Date of last update: 03-01-2024

JA DEL RÍO, S.C. (hereinafter "JADR" or the "Responsible" indistinctly), must comply with the administrative, legal, and security measures sufficient to protect those personal data collected from "You" (hereinafter "You" or the "Data Subject") for the purposes that will be described in this Privacy Notice, under the provisions of the Federal Law for the Protection of Personal Data in Possession of Individuals, its Regulations and other current and related regulations (the "Personal Data Legislation").

JADR is committed to ensuring that all legal principles of personal data protection are complied with and we express our commitment to ensure that this privacy policy is respected at all times by us and by our collaborators.

All of the above is done with the objective that "You" have full control and decision over your personal data, to guarantee the right of informative self-determination. Therefore, we recommend that you carefully read the following information:

  1. Identity of the "Responsible Party":

"JADR", with an address at Calle Sao Paulo 2373, Piso 2, Colonia Providencia, C.P.44630, Guadalajara, Jalisco, telephone +52 33 3669-5300, and email privacynotice@jadelrio.com, is responsible for the management of the personal data you provide us in under the provisions of this Privacy Notice.

  1. Personal Data:

"JADR" will collect from "You" the personal data necessary for the proper provision of services and/or the fulfillment of the purposes of the "Controller," which include the following: (i) name(s), last name(s), and/or legal or business name; (ii) address; (iii) fixed or mobile phone number; (iv) email address; (v) social media accounts; (vi) RFC (Taxpayer Registration), (vii) CURP (Unique Population Registry Code), (viii) copy of official identification, (ix) document proving the legal representation of the legal entity, (x) distinctive signs, (xi) images and/or videos, and/or (xii) testimonials on the Clearly Rated platform, as well as their publication on the "JADR" website.

"You" commit to providing "JADR" with truthful, complete, and accurate data. Any false, incomplete, or inaccurate information will be your sole responsibility.

  1. Purpose of data processing:

The purpose of this Privacy Notice is to protect any information concerning identified or identifiable individuals (the "Personal Data"), such as customers, suppliers, employees, and other third parties related to the Company (the "Data Subjects"), regulating the use and protection of the Personal Data of the "Data Subjects", through its legitimate, controlled and informed management, to guarantee their privacy.

The personal data you have provided will be used by "JADR" and the activities related to the development of such purposes, including but not limited to:

  1. To maintain, develop, manage, control, and fulfill the contractual relationship derived from the request and/or contracting of our services.

  2. Confirm your identity and contact information.

  3. Create, order, catalog, classify, and store files and databases of the "Holders", as well as their accounts.

  4. To provide the "Holder" with information, communications, and notifications about our services.

  5. Perform collection activities.

  6. Give advice, clarifications, and customer service, via telephone, e-mail, and/or any other means.

  7. Monitor the quality of our customer service through calls and/or e-mails and/or any other means, as well as the attention provided through such channels.

  8. Statistics and historical records.

  9. To meet legal requirements of competent authorities, national or foreign, and comply with the obligations arising from the legal relationship between "You" and the "Responsible" and/or its controlling companies, affiliates, and subsidiaries.

  10. To comply with any legal provisions and obligations applicable to the "Responsible", its controlling companies, subsidiaries, and/or affiliates, as well as to manage any legal process of these.

  11. Necessary and/or analogous complementary activities for the realization of the above purposes.

  12. We will treat Personal Data for the following secondary or accessory purposes: Talent attraction, marketing, advertising, promotion, newsletters, data profiling, advertising messages, news, event invitations, commercial prospecting, and service offerings, general or personalized, sent by any other means.

In case you do not want your personal data to be processed for these secondary purposes, "You" may follow the procedure referred to in paragraph 6 of this Privacy Notice.

  1. Data transfer:

"JADR, as the party responsible for the processing of the Personal Data of the "Data Controllers", is obliged to comply with the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality, and responsibility established in the Law. For this reason, the "Controller" undertakes to keep strict confidentiality concerning the Personal Data of the "Data Controllers".

Notwithstanding the foregoing, your Personal Data may be transferred within the national territory or abroad when any of the following events occur:

  1. When the transfer is provided for a Law or Treaty to which Mexico is a party;

  2. When the transfer is made to controlling companies, subsidiaries, affiliates, or subject or under common control with the "Responsible", which operate under the same processes and internal policies of the "Responsible";

  3. When the transfer is made to authorities, government agencies or entities, Notary Public and public brokers: (i) in compliance with or concerning the obligations contemplated in the legislation applicable to the "Controller", its controlling companies, subsidiaries, and/or affiliates, and in compliance with requirements made to them; (ii) to comply with obligations arising from a legal relationship between the "Data Controller" and the "Responsible"; (iii) when the transfer is necessary for the maintenance or fulfillment of the relationship between the "Controller" and the "Data Subject" and (iv) for the recognition, exercise or defense of a right of the "Controller", its controlling companies, subsidiaries and/or affiliates, in an administrative and/or judicial process;

  4. When the transfer is necessary by a contract entered into or to be entered into in the interest of the "Data Subject", by the "Controller" and a third party;

  5. When the transfer is necessary or legally required for the safeguarding of a public interest, or for the procurement or administration of justice;

  6. When the transfer is based on the other assumptions established in the Personal Data Legislation, which do not require your consent.

