Date last updated 02/04/2019

PRIVACY NOTICE OF CTUX S.A. DE C.V.

RESPONSIBLE FOR THE PERSONAL DATA.

For the purposes of this Privacy Notice, CTUX S.A. DE C.V., and related third parties and third parties related to it, indicate as responsible for the obtaining, disclosure, storage, use, including access action, handling, use, transfer or disposal of personal data based on the data in accordance with articles 15, 16 and 30 of the Federal Law for the Protection of Personal of Protection of Personal Data in Possession of Individuals to the Head of the Information Technologies of the Department of Information Technologies with domicile at Laguna de Términos 221, Torre A, Despacho 802, Colonia Granada, C.P. 11460, Mexico City, who is responsible for the collection of your personal personal data, the use given to them and their protection. use includes any action of access, handling, use, transfer or disposal of personal data, transfer or disposition of personal data.

INFORMATION TO BE COLLECTED.

We inform you that CTUX S.A. DE C.V., may collect your information through different through different sources, among them: 1. Personally: When you request or acquire any of the licenses, software or hadware provided by CTUX S.A. DE C.V. licenses, software or hadware that are provided by CTUX S.A. DE C.V. 2. Directly: When you provide us with your personal data in order to request our services, contract or participate in promotions, offers, programs, through promotions, offers, programs, through our website or by telephone. Internet or by telephone. 3. Indirect: From any other source of information commercially available or permitted by law. available or permitted by law.

PURPOSES TO WHICH THE PROCESSING OF PERSONAL DATA WILL BE SUBJECT.

Your personal information will be used for the following purposes: (a) To provide the services and products requested by you. b) Generate electronic invoices. c) Perform evaluations regarding the quality of the service received. d) Receive promotions from CTUX S.A. DE C.V. e) Inform you about changes or new products or services. f) To comply with obligations contracted with our customers. g) And in general, in order to comply with the services offered by CTUX S.A. DE C.V. by CTUX S.A. DE C.V. For the aforementioned purposes, we are required to obtain personal data, according to the Federal personal data, according to the Federal Law of Protection of Personal Data in Possession of Private Possession of Individuals, which are, among others: 1. NAME OR COMPANY NAME 2. HOME ADDRESS OR ADDRESS OF THE BUSINESS ESTABLISHMENT 3. TAX DOMICILE 4. FIXED TELEPHONE 5. CELL PHONE 6. E-MAIL 7. DATE OF BIRTH 8. RFC. Also, we need to obtain personal data considered as sensitive, such as sensitive, such as, among others 1. SEX (IN CASE OF NATURAL PERSONS). 2. FINANCIAL STATEMENTS. We commit that such information will be treated under the strictest security strictest security measures to guarantee their confidentiality.

OPTIONS AND MEANS OFFERED TO PERSONAL DATA SUBJECTS TO LIMIT THE USE OR DISCLOSURE OF THEIR INFORMATION.

The holder's personal data will only be shared with the supplier who, in support of CTUX S.A. DE C.V., provides the service. provider who, in support of CTUX S.A. DE C.V., provides the service. data will be kept in strict confidentiality, under the principles of lawfulness of legality, quality, consent, information, purpose, loyalty, proportionality and responsibility, in accordance with the security, administrative, technical and physical administrative, technical and physical security measures that CTUX S.A. DE C.V., implements in its C.V. implements in its security policies and procedures, being forbidden its illicit disclosure and limiting its use to any other third party any third party other than the aforementioned supplier, in accordance with the provisions of this Privacy Notice, as well as in the privacy notice that the privacy notice that the provider provides to its client.

MEANS FOR THE EXERCISE OF THE HOLDER'S RIGHTS

It is important to inform you that you have the right to Access your personal data in our possession and to know the details of the to know the details of the processing of your personal data, rectification in case of inaccurate or incomplete Rectification in case of being inaccurate or incomplete, and Cancellation of your personal data if you consider that it is not required for any of the for any of the purposes of this privacy notice, as well as Oppose the treatment of the same or to revoke the consent that for this consent that you have given us for this purpose, communicating your desire to be to be removed from our database in writing, where you provide the data you wish to permanently data you wish to permanently remove from our database. Remember that the same data are registered with the legal or physical person who provided you with the service the service, so you should also contact those responsible for handling your information by the responsible for handling your information on behalf of your provider, to request that they take the same request that they perform the same action. In order to do so, it is necessary to send the request in the terms established by the Law in its Art. 29 and 30 to the Department of Information Technology of CTUX S.A. CTUX S.A. de C.V.'s Information Technology Department, responsible for processing the requests for requests for Access, Rectification, Cancellation or Opposition of the personal data that concern personal data concerning them, via e-mail to [email protected] requesting confirmation of receipt to telephone (0155)59291807 or directly at Laguna de Términos 221, Torre A, Despacho 802, Colonia Granada, C.P. 11460, in Mexico City, Mexico, with the Mexico City, with the head of the Information Technology Department.

TRANSFER OF PERSONAL DATA.

CTUX S.A. DE C.V., may carry out the transfer of data, in a manner that is congruent with the purpose of the data processing and the nature of the relationship between you of the relationship between you, the legal entity or individual that provided the service, to service, to: 1. Affiliated companies and related third parties. 2. Third Party Service Providers. 3. Third Party Clients of the Services. 4. Other transmissions provided for in the aforementioned Law and its Regulations. The Providers of goods or services, third parties and the entities receiving personal entities that receive personal data, assume the same obligations and/or responsibilities of CTUX S.A. responsibilities of CTUX S.A. DE C.V., in accordance with what is described in this Privacy in this Privacy Notice. The holder of personal data who submits any request to enter into a legal relationship with CTUX S.A. DE C.V., in accordance with this Privacy Notice. S.A. DE C.V., or by any of the aforementioned companies, accepts the transfer of their personal the transfer of his/her personal data, under the terms described in this Privacy Notice. Privacy Notice. In case we do not obtain your express opposition for your personal data to be transferred in the form and personal data to be transferred in the manner and terms described above, we will understand that you have tacitly granted your consent to this transfer. to do so. If you express your opposition, we will inform you of the exception to the disclosure of personal data without consent. of the disclosure of personal data without consent, only, only when the disclosure is made by the request of a judicial or administrative authority that administrative authority that founds and motivates the reason for the request. In case you do not wish to receive promotional messages from us, you can send us your request by you can send us your request by e-mail to the following address dirección:[email protected] CTUX S.A. DE C.V., reserves the right to modify the Privacy Notice at any time, in order to Privacy Notice at any time, in order to take into account new legislative new legislation, internal policies or new requirements for the provision or offering of our provision or offering of our services or products. Any modifications to this Privacy Notice may be consulted at: www.xetux.com