Who is responsible for processing your data?

ESEASA OFFSHORE S.A. DE C.V. (hereinafter “EOF”), with address at Calle Montecito, Number 38, Floor 31, Office 1, Colonia Nápoles, Benito Juárez Borough, Mexico City, Postal Code 03810, is committed to protecting your personal data and assumes responsibility for its use, handling, and confidentiality in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties. To inform you of the main characteristics of the processing of your personal data, EOF issues this Privacy Notice.

Personal data subject to processing by EOF

To fulfill the purposes set forth in this Privacy Notice, EOF may collect the following information directly:

• Identification data,
• Contact data,
• Location data,
• Employment data,
• Academic data,
• Financial and/or asset data,
• Geolocation data

EOF may also collect personal data indirectly through publicly available sources or from companies belonging to Grupo ESEASA and third parties with whom EOF has commercial or service agreements. Likewise, EOF may collect information from minors or individuals under guardianship, provided that prior consent from their parent, guardian, or legal representative has been obtained.

EOF may also process personal data of third parties (as a beneficiary, guarantor, representative, proxy, shareholder, or other participant) when you provide their information to comply with contractual obligations. In such cases, you acknowledge that you have informed these third parties of the use of their data and have obtained their prior consent.

Sensitive data

Additionally, EOF will collect the following categories of sensitive personal data:

• Biometric data,
• Health data,
• Ethnic origin, indigenous people or community.

EOF will process the personal data described in this Privacy Notice for the following primary purposes:

• Verify and validate your identity;
• Consult your credit history;
• Obtain banking and commercial references;
• Evaluate your application for contracting our products and services;
• Comply with contractual obligations derived from the products and services contracted with EOF;
• Administer, operate, and monitor the requested or contracted products and services;
• Integrate and update your file and databases for the operation of contracted products and services;
• Contact you through different communication channels to manage the relationship derived from contracted products and services;
• Carry out collection efforts;
• Issue tax receipts;
• Handle and follow up on your inquiries, clarifications, and complaints;
• Develop and monitor risk profiles and models;
• Conduct analysis to determine your legal standing, including if you are subject to lawsuits;
• Identify and prevent potential illegal conduct or violations of applicable laws;
• Perform internal and external audits;
• Comply with applicable legal obligations;
• Respond to requests from competent authorities;
• If you are a representative or proxy, EOF will process your data to administer, operate, and manage the fulfillment of the contract you sign on behalf of a third party.

Secondary purposes

Additionally, if you do not object, EOF may process your personal data for the following secondary purposes:

• Send you advertising, promotional information, and commercial prospecting according to your profile;
• Offer you products and services of Grupo ESEASA companies;
• Send you invitations to participate in programs, activities, campaigns, contests, tests, and events organized by EOF;
• Conduct surveys or consultations related to our products and services or activities organized by EOF;
• Refer products and/or services of third parties with whom EOF has contracts;
• Analyze your commercial profile to understand your preferences, consumption habits, and financial health;
• Carry out statistics, models, or market studies related to the products and services contracted with EOF;

If you do not wish EOF to process your personal data for any of the purposes described above, you may request it by sending an email to: protecciondedatospersonales@eseasaoffshore.com. If we do not receive your objection within 5 business days after your data has been collected, your consent will be deemed granted.

Transfer of personal data

EOF may transfer your personal data under the following circumstances:

• To companies within Grupo ESEASA when required to fulfill the purposes of this Privacy Notice;
• To third parties with whom contracts are in place for the commercialization of products and/or services for the benefit of clients;
• To third parties with whom we have a commercial and/or collaboration relationship;
• To third parties with whom contracts exist in the client’s interest to fulfill the established legal relationship;
• To debt acquirers under debt sale agreements;
• To Notaries Public for formalizing transactions;
• To specialized service providers and financial institutions in compliance with supervisory, prudential, fiscal, or anti-fraud obligations;
• To government entities as required by your participation in draws, contests, or activities with them;
• To competent authorities in legally required cases.

When necessary, EOF will request your consent for data transfer and communicate this Privacy Notice so your data is processed under its terms.

Means and procedure to exercise ARCO rights and/or revoke consent

You or your legal representative may exercise any of your rights of Access, Rectification, Cancellation, or Opposition (ARCO rights), as well as revoke your consent for the processing of your personal data by sending an email to: protecciondedatospersonales@eseasaoffshore.com.

Your email must include “ARCO Rights Request” in the subject line (hereinafter, the “Request”) and contain all the elements necessary to comply with applicable regulations. To follow up on your Request, you or your legal representative must properly prove your identity by attaching a copy of a valid official ID.

Options and means to limit the use or disclosure of personal data

You may limit the use or disclosure of your personal data by sending an email to: protecciondedatospersonales@eseasaoffshore.com. The requirements to verify your identity and the procedure will follow the same criteria outlined above. If your request is accepted, EOF will register you in its internal exclusion list.

Additionally, if you wish to stop receiving advertising or promotions for our products and services, you may make the same request under the same terms.

Changes to this Privacy Notice

EOF reserves the right, at its sole discretion, to change, modify, add, or remove parts of this Privacy Notice at any time. In such cases, EOF will keep the current version of its Privacy Notice available on the website www.eseasaoffshore.com. We recommend that you visit this page periodically to stay informed about any changes.