This PRIVACY NOTICE applies to the personal information collected about the Holder by Grupo ArtEs (hereinafter GA). For the purposes of this PRIVACY NOTICE, the terms used herein that are not defined in it will have the meaning attributed to them by data protection legislation.

GA is committed to the right to the protection of personal data of any Holder, also known as the “right to informational self-determination,” which is guaranteed and protected as a human right in the second paragraph of Article 16 of the Political Constitution of the United Mexican States and in data protection legislation.

GA expressly and in a non-limiting manner undertakes to: (i) Use or apply your personal data exclusively for the purposes established in this PRIVACY NOTICE; (ii) Ensure that your personal data is handled with strict adherence to professional secrecy and confidentiality; (iii) Observe protection principles such as legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility, as well as the duties of security and confidentiality provided in data protection legislation, adopting the necessary measures for their application, and (iv) Implement and maintain administrative, technical, and physical security measures to protect your data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

In cases where the processing of your personal data is covered by any of the grounds or situations provided by Article 10 of the Federal Law on Protection of Personal Data Held by Private Parties, your consent will not be necessary.

1. Controller and Address

GA is the data controller in terms of this PRIVACY NOTICE, with its address at Avenida Baja California 261 Piso 11 Oficina 1101 Col. Hipódromo Alcaldía Cuauhtémoc C.P. 06100. You can contact our “Data Protection” department via the following email address: contacto@grupoartes.net, from Monday to Friday, during business hours from 09:00 to 17:00.

1. Personal Data Subject to Processing

Depending on the purposes for which you provide us with your personal data, we will request the following categories of data:

• If you are a Customer: Identification data, contact data, employment data, patrimonial data, and demographic data.
• If you are a Customer Prospect: Identification data, contact data, employment data, and demographic data.
• If you are a Supplier: Identification data, contact data, employment data, patrimonial data, and third-party data.

Please note that not all the above information is collected in every case, as this depends on what information can be provided by the respective Holder or is required for the provision of the service.

III. Purposes of Personal Data Processing

Personal data will be processed for the following purposes:

1. Primary Purposes
2. a) Customers and customer prospects

• Provide the services and products requested
• Sending invoices and payment confirmations
• Send periodic communications to customers related to the service
• Commercial prospecting (if you are a customer prospect)
• Send certain mandatory service communications, such as welcome letters, payment reminders, information about technical and commercial service matters, and security announcements
• Contact for offerings of additional services or products, as well as payment reminders, information about technical and commercial service matters, and security announcements
• Respond to pending problem-solving queries previously requested in our consulting system

1. b) Suppliers

• Payment confirmation
• Establish the commercial relationship

1. c) Event attendance

If you attend courses, seminars, workshops, diplomas, or other events, your data will be processed for the following purposes:

• Contact for offerings of additional events
• Video recording
• Taking photographs in different facilities
• Simultaneous or non-simultaneous live streaming in other rooms or via social networks or the Internet and other digital or electronic media

1. Secondary Purposes
2. a) Customers and customer prospects

• Evaluate the quality of products and services and conduct satisfaction surveys
• Display personalized content and advertising based on interests and preferences
• Send product surveys or promotional emails to inform about other products or services available from GA, its affiliates, and subsidiaries

1. Temporality of Personal Data Processing

Your personal data will be processed only for the time necessary to fulfill the purposes set out in this PRIVACY NOTICE and/or in accordance with the provisions of data protection legislation.

1. Transfer of Personal Data

GA informs you that your personal data may, where applicable, be transferred, within and outside the country, to any affiliate, parent, or subsidiary company belonging to GA. Pursuant to the provisions of Article 37, Section III of the Federal Law on Protection of Personal Data Held by Private Parties, such transfer will not require your consent. In any case, the recipient of your personal data will process it in accordance with this PRIVACY NOTICE and in compliance with data protection legislation. This does not imply that GA transfers all personal data collected, and it is prevented from transferring sensitive data. If you do not accept the secondary purposes and/or the transfer of data, please send an email to: contacto@grupoartes.net. Unless you send an email expressing your desire not to accept secondary purposes and/or the transfer of your personal data, we will assume that you agree to them.

