Comprehensive Privacy Notice

Ennova América, S.A.P.I. de C.V., with its address at Prado Sur No. 274, Lomas de Chapultepec, Mexico City, 11000 (hereinafter “Ennova América “), as the data controller, recognizes the importance of the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility for the processing of personal data. In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties published in the Official Federal Gazette on July 5, 2010, its Regulation published on December 21, 2011, and the Privacy Notice Guidelines published on January 17, 2013 (the ” Law“), we present this Comprehensive Privacy Notice.

1. Personal data to be processed

Some or all of the following personal data will be processed by Ennova América, as they are necessary to establish and maintain the relationship between you and Ennova América:

• Identification data: name and email address

2. Purposes of Processing Personal Data

The personal data you provide voluntarily will be processed for the existence, maintenance, and fulfillment of the legal relationship between you and Ennova América. Ennova América will process your personal data for:

• Contacting you;
• Fulfilling the purpose of the relationship that gave rise to the processing of your personal data
• Addressing any questions or comments you send us through any means

Ennova América will not process your data for marketing, advertising, or commercial prospecting purposes.

3. Data Transfers

Ennova América will transfer your personal data within the national territory or abroad in order to establish, maintain, and fulfill the legal relationship between you and Ennova América (the “Recipients“). Ennova América will transfer all or part of the information you provide to the Recipients via emails and/or other forms of information transmission.

The Recipients may be of two types: (i) companies with which Ennova América has a contractual, commercial, or professional relationship, and (ii) third parties unrelated to Ennova América, when the transfer is made specifically for the maintenance or fulfillment of the legal relationship between Ennova América and you. These may include, for example, the transfer of data to legal, fiscal, financial, labor, or IT service advisors. In both cases, Ennova América will inform the recipient of the data protection measures implemented by Ennova América. However, Ennova América will not be responsible for the processing of your personal data by third parties, as such actions are beyond the control of Ennova América. Similarly, you are informed that Ennova América, at its discretion, may request information from third parties regarding your legal and personal background, for which Ennova América will verify that those third parties have a privacy policy that protects your personal data.

In any of the above cases, Ennova América does not require your consent to transfer your personal data, pursuant to Article 37 of the Law. However, if you object to the transfer of your personal data, please send an email to [email protected] to ensure that your data is not transferred. Any other type of data transfer can only be made if: (i) it is provided for by the Law, (ii) it is the result of an order from a competent authority, or (iii) there is express consent from the data subject.

4. Security Measures

Ennova América has adopted the necessary administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing. However, due to the existence of communications via the internet, which are outside our control, we cannot guarantee that your personal data transmitted to us by this means will be free from unauthorized use, access, or processing.

The security measures adopted by Ennova América will be reviewed and examined in light of technical and legal developments and will not be less than those Ennova América adopts to protect its own information.

If we become aware of any security breach during the processing of personal data that affects your right to privacy, the personal data officer at Ennova América will immediately notify you by email about the security breach so that you can take the necessary measures to defend your rights.

In any case, access to your personal data in the possession of Ennova América will be limited to the individuals who need to access such information to fulfill the purposes outlined in this Privacy Notice.

5. Rights of Data Subjects (ARCO Rights)

As the data subject, you can contact Ennova América’s Legal and Compliance Department to exercise the rights of access, rectification, cancellation, and/or opposition (“ARCO Rights“) established by the Law. You can also revoke consent at any time and limit the use or disclosure of your personal data. If, after revocation, you request confirmation of the same, ENNOVA AMÉRICA will respond expressly.

To exercise the ARCO Rights, you must submit a written request addressed to the personal data officer at Ennova América and send it to the email address [email protected], or to our offices at Prado Sur No. 274, Lomas de Chapultepec, Mexico City, 11000, from Monday to Friday between 9:00 a.m. and 6:00 p.m., attention to the personal data officer, clearly stating your request (the “ARCO Request“). The ARCO Request must include a copy of your valid official identification and specify the method by which you wish to receive the response from Ennova America. The corresponding personal data officer at ENNOVA AMERICA will respond to your ARCO Request via method you chose, providing the reasons for their decision, within a maximum of 20 (twenty) business days from the day your ARCO Request was received (or from the timeframe established by Law, whichever is longer). The procedure will be carried out in accordance with what is established in the Law.

To facilitate this process, Ennova América will provide suggested forms for the ARCO rights requests, which are available directly at the personal data department at Ennova América’s offices.

According to the Law and its Regulation, we inform you that, in case of refusal to respond to ARCO requests or dissatisfaction with the response, you can submit the corresponding ARCO Request to the National Institute for Transparency, Access to Information, and Protection of Personal Data within the timeframes and terms established by the Law and its Regulation.

6. Changes to the Privacy Notice

Any modifications to this Privacy Notice will be communicated to you at least 30 (thirty) days before the changes take effect by updating the notice on the website www.ennovaamerica.com.