Service Provider Privacy Notice

In compliance with the provisions of the Federal Law for the Protection of Personal Data in Possession of Private Parties (hereinafter "the Law"), we wish to inform you of the following:‍

Responsible for Personal Data

GRUPO INVERSIÓN, S.A. DE C.V., (hereinafter "GIN"), indicating for the purposes of this Privacy Notice the address located at Reforma number 2608, 15th floor, Colonia Lomas Altas, Delegación Miguel Hidalgo, Postal Code 11950, Mexico City, will be responsible for the Personal Data provided by the individuals to whom such data corresponds (hereinafter "the Data Subject" or "the Data Subjects" indistinctly).

2. Personal Data Requested from the Data Subject

For the purposes indicated in this Privacy Notice, GIN may collect the personal data of the Data Subject such as: name (official identification), address, Federal Taxpayers Registry (RFC), bank account number, and occupation or professional activity (hereinafter and as a whole the Personal Data) in any of the following ways: i) when the Data Subject provides them personally or directly, ii) when GIN obtains them indirectly and/or iii) when they are obtained by GIN through the sources permitted by law.

In terms of the provisions of Article 14 of the Regulations of the Law, when GIN does not inform the Data Controllers of this Privacy Notice directly or personally, but indirectly, the Data Controllers have a period of five (5) business days from the date the Privacy Notice was made available to them to express their opposition to the processing of their Personal Data intended to be used by GIN for purposes not necessary to fulfill a legal relationship with the latter, opposition that must be expressed in accordance with the provisions of section five (5) of this Privacy Notice, since, in the event that the Data Controllers do not express their opposition, it will be understood that they give their consent to GIN.

It is the responsibility of the Data Subject to ensure that the data provided personally or directly to GIN is accurate and complete, as well as to notify GIN of any changes to such data in order to comply with the obligation to keep the information updated.

3. Purposes for which Personal Data is Collected

The Personal Data information collected by GIN from the Data Subject will be used as described below: i) for the fulfillment of the contracts entered into by GIN with the Data Subject (hereinafter the Contracts), ii) for the identification of the Data Subject, iii) for the administration of the Contracts and iv) for updating the data of the Data Subject, purposes that are necessary to fulfill the obligations arising from the legal relationship that GIN has with the Data Subject.

In relation to the Personal Data of those Data Subjects who in the past provided their data to GIN and who currently no longer have a legal relationship with the latter, as well as those Data Subjects who intended or intend to have a legal relationship and this is not perfected, are informed that GIN only keeps their Personal Data in accordance with the provisions of Article 25 of the Law, that is, during the blocking period established in said legal order, so that, once this blocking period has elapsed, their Personal Data will be deleted.

4. Temporary, Remittances and Transfers

The temporality of the handling of the Personal Data of the Holder, will depend on the relationship that has been celebrated with GIN, as well as the obligations required by the current legislation and the competent authorities.

The information provided to GIN will be safeguarded, preserved and protected by the latter in accordance with the provisions of current legislation in order to maintain the confidentiality of such information.

In accordance with the provisions of the Law, GIN will give access to the Personal Data of the Data Subject (through referrals) to those persons who have the character of Data Processors such as service providers, business partners or third parties, who have a legal relationship with GIN, that derived from such legal relationship need to know the information and assume the commitment to keep it under a strict order of confidentiality and security, also acknowledging to know the terms and conditions of this Privacy Notice and agreeing to comply with them.

In the event that the Personal Data stored are required by an authority of any nature or must be delivered to the latter in accordance with the legislation in force, such data will be made available to it in strict compliance with the Law, a transfer that does not require the consent of the Holder in accordance with the provisions of article 37 of said legal ordinance.

