Comprehensive Privacy Notice

In compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares - hereinafter "LFPDPPP"-, we provide you with this Integral Privacy Notice, and in this regard we inform you of the following:

RESPONSIBLE FOR THE PROTECTION OF PERSONAL DATA.

"V MThree, S.A de C.V."with address to hear and receive notifications at Calle Moliere Número 310, Colonia Polanco I Sección, Alcaldía Miguel Hidalgo, Código Postal 11510, Mexico City, is responsible for the treatment and protection of your Personal Data that may be collected.

INFORMATION ABOUT OUR PERSONAL DATA CONTROLLER AND HOW TO CONTACT HIM/HER.

Our Personal Data Controller is the person within "V MThree, S.A de C.V. "In compliance with article 30 of the "LFPDPPP", has been formally designated to:

To attend to the requests of the owners to exercise their rights.

Promote and ensure the protection of Personal Data in our possession.

For all matters relating to the processing and protection of your Personal Data, which you may provide to us, you may contact our Personal Data Controller by sending an e-mail to the following address: info@vmthree.com

SENSITIVE PERSONAL DATA.

We do not collect sensitive Personal Data through direct or indirect means.

PURPOSES OF THE PROCESSING OF THE PERSONAL DATA COLLECTED.

Personal Data are collected for the following primary and secondary purposes:

a) Primary. - – Purposes that give rise to and are necessary for the legal relationship between you and "V MThree, S.A de C.V.".listed by way of example, but not limited to:

Identification and contact data: name of the requesting company, name of the requesting executive, name of the end user, nationality of the end user, address of the requesting company, address of the survey and delivery address, e-mail of the user and client, telephone number of the user and client, Unique Population Registry Code, Federal Taxpayers Registry, INE, electronic signature and signature.

Provide information you request, make quotes, schedule services, cancellations, changes and collection.

Air, sea and/or land transport to national and international destinations.

Notify you of schedule changes, cancellations, and confirmations of lifts.

To notify you of changes in costs, for any of the reasons set out in our cancellation policy.

Uprisings.

Issue and provide you with the corresponding tax receipts for the payment of the contracted services.

To attend to advice and consultations via chat and/or by any other means.

To attend to clarifications, comments and complaints in relation to the service provided, as well as to take into consideration the opinions you send us.

Report any incidents to you if they happen.

Documentation of the survey - physical, virtual with consultancy, virtual without consultancy and/or via telephone, estimation by list [inventory] -, by means of photographs, video recording.

Communication via e-mail of completed survey to client and user.

Delivery of the lifting video.

Regulatory and/or contractual compliance.

b) Secondary. - – Purposes other than and not giving rise to the legal relationship between you and "V MThree, S.A. de C.V. "V MThree, S.A. de C.V."but which are extremely useful for us to provide you with a better service and to develop our legitimate commercial interests:

Surveys, evaluation and monitoring of the services provided

Contact him to know his opinion of our services.

To inform you and/or offer you products, services and promotions, either our own or those of third parties.
Marketing, advertising, commercial prospecting and profiling

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose for a maximum period of 5 years or, failing that, for as long as any legal liability arising from this service may arise.

The controller may send notifications by any electronic means (SMS, email, WhatsApp, etc.) that concern your contracted services and are important to you based on our legitimate interest. If you do not wish to receive such notifications by any means, please send us an email to the address listed in the section on INFORMATION ABOUT OUR CONTROLLER of this Notice to inform us.

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose for a maximum period of 5 years or, failing that, for as long as any legal liability arising from this service may arise.

Contact you, including by electronic means (e-mail, AM applications, SMS, etc.) or telephone, to carry out evaluation and follow-up surveys, to find out your opinion and experience of the services before, during and at the end of the logistics service we have provided you with. The legitimate basis for such processing is our legitimate interest in improving our services and/or products.

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose until the end of the quality of service study.

To comply with the company's security, administrative and/or legal requirements and other security agreements concluded with port and customs administrations. The legitimate basis for such processing is compliance with legal obligations.

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose for a maximum period of 5 years or, failing that, for as long as any legal liability arising from this service may arise.

To manage suggestions, complaints, requests, applications, queries and requests for information of any kind that you direct to us in relation to the provision of the contracted service, for example, claims or refunds, for any irregularity, where applicable. The legitimate basis for such processing is the fulfilment of legal obligations of "V MThree, S.A. de C.V.as well as the provision of the services contracted by you.

