Aviso de Privacidad

"CONVIVIENDO CON LA NATURALEZA SC," hereinafter referred to as "CCN" and/or "Company," with fiscal address at Privada de los Sauces 32, Colonia Rinconada de los Sauces, with Postal Code 45187 in Zapopan, Jalisco, Mexico; issues this Privacy Notice so that the data subject, hereinafter referred to as the "Data Subject," is aware of the treatment that the Company gives to personal data. At CCN, we are concerned about your privacy and about keeping your personal information safe that you share with us. We protect and safeguard the Data Subject's personal data to prevent harm, loss, destruction, theft, misplacement, alteration, as well as unauthorized processing, in compliance with the provisions of Articles 8, 15, 16, 33, 36, and other relevant articles of the Federal Law on the Protection of Personal Data Held by Private Parties.

Our person in charge of the protection and processing of data is MARTHA I. PARRA DÍAZ, and you can contact her by sending an email to her attention at: Email: marthaparra@conviviendo.com.mx / Phone: 33-1445-8616.

This Privacy Notice is made available with the intention that the Data Subject is informed about the treatment that will be given to their personal data, as well as the precise information to exercise their rights of access, rectification, cancellation, and opposition (hereinafter "ARCO Rights"), which are described below:

1. 1. The right to access their personal data held by CCN, except in cases mentioned in the Law.
   2. The right to rectify their personal data when they are inaccurate or incomplete.
   3. The right at all times to cancel their personal data. CCN may deny the cancellation of data in the terms established by law.
   4. The right at all times and for legitimate reasons to object to the processing.

It is important to inform you that the Federal Law on the Protection of Personal Data Held by Private Parties protects your personal information from unauthorized uses and without your consent. Therefore, this document will inform you of the information we collect from the Data Subject, how and why we use it, possible transfers to third parties, the purposes of data processing, your ARCO Rights, as well as the revocation of your consent, which the Data Subject can assert before CCN in order to have full control and decision over their personal data. For this reason, we recommend that you carefully read the following information:

This Privacy Notice applies to Data Subjects whose personal data is obtained directly, indirectly, or personally by CCN, through processes of product purchase-sale, contracts, letters, information requests, as well as various forms contained on the Company's Website https://conviviendo.com.mx/ (hereinafter referred to as the "Website") or any other means specified for such purposes, referencing this Privacy Notice.

Personal data is provided through the creation of an Account or User Registration, and/or by submitting a contact request through the contact form on the customer service page. The Company collects personally identifiable information that is voluntarily provided by the User, or in response to explicit requests from the Company. The information provided must be true and complete. The User will be responsible at all times for the data provided, and in no case will CCN be responsible for their accuracy. The requested information is as follows: Name, Address, Date of Birth, Gender, Transactions, Email Address, Telephone Number(s) or Cellphone, Fiscal Data for Invoice Generation, and Banking Information. CCN does not request Sensitive Personal Data on the Website it manages.

The User of the Company's Website acknowledges and accepts that it may use a tracking system through the use of cookies ('Cookies'). Cookies are data files that are stored on the hard drive of the user's computer or electronic communication device when browsing a website, which allows for the exchange of state information between said site and the user's browser. The state information may reveal session identification means, authentication, or user preferences, as well as any data stored by the browser regarding the website. Cookies are used to understand the interests, behavior, and demographics of those who visit or are visitors to the Website, in order to better understand their needs and interests and provide them with better service or related information. We also offer certain functionalities that are only available through the use of Cookies. We will also use the information obtained through Cookies to analyze the pages visited by the visitor or User, the searches made, improve our business and promotional initiatives, display advertising or promotions, interest-based banners, refine our content and articles offering, personalize such content, presentation, and services. Cookies are also used so that the User does not have to enter their password so frequently during a browsing session, and to count and verify records, user activity, and other commercial concepts and agreements, always with the objective of the installation of Cookies benefiting the receiving User, and it will not be used for purposes other than those of the Company. It is established that the installation, permanence, and existence of Cookies on the User's or visitor's computer depends on their exclusive will and can be removed from their computer whenever they wish. To learn how to remove Cookies from the system, it is necessary to review the Help section of the browser. Also, Cookies or other similar systems installed by third parties may be found on certain pages of our Site. The Company does not control the use of Cookies by third parties. If you want to learn more about cookies, go to http://www.allaboutcookies.org. The Company also uses Web Beacons when the User is using the Website. Web Beacons are visible or hidden images inserted within a website, which is used to monitor the User's behavior on these platforms, such as storing information about the User's IP address, duration of interaction time on that page, and the type of browser used, among others.

The security and confidentiality of the data provided by users when contracting a service or purchasing one of our products online will be protected by a secure server under the Secure Socket Layer (SSL) protocol, ensuring that the transmitted data is encrypted to ensure its safekeeping.

