BLAUTECH SOLUTIONS, S.A. DE C.V. recognizes the importance of the legitimate, controlled, and informed processing of its clients', suppliers', and users' personal data. Therefore, we present this Privacy Notice to inform you that the collected information will be used solely for the purposes described in this document and to outline how your data will be processed. Additionally, this notice provides information on the rights you may exercise as the owner of personal data, as established by applicable legislation.

PRIVACY NOTICE

1. RESPONSIBLE ENTITY FOR PERSONAL DATA PROCESSING

BLAUTECH SOLUTIONS, S.A. DE C.V., hereinafter referred to as "The Responsible Party," declares that its physical address is located at Juan Salvador Agraz No. 97, Paragon Corporate, Office 6, Santa Fe, C.P. 05300, Cuajimalpa Borough, Mexico City.

1. PERSONAL DATA PROCESSING MANAGER

"The Responsible Party" is designated as the entity in charge of collecting personal data directly from the data owners. The assigned high-level management member is Juan José Sosa Lainfiesta, who can be contacted at the phone number (+52) 55 8525 3606 or via email at info@blautech.com.

1. PERSONAL DATA WE COLLECT

To properly fulfill the purposes outlined in this Privacy Notice, we collect information through original documents, copies, and data provided via electronic and magnetic media, optical disks, storage devices, or similar methods, as well as information disclosed orally, in writing, or electronically. The information that may be collected includes:

• Name or Business Name
• Commercial Name
• Nationality
• Federal Taxpayer Registry (RFC) or equivalent
• Address
• Fiscal Address
• Contact Person's Name
• Email(s)
• Landline Phone Number
• Mobile Phone Number
• We also use cookies and web beacons to obtain personal information such as your browser type, operating system, visited web pages, followed links, IP address, and the site you visited before accessing ours. These cookies and other technologies can be disabled or rejected when accessing our website www.blautech.com.

1. PURPOSES OF PERSONAL DATA PROCESSING

The company collects personal data without the intention of disclosure or commercial use. The data will only be used for the following purposes:

• Access control for visits to our facilities
• Fulfillment of contractual obligations
• Quotations
• Billing for services or products
• Providing information about new or restructured services
• Offering additional details about specific services
• File integration
• Providing contracted or potential services
• Notifying changes in provided or upcoming services
• Evaluating service quality
• Sending new updates, promotions, or information about services or products related to those contracted or to be contracted
• Following up on payments or collections for provided or upcoming services
• Complying with legal requirements from competent authorities

1. TRANSFER OF PERSONAL DATA

"The Responsible Party" will not transfer your personal data to third parties unless it is necessary for legal or collaborative purposes, as determined in the previous section and as specifically provided by law.

1. OPTIONS AND MEANS TO LIMIT DATA USE OR DISCLOSURE

The company has the necessary and sufficient administrative, technical, and physical security measures to protect your personal data from damage, loss, alteration, destruction, misuse, or unauthorized access. Personal data is stored in databases and computer systems with appropriate security measures to prevent information leaks. Security tools include access controls, environmental controls, intrusion prevention systems (IPS, Firewall), antivirus protection, and web filtering.

To request the limitation of the use or disclosure of your personal data, you can:
a) Send a written request to the address of the entity responsible for personal data processing.
b) Email the designated address listed above.

If you do not explicitly express opposition to "The Service Provider" using your personal data for the specified purposes or limiting such purposes, we will understand that you agree with such use or disclosure (implied consent). If you wish to limit or oppose the use and disclosure of your personal data, please notify us through the previously described methods (explicit manifestation).

1. RIGHTS TO ACCESS, RECTIFY, CANCEL, AND OBJECT (ARCO RIGHTS)

You may exercise your Access, Rectification, Cancellation, and Objection (ARCO) Rights by contacting the personal data processing manager via written request or email.

Your request must include:

• The name of the data owner and their address or other means of communication for the response.
• Documents proving their identity or, if applicable, legal representation.
• A clear and precise description of the personal data subject to the request.
• Any other information that facilitates the location of the personal data.

Additionally, the data owner must specify the required modifications and provide supporting documentation. "The Responsible Party" is not obligated to cancel personal data in cases established by law, including but not limited to:

• Data necessary for a private, social, or administrative contract.
• Legal obligations requiring data processing.
• Judicial or administrative processes linked to tax obligations, criminal investigations, or administrative sanctions.
• Data necessary to protect the legally recognized interests of the owner.
• Data required for public interest actions.

1. REVOCATION OF CONSENT FOR PERSONAL DATA PROCESSING

The data owner has the right to revoke their consent for the processing of their personal data at any time. To do so, they must send a written request to the Personal Data Manager by mail or email. The request must include at least the owner's full name, Unique Population Registry Code (CURP), phone number, and email or mailing address to receive a response.

"The Responsible Party" will have a maximum of 20 business days to process the request and inform the owner of the corresponding procedure.

1. CHANGES TO THE PRIVACY NOTICE

We reserve the right to modify or update this Privacy Notice at any time. These modifications will be made to comply with legal or jurisprudential requirements, operational, administrative, and technical needs, or market practices. Any updates will be communicated through one of the following means:

1. Notices displayed in our offices or Personnel Service modules.
2. The most recent email address provided by you.
3. Our website: www.blautech.com

We are not responsible if you do not receive the notification due to issues with your email account or data transmission over the Internet.

1. CONTACT

If you have any questions or comments regarding this Privacy Notice, please contact the responsible party via the specified email or phone number.

If you believe your personal data protection rights have been violated by our employees or actions, or if you suspect any breach of current data protection legislation, you may file a complaint with the National Institute for Transparency, Access to Information, and Personal Data Protection (INAI). For more information, visit https://home.inai.org.mx/.

Last updated: February 10, 2025