updates will be carried out to This privacy notice is as follows: notifying of the latest version of this privacy notice. Once the change and / or update of this is published, it will take effect the day after its publication, in the aforementioned medium.