MIRANDA, DE LA SIERRA Y ASOCIADOS, S.C., complying with the “Ley Federal de Protección de Datos Personales en Posesión de los Particulares” (hereinafter the “Law”), informs you as follows:

I. Identity and Adress Responsible Party.

Miranda, De la Sierra y Asociados, S.C. (hereinafter the “Firm”), with address at Avenida Patriotismo 201, interior 414, Metrópoli Patriotismo, Colonia San Pedro de los Pinos, Alcaldía Benito Juárez, C.P. 03800, Mexico City, Mexico, is the Responsible Party for the obtainment, keeping, using, handling and exploitation of personal data (hereinafter the “Treatment”).

II. Personal and Sensitive Data.

The Firm will gather Personal Data for the Treatment thereof, as they may be necessary to comply with an adequate rendering of the professional services requested from the Firm by each individual or entity, and said Firm will be able to use mechanisms through remote media or facilities with electronic, optical or other communication technology, such as our web site www.mdsyasociados.com, e-mail contacto@mdsyasociados.com or the personal e-mail of each of the members of our team, or through telephone numbers 5588 52 75 72 and/or 5588 52 75 23, which will allow it to gather personal data.

Personal Data subject to Treatment are:

• Identification data: Full name and e-mail.

Should you become a Client additional information may be required, as it may be necessary to render the services being requested.

The Firm does not require Sensitive Data. In the event such Sensitive Data is indeed necessary, we would request your express consent for its Treatment.

All Personal Data so obtained are treated under strict security measures, maintaining confidentiality at all times, in order to ensure that information is used for the purposes set forth herein.

III.  Purpose of the Treatment.

The only use of the Information is to render professional services requested by the titleholder of such Information.

IV. Mechanisms for the Titleholder to express its/his/her objection to the Treatment of Personal Data.

Describing the purpose of the Treatment of Personal Data informed to you in accordance with the foregoing is necessary to carry out the legal relationship that may be established with the Titleholder of Personal Data. In the event that the Titleholder specifically wishes that such Titleholder’s Personal Data remain untreated, such Titleholder has 5 business days, commencing as of the date of delivery of its/his/her Personal Data to express such refusal.

The refusal mentioned above must be made in writing, by means of electronic mail sent to the address contacto@mdsyasociados.com, stating in the reference of the subject matter that its purpose is the “Statement of Refusal to the Treatment of Personal Data” and also within the body thereof, identifying its/his/her full name and describing its/his/her data in full to make a proper identification.

In the event there is no such statement as described above, it will be understood that consent has been granted for the Treatment of Personal Data.

V.  Transfer of Personal Data.

The Firm will not perform any Transfer of Personal Data, unless required for the rendering of professional services requested by Titleholder, in which case, by requesting such services Titleholder will consent to such actions.

VI. Means to exercise rights to access, rectify, cancel, and oppose to (ARCO Rights).

Personal Data of Titleholder are kept in strict confidentiality, pursuant to the security, administrative, technical and physical measures that the Firm has implemented for such purpose. Its illegal dissemination will be forbidden, and its use by third parties will be limited, as provided in this Privacy Notice.

In order to exercise ARCO Rights the Titleholder must submit to the Firm a request that must include, at least, the following:

1. Full name of Titleholder, address and electronic mail address or any means to advise Titleholder of the response to the request.
2. Documents that evidence the identity or legal representation of Titleholder.
3. Clear and precise description of Personal Data in regard of which an ARCO Right is intended to be exercised.
4. In the event a rectification is requested, the documents supporting such rectification must be included.
5. The means of communication to deliver a response must also be included, and it may be in paper, at the address of the Form stated in Section I of this Notice, or by means of a response to the same electronic mail address from which the request was sent. In the event no indication is made the request will be deemed as not filed, and evidence thereof will be left.

Said request must be in writing and sent via electronic mail to contacto@mdsyasociados.com, mentioning that the subject is the “Exercise of ARCO Rights” and, in the body thereof, the information and documents indicated above. Such submittance of documents must be acknowledged.

The Firm reserves the right to request additional information and/or documents, in order to attend to the request.

The Firm will provide a response to a request within 20 (twenty) calendar days, commencing as of the date when such request is received, and will become effective within the 15 (fifteen) calendar days next following the communication responding to the request. The aforementioned time periods may be extended one time, if the circumstances justify such extension.

The Firm may deny the exercise of the ARCO Rights in the following events:

1. When the claimant is not the Titleholder of the Personal Data, or if legal representation is not duly documented.
2. When it does not have the Personal Data of the claimant.
3. When it affects the rights of a third party.
4. When there is a legal impairment or a resolution by a competent authority restricting the exercise of ARCO Rights.
5. When the rectification, cancellation or opposition has already been made.

The Firm will not be obligated to cancel personal data when such personal data : (i) refer to the parties to an agreement, and are necessary for the development and fulfillment thereof; (ii) must be treated per legal provisions; (iii) are necessary to comply with a legally acquired obligation of Titleholder.

The obligation of access to the information will be deemed to complied with by the Firm when such information is made available to the Titleholder of Personal Data, directly at the address set forth in Section I of this Privacy Notice, or by responding to the claimant to the same electronic mail address used by such claimant to file its/his/her claim, and eliminates or corrects in its database the information required by Titleholder.

VII. Mechanisms for Titleholder to revoke consent for the Treatment of Personal Data.

Notwithstanding the fact that the Personal Data required by the Firm and for the purposes of their Treatment no express consent of Titleholder is legally required for such Treatment, consent may be revoked by Titleholder at any time, but without retroactive effects being applicable.

In the event Titleholder wishes to revoke tacit consent as to the Treatment of its/his/her Personal Data, said Titleholder shall file a request in writing, by means of an electronic mail sent to contacto@mdsyasociados.com, stating in the reference of the subject matter that its purpose is the “Revocation of Consent” and also within the body thereof, identifying its/his/her full name and describing its/his/her data in full to make a proper identification.

In the event there is no valid legal relationship between Titleholder and the Firm, the request may not be processed until the relationship is terminated, even in the events expressly indicated by the Law as being mandatory to comply with a legal requirement, in which case the Firm will not process the request being filed.

VIII. Mechanisms in electronic media.

The Firm does not use cookies nor web beacons nor any similar technologies in its website.

IX. Modifications to Privacy Notice.

The Firm may modify this Privacy Policy from time to time, and all such modifications will be opportunely informed through electronic mail, telephone, official website www.mdsyasociados.com, or any other means of communication that the Firm determines.