5. Rights of Access, Rectification, Cancellation, Opposition, Revocation and Limitation of Personal Data

Data subjects shall have the right to request GIN to access, rectify, revoke, cancel or oppose, as well as to limit the use or disclosure of their data, by means of:

Written request addressed to the Personal Data Department of GRUPO INVERSIÓN, S.A. DE C.V., at the following address: Reforma número 2608 piso 15, Colonia Lomas Altas, Delegación Miguel Hidalgo, Código Postal 11950, México Distrito Federal, from 10:00 a.m. to 5:00 p.m., on working days, or
Request made to e-mail: administración-gin@ginversion.com.mx.

GIN will respond to the requests of the Holder of the information, as long as any of the exceptions contained in the Law are not met, and the applicant complies with the provisions of Article 29 of said legal ordinance, which establishes the requirements that the requests submitted by the Holders must contain.

In order for GIN to process a Data Subject's request for access, rectification, revocation, cancellation, opposition and/or limitation of use or disclosure of his or her data, the Data Subject must attach the following information and documentation to his or her request:

Name of the Data Subject and address or other means for GIN to communicate the response to your request.
The documents proving your identity or your personality in case of legal representation of the Holder (official identification of the holder or of the legal representative and power of attorney of the latter).
The clear and precise description of the Personal Data with respect to which the right of access, rectification, revocation, cancellation, opposition, limitation of use or disclosure is sought to be exercised, as well as any other data or document that may facilitate the location of the Personal Data.

GIN will respond to a Data Subject's request for access, rectification, revocation, cancellation, opposition and/or limitation of use or disclosure of his/her data within the terms established by the Law, that is, within twenty (20) days after receiving the request from the Data Subject and in case the request is accepted, it will be implemented within 15 (fifteen) days after the response is communicated to the Data Subject, terms that may be extended by GIN in accordance with the provisions of Article 32 of the Law.

The obligation of access to information shall be deemed fulfilled by GIN when, in case it is requested by the Data Subject, simple copies of his/her Personal Data are made available to the latter at GIN's domicile within 15 (fifteen) business days after the response to his/her request is communicated to the Data Subject or through any of the means established in Article 33 of the Law, which shall be notified to the Data Subject in the response to his/her request.

6. Modifications to the Privacy Notice

In the event that GIN, requires to use your Personal Data for purposes other than those agreed or agreed upon in the legal relationship it has with the Data Controllers and in this Privacy Notice or requires from the Data Controllers Personal Data other than those indicated in this Privacy Notice or intends to make transfers other than those indicated in this document, GIN will notify the Data Controllers in writing, by telephone, electronically, or by any optical, sound, visual or other means that technology allows now or in the future, explaining the new uses of such information in order to explain the new uses of such information, will notify the Data Subjects in writing, by telephone, electronically, or by any optical, sonorous, visual or other means that technology allows now or in the future, explaining the new uses it intends to give to such information in order to obtain their authorization. With this Privacy Notice, the Owners of the information are duly informed of the data collected from them and for what purposes as well as the fact that the Privacy Notice may be consulted at any time on the website of GIN www.ginversion.com.mx.

GIN reserves the right to modify this Privacy Notice to adapt it to new legislation or jurisprudence as well as business practices and criteria of authority. In such cases, the changes will be announced on the website www.ginversion.com.mx.

This Privacy Notice, as well as the general handling of the Law by GIN, is governed by the legislation in force and applicable in the United Mexican States, any controversy that may arise due to its application must be ventilated before the Federal Institute of Access to Information and Data Protection (IFAI) or before the competent Jurisdictional Bodies in Mexico City, Federal District.

Last updated August 28, 2013.

I consent and authorize my Personal Data to be processed in accordance with the terms and conditions of this Privacy Notice.

Article 3 Section III of the Federal Law for the Protection of Personal Data in Possession of Private Parties establishes that Blocking is: The identification and preservation of personal data once the purpose for which they were collected has been fulfilled, for the sole purpose of determining possible liabilities in relation to their processing, until the legal or contractual statute of limitations period. During this period, personal data may not be processed and after this period, it will be cancelled in the corresponding database.

Article 3 of the Federal Law for the Protection of Personal Data in Possession of Individuals establishes that the Processor is the individual or legal entity that alone or jointly with others processes personal data on behalf of the Controller.