Privacy advice

The commercial company “IBS DEL NORTE S.A. DE C.V.” hereby informs you of the following “PRIVACY NOTICE” (hereinafter the “NOTICE”) for the purposes of safeguarding, protecting, and processing Personal Data
that IBS DEL NORTE S.A. DE C.V. becomes aware of with the consent of the owner of the
same, and so that they are used exclusively for the legal relationship held by IBS DEL NORTE S.A.
DE C.V. as the entity responsible for the data provided, assuring the owner that such data is relevant,
correct, and up-to-date for the purposes for which it was collected and indicated in this NOTICE.
All collection and use of personal data collected by IBS DEL NORTE S.A. DE C.V. shall be governed
by the provisions of this NOTICE, in accordance with the provisions of the Federal Law
on Protection of Personal Data Held by Private Parties and its Regulations.
IBS DEL NORTE S.A. DE C.V., in order to provide you with personalized attention with regard to
this NOTICE, makes the following contact information available to you, given that if you wish to
exercise any of your ARCO rights, you will need to do so in accordance with the terms established in
this document and in the Privacy Policy. Namely:

1. IDENTITY

1.1 ADDRESS: Avenida Empresarios 135, interior 7C. Puerta de Hierro, Zapopan. Postal code: 45116
1.2 CONTACT TELEPHONE NUMBER: +52 33 3144 5894
1.3 CONTACT PERSON: Cinthya Daniela Ortiz Barajas
1.4 OFFICIAL WEBSITE: www.cryob.com
1.5 EMAIL: atencionaclientes@cryob.com

2. PURPOSES FOR THE USE OF YOUR COLLECTED PERSONAL DATA

It is important for IBS DEL NORTE S.A. DE C.V. that you understand the purpose of the use and processing of your
personal data. All data collected from you, regardless of any relationship you may have
with IBS DEL NORTE S.A. DE C.V., will be strictly necessary and, depending on the
nature of the relationship, may be adjusted according to the following parameters. The data to be
collected is:

2.1 CUSTOMERS AND SUPPLIERS

In order for IBS DEL NORTE S.A. DE C.V. to perform its function in the ordinary provision of its services, it needs to collect the following information from its customers in general, as it is a company mainly dedicated to logistics, import, and export of goods, consisting of:
i) Information necessary for billing in accordance with the applicable and current provisions of the Tax Law at the time of billing, as well as in its relevant miscellaneous provisions and published during the course of the year.
ii) Information necessary for invoicing in accordance with the applicable and current provisions of the Tax Law at the time of invoicing, as well as in its relevant miscellaneous provisions and published during the course of the year.
iii) Information necessary for invoicing in accordance with the applicable and current provisions of the Tax Law at the time of invoicing, as well as in its relevant miscellaneous provisions and published during the course of the year.

i) Information necessary for invoicing in accordance with the applicable and current provisions of the Tax Law
at the time of invoicing, as well as in its relevant miscellaneous provisions published during the
course of the corresponding fiscal year. In this regard, IBS DEL NORTE S.A. DE C.V. reserves the right to
immediately modify the application of Mexican tax laws at the time of the
transaction and the requirements they indicate.

ii) Official identification of the representatives of the companies requesting services and/or individuals
providing them;

iii) Articles of incorporation of the client or supplier company;

iv) Powers of attorney and representation of the representatives of the companies affiliated with IBS DEL NORTE S.A.
DE C.V.;

v) Tax identification numbers and certificates from the Federal Taxpayers Registry;

vi) Proof of address;

vii) Contact telephone numbers;

viii) Bank accounts and information requested by the tax authorities for billing purposes;

ix) Contact email addresses;

x) Everything related to the products and/or services sold, marketed, or performed by IBS DEL NORTE
S.A DE C.V;

xi) Identification of employees, commission agents, sales agents, factors, or clerks
involved in the processes of purchasing, placing purchase orders, payment, or designation of
transportation.

When the legal relationship between IBS DEL NORTE S.A. DE C.V. and its customers or suppliers ends, the
information obtained will be kept for a minimum period of five (5) years from the date on which said
relationship ended.

2.2 Employees and service providers.

Given the nature of the work and services performed by IBS DEL NORTE S.A. DE C.V., it needs to
collect the following information from its employees and service providers: i) official identification;
ii) unique population registration code; iii) proof of address of the worker and the contact person
; iv) Federal Taxpayers' Registry; v) social security registration number (IMSS or
INFONAVIT); vi) personal data and work experience; vii) education and areas of knowledge; viii)
emergency contact details; ix) marital status; x) bank accounts for the payment of
salaries and, if necessary, reimbursement; xi