PRIVACY NOTICE CIASA COMERCIAL S.A. DE C.V.

At CIASA COMERCIAL S.A. de C.V., we are convinced that one of our greatest commitments to our clients is to apply privacy guidelines, policies, procedures and programs to protect your information. Consequently, regardless of the State or Country where you entrust us with your kind preference, there will always be the assurance that when choosing any of our services and products, your personal data will be protected through the application of technical, physical and administrative measures.

Due to the above and bearing in mind that on July 5, 2010, the Federal Law on Protection of Personal Data Held by Private Parties was published in the Official Gazette of the Federation, which is available to you on the website of the Honorable Chamber of Deputies (www.diputados.gob.mx), and whose provisions helped us to continue with our vision and to perfect the objective of protecting your personal data.

Therefore, we allow ourselves to inform you that in compliance with our “Privacy Program” and the Law, the personal data that we obtain by virtue of the operations that you request or celebrate with CIASA COMERCIAL S.A. de C.V, will be treated confidentially through the systems and schemes provided for such purposes.

RESPONSIBLE FOR THE TREATMENT OF YOUR PERSONAL DATA:

The person responsible for the processing of your personal data that you entrust to us in order to contract services or obtain products from “CIASA COMERCIAL S.A. de C.V ”, who collects them to meet your request, to carry out any commercial activity. Therefore, your tacit or express authorization will be requested to collect your personal data necessary to formalize the contracting of services and products.

ADDRESS OF THE RESPONSIBLE:

For the purposes of this privacy notice, CIASA COMERCIAL S.A. de C.V sign as your address located at Agustín Yáñez 2054, Moderna, 44100, Guadalajara, Jalisco.

WHAT PERSONAL DATA MAY BE COLLECTED AND PROCESSED:

The information that will be collected will consist exclusively of all the personal data necessary to meet your request for a product or service, to formalize your contract, as well as to carry out activities, such as: (i) identification data (including those derived from their own physical characteristics); (ii) contact details; (iii) patrimonial data; (iv) financial data; (v) labor data and in turn it is authorized for any investigations and actions that are considered necessary, in order to verify through any third party, agency or authority, the veracity of the data that were provided to them.

PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA:

The information collected will be used to meet your request for a product or service, to formalize and register your contract, or to maintain and complete the legal relationship that is generated. Likewise, your personal data may be used for: (i) marketing, advertising and commercial prospecting; (ii) offer you, where appropriate, other products of its own or of any of its affiliates, subsidiaries, holding companies, associates, commission agents or member companies CIASA COMERCIAL S.A. DE C.V .; (iii) send you promotions of other goods or services related to the aforementioned products; (iv) make your knowledge known or invite you to participate in our non-profit activities that aim to promote new products (v) allow you access to any of the properties in which its offices or branches are located, whenever it is essential to the purposes of the product purchased or service contracted in compliance with the legal relationship that gave rise to.

TRANSFER OF PERSONAL DATA:

CIASA COMERCIAL S.A. DE C.V. or any of its affiliates, subsidiaries, holding companies, associates, commission agents or member companies may transfer their personal data to Mexican or foreign third parties when the transfer: (i) is provided for in a Law or Treaty to which Mexico is a party; (ii) are made to holding companies, subsidiaries or affiliates under the common control of CIASA COMERCIAL S.A. DE C.V., to a parent company or to any company of the same group of managers that operate under the same internal processes and policies, as well as its associates; (iii) is necessary by virtue of a contract entered into or to be entered into in the interest of the owner, by CIASA COMERCIAL S.A. DE C.V. and / or a third party; (iv) is necessary or legally required for the safeguarding of a public interest, or for the administration or administration of justice; (v) is accurate for the recognition, exercise or defense of a right in a judicial process; and, (vi) it is necessary for the maintenance or fulfillment of a legal relationship between CIASA COMERCIAL S.A. DE C.V. and the title headline.

REVOCATION OF CONSENT:

You may revoke your consent and oppose the processing of your personal data for purposes that are not essential for the legal relationship that gave rise to the product or service that you had contracted or requested, indicating it in the box called “Authorization of use of information” content in the request for the product or service that you subscribe with CIASA COMERCIAL SA DE C.V. On the other hand, to carry out said revocation at a time after the formalization of the product or service, you may request our Call Center or go to any branch to obtain the respective format, through which we will exclude it, within a period of 30 calendar days from the receipt of said format, of our campaigns for marketing, advertising or commercial prospecting purposes, after proof of your identity or, where appropriate, that of your legal representative, which will proceed without the need to comply with any additional requirement and, therefore, you will not have to come later for any answer.

ARCO RIGHTS:

You or your duly accredited legal representative may limit the use or disclosure of your personal data; as well as to exercise, when appropriate, the rights of Access, Rectification, Cancellation or Opposition that the Law provides through the format provided for such purposes, which must be accompanied by the documents that prove the identity of the holder (official identification with photograph) or, where appropriate, the legal representation of the owner in terms of common legislation, and present it at any branch, which will channel your request to the personal data department and he will process the requests of the owners for the exercise of ARCO rights within a period of no more than 20 business days from receipt. It is important to mention that the exercise of any of the aforementioned rights is not a prerequisite or prevents the exercise of another right. The response to the requests that meet the aforementioned requirements may be notified to the promoter via email (when the email address is provided) from the address ecommerce@ciasamexico.com, by messaging or by fax, in addition to being available at any of the branches. Also, we inform you that you have the right to initiate a Rights Protection Procedure before the Federal Institute for Access to Information and Data Protection (www.ifai.gob.mx) within 15 business days following the date on that you receive the response from CIASA COMERCIAL SA DE CV, or as of the expiration of the period of 20 business days from the date of receipt of your request to exercise your rights and you have not received any response. Any modification to this notice will be notified to you through any of the following means: a written communication sent to your home address or delivered to any CIASA COMERCIAL S.A. branch. DE C.V .; a message sent to your email or mobile phone; a message made known through www.ciasamexico.com or any other electronic medium or in newspapers with wide circulation. In the event that you are a provider, a natural or legal person or a proxy or shareholder of a provider, the Privacy Notice contained herein will be equally applicable, being that the treatment of your information will be limited according to the purposes established in the means by which the existing legal relationship has been formalized. Internet page address: www.ciasamexico.com Email: ecommerce@ciasamexico.com. (Requests for the exercise of ARCO rights that are NOT sent to this electronic address will not be attended to).