Privacy Notice

The purpose of this Privacy Notice is to inform you about the treatment that will be given to your personal data when they are collected, used, stored, transmitted and/or transferred by OCAMPO 1890, S.C., hereinafter (OCAMPO 1890). The foregoing, in compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter the "Law") and its regulations.

OCAMPO 1890, S.C., with address for purposes of the subject of personal data at Calle Minerva 63, Interior B, Colonia Crédito Constructor, C.P. 03940, Alcaldía Benito Juárez, in Mexico City, is responsible for the processing of personal data of employees.

Personal data collected

OCAMPO 1890, will collect and, if applicable, process the personal, financial and/or patrimonial and/or legal data specified below, based on the relationship that exists between you and OCAMPO 1890: full name; copy of official identification with photograph; age; date of birth; copy of birth certificate; address; copy of proof of address; copy of released military ID (if applicable); marital status; copy of marriage certificate (if applicable); nationality; copy of immigration document (if applicable); e-mail; home telephone, cell phone; copy of the federal taxpayer registry; tax status certificate; copy of the Unique Registration Code (CURP); social security number; copy of the Mexican Social Security Institute credential; education certificates or proof of studies; certificates or proof of language proficiency; employee number; copy of proof of registration, cancellation or modification of salary with the Mexican Social Security Institute (IMSS); copy of proof of earnings from last job; photographs; pictures; personal references; bank account number (for payroll deposit); contact information in case of emergency; information related to beneficiaries or economic dependents, which may include full name, date of birth and other identification data; curriculum vitae; information regarding the employee's performance; proof of previous employment; copy of proof of affiliation to AFORE; copy of proof of mortgage loans (INFONAVIT) and letters of recommendation.

OCAMPO 1890, will also collect and process the following sensitive personal data: health status; diseases suffered or suffered; allergies; blood group; results of medical examinations; medical records of treatment of diseases; fingerprints; results of socioeconomic and psychometric examinations. Sensitive personal health data and medical test results may be collected periodically.

OCAMPO 1890 will collect information from its clients that is directly related to their transactions, for the purpose of advising them on legal matters and/or representing them in court; this may therefore include information relating to the client themselves or to third parties connected with their case. Such information may include sensitive personal data relating to the client or to third parties.

Purposes and/or uses of personal data

Primary purposes

The personal data and sensitive personal data collected by OCAMPO 1890, will be used exclusively to: comply with the obligations arising from the contractual relationship and for personnel administration; form files; form medical records if applicable; periodically update the medical records of employees; comply with the Mexican official standards (NOM) applicable to occupational health, safety and hygiene in the workplace; payment and administration of payroll; salaries and benefits, benefits that may be applicable, reimbursements, for the allocation of work tools, keys and passwords; issuance of access and identification cards; internal audits; creation of work e-mail account; preparation of company directory; ensuring compliance with confidentiality obligations as well as tax and social security obligations; verifying personal and work references; contacting family members, economic dependents and/or beneficiaries in case of emergency.

In the case of its clients OCAMPO 1890 will use the data, documents and information it receives from them as well as from third parties, solely and exclusively for the purpose of analyzing it and producing legal advice of any nature; or, for the purpose of being presented before courts or administrative authorities of any nature.

Use of artificial intelligence tools

With the purpose of providing high-quality and efficient legal services, OCAMPO 1890 may process data and information received from clients and employees through artificial intelligence tools (hereinafter "AI Tools"). The use of such tools shall be carried out under strict confidentiality and security measures, and solely for the purposes described in this Notice. At all times, the principles established in the Law and OCAMPO 1890's AI Ethics Code will be observed. The introduction of sensitive personal data or directly identifying confidential information into AI Tools without the corresponding technical safeguards is strictly prohibited.

Secondary purposes

The information received from its customers will not be treated for secondary purposes.

The information of your employees may be processed for the following secondary purposes: (i) Promotions, contests and internal events of the Company. (ii) Institutional marketing communications: sending legal newsletters, event invitations, seminars, firm publications and insurance and reinsurance sector updates, for the purpose of keeping our community of professional contacts informed about OCAMPO 1890's activities and practice areas.

If you do not agree with the processing of data for the purposes mentioned above (secondary), please send an email to privacidad@ocampo.law.

If you have any questions about any purpose of this privacy notice you can contact OCAMPO 1890, S.C. at the following e-mail address: privacidad@ocampo.law.

Transmission and forwarding of personal data

As part of its own business operations and in order to comply with the purposes described, OCAMPO 1890 may forward your personal data collected to third parties that are legally related to OCAMPO 1890, and that act as "Agents" according to the Law, in order to comply with the purposes described in this Privacy Notice.

OCAMPO 1890, will ensure through the signing of agreements and/or the adoption of other binding documents, that such Agents maintain adequate security, administrative, technical and physical measures to safeguard your personal data, as well as to use only your personal data for the purposes for which they were collected and in accordance with this Privacy Notice. Notwithstanding the foregoing, the Company will not assign, sell or transfer your personal data to third parties not related to it, except as provided by law.

OCAMPO 1890 may deliver to administrative or judicial authorities the information it receives from its clients, for purposes of executing the consultancy for which it has been hired or representing its clients in lawsuits or administrative, arbitration or mediation proceedings.

Security measures

OCAMPO 1890, has adopted the security levels of personal data protection legally required by law and its regulations, under the principles of legality, quality, consent, information, purpose, loyalty, proportionality and accountability. All this under strict rules of security, confidentiality and consistency of information. We inform you that your personal data and sensitive personal data will be safeguarded under strict administrative, technical and physical security measures which have been implemented in order to protect your personal data against damage, loss, alteration, destruction or unauthorized use or access or treatment.

Violation of rights

Infringements that occur at any stage of the processing that significantly affect the economic or moral rights of the owners, will be reported immediately by email or in visible places of OCAMPO 1890 so that the holder can take the appropriate measures to defend their rights.

ARCO rights

You may exercise your rights of access, rectification, cancellation and opposition (ARCO rights), or revoke, at any time, the consent you have given, by sending an email to privacidad@ocampo.law and/or the "Consent Renewal Request Form" with the following documentation:

(i) Copy of the document that accredits your identity or the personality of your representative (copy of valid official identification). The representative must prove the identity of the holder, the identity of the representative, and his powers of representation by means of a public instrument or power of attorney signed before two witnesses, or a declaration in personal appearance of the holder, if applicable, in order to avoid doubts as to the identity of the Holder.

(ii) Copy of the valid official identification of the two persons who sign as witnesses the ARCO rights request form and/or the consent revocation request form.

Once we receive any of the request forms duly integrated with the aforementioned documents, you will receive a response from us within a period not exceeding 20 business days.

If it is appropriate, it will be effective within 15 business days after we communicate our response. In case you are not satisfied with the notified answer, you will have a term of 20 business days to contact us, indicating your disagreement or concern, with the purpose of resolving such situation.

For any questions regarding the procedure and requirements for the exercise of ARCO rights or revocation of consent, you may contact us at the email address mentioned above.

Changes to the Privacy Notice

In case there are changes or modifications to this Privacy Notice, the updated version of the same will be made available to you through the means by which the privacy notice was disclosed or in visible places of the company.

In case we do not obtain your express opposition for your personal data to be transferred in the manner and terms described above, we will understand that you have given your tacit consent to do so.

Mexico City, June 2026.