Privacy Notice

GRUPO DIARQ, S.A. DE C.V., (hereinafter “Grupo Diarq”), located at Prado Sur 230 floor 4, Lomas de Chapultepec neighborhood, Miguel Hidalgo, 11000 Mexico City, hereby provides this Privacy Notice.

Grupo Diarq informs users that the information provided by its clients, suppliers, and interested parties (hereinafter the “Holder”) of Personal Data (the “Data”) is safeguarded and protected in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and its Regulation (the “Law”), ensuring the confidentiality thereof, protecting them with administrative, legal, technical, and digital security measures to prevent their damage, loss, alteration, destruction, unauthorized use, access, or disclosure, and under the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility.

Definitions

Holder: The individual to whom the Personal Data belongs.

Clients: Individuals who acquire the services offered by Grupo Diarq through any means.

Suppliers: Individuals who provide services or supply products to Grupo Diarq.

Interested parties: Individuals who contact Grupo Diarq through the website: https://www.diarq.com (“the Portal”).

Information Collected

For Clients: name, email address, banking information, and federal taxpayer registry.

For Suppliers: name, phone number, handwritten signature, address, bank account number, interbank CLABE, and bank, Federal Taxpayer Registry (RFC), email address, and contact person(s)’s Data.

For Interested parties: name and email address.

Purpose of Personal Data Collection

Grupo Diarq uses the collected Data, including but not limited to, for the following purposes: (i) identification and verification, (ii) contact, (iii) offering and delivering our goods and services, (iv) identifying purchase history and other analogous purposes, (v) improving and updating the services available to the user, (vi) processing requests and orders for specific courses, products, and services, information or functions performed by the user, (vii) communicating with the user and generating account preferences, (viii) marketing and advertising, and (ix) sending newsletters and/or addressing doubts and comments on the services provided by Grupo Diarq. In the collection and processing of the Personal Data you provide us, we adhere to the principles stipulated in article 6 of the Law; legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility.

Security

We will use appropriate security measures based on the type and confidentiality of the Data stored. Like any system connected to the internet, there is always a risk of unauthorized access, so it is important to protect the user’s password and to contact us if you suspect unauthorized access to your account. However, Grupo Diarq will always make its best effort to cover the security of the Data.

Grupo Diarq takes necessary measures to protect against unauthorized access, alteration, disclosure, or destruction of the Data we collect and store. Grupo Diarq is responsible for ensuring compliance with data privacy laws and principles, allocating the necessary technological requirements as well as suitable and trained personnel to comply with said safeguarding.

Acceptance and Limits of Data Use and/or Disclosure

The Holder expressly accepts that by providing the Data, Grupo Diarq is allowed to safeguard, protect, and handle them until the Holder expresses in writing their refusal through the procedure and means referred to in the following paragraph.

ARCO Process

In compliance with the Federal Law on Protection of Personal Data Held by Private Parties and its regulations, the Holder may exercise the rights of Access, Rectification, Cancellation, or Opposition (“ARCO”) to the processing of the Data through the following procedure:

By written request signed by themselves or through a legal representative.

If appearing on their own behalf, they must attach a copy of an official identification (voter ID or passport); if appearing through a representative, they must provide a simple power of attorney signed before two witnesses, accompanied by copies of the official identifications of the Holder, the representative, and the witnesses.

They must indicate the reasons and documents or evidence that motivate their request.

They must provide an email address to receive notifications related to the ARCO rights request.

This request and the aforementioned requirements must be addressed to the personal data protection area of Grupo Diarq and sent through email to [email protected]

Grupo Diarq will confirm receipt of the ARCO rights request by the same means and if 3 (three) business days pass without any response, it will be deemed not received and the Holder must resend it through the same means for confirmation. Once the request is confirmed, the personal data protection area of Grupo Diarq will have a period of 20 (twenty) business days to respond to the suitability or unsuitability thereof; if the request is deemed appropriate, the respective area will have 15 (fifteen) business days to grant what was requested. If the information is not clear or sufficient, Grupo Diarq will request what is necessary, for which the Holder must provide the requested information within 5 (five) business days, if not done so in a timely manner, the request will be considered not submitted.

Information Transfer

In accordance with article 37 of the Law, the Data of Clients, Suppliers, and Interested parties may be transferred to consolidated entities, subsidiary companies, or those entities that are part of the same commercial group as Grupo Diarq in Mexican territory and abroad, as well as to authorities or government agencies, with the general objective of complying with the obligations imposed by tax, civil laws or judicial or administrative orders, and for marketing and advertising purposes.

Use of Cookies

Grupo Diarq informs Portal users that during access or navigation on it, it may use cookies or web beacons: i) cookies, which are small files stored on the hard drive of a computer and which contain particular browser characters of the user, as well as information about the use given to the Portal, from the different servers operated by Grupo Diarq or third parties that provide us services. Cookies only associate the browser of a computer, but not the user’s name and last name, thus it can recognize it by its browser so that it does not have to register or enter its Data again on the Portal, as well as to know the number of times a “user” accesses the Portal. Each user can configure their browser to receive notices about cookies and prevent their installation on the hard drive, consult the manual of their equipment. It is not necessary for the user to allow the installation of cookies sent to navigate on the Portal, the only consequence is that the User registers or enters their Data each time they access the Portal. ii) Web beacons, which allow the Portal to transfer or collect information through a graphic image, about the number of visitors; thus Grupo Diarq may collect information about the user’s browsing activity, time and browsing environment, solely and exclusively to understand the traffic of visits, how the user interacts on the Portal, improve the navigation of the portal and the services and/or products advertised therein, and where appropriate, improve the site, review and analyze patterns, reports, research, statistics, and advertising audits for Grupo Diarq or its advertisers, without in any way sharing information that identifies the user personally.

Changes to the Privacy Notice

Should any modifications to this privacy notice occur, the changes will become effective on the day of their publication. Should the user continue using the platform following the implementation of any changes to this Privacy Notice, it will be deemed as acceptance of the updated Privacy Notice. Notifications regarding modifications will be made available through the Portal: https://www.diarq.com in the “Privacy Notice” section.

Questions and/or comments

Should you have any inquiries regarding this Privacy Notice, feel free to direct them to the following email address: [email protected]

Last updated on November 10, 2022.