SAI Privacy Notice

This Privacy Notice is issued in accordance to the provisions of the Federal Law for the Protection of Personal Data in Possession of Private Companies or Individuals (the "Personal Data Law").

Except as otherwise expressly provided, all capitalized terms in this Privacy Notice will have the meanings ascribed to them in the Personal Data Law.

1. Identity and address of the Responsible Party. The Responsible Party for the Treatment of the Personal Data is SAI Consultores, S.C. ("SAI"), residing at Prolongacion Paseo de la Reforma 600-103, Santa Fe Peña Blanca, 01210, Mexico, Distrito Federal.


2. Purposes of Personal Data Treatment. There are different purposes for the Treatment of Personal Data by SAI. The following are the main purposes for the collection of Personal Data by SAI:
   
   
   1. Regarding its employees or service providers, the purpose is to maintain an adequate internal control, as well as to make the payments derived from the labor relationship or the provision of a service, to carry out the withholding or payment of taxes, and to determine the persons that should be contacted in the event of an emergency regarding each employee or service provider.
   2. Regarding its clients, employees or officers of its clients, for the provision of legal, economic or any other kind of consulting service provided by SAI and for the collection of fees derived from them.
   3. Regarding its potential clients, employees or officers of its potential clients, in order to evaluate the possibility of providing them with the consulting services required and the corresponding quotation.
   4. Regarding its suppliers, SAI collects their Personal Data in order to request their products or services and to make the corresponding payments.
   
   The Personal Data collected by SAI includes names, addresses, telephone numbers, email addresses and, in some cases, professional profiles, bank account numbers and fiscal data.
   
   If SAI collects Personal Data for a purpose different from the ones listed in this section II, SAI shall notify the Holder in order to obtain its Consent, only if required.
   
   In all cases where SAI collects Sensitive Personal Data, it shall notify the corresponding Holder in order to obtain its Consent and to notify the Holder the purpose of the Treatment of the Sensitive Personal Data.


3. Options and means offered by the Responsible Party to the Holders to limit the use or disclosure of Personal Data. In connection with the disclosure of Personal Data, each person involved in the Treatment of Personal Data at SAI have signed a non disclosure agreement regarding all the information they have access to, whether concerning SAI or just held under SAI's possession. Databases containing Personal Data are located within SAI facilities. Databases in electronic support that allow remote access can only be consulted by SAI staff or its service providers through usernames and passwords that must be changed periodically.
   
   With regards to the restriction of Personal Data use, Holders who do not wish to receive information related to SAI, may request so by following the procedure referred to in section V.


4. Means to exercise ARCO Rights. To exercise the rights of access, rectification, cancellation or opposition ("ARCO Rights"), in accordance with Personal Data Law, Holders shall file a request in the domicile set forth in section I and addressed to the Personal Data Department of SAI. The request of access, rectification, cancellation or opposition ("ARCO Request") shall contain and be accompanied by the following:
   
   
   1. The Holder's name, address, or any other information to contact it regarding the response to the ARCO Request.
   2. Documents that irrefutably prove the Holder's identity or, if applicable, its legal representation.
   3. An accurate description of the Personal Data subject to the exercise of ARCO Rights.
   4. Any other document that will ease the location of the Personal Data.
   5. A.In case of ARCO Requests regarding the rectification of Personal Data, the Holder must indicate the required rectification and provide the documentation that sustains his request.
   
   SAI will notify the response to the Holder within a maximum of twenty Days after receiving the ARCO Request. If the response is affirmative, the request shall be complied with within the following fifteen Days after the notification of the response to the Holder.
   
   The terms previously stated may be extended on one occasion and for the same period of time, when the circumstances justify the extension.


5. Transfers of Personal Data. SAI does not transfer Personal Data without first obtaining the Holder's Consent, if required by the Personal Data Law. If Holder's Consent is required pursuant to the Personal Data Law, SAI will notify the Transfer to the Holder. If Holder does not oppose to it, SAI will assume that Holder has consented the Transfer. If applicable, SAI will notify this Privacy Notice and the purposes of the Treatment of Holder's Personal Data to the Third Parties to whom such Personal Data is transferred. Third Parties must treat Personal Data in accordance to this Privacy Notice, and must assume the same obligations as the ones that correspond to SAI as Responsible Party. Notwithstanding the above, SAI cannot guarantee the Holder, nor be held responsible for the Treatment given to the Personal Data by Third Parties.


6. Procedure and notification to the Holders of the changes made to the Privacy Notice. SAI may modify this Privacy Notice from time to time. Any changes made to this Privacy Notice will be published in the following website: http://www.sai.com.mx/.


7. Mechanisms to revoke Consent. If you wish to revoke your Consent regarding the Treatment of your Personal Data by SAI, you shall follow the procedure referred to in above section IV. The revocation of your Consent will not be retroactive. The Consent may not be revoked when the Treatment is needed to fulfill obligations that derive from a legal relationship between the Holder and the Responsible, when the Treatment is set forth in a law, or when such Treatment is exempt from Consent pursuant to the Personal Data Law.

If you are a Holder of Personal Data collected by SAI and would like more information about this Privacy Notice and the compliance policies of the Personal Data Law adopted by SAI, please send a communication to the domicile indicated in section I above, addressed to the Personal Data Department of SAI.