The aforementioned transfers do not require your consent per the Personal Data Legislation.

  1. Revocation of Consent:

"You" may revoke the consent you have given us to process your personal data at any time, that is, exercise your rights of Access, Rectification, Cancellation, or Opposition ("ARCO Rights"), so that we stop using them, as long as it is provided for in the assumptions of the Federal Law on Protection of Personal Data Held by Private Parties.

To do so, you must submit your request electronically by e-mail to the following address: privacynotice@jadelrio.com. Your request must be accompanied by your identification and must clearly indicate the personal data for which you wish to revoke your consent for processing.

  1. Ways to Exercise ARCO Rights:

Following the Federal Law for the Protection of Personal Data in Possession of Individuals, the "Data Subject" by himself or through a duly accredited legal representative, may exercise his/her rights of access, rectification, cancellation, or opposition directly to the "Responsible" of the "JADR" Treatment in the mail privacynotice@jadelrio.com.

When choosing postal correspondence, it should be sent to the following address: Calle Sao Paulo 2373, Piso 2, Colonia Providencia, C.P.44630, Guadalajara, Jalisco.

  1. Access: "You" at any time may request what information about you has been collected and kept by the "Responsible Party".

  2. Corrections: When any part of your data is inaccurate or incomplete, you may request its amendment, by attaching the documentation that proves such modification.

  3. Cancellation: The cancellation of the data may be requested at any time; if the request is accepted, the data will go into a blocking period during which it may not be processed in any way following deletion.

"JADR" may keep them exclusively for the purposes of liabilities that may arise from processing. The blocking period will be equivalent to the statute of limitations period of the actions derived from the legal relationship that founds the management in the terms of the applicable law on the matter. Once the

data has been canceled, notice will be given to the "Data Subject".

  1. Opposition: At any time, the "Data Subject" may refuse the processing of his/her personal data for justified reasons.

The request to exercise the Arco Rights must have and be accompanied by the following: (i) the name, company, or denomination of the "Data Subject", its address and/or e-mail, and any other ways to communicate the response to the request; (ii) the official documents that prove the identity, or in its case, the legal representation of the "Data Subject"; (iii) the clear and precise description of the concerning data which the exercise of any of the aforementioned rights is sought; and (iv) any other element or document that facilitates the location of the data.

Once we receive the letter indicating that you will make use of your Arco Rights, we will have 20 twenty working days to analyze, and send you the corresponding response and we will comply with the requirement, when it is appropriate, within 15 (fifteen) working days following our response to your request. How we will send you our conclusion, will be the one indicated by "You" in your request or, failing that, by the same means by which you sent your letter. "JADR" may deny the "Data Subject" access to his/her personal data, or carry out the amendment, cancellation, or grant opposition to the processing thereof, in the following events:

  1. If you are the applicant, but not the "Data Subject" of the personal data, or your legal representative is not duly accredited to do so.

  2. When our database does not have your personal data.

  3. When the rights of a third party are injured.

  4. When there is a legal impediment, or the resolution of a competent authority, which restricts access to your personal data, or does not allow the correction, cancellation, or opposition.

  5. When the correction, cancellation, or opposition has been previously made.

In all of the above cases, "You" or, if applicable, your legal representative will be informed of the reason for our decision and we will notify you, within the deadlines established for such purpose, by the same means in which the request was made, accompanied, if applicable, by the relevant evidence.

  1. Remote Media:

"You" understand and agree that: (i) our Website may include links to third-party websites which, if accessed, will cause you to leave our website, for this reason, we will not assume any liability in connection with third-party websites; (ii) Our Website may include links to sites that manage social networks, in which case "You" agree that by providing any information, including your data on such sites, it can be read, viewed, accessed, retransmitted and managed by anyone, releasing us from any liability; (iii) Our systems may collect additional data that "You" provide, such as the type of browser, operating system, internet pages visited, IP address, etc., through "cookies" or "web beacons", among others. To disable these systems, you must access "Internet Options" in the "tools" bar of the browser you use.

  1. Modifications to the Privacy Notice:

This Privacy Notice may be modified by "JADR" as many times as deemed necessary, to be consistent with applicable laws and at the request of the competent authorities and/or changes in the data. If changes are made to this Privacy Notice, "JADR" they will be announced by publishing a visible notice on the Website. For your security, feel free to review the content of this Privacy Notice on our Web Site www.jadelrio.com at any time.

  1. Acceptance of Privacy Notice:

If you do not expressly oppose the content and scope of this Privacy Notice or its modifications, it will be understood that you give your tacit consent for "JADR" to process your Personal Data based on the purposes of the processing established in the Privacy Notice.

  1. Controversies:

If a dispute arises from this Privacy Notice, the parties will first attempt to resolve it through a negotiation of good faith, possibly assisted by a professional mediator. If after a maximum of 30 business days of negotiation, the parties do not reach an agreement, the provisions of the Federal Law for the Protection of Personal Data in Possession of Private Parties shall apply. By accepting this Privacy Notice, "You" agree to submit to the jurisdiction and competence of the applicable laws and courts of the First Judicial District of the State of Jalisco, waiving from this moment on any other jurisdiction that due to your current or future address, or for any other reason may correspond to you.