Who is responsible for the processing of your data?

ESEASA OFFSHORE S.A. DE C.V., (hereinafter "EOF"), with registered address at Calle Montecito, No. 38, Floor 31, Office 1, Colonia Nápoles, Alcaldía Benito Juárez, Mexico City, Postal Code 03810, committed to the protection of your personal data and assuming responsibility for its use, management and confidentiality in accordance with the Federal Law on Protection of Personal Data Held by Private Parties, hereby issues this Privacy Policy to inform you of the main characteristics of the processing to which your personal data will be subjected.

Personal data processed by EOF

To fulfill the purposes set forth in this Privacy Policy, EOF will collect the following information directly:

• Identification data,
• Contact data,
• Location data,
• Employment data,
• Academic data,
• Patrimonial and/or financial data,
• and Geolocation

EOF may collect personal data indirectly, through publicly accessible sources, or when provided by companies belonging to the ESEASA Group or by third parties with whom EOF has entered into commercial or service agreements. EOF may also collect information about minors or persons under legal guardianship. The processing of such data will only take place when the consent of the parent, mother, or legal guardian has been obtained to fulfill the purposes set forth in this Privacy Policy.

EOF may process personal data of third parties (in their capacity as beneficiary, obligor, guarantor, representative, agent, shareholder, or other participant), when you provide their information to comply with our obligations derived from the contracting of the product or service. In such cases, you acknowledge having informed said third parties of the use of their data and having obtained their prior consent.

Sensitive data

Additionally, EOF will collect the following categories of sensitive personal data:

• Biometric data,
• Health data,
• Data of ethnic origin, indigenous people or community.
• Primary purposes

EOF will process the personal data described in this Privacy Policy for the following primary purposes.

• Verify, confirm and validate your identity;
• Check your credit history;
• Obtain banking and commercial references;
• Evaluate your application for contracting our products and services;
• Fulfill the contractual relationship derived from the contracting of our products and services;
• Administer, operate and follow up on the products and services requested or contracted with EOF;
• Integrate and update your file and databases for the operation of your contracted products and services;
• Contact you through different means of communication to manage the relationship derived from the products and services contracted with us;
• Carry out collection management;
• Issue tax receipts;
• Attend to and follow up on your queries, clarifications and complaints;
• Develop and monitor risk profiles and models;
• Carry out the analysis to determine your legal status, including whether you have pending lawsuits;
• Identify and prevent possible illicit conduct that could constitute a violation of current legal provisions;
• Carry out internal and external audit processes;
• Comply with obligations established by applicable legislation;
• Attend to legal requirements from competent authorities.
• If you are a representative or agent, EOF will process your data to administer, operate and manage compliance with the contract signed in your capacity as legal representative of a third party.

Secondary purposes

Additionally, unless you object, EOF may process your personal data to fulfill the following secondary purposes:

• Send you advertising, promotional and commercial prospecting information about our products and services, according to your profile;
• Offer you products and services from companies belonging to the ESEASA Group;
• Send you invitations to participate in programs, activities, campaigns, contests, trials and events organized by EOF;
• Conduct surveys or questionnaires about our products and services, or those derived from programs, activities, campaigns, contests and events organized by EOF;
• Reference products and/or services of third parties with whom EOF has entered into contracts for that purpose;
• Analyze your commercial profile to learn about your preferences, consumption, financial capacity and economic solvency, as well as to determine your financial health;
• Carry out statistics, models or market studies related to the products and services contracted with EOF;

If you do not wish EOF to process your personal data for any of the purposes described in this section, you may request this by sending an email to the following address: protecciondedatospersonales@eseasaoffshore.com . If we do not receive your objection within 5 business days from the date your data is collected, your consent to the use of your information will be deemed granted.

Transfers of personal data

EOF may transfer your personal data in the following cases:

• Companies belonging to the ESEASA Group where required to fulfill the purposes set forth in this Privacy Policy. We inform you that such companies operate under privacy policies that comply with the applicable provisions;
• Third parties with whom contracts have been entered into for the commercialization of products and/or services, for the benefit and/or interest of clients;
• Third parties with whom we have a commercial and/or collaborative relationship;
• Third parties with whom we have entered into contracts for the benefit and/or interest of clients, to fulfill the legal relationship established between the parties;
• Debt-acquiring companies with whom a portfolio purchase agreement is entered into;
• Public notaries for the formalization of transactions;
• Specialized service providers and financial institutions to attend to requirements arising from the exercise of supervisory, prudential, judicial, tax, and/or prevention and detection of irregularities or crimes authorities;
• Government entities for the monitoring and fulfillment of EOF's obligations derived from your participation in sweepstakes, contests or activities with them.
• Competent authorities in legally provided cases.

If necessary, EOF will request your consent for the transfer of your data and will communicate this Privacy Policy so that your personal data is processed in accordance with its terms.

Means and procedure for exercising ARCO Rights and/or revoking consent for the processing of personal data

You, or your legal representative, may exercise any of the rights of access, rectification, cancellation or opposition, as well as revoke your consent for the processing of your personal data by sending an email to the following address: protecciondedatospersonales@eseasaoffshore.com .

Your email subject line must read "ARCO Rights Request" (hereinafter, the "Request") and must contain all the elements required to process your request in accordance with the applicable regulations. For EOF to follow up on the request, you or your legal representative must correctly verify your identity, which requires that your "Request" be accompanied by a copy of a valid official ID.

If the information provided in the "Request" is incorrect or insufficient, or if the corresponding verification documents are not included, EOF, within five (5) business days following receipt of the request, may require you to provide the necessary elements or documents to process it. You will have ten (10) business days to comply with the requirement, counted from the day after you received it. If no response is given within that period, the corresponding request will be deemed not filed. EOF will notify you of the decision adopted within a maximum of twenty (20) business days from the date the request was received, so that, if applicable, it is made effective within fifteen (15) business days following the communication of the response. The response will be provided by the means or channel you specified in your "Request".

Options and means to limit the use or disclosure of personal data

You may limit the use or disclosure of your personal data by sending an email to the following address: protecciondedatospersonales@eseasaoffshore.com . The requirements for verifying your identity, as well as the procedure for processing your request, will be governed by the same criteria set forth in the previous section. If your request is found to be valid, EOF will register you on its own exclusion list.

Additionally, if you wish to stop receiving advertising or promotions about our products and services, you may submit the same request following the same criteria set forth in the previous section. If your request is found to be valid, EOF will register you on its own exclusion list.

Changes to the Privacy Policy

EOF reserves the right, at its sole discretion, to change, modify, add or remove parts of this Privacy Policy at any time. In such case, EOF will keep its full Privacy Policy current on the website https://www.eseasaoffshore.com/ . We recommend that you visit this page periodically to stay informed of any changes.