Privacy Notice

PRIVACY NOTICE PRIVACY OFFICE GRUPO IDESA, S.A. DE C.V.

I. Responsable de la protección de sus datos personales

Grupo IDESA, S.A. de C.V. and its subsidiaries: Alveg Distribución Química, S.A. de C.V.; Etileno XXI, S.A. de C.V.; Excellence Sea & Land Logistics, S.A. de C.V.; Hayare, S.A. de C.V.; Industrias Derivadas del Etileno, S.A. de C.V.; Inmobiliaria IDESA, S.A. de C.V.; Novidesa, S.A. de C.V.; Petramin, S.A. de C.V. and Síntesis Orgánicas, S.A. de C.V.; with address at Av. Paseo de las Palmas No.781, Piso 2, Lomas de Chapultepec III Secc., Delegación Miguel Hidalgo, Zip code 11000, Mexico, Mexico City, are responsible for the processing of personal data, in terms of the provisions of articles 3 section XIV and 37 section III of the Federal Law on the Protection of Personal Data in Possession of Private Parties (LFPDPPP) and 70 of the Regulations of the aforementioned Law (RLFPDPPP).

II. Purposes of processing and personal data collected

The general, financial, economic and sensitive personal data that we collect personally, directly or indirectly, depending on the legal relationship that may be established between you and Grupo IDESA, S.A. de C.V., and its subsidiaries, may be used for the following essential purposes:

1. Identification of customers, distributors, suppliers, candidates, employees, interns, visitors, shareholders, board members or any person who has any relationship with Grupo IDESA and its subsidiaries;
2. To enter into the relevant agreement, to generate and safeguard the file thereof, in order to fully comply with the obligations agreed between the parties;
3. Registration in Company databases, systems or directories;
4. Contact and update your personal information;
5. Allow access to our facilities and maintain security within them;
6. Provide customer service, clarify doubts or comments existing about our products or services, through our email, telephones, online contact forms;
7. To allow you to participate in our intern recruitment and selection processes;
8. To enable you to participate in personnel recruitment, selection and hiring processes;
9. Personnel management, as applicable;
10. Provide work references of our employees or former employees, or performance references of our interns;
11. Legal filings, substantiation and follow-up of legal proceedings;
12. To generate dissociated statistics about the use of our www.grupoidesa.com website as well as the websites of our affiliates;
13. Generate dissociated statistics that allow us to get to know consumer profiles, detect their needs, improve our products and business models (commercial prospecting); and
14. Notify you, as applicable, of changes to this privacy notice.

II.1 Customers

General personal data obtained directly (by telephone, e-mail or through our website) or indirectly (industrial forums or fairs, and directories of industries or guilds), will be used additionally for the following essential purposes: to generate and follow up on your purchase orders, to sell our products, to deliver goods or materials to our facilities or to your facilities through a carrier contracted either by you or by us, to contact you for issues related with your purchase orders, to generate dissociated statistics that allow us to identify our customers’ needs to improve our products and business schemes (commercial prospecting), preparing product invoices in compliance with the tax regulations referred under Article 29 of the Federal Tax Code, as well as to maintain our business relationship with you, provide assistance or technical support, process your returns of materials or products, cancellations of invoices and/or credits, and carry out internal and/or external audits.

II.2 Distributors.

General, financial and economic personal data, obtained personally or directly (by telephone, email or through our website), will be additionally used for the following essential purposes: to evaluate if you meet the requirements and solvency to be a distributor of Grupo IDESA, S.A. de C.V., or any of its affiliates, to manage and follow-up on your orders, sales of our products in cash or on credit, deliver materials to our facilities or your facilities through a carrier contracted either by you or by us, contact you for questions related to your orders, generate dissociated statistics that allow us to identify the needs of our customers (distributors) to improve our products and business schemes (commercial prospecting), preparing product invoices in compliance with the tax regulations referred under Article 29 of the Federal Tax Code, generate your user name and password to give you access to our extranet, integrate you to our list of distributors available on our website (name, telephone number, email and location) as well as to maintain our business relationship with you, provide assistance or technical support, process your returns of materials or products, cancellations of invoices and/or credits, and carry out internal and/or external audits.