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose for a maximum period of 5 years or, failing that, for as long as any legal liability may arise in relation to suggestions, claims, applications, queries and requests for information.

Marketing, advertising, commercial prospecting and profiling (if you have given us your express consent in the latter case). The legitimate basis for this processing is the legitimate interest of "V MThree, S.A. de C.V.in improving and promoting our services and products to our customers, as well as your express consent, where applicable. In accordance with the section on PERSONAL DATA PROTECTION RIGHTSyou have the right to request human intervention by the controller, to express your point of view and to challenge the decision, as well as to withdraw your consent and to object to the processing of your data for these purposes.

"V MThree, S.A de C.V."will keep this Personal Data for this purpose for a period of 6 years from the time you last logged in as a registered user to our website or used our services.

SECURITY MEASURES

"V MThree, S.A. de C.V." carries out control elements that have the objective of guaranteeing the confidentiality, integrity and availability of your Personal Data that it collects, for which we inform you that the security measure that "V MThree, S.A. de C.V." has put in place to guarantee the confidentiality, integrity and availability of the Personal Data that it collects. "V MThree, S.A. de C.V." implements for the handling of your information is the technical security measure, always verifying that it complies with the stipulations of article 19 in relation to article 52 of the Regulations of the Federal Law for the Protection of Personal Data in Possession of Private Parties (RLFPDPPP).

ARCO RIGHTS

Under the terms of the applicable regulations, you have the right to know what Personal Data we have, what we use it for and the conditions of the use we make of it -Access-; you also have the right to request the correction of your personal information in case it is outdated, inaccurate or incomplete -Rectification-; that we remove it from our records or databases when you consider that it is not being used properly -Cancellation-; as well as to oppose the use of your Personal Data for specific purposes -Opposition-. These rights are known as ARCO Rights.

In relation to the procedure and requirements for the exercise of your ARCO rights, we inform you of the following:

The application for the exercise of ARCO rights must contain

The name and address of the owner or any other means of receiving notifications;
Documents proving the identity of the holder and, where appropriate, the personality and identity of his representative;

III. If possible, the area responsible for processing the Personal Data and to which the request is submitted;

The clear and precise description of the Personal Data in respect of which the exercise of any of the ARCO rights is sought, except in the case of the right of access;
The description of the ARCO right to be exercised, or what the owner is requesting, and
Any other element or document that facilitates the location of the Personal Data.

Now, in the case of a request for access to Personal Data, you must indicate the form in which you would prefer them to be reproduced; in relation to a request for cancellation, you must indicate the reasons that motivate you to request the deletion of your Personal Data in the files, registers or databases; in the case of a request for objection, you must state the legitimate reasons or the specific situation that leads you to request the cessation of the processing, as well as the damage or harm that the persistence of the processing would cause you, or if applicable, the specific purposes in respect of which you need to exercise the right of objection; finally, in the case of a request for rectification, it is suggested that you include the documents that support the requested modification.

Forms, systems and other simplified methods to facilitate the exercise of your ARCO rights can be found at www.inai.org.mx

CHANGES TO THIS PRIVACY NOTICE.

We reserve the right to make changes or updates to this privacy notice at any time in response to new legislation, internal policies or new requirements for the provision or offering of our services or products. The updated version will be available to the public through any of the following means:

Ads visible in our establishment.

On our website.

IMPROPER PROCESSING OF PERSONAL DATA.

If you consider that your right to the protection of Personal Data has been violated by any conduct or omission on our part, or you presume any violation of the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), and other applicable laws, you may file a complaint with the National Institute for Transparency, Access to Information and Protection of Personal Data -INAI-. For more information, we suggest you visit their official website at www.inai.org.mx

Date of most recent update: 21 May 2021.

COMPREHENSIVE PRIVACY NOTICE (EU)

In compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares - hereinafter "LFPDPPP"-; Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, we provide you with this comprehensive privacy notice, and in this regard we inform you of the following:

RESPONSIBLE FOR THE PROTECTION OF PERSONAL DATA.

INFORMATION ABOUT OUR MANAGER AND HOW TO CONTACT HIM/HER.

Our Personal Data Protection Officer is the internal person of "V MThree, S.A. de C.V." who, in compliance with data protection regulations, has been formally appointed to:

To attend to the requests of the owners to exercise their rights.

Promote and ensure the protection of the Personal Data we process.

