Confidentiality notice

Dear Customer,

Given that LIC. GRACIELA DE LOURDES ALVAREZ HOTH is an individual insurance and bonding agent responsible for collecting and processing personal data that has been or may be obtained, we have implemented mechanisms to ensure the security of your personal data (the “Personal Data”). Therefore, we provide the following:

PRIVACY NOTICE

In accordance with articles 15, 16, and other applicable provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (the “Law”) and its regulations, we hereby inform you that LIC. GRACIELA DE LOURDES ALVAREZ HOTH, as an individual insurance and bonding agent and owner of the registered trademark NRGI BROKER (“NRGI BROKER”), located at Corporativo Punta Santa Fe, Prolongación Paseo de la Reforma number 1015, Tower “A”, floor 21, Tlaxala, 05300, Mexico City, telephone (52 55) 91772100, and website www.nrgibroker.com, is responsible for collecting, using, and protecting Personal Data in compliance with the principles of legality, quality, consent, information, purpose, loyalty, proportionality, and responsibility.

Our clients provide Personal Data to NRGI BROKER directly, indirectly, personally, or through its subsidiaries, affiliates, related companies, parent companies, and/or business partners.

Personal Data is collected through: corporate offices; email and/or telephone, and may include: (a) name(s) and surname(s); (b) email address; (c) telephone numbers (work, home, and mobile); (d) proof of address; (e) official identification; (f) date of birth; (g) nationality; (h) handwritten signature; (i) photograph; (j) physical health status; (k) medical history; (l) description and value of assets; (m) description of activities; (n) technical information about your operation; (o) contracts with clients and suppliers; (p) real estate asset data; (q) birth and marriage certificates; (r) financial statements; (s) annual tax returns, and (t) any other information related to the insurance and bonding intermediary activity.

Personal Data includes Sensitive Data.

The primary purposes applicable to Personal Data (the “Primary Purposes”) shall be: (a) identifying you as a client or legal representative; (b) obtaining insurance or bonding quotes from insurance and bonding institutions; (c) generating insurance and bonding policy requests and/or endorsements; (d) managing premium payments, renewals, cancellations, extensions, and refunds of insurance or bonds; (e) managing insurance or bond claims; (f) preparing documents, contracts, agreements, invoices, receipts, and documentation related to the relationship; (g) storage; (h) generally performing any activity related to insurance and bonding intermediation, and (i) complying with terms and conditions established with you.

The secondary purposes applicable to Personal Data (the “Secondary Purposes”) shall be: (a) statistics; (b) marketing, and (c) prospecting.

The confidentiality of Personal Data is guaranteed, and it is protected by administrative, technical, and/or physical security measures to prevent damage, loss, alteration, destruction, unauthorized use, access, or disclosure, for example, Personal Data is stored in an internal database, the administration of which is through access keys that change periodically and whose access is restricted to authorized personnel; confidentiality agreements with its personnel, among others.

You have the right to access, rectify, and cancel your Personal Data, to object to the processing of the same (together, the “ARCO Rights”). To exercise these rights, you or your legal representative must submit a written Request for the exercise of ARCO Rights to the customer service area of NRGI BROKER, responsible for the protection of Personal Data, located at the aforementioned address, or alternatively, communicate via email to NRGI BROKER’s customer service area at oficinadeprivacidad@nrgibroker.com, (“Request”): in both cases, an acknowledgment of receipt must be received for NRGI BROKER to be bound thereby. Such Request must contain the following information: (a) your and, if applicable, your representative’s full name(s) and surname(s); email address for receiving notifications; (c) a simple copy of your or your representative’s official photo identification; (d) evidence of representation, through a public instrument or power of attorney signed before two witnesses; (e) a clear and precise description of the Personal Data regarding which you seek to exercise any of the ARCO rights; (f) any element or document facilitating the location of your Personal Data, and (g) signature of the Request by you or your representative.

In case of requesting the exercise of the right of: (a) Rectification, you must indicate the modifications to be made and provide the documentation supporting the request, and (b) Access, NRGI BROKER will provide the Personal Data via email and/or by appointment at corporate offices, at NRGI BROKER’s choice.

Within a maximum period of 20 business days from the receipt acknowledgment of the Request, the request must be addressed, and you must be informed of its acceptance or denial through a notice sent to the email provided for receiving notifications. If your Request is deemed appropriate, NRGI BROKER must comply with it within 15 business days following the receipt via email of the acceptance of your Request.

In addition, to the procedure for exercising ARCO Rights, you have the right, regarding Secondary Purposes, to: (a) revoke or express your refusal to process your Personal Data, and/or (b) be included in the “Exclusion List” enabled and specific to NRGI BROKER, which allows us to limit the use and disclosure of Personal Data. For both purposes, you only need to send us the Request to revoke or be excluded, which must contain (a) your full name(s) and surname(s), and (b) your email address for responding to your Request; this should be addressed to NRGI BROKER’s customer area at the following email address: oficinadeprivacidad@nrgire.com, with acknowledgment of receipt being necessary for NRGI BROKER to be bound thereby. The acknowledgment of receipt includes confirmation of revocation and/or inclusion in the Exclusion List. NRGI BROKER has a maximum period of 5 business days to respond. All documentation must be sent in PDF format, legible and complete, for NRGI BROKER to handle the Request.

If you believe that your right to the protection of Personal Data has been violated by NRGI BROKER or if you suspect that there is a violation of the provisions of the Law in the processing of your Personal Data, you may file your corresponding complaint or report with the National Institute for Transparency, Access to Information and Personal Data Protection, INAI (www.inai.org.mx), within 15 days following the date you receive NRGI BROKER’s response or from the expiration of the 20-day period from the date of receipt acknowledgment of the Request to exercise rights.

NRGI BROKER is an individual insurance and bonding agent, consequently, Personal Data may be transferred within the country to Insurance and Bonding Companies, subsidiaries, affiliates, related companies, parent companies, business partners, and/or third parties, for the same aforementioned purposes, especially for insurance and bonding intermediation and to fulfill the Primary Purposes. Likewise, it may be transmitted to the following persons: legal, accounting, and/or tax advisors, and any others necessary to fulfill the purposes for which you contacted us.

Important: Any modifications to this Privacy Notice will be communicated to you on the website www.nrgibroker.com, located in the bottom left section of the homepage under the Privacy Notice section, without the need for individual communication thereof to you.

Last update date: 2024-05-12

[*] Personal Data Protection.