II.3 Sales on credit to Customers or Distributors

The general, financial and economic personal data requested personally or directly in the process of sales on credit will be additionally used for the following essential purposes: to evaluate whether you meet the necessary requirements to obtain a line of credit relating to the sale of our products, payment and judicial or non-judicial collection efforts. Your surety’s general personal data will be used in order to guarantee the credit extended and to enforce the guarantee provided in case of default. Your information (including your surety’s data) will be shared with an insurance company retained by Grupo IDESA, S.A. de C.V. or any of its affiliates, in order to guarantee the payment of the credit extended and, as appropriate, to handle the payment of any indebtedness through such insurance company, this transfer of personal data is essential to be able to evaluate the possibility of extending a line of credit to you.

II.4 Suppliers

The general, financial and economic personal data collected from our individual suppliers will be used to evaluate whether they meet the requirements to establish a business relationship with Grupo IDESA, S.A. de C.V. or any of its affiliates. If we establish such a relationship with you, your data will be additionally used for the following essential purposes: to create a username on the extranet to allow verification of payments, product or service quotes or acquisition of future goods, payment arrangements, internal or external audits; depending on the business relationship established with you, you may also be asked to provide: a bond to ensure compliance with your obligations regarding the proper use of any advance payments and/or the inexistence of hidden defects, as well as business references, to evaluate and determine if you have the necessary funds or solvency to comply with the agreement, service or purchase order.

II.5 Visitors

General personal data collected personally in the forms or logbooks to register visitors, as well as the holding of personal identification cards (which will be returned to you upon recording your exit), will be used for the purpose of allowing you to access and exit our facilities, assign you a badge, record the reason for your visit, to guarantee the safety of visitors and personnel who work in such facilities, as well as the safety of our equipment, systems, confidential information and real property (including personal property within real property); in addition, it will be used to create visitor reports in our computer systems that allow us to control and monitor the security of our facilities. For such purpose, when you enter our parking lots, we will collect data classified as economic (type of vehicle and license plate number of your vehicle). Collecting this information is necessary to allow you to access our facilities either by foot or by vehicle.

II.6 Candidates

General personal data collected personally, directly or indirectly (through our website, short job application, job boards, in employment fairs and when exchanging the candidate portfolio with other associations or companies), will also be used to evaluate candidates preliminarily in order to determine whether they are suitable for a vacancy in the company. Likewise, any personal, financial and economic data collected in the Short Job Application form will be used to allow us to understand the general socioeconomic conditions of the candidate and preliminarily determine if the position and proposed payment is appropriate for or can satisfy a candidate's standard of living; when this information is collected, you will be asked to give your express consent to process it. Portfolio exchange. If you as a candidate authorize it, your personal data will be incorporated into our personal relationship management system (Networking), developed with other companies, as well as with Industrial Associations (petrochemical industry) to whom we can send your information, in case you meet the profile required for any position they may offer, in order to generate hiring opportunities for candidates. If you do not object to this transfer by sending an email to the sender of this communication or oficinadeprivacidad@idesa.com.mx, we will understand that you have tacitly consented to your information being used in our portfolio exchange process. You will be able to state at all times your rejection to this transfer and exercise your rights of access, rectification, cancellation, opposition and/or revocation of consent.

II.7 Shareholders

General personal and financial data collected personally or directly from prospective shareholders or from our shareholders will be used additionally for the following essential purposes: to evaluate whether they meet the requirements to be considered as members of the Shareholders' Meeting of Grupo IDESA, S.A. de C.V. (in case of prospective shareholders); create user names the extranet to allow payment verification; to draft minutes of Meetings; dividend payment procedures; as well as to prepare their tax withholding certificates and make arrangements with the external firm retained to carry out testate succession work in the event of an assignment of rights or due to the death of any of our shareholders.