For all matters relating to the processing and protection of personal data, you may contact our Personal Data Protection Officer by sending an e-mail to the following address: info@vmthree.com

PURPOSES OF THE PROCESSING OF PERSONAL DATA COLLECTED / GENERAL CONSIDERATIONS ON DATA PROCESSING.

The processing of Personal Data is generally prohibited, unless this is permitted by an express legal provision. According to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the processing of Personal Data, within the specific scope of action of "V MThree, S.A de C.V."shall mainly, but not exclusively, relate to the framework of the current contractual relationship with the data subject, as well as the preparation and subsequent execution of the contract with the data subject, among others.

PERSONAL DATA WE COLLECT.

In order to carry out the purposes indicated in the paragraph referring to PURPOSES OF THE PROCESSING OF THE PERSONAL DATA COLLECTED/GENERAL CONSIDERATIONS ON THE PROCESSING OF DATA of this Privacy Notice, we may collect, as appropriate, the following categories of personal data: (I) Identification and (II) Contact.

These data are those strictly necessary for the fulfilment of the purposes indicated in the paragraph that refers to PURPOSES OF THE PROCESSING OF THE PERSONAL DATA COLLECTED / GENERAL CONSIDERATIONS ON DATA PROCESSING. Therefore, your refusal to provide them may mean that we cannot provide you with the services and/or products you request or contract with us.

You warrant to "V MThree, S.A de C.V. the veracity of the Personal Data you have provided us with, and this company reserves the right to exclude you from the contracted services in the event that the Personal Data provided are false or fraudulent, without prejudice to the actions that the law recognises.

With regard to sensitive data, we inform you of the following:

We do not collect sensitive Personal Data through third parties or by means of direct or indirect collection, but only when you provide it to us personally.

PURPOSES OF THE PROCESSING OF THE PERSONAL DATA COLLECTED, LEGITIMACY AND STORAGE PERIODS.

Below, we indicate the different purposes for which "V MThree, S.A. de C.V. processes your personal data, the legal bases that legitimise the processing of your data and the periods for which we will keep them:

(a) Primary. - Purposes that give rise to and are necessary to be able to carry out your business activities and fulfil all the obligations arising from the legal relationship between you and "V MThree, S.A de C.V.".listed in an enunciative, but not limited manner:

Identification and contact details: name of the requesting company, name of the requesting executive, name of the end-user, nationality of the end-user, address of the requesting company, address of the survey and delivery address, e-mail address of the user and client, telephone number of the user and client, passport, residence card, electronic signature or signature.

Provide information you request, make quotes, schedule services, cancellations, changes and collection.

Air, sea and/or land transport to national and international destinations.

Notify you of schedule changes, cancellations, and confirmations of lifts.

To notify you of changes in costs, for any of the reasons set out in our cancellation policy.

Uprisings.

Issue and provide you with the corresponding tax receipts for the payment of the contracted services.

To attend to advice and consultations via chat and/or by any other means.

To attend to clarifications, comments and complaints in relation to the service provided, as well as to take into consideration the opinions you send us.

Report any incidents to you if they happen.

Documentation of the survey - physical, virtual with consultancy, virtual without consultancy and/or via telephone, estimation by list [inventory] -, by means of photographs, video recording.

Communication via e-mail of completed survey to client and user.

Delivery of the lifting video.

Regulatory and/or contractual compliance.

b) Secondary. - Purposes other than and which do not give rise to the legal relationship between you and "V MThree, S.A. de C.V."but which are extremely useful for us to provide you with a better service and to develop our legitimate commercial interests:

Surveys, evaluation and monitoring of the services provided

Contact him to know his opinion of our services.

To inform you and/or offer you products, services and promotions, either our own or those of third parties.

Marketing, advertising, commercial prospecting and profiling

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose for a maximum period of 5 years or, failing that, for as long as any legal liability arising from this service may arise.

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose until the end of the quality of service study.

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose for a maximum period of 5 years or, failing that, for as long as any legal liability arising from this service may arise.

"V MThree, S.A de C.V."will keep this Personal Data for this purpose for a period of 6 years from the time you last logged in as a registered user to our website or used our services.

COMMUNICATION OF PERSONAL DATA AND INTERNATIONAL TRANSFERS.

For the fulfilment of the purposes indicated in the paragraph above. PURPOSES OF THE PROCESSING OF THE PERSONAL DATA COLLECTED, LEGITIMACY AND RETENTION PERIODS OF THIS PRIVACY NOTICE, YOUR PERSONAL DATA MAY BE COMMUNICATED TO THE FOLLOWING THIRD PARTIES of this Privacy Notice, your Personal Data may be disclosed to the third parties listed below:

Migration and customs authorities of the country of origin and of the countries to which the service is provided, in order to comply with the corresponding legal provisions.

