1. Data Controller

Green Tide Logistics, S.A.P.I. de C.V. (hereinafter, GT) with legal address at José Luis Lagrange No. 103, 10th floor, Colonia Polanco I section, Alcaldía Miguel Hidalgo, C.P. 11510, when collecting your personal data, is responsible for its use and protection.

1. Personal Data

GT will collect from you (hereinafter the “Owner”) the following personal data as a Client/Supplier:

-Contact details

-Identification data

-Location data

-Economic data, as appropriate.

III. Sensitive Personal Data

GT does not collect any type of sensitive data from the Owner. All data that may reveal racial or ethnic origin, present or future health conditions, genetic information, religious, philosophical or moral beliefs, political opinions or sexual preference are considered sensitive.

1. Purposes of the Processing

The processing of personal data will be limited exclusively to the fulfilment of the purposes envisaged with the Customers/Suppliers. The primary purposes will be:

– Identify the Data Subject and integrate their file

-Incorporate data on legal instruments to formalize contracts

– Assign or transfer to a third party, by any means, rights and/or obligations arising from such contracts

– Use personal data in any judicial or extrajudicial recovery action or procedure; and

-Comply with all applicable laws, regulations and general provisions.

1. Data Transfer

The Owner’s personal data will be transferred nationally and internationally, to individuals or legal entities located within the following types, categories or sectors, who will assume the same obligations as GT. This data transfer will be carried out exclusively for the following purposes:

To other companies Shareholders, subsidiaries or affiliates of GT, or to other holding companies or any company to which GT belongs that operates under the same internal procedures and policies, for the purpose of:

• Identify the Data Owner and integrate their file.
• Incorporate data on legal instruments to formalize contracts, in which the client you represent intends to contract with GT, if applicable;
• Assign or transfer to a third party, by any means, rights and/or obligations arising from such contracts, provided that it is in the interest of the Owner;
• Use personal data in any judicial or extrajudicial recovery action or procedure;
• Comply with all applicable laws, regulations and general provisions; and
• Share it with national and international authorities to comply with any laws, regulations or legal provisions, if applicable.
• Any other transfers permitted pursuant to the Act.

Please note that your consent will not be required to carry out:

• the transfer described in section A. above, as it is the hypothesis provided for in section III of article 37 of the Federal Law on the Protection of Personal Data in Possession of Private Parties and
• such transfers within the hypothesis provided for in Article 37 of the Federal Law on the Protection of Personal Data in Possession of Private Parties.

1. ARCO Rights

If at any time the Owner, by itself or through a duly authorized legal representative, wishes to exercise its rights of Access, Rectification, Cancellation or Opposition to the processing of its personal data (the “ARCO Rights”), it may request a form to exercise said rights via email to __________________, with the name and data of the Owner.

The form for the exercise of the ARCO Rights must be filled out, signed and filed together with the following documents in order to authenticate the Owner:

• Official and valid identification of the Holder (INE Credential, Passport, Military Service Document or Professional License).
• In the event that the exercise of the ARCO Rights is carried out through the legal representative of the Owner, the official identification of the representative must be provided along with the power of attorney that recognizes the legality of the Owner.
• Proof of residence or any other means to communicate the response to the Owner’s request.
• The clear and foreseeable description of the personal data in accordance with the ARCO Law that you wish to claim. It is especially important when exercising rectification, to include documentation that proves the requested modification based on the personal data to be rectified.

GT will respond to such form 20 (twenty) business days following the date on which the form has been received. The resolution adopted by GT will be notified to the Owner by the means chosen by the Owner in the form for the exercise of the ARCO Rights. In the event that the resolution adopted is in process, GT will make it effective within 15 (fifteen) days following the date on which the resolution is notified. It is important to mention that these deadlines may be extended only once and in the same period of time when the circumstances justify it, after notifying the Owner.

In the event that you wish to revoke your consent or oppose the processing of your personal data for Secondary Purposes, after signing this Privacy Notice, you must send an email to the aforementioned address.

VII. Changes to the Privacy Notice

This privacy notice will be made available to the Owner through printed, digital and visual formats, and will be available on the GT website. Likewise, any modifications made to this privacy notice will be sent to the Owner by such means.

It is hereby stated that this privacy notice is made in Spanish and English, with the understanding that, in the event of a dispute arising from its interpretation, the Spanish version shall prevail.

By signing this privacy notice, the Owner consents to the processing of his/her personal data by GT, in accordance with the provisions of the privacy notice, for the purposes mentioned above and transferred only to the third parties provided herein.