1. ARCO Rights and Means to Exercise Them

As the data subject, you may exercise your ARCO Rights (Access, Rectification, Cancellation, and Opposition) for the processing of your personal data by sending your request directly to the “Data Protection” department via the email address: contacto@grupoartes.net. Your request must contain at least: (a) name and address or other means to communicate the response to your request; (b) documents proving your identity or, where appropriate, legal representation; (c) a clear and precise description of the personal data for which you seek to exercise any of the ARCO Rights; (d) any other element facilitating the location of personal data; and (e) your signature at the end of the document. Once your request is submitted in the established format, the “Data Protection” department will respond within a maximum period of 20 business days from the date of receipt of the request. If additional information or necessary documentation is required, the “Data Protection” department will contact you within 5 business days of receiving your request, giving you 10 business days after this communication to address this requirement. Otherwise, your request will be considered not submitted. Within the next 15 business days following the previous response, if your right is applicable, it will be applied. If your request concerns the exercise of the Access right, your personal data will be made available to you through simple copies and/or electronic documents. The exercise of ARCO Rights will be free of charge, as well as the reproduction in simple copy or email delivery.

 VII. Revocation of Consent for the Use of Personal Data

You, as the Holder, may revoke your consent for the processing of your personal data at any time in accordance with the procedure outlined above, expressly stating that you wish to revoke your consent. However, it is essential to note that we may not be able to immediately address your request or conclude the use in all cases, as we may need to continue processing your personal data for legal obligations. Also, you should consider that, for certain purposes, revoking your consent may result in the termination of your relationship with us. For more information on the protection of your personal data, you can contact our “Data Protection” department through the contact information provided in this PRIVACY NOTICE. The revocation of consent for the use of personal data will be free of charge.

VIII. Use or Disclosure of Personal Data

GA will use your personal data strictly in accordance with the purposes set out in this PRIVACY NOTICE and for the time necessary in accordance with applicable legal provisions. You can contact us at any time using the provided contact methods to address any doubts, clarifications, or suggestions regarding your personal data. GA makes available the following email address contacto@grupoartes.net so that you, as the Holder, can express your refusal to continue receiving information or communications (limiting their use or disclosure) from us through the account from which you receive such communications or promotions.

1. Cookies and/or Web Beacons and Electronic Media

GA uses cookies on its website. Cookies are text files that are stored on your computer’s hard drive when you visit certain websites. We use cookies to determine, for example, whether you have previously visited our website or if this is your first time, as well as to help us identify website applications that may be of greater interest to you. Cookies can enhance your online experience, for example, by showing you preferences when you visit a particular website. In principle, most browsers are set to accept cookies. The help option on the toolbar of most browsers will tell you how to stop accepting new cookies, how to be notified of new cookies, and how to disable existing cookies. GA informs the Holder that they can disable the use of these mechanisms at any time, following the instructions provided by each company that owns the browsers (browser or Internet viewer). GA websites may use third-party technologies that may contain electronic images known as web beacons, sometimes called one-pixel gifs, which can be used to help send cookies and allow us to count users who have visited the pages and provide joint branding services. We may include web beacons in promotional email messages or newsletters to determine if they have been opened and if any action has been taken accordingly. GA may use third-party web beacons to compile general statistics related to the effectiveness of promotional campaigns or other operations on our sites. We prohibit third parties from using web beacons on our sites to collect or access your personal information. GA does not collect personal data or similar information through these mechanisms. GA informs you that: – GA‘s website may include links to third-party websites, and by accessing them, you will leave GA‘s website. Therefore, GA assumes no responsibility for those third-party websites. – GA‘s website may include links to sites that manage social networks, in which case you accept that by providing any information or data on such sites, it may be read, viewed, accessed, retransmitted, and processed by anyone, releasing GA from any liability.

1. Changes to this Privacy Notice

Changes and updates to this PRIVACY NOTICE will be made known on our main portal: http://www.grupoartes.net. If you are consulting a printed version, please always check the Privacy Notice on our main portal: http://www.grupoartes.net. By providing us with your personal data through any means, you, as the Holder, expressly acknowledge and accept this PRIVACY NOTICE. Therefore, this consent gives us the authority to proceed with the processing of your data as indicated in this PRIVACY NOTICE and in strict compliance with data protection legislation, without prejudice to the rights conferred by it. If you believe that your right to the protection of your personal data has been violated by any act or omission on our part, you can contact us through the provided means.

* GA is not bound by the internal policies and personal data of the WhatsApp application.