Transfer solely to fulfil the logistics services of the data necessary for the shipment and delivery of the goods to the customer of the contractor, to the local and foreign branches of the "V MThree, S.A. de C.V." group. "V MThree, S.A. de C.V." and to external suppliers. and to external suppliers. The transfer of data to a third country without an equivalent level of protection in order to fulfil a contract between the persons concerned and the head office responsible for the processing shall be permitted, provided that the transfer is necessary for the execution of the contract.

LEGITIMISATION OF THE PROCESSING OF YOUR PERSONAL DATA.

The above communications of your Personal Data, as well as the purposes of the processing to be carried out as described above, are legitimised, as the case may be, by the following:

To comply with our company's legal obligations.

To ensure our legitimate interest.

HANDLING OF PERSONAL DATA

The collection, processing or use of Personal Data is generally prohibited unless expressly permitted by law. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the collection, processing or use of Personal Data is only permitted in principle:

Within the framework of an existing contractual relationship with the data subject.

In the course of the preparation or execution of a contract with the person concerned.

Provided that the data subject has given consent.

LAWFULNESS OF PERSONAL DATA

Provided that we have the data subject's consent to process his or her personal data, Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 shall apply.

Where the processing of Personal Data is required for the performance of a contract to which the data subject is a party, Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 shall apply. It shall also apply to data processing processes that are necessary in the context of pre-contractual measures.

Where the processing of Personal Data is done in order to comply with a legal obligation applicable to our company, Article 6(1)(c) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 shall apply.

If the processing is necessary for the fulfilment of legitimate interests pursued by our enterprise or a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 shall apply as the legal basis for the processing.

TRANSFER OF DATA TO THIRD PARTIES

Personal Data will only be disclosed to third parties involved such as subsidiaries, business partners, subcontractors for the purpose of performing the logistics and contractual services contracted by them. The Personal Data of the data subjects that are necessary to perform the logistics service will also be disclosed to the party contracting this service (e.g. proof of delivery).

The processing of all your Personal Data will comply with the provisions of the specific regulations on the protection of Personal Data, under the principles of legality, consent, information, quality, purpose, loyalty, proportionality and responsibility, transparency, data minimisation, confidentiality, limitation in the period of conservation and security measures -active responsibility-.

SECURITY MEASURES

ARCO RIGHTS

In relation to the procedure and requirements for the exercise of your ARCO rights, we inform you of the following:

The application for the exercise of ARCO rights must contain

The name and address of the owner or any other means of receiving notifications;
Documents proving the identity of the holder and, where appropriate, the personality and identity of his representative;

III. If possible, the area responsible for processing the Personal Data and to which the request is submitted;

The clear and precise description of the Personal Data in respect of which the exercise of any of the ARCO rights is sought, except in the case of the right of access;
The description of the ARCO right to be exercised, or what the owner is requesting, and
Any other element or document that facilitates the location of personal data.

In the case of a request for access to personal data, you must indicate the form in which you prefer the data to be reproduced; in relation to a request for cancellation, you must indicate the reasons for requesting the deletion of your Personal Data from the files, registers or databases; in the case of a request for objection, you must state the legitimate reasons or the specific situation that leads you to request the cessation of the processing, as well as the damage or harm that the persistence of the processing would cause you, or if applicable, the specific purposes in respect of which you need to exercise the right of objection; finally, in the case of a request for rectification, it is suggested that you include the documents that support the requested modification.

Forms, systems and other simplified methods to facilitate the exercise of your ARCO rights can be found at www.inai.org.mx

CHANGES TO THIS PRIVACY NOTICE.

Ads visible in our establishment.

On our website.

IMPROPER PROCESSING OF PERSONAL DATA.

Date of most recent update: 13 May 2021.

COMPREHENSIVE PRIVACY NOTICE (Spain)

In compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares -hereinafter "LFPDPPP"-; Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, for the processing of Personal Data of data subjects residing in the European Union and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we make this comprehensive privacy notice available to you, and in this regard we inform you of the following:

RESPONSIBLE FOR THE PROTECTION OF PERSONAL DATA.

INFORMATION ABOUT OUR PRIVACY OFFICER AND HOW TO CONTACT HIM OR HER.

