Ammper

Privacy Notice

IDENTITY AND ADDRESS OF THE CONTROLLER

AMMPER ENERGIA S.A.P.I de C.V., as well as its directly or indirectly controlled companies in accordance with the Mexican Commercial Law, its subsidiaries and/or affiliates (collectively referred to as “Ammper”), with address at Boulevard Manuel Avila Camacho 40, 12th Floor, Col. Lomas de Chapultepec I Section, Miguel Hidalgo, C.P. 11000, Mexico City, are individually responsible for the use and protection of your personal data, in accordance with the provisions of the Protection of Personal Data Law (hereinafter the “Law”). Through this Privacy Notice, Ammper informs you that it has adequate physical, technical, and organizational security measures to protect your personal data and prevent unauthorized third parties from accessing it without your consent, and only for the time necessary to fulfil the purposes that justify its processing and confidentiality.

PURPOSES OF DATA PROCESSING
Main Purposes

Without prejudice to the contractual obligations between your represented entity and Ammper, the personal data that may be collected during the billing process will be used solely for the following purposes:

1 - Validate the information provided by accredited personnel and/or legal representatives, including review and/or contact through phone calls, email communications, text messages, and other physical and/or electronic communication means. This is for any situation related to the use and management of services, as well as to inform you of any benefits you may have earned because of these services.

2 - Creation and implementation of control, analytical, and/or statistical processes in systems that store or manage personal data through databases.

3 - Create your access profile to electronic systems, including mobile apps and business applications for personalized service.

4 - Studies on consumption habits.

5 - Follow up on your inquiries, questions, or requests for information regarding our services.

If you do not complete the billing process or it no longer applies to you, Ammper will proceed to block and subsequently cancel and/or delete your data in accordance with applicable legal provisions and/or contractual clauses.

Secondary Purposes

By providing your personal data, you authorize Ammper to send notices for proper follow-up of the billing process. This purpose is not necessary, nor does it create a legal relationship between you and Ammper.

In addition, for secondary purposes, Ammper may use your data to carry out the following activities:

- Activities related to advertising, marketing, or commercial prospecting after signing a contract.

- Send invitations for events, campaigns, promotional advertisements, and/or workshops; send advertisements of the contracted product and/or related services either directly or through third parties; offer promotions, benefits, and/or conduct studies and/or surveys.

MEANS TO EXPRESS YOUR REFUSAL FOR SECONDARY PURPOSES

If you wish to limit the use of your personal data due to termination or change in representation, you may express your refusal or limitation to such processing or disclosure as follows:

Submit a written request, either physically or electronically, to contacto@ammper.com

Indicate your full name and address or another means to communicate our response.

Include documentation proving your identity or, if applicable, the legal representation of the data subject, as well as elements and/or documents that facilitate the location of the personal data in question.

Specify in your request the purposes you wish to eliminate or the limitations you wish to establish.

From the moment Ammper receives your request, whether by email or printed document indicating your refusal or limitation, the personal data referenced in the request will begin to be processed by Ammper as indicated, pending a written response.

Once your request is received, we will respond either in writing or by email according to the information you provided in your request, within no more than 20 business days from receipt. If the request lacks sufficient information, Ammper may request additional information within a maximum of 5 business days from the day after the request is submitted, and you will have 10 business days to provide the required information; otherwise, the request will be considered not submitted.

This is understood without prejudice to your rights of revocation and opposition.

MEANS OF OBTAINING PERSONAL DATA

For the purposes stated in this privacy notice, we may collect your personal data in various ways: when you provide it directly or through electronic means (such as video conferencing, email, our website, app, business applications, technologies provided by third parties, and/or by phone).

PERSONAL DATA WE COLLECT

To carry out the purposes described in this privacy notice, the following personal data will be collected and processed:

1 - Identification Data. Information that allows distinguishing one person from another, such as: name, marital status, handwritten signature, Federal Taxpayer Registry or Employer Identification Number (RFC/EIN); Unique Population Registry Code (CURP) or Certified Identity Document; place and date of birth; nationality.

2 - Contact Data. Information that allows maintaining or establishing contact with the data subject, such as address, email, landline and mobile phone.

TRANSFER OF YOUR PERSONAL DATA

Due to the billing process, Ammper may not transfer your personal data to third-party service providers for research purposes without prior notice. Notwithstanding the foregoing, internal data analysis and statistical reports related to the process may be conducted.

MEANS TO EXERCISE YOUR ARCO RIGHTS AND WITHDRAWAL OF CONSENT

You have the right to know what personal data we have about you, how we use it, and the conditions of its use (Access). You also have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to have it removed from our records or databases when you believe it is not being used in accordance with the principles, duties, and obligations set forth in the regulations (Cancellation); and to oppose the use of your personal data for specific purposes (Opposition), hereinafter referred to as 'ARCO Rights'.

To exercise any of the ARCO Rights or to revoke your consent for the use of your personal data, you must do so as follows:

1 - Submit a written request addressed to the Finance Department, attention to Azucena Cruz Gamora, which may be delivered to Boulevard Manuel Avila Camacho 40, 12th Floor, Col. Lomas de Chapultepec I Section, Miguel Hidalgo, C.P. 11000, Mexico City, phone 55 8851 2200, or sent to the following email contacto@ammper.com

2 - The request must be a free form written document that includes at least the following requirements:

- Your full name and address or another mean to communicate the response to your request.

- Documentation proving your identity or, if applicable, the legal representation of the data subject, and elements and/or documents that facilitate the location of the personal data.

- A clear and precise description of the personal data for which you seek to exercise any of the rights, the elements and/or documents that facilitate the location of the personal data, and the requirements provided for the exercise of ARCO rights in the Law and its Regulations.

1 - Once your request is received, we will respond either by email or in writing according to the information you provided in your request, within a maximum of 20 business days from the date of receipt. If the request lacks sufficient information, Ammper may request additional information within a maximum of 5 business days from the day following the submission of the request, and you will have 10 business days to provide the required information; otherwise, the request will be considered not submitted.

Please note that we may not be able to fulfil your request or immediately cease use in all cases, as we may be legally obligated to continue processing your personal data. Also, for certain purposes, revoking your consent may mean we can no longer provide the requested service or complete your selection processes with us.

CHANGES TO THE PRIVACY NOTICE

We reserve the right to make modifications or updates to this privacy notice at any time, to address legislative changes, internal privacy policies, or new requirements for the provision or offering of our services or products. These modifications will be available to the public through our website https://www.ammper.com

The procedure for notifying changes or updates to this privacy notice will be via the email provided or, if not available, by phone call. If neither is provided, you must consult the changes on our website https://www.ammper.com

COMPLAINTS AND REPORTS FOR IMPROPER USE OF YOUR PERSONAL DATA

If you believe your right to personal data protection has been violated by any conduct of our employees or our actions or responses, or if you suspect a violation of the provisions of the Law in the processing of your personal data, you may file a complaint or report through our Integrated Management System located at Boulevard Manuel Ávila Camacho 40, 12th Floor, Col. Lomas de Chapultepec I Section, Miguel Hidalgo, C.P. 11000, Mexico City, or via email at contacto@ammper.com and phone 81 1588 1593.

Last updated: December 2022