II.8 Members of the Board of Directors

General and financial personal data collected personally or directly from the new members of the Board of Directors or from active members will be used additionally for the following essential purposes: to evaluate whether they comply with the legal requirements and internal rules of Grupo IDESA, S.A. de C.V., to be part of such board (in the case of new members); to create user names on the extranet to allow payment verification; to draw up the minutes of board sessions; fee payment procedures; as well as to prepare their tax withholding certificates and carry out actions relating to their participation as members of the Board of Directors.

II.9 Use of images

The images captured by the video surveillance cameras (direct collection) are managed in a Closed Circuit Television, the storage device is periodically overwritten and will be used exclusively to help ensure the safety of the personnel who work in our facilities, visitors, our equipment, systems, confidential information and the safety of our real property (including personal property within real property ).

II.10 Secondary purposes

In addition, our customers’ and/or distributors’ personal data may be used to send information via email about our products, promotions and newsletters. Personal data of candidates, employees, suppliers, visitors, interns, shareholders and board members will not be used for marketing, advertising or commercial prospecting purposes.

III. Consent to the processing of personal financial data and transfer of information. In compliance with the provisions of articles 8 and 9 of the LFPDPPP, you are hereby informed that in order to collect and process your sensitive, financial and economic data, it is necessary to have your express consent; therefore, when this information is collected we will indicate precisely the purpose for which it is collected and processed, requesting that you indicate whether or not you accept the processing of such data.

IV. Transfer of personal data. Grupo IDESA S.A. de C.V. and its subsidiaries may use the personal data of customers, suppliers, distributors, employees, candidates, interns, visitors, shareholders and board members, and disclose such information among the different companies that form part of the Business Group, for all purposes permitted by the LFPDPPP as provided under article 37 section III. Additionally, depending on the legal relationship that exists between you and Grupo IDESA, S.A. de C.V. and its subsidiaries, your data may be shared with third parties unrelated to our organization. In this case, when this information is collected, you will be informed of the purposes of this transfer and your consent will be required to carry it out. Such transfers will be made in compliance with the provisions of Article 36 of the Law, as well as Articles 72 and 73 of the Regulations. Except in the cases indicated above and unless any of the cases provided under article 37 of the LFPDPPP arises, the data provided by our customers, suppliers, employees, candidates, interns, visitors, shareholders and board members will never be transferred under any circumstances.

V. Revocation of consent and exercise of rights of Access, Rectification, Cancellation and Opposition in accordance with the Federal Law on Protection of Personal Data in Possession of Private Parties, you may request access, rectification, cancellation (if legally possible) or object to the use of the personal data provided to the data controller, or revoke your consent. Your request will be addressed by our Privacy Office at its email address oficinadeprivacidad@idesa.com.mx. To exercise your Access, Rectification, Cancellation and Opposition rights, as well as to revoke your consent, you must follow the procedure below:

1. Send an email to oficinadeprivacidad@idesa.com.mx, indicating your full name, the legal or business relationship you have or have had with Grupo IDESA, S.A. de C.V. or any of its affiliates, (if you are an employee, customer, visitor, supplier, etc.) and the type of right you wish to exercise.
2. Fill out the ARCO application form that will be sent to you, accurately identifying the data which you are requesting access to, rectification, cancellation or opposition, or with respect to which you wish to revoke your consent, attaching any of the identification documents indicated in the form in order to prove your identity or the capacity with which you are filing the request. Once this form is completed, it must be sent to the email address indicated in the previous paragraph, along with any documents that are relevant to the application in question. For rectification requests, it is necessary for the owner to accurately indicate which change must be made, attaching the documentation that justifies the adequacy of the request.
3. After your request is received, you will be sent an Acknowledgement of Receipt with the folio number (record) and the applicable date of receipt. If your request it does not comply with the legal requirements, within five working days following its receipt, you will be required to correct your request within ten days; otherwise, it will be considered as not submitted.
4. If your request was sent on a Friday or any non-business day, it may be received as of the following business day.
5. Your request will be answered by email within twenty business days as of the date of acknowledgement of receipt. This period may be extended for an additional twenty days when there are reasons that justify it; this situation will be notified to the holder in accordance with the provisions of article 97 of the Regulations of the LFPDPPP.
6. In the event that your request is granted in accordance with the LFPDPPP and other current regulations, access will be granted, your data will be rectified or canceled, your right to object will be effective or your consent will be revoked, within fifteen days following the date of the response to your request. This period may be extended for an additional fifteen for just cause; this situation will be notified to the holder in accordance with the provisions of article 97 of the Regulations of the LFPDPPP. In all cases in which your request is admissible, in terms of the provisions of articles 32, 33, 34 and 35 of the LFPDPPP, the delivery of personal data will be free of charge through the email address that the data holder indicates for such purposes. If you require the information to be delivered using another method, you must cover only the documented shipping costs and/or the cost of reproduction in copies or other formats that may be generated.