Our Personal Data Protection Officer (Privacy Officer) is the internal person at "V MThree, S.A de C.V." who, in compliance with data protection regulations, has been formally appointed to:

To attend to the requests of the owners to exercise their rights.

Promote and ensure the protection of the Personal Data we process.

For all matters relating to the processing and protection of personal data, you may contact our Personal Data Protection Officer (Privacy Officer) by sending an e-mail to the following address: info@vmthree.com

PERSONAL DATA WE COLLECT.

In order to carry out the purposes indicated in the paragraph that refers to PURPOSES OF THE PROCESSING OF PERSONAL DATA COLLECTED, LEGITIMISATION AND RETENTION PERIODS of this Privacy Notice, we may collect, as appropriate, the following categories of personal data: (I) Identification and (II) Contact.

These data are those strictly necessary for the fulfilment of the purposes indicated in the paragraph referring to PURPOSES OF THE PROCESSING OF THE PERSONAL DATA COLLECTED, LEGITIMACY AND STORAGE PERIODS. Therefore, your refusal to provide them may mean that we cannot provide you with the services and/or products you request or contract with us.

With regard to sensitive data, we inform you of the following:

We do not collect Sensitive Personal Data through third parties or by means of direct or indirect collection, but only when you provide it to us personally.

PURPOSES OF THE PROCESSING OF THE PERSONAL DATA COLLECTED, LEGITIMACY AND STORAGE PERIODS.

(a) Primary. - Purposes that give rise to and are necessary to be able to carry out your business activities and fulfil all the obligations arising from the legal relationship between you and "V MThree, S.A de C.V.".listed in an enunciative, but not limited manner:

Identification and contact details: name of the requesting company, name of the requesting executive, name of the end-user, nationality of the end-user, address of the requestor, address of the survey and delivery address, e-mail address of the user and client, telephone number of the user and client, passport, residence card, electronic signature or signature.

Provide information you request, make quotes, schedule services, cancellations, changes and collection.

Air, sea and/or land transport to national and international destinations.

Notify you of schedule changes, cancellations, and confirmations of lifts.

To notify you of changes in costs, for any of the reasons set out in our cancellation policy.

Uprisings.

Issue and provide you with the corresponding tax receipts for the payment of the contracted services.

To attend to advice and consultations via chat and/or by any other means.

To attend to clarifications, comments and complaints in relation to the service provided, as well as to take into consideration the opinions you send us.

Report any incidents to you if they happen.

Documentation of the survey - physical, virtual with consultancy, virtual without consultancy and/or via telephone, estimation by list [inventory] -, by means of photographs, video recording.

Communication via e-mail of completed survey to client and user.

Delivery of the lifting video.

Regulatory and/or contractual compliance.

b) Secondary. - Purposes other than and which do not give rise to the legal relationship between you and "V MThree, S.A. de C.V."but which are extremely useful for us to provide you with a better service and to develop our legitimate commercial interests:

Surveys, evaluation and monitoring of the services provided

Contact him to know his opinion of our services.

To inform you and/or offer you products, services and promotions, either our own or those of third parties.

Marketing, advertising, commercial prospecting and profiling

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose for a maximum period of 5 years or, failing that, for as long as any legal liability arising from this service may arise.

The controller may send notifications by any electronic means (SMS, email, WhatsApp, etc.) that concern your contracted services and are important to you based on our legitimate interest. If you do not wish to receive such notifications by any means, please send us an email to the address listed in the section below. INFORMATION ABOUT OUR PRIVACY OFFICER AND HOW TO CONTACT HIM OR HER section of this Notice to let us know.

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose for a maximum period of 5 years or, failing that, for as long as any legal liability arising from this service may arise.

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose until the end of the quality of service study.

"V MThree, S.A. de C.V."will keep this Personal Data for this purpose for a maximum period of 5 years or, failing that, for as long as any legal liability arising from this service may arise.

Marketing, advertising, commercial prospecting and profiling (if you have given us your express consent in the latter case). The legitimate basis for this processing is the legitimate interest of "V MThree, S.A. de C.V.in improving and promoting our services and products to our customers, as well as your express consent, where applicable. In accordance with the section of the RIGHTS OF PROTECTION OF PERSONAL DATAyou have the right to request human intervention by the controller, to express your point of view and to challenge the decision, as well as to withdraw your consent and to object to the processing of your data for these purposes.

"V MThree, S.A de C.V."will keep this Personal Data for this purpose for a period of 6 years from the time you last logged in as a registered user to our website or used our services.