To verify that you are in a protected environment, make sure an 'S' appears in the navigation bar 'https://' prefix. However, despite having increasingly secure tools each day, the protection of data sent over the Internet cannot be guaranteed 100%; therefore, once received, every effort will be made to safeguard the information. To ensure that personal data is treated in accordance with the law, CCN adheres to the following principles:

1. 1. The purposes of processing your personal data will be communicated to you by collecting only the necessary data to fulfill these purposes, and they will not be used for any purpose other than that established in this privacy notice.
   2. Proper maintenance will be carried out to ensure that your personal data is accurate and up-to-date. If it is necessary to retain your data, it will be done in accordance with the provisions of the applicable law.
   3. Security measures have been implemented to ensure the protection of your personal data.

The Company's Database, where the collected information is stored, will keep the information provided by the Data Subject stored and safeguarded, even if it is modified, updated, or canceled for any reason. This is done to maintain a record of the Data Subject and protect their legal interests. The retention of information mentioned in this paragraph may be erased or deleted in its entirety through the exercise of ARCO Rights. To unsubscribe from our newsletters, please click on the following link found within our email messages: 'Unsubscribe from this list'.

Personal Information is collected and stored for the following purposes:

• • Identification and verification of the Website User.
  • Operation, management, shipment of goods, returns, billing, collection, administration, provision of our services.
  • Delivery of notifications, requests, letters, or newsletters related to the services we provide.
  • Assistance in completing a transaction or order initiated on the website.
  • Analysis of user behavior and demographics
  • Improvement of our business and promotional initiatives (marketing).
  • Sending information or messages about new products and/or services, information from our business partners, as well as any other information.
  • Displaying advertising or promotions of interest to our Users.
  • Transfer of the Data Subject's information in applicable cases in accordance with the section 'Information Transfer to Third Parties' of this Notice.
  • Prevention or reporting to different authorities of unlawful acts or events.
  • Compliance with the exercise of ARCO rights as well as revocation of the Data Subject's consent.

With the above, the Company can provide efficient service to the User. These purposes are necessary for compliance with obligations and the relationship with the Data Subject, which is the Company's main obligation and the origin of the legal relationship between the Company and the User.

The collection of information enables the Company to offer services and functionalities that better suit the User's needs. It also allows the Company to reach the User through various means (including conventional or electronic mail, SMS, MSM, electronic notifications) with offers of products and services that may be of interest to the User, in addition to fulfilling its obligations through these means. The Company reserves the right to request any additional proof and/or data to verify the personal information of each User, as well as to temporarily or definitively suspend those users whose data could not be confirmed. The User acknowledges that the account or User Registration is personal, unique, and non-transferable. It is prohibited for the same User to register or possess more than one account. In case the Company detects different accounts containing coincident or related data, it may cancel, suspend, or disable them. The User will be responsible for all operations carried out in their account, as access to it is restricted to the input and use of their personal password, known exclusively to the User. In the event that the account is suspended, the Company will store the User's personal data, so that the User and the Company will remain subject to what is stated in this Privacy Notice. In the event that the User's information at the time of registration is incorrect or incomplete, making it impossible to verify and identify the User, the Company shall have the right to immediately suspend the provision of the Services through the Website, without prior notice. The User will be at all times responsible for the losses and damages suffered as a result.

The data of the Data Subjects will be provided only by the Company in the forms established in this Privacy Notice. The Company will do everything in its power to protect the privacy of the information. It may happen that, by virtue of court orders or legal regulations, the Company is compelled to disclose information to authorities or third parties under certain circumstances, or in cases where third parties may intercept or access certain information or data transmissions. In such cases, the Company will not be responsible for the information that is disclosed. In these cases, the Company will notify the Data Subject about this situation. We do not assume any obligation to keep confidential any other information that the Data Subject provides through newsletters and online conversations (chats), as well as information obtained through cookies, information that has not been directly delivered to the Company. It should be clarified that the information of the Data Subject is NOT sold, given away, facilitated, or rented to any third party. If the User does not want their data to be shared, they can choose NOT to use a specific service or NOT participate in certain promotions or contests. The Company will take all possible measures to maintain the confidentiality and security described above, but will not be liable for damages or harm that may arise from the violation of these measures by third parties using public networks or the Internet, altering security systems to gain access to the information of the Data Subjects. Security breaches occurring at any stage of the processing that significantly affect the proprietary or moral rights of the Data Subjects will be immediately reported by the Company to the Data Subject, so that the latter can take appropriate measures to defend their rights.

The Data Subject expressly authorizes the Company to keep the information provided by the Data Subject in its records. The Data Subject also authorizes the Company to provide constant information about the said record to (i) authorities requesting it as allowed by current legislation and (ii) its strategic, commercial, or technical associates for the purpose of offering better promotions and/or User content. Additionally, the User expressly allows the Company to collect information for traffic tracking, intending to identify user groups and profiles, as well as for advertising targeting purposes. Data transfers are for lawful purposes and in accordance with the provisions of the Law on the Protection of Personal Data Held by Private Parties. The Company states that it will not transfer any type of information of the Data Subject to national or foreign Third Parties. In case of the opposite, the Data Subject will be informed through the publication of a new Privacy Notice. This is in accordance with the provisions of Article 36 of the Regulations of the Law on the Protection of Personal Data Held by Private Parties.