VI. Methods to limit the use or disclosure of personal data

If you do not wish to receive information about our products, promotions and/or newsletters, please send an email to our Privacy Office at oficinadeprivacidad@idesa.com.mx requesting to unsubscribe from our distribution list. Once your registration has been cancelled, we will send you a confirmation email. At all times, candidates may state their refusal for their information to be used in our in our portfolio exchange process and shared with other companies or Industrial Associations (petrochemical industry). For such purpose, they must send an email to our Privacy Office at oficinadeprivacidad@idea.com.mx, stating this situation.

VII. Online Privacy Policy

Information regarding the use of the following portals: www.grupoidesa.com; www.petramin.com; www.idesapetroquimica.com; www.excellencesll.com; www.alveg.com.mx and www.novidesa.com.mx; is described below. You should regularly review this Privacy Policy as it may change at any time at the managers’ discretion. When you access the websites of Grupo IDESA, S.A. de C.V. and its affiliates, we record your Internet address (this address is generally temporary and is assigned by your Internet Service Provider at the time you connect), the type of operating system you use, and the type of browser software you use. In addition, we may track the parts of the site that you are visiting. The information we obtain is used to help us create a better experience for website users; this entire process is done without us knowing your name or other information that allows us to identify you. While you visit the sites of Grupo IDESA and its subsidiaries, you do so anonymously, unless you expressly choose to identify yourself to us. Grupo IDESA, S.A. de C.V. and its affiliates do not require you to provide personal data in order to use their websites; if however this is necessary, such requirement will be expressly explained to you. Some applications may require you to disclose certain personal information; our contact forms may require you to enter your email address to register and address your comments, requests, questions or suggestions, and contact you if necessary. In these forms you will not be required to provide your name or any financial, economic and/or sensitive data; therefore, the disclosure of such data is their responsibility. Without prejudice of the foregoing, in the event that you voluntarily provide any of such information to us, Grupo IDESA, S.A. de C.V. and its affiliates guarantee the strictest confidentiality in its processing. Cookies: A cookie is a brief piece of information that a website sends to your computer, which is stored on your hard drive. The next time you access our website, we may use the information stored in the cookie to facilitate the use our website. A cookie does not allow us to know your personal identity unless you expressly choose to provide it. Most cookies expire after a certain period of time, or you can delete them at any time. You can also have your browser alert you when you receive a cookie so that you can accept or decline them.

VIII. Where can you file complaints and reports on undue processing of your personal data? If you consider that your right to personal data protection has been violated by any conduct, action or response to your requests, you assume that in the processing of your personal data there is a violation of the provisions of the Federal Law on Protection of Personal Data in Possession of Private Parties, you may file a complaint or claim with the Anti-Corruption and Efficient Government Ministry, which manages the National Transparency Platform (PNT). For more information visit https://www.plataformadetransparencia.org.mx.

IX. More information - Privacy Office. If you have any questions about the content, interpretation or scope of this notice, or require more information regarding the processing of your information, you can contact our Privacy Office by email at oficinadeprivacidad@idesa.com.mx.

X. Changes to the Privacy Notice

This Privacy Notice may be modified at the discretion of the data controller in terms of the applicable regulations. Any change will be published in the website www.grupoidesa.com.

Last updated: April  14, 2025.