COMMUNICATION OF PERSONAL DATA AND INTERNATIONAL TRANSFERS.

For the fulfilment of the purposes indicated in the paragraph above. PURPOSES OF THE PROCESSING OF THE PERSONAL DATA COLLECTED, LEGITIMISATION AND STORAGE PERIODS of this Privacy Notice, your Personal Data may be disclosed to the third parties listed below:

International companies with which we have or any other international organisation, in order to provide you with the contracted service and grant you benefits.

Migration and customs authorities of the country of origin and of the countries to which the service is provided, in order to comply with the corresponding legal provisions.

LEGITIMISATION OF THE PROCESSING OF YOUR PERSONAL DATA.

The above communications of your Personal Data, as well as the purposes of the processing to be carried out as described above, are legitimised, as the case may be, by the following:

To comply with our company's legal obligations.

To ensure our legitimate interest.

SECURITY MEASURES

PERSONAL DATA PROTECTION RIGHTS.

Under the terms of the applicable regulations, you have the right to know what Personal Data we process, for what purpose such processing is carried out and the conditions of the use we make of it (Access). Likewise, it is your right to request the correction of your personal information in case it is outdated, inaccurate or incomplete (Rectification); that we remove it from our records or databases when you consider that it is not being used properly (Deletion); as well as oppose the use of your Personal Data for specific purposes (Opposition); limit the processing of your data (Limitation), as well as the right to the portability of your data. You may also revoke the consents granted.

In order to exercise any of your rights, you must submit the respective request, accompanied by your identification documentation, by e-mail to our Privacy Officer, who will inform you about the procedure and requirements for the exercise of these rights, response times, the way in which we will make your right effective, and will deal with any questions, complaints or comments you may have in this regard.

SPECIALITY OF THE LOPDGDD FOR DATA OF USERS RESIDENT IN SPAIN

In accordance with article 32 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), we will block the data when it is rectified or deleted.

These two situations will occur when:

The data subject shall request the controller to rectify inaccurate Personal Data concerning him/her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete Personal Data completed, including by means of an additional declaration (Article 16 Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights).

The data subject requests the controller to erase the Personal Data concerning him/her, who shall be obliged to erase the Personal Data without undue delay when the data are no longer necessary to fulfil the purposes for which they were collected; in the following cases:

The data subject withdraws his or her consent.

The data subject objects to the processing and no other legitimate grounds for processing prevail.

The data are processed unlawfully.

The data must be deleted due to a legal obligation or the data have been obtained in connection with the provision of information society services (Article 17 Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights).

The blocking of the data shall consist of the identification and reservation of the data, adopting technical and organisational measures to prevent their processing, including their visualisation, except for making the data available to the Spanish judges and courts, the Public Prosecutor's Office or the competent Public Administrations, in particular the data protection authorities, for the enforcement of possible liabilities arising from the processing and only for the period of limitation of the same. Once this period has elapsed, the data will be destroyed.

In the event that the configuration of the information system does not allow blocking or an adaptation involving a disproportionate effort is required, the information shall be securely copied in such a way that digital or other evidence of the authenticity of the information, the date of blocking and the non-manipulation of the data during blocking is recorded The date of blocking.

SUPERVISION BY THE DATA PROTECTION AUTHORITY

If you believe that your right to the protection of your Personal Data has been infringed by any conduct or omission on our part, or you assume any violation of the applicable data protection regulations, you may communicate your disagreement or file a complaint with the European Competent Authority in the event that you are a European resident. For more information on the supervision of these Authorities, we suggest you visit their official websites. You can find the contact address of your national Data Protection Authority at the following address of the European Data Protection Committee: https://edpb.europa.eu/about-edpb/board/members_en. As for Spain, you can lodge a complaint with the Spanish Data Protection Agency (https://www.aepd.es/es).

CHANGES TO THIS PRIVACY NOTICE.

We reserve the right to make changes or updates to this Privacy Notice at any time in response to new legislation, internal policies or new requirements for the provision or offering of our services or products. The updated version will be available to the public through the following means:

Visible advertisements in our establishments.

On our website, which we suggest you visit frequently.

The procedure in relation to online notification is as follows: (I) Go to our website https://vmthree.com.mx/ In case there are modifications or updates to this Privacy Notice, there will be a notification to let you know; (II) access the Privacy Notice link; (III) there you will find the current version with the date of the most recent update.

Date of most recent update: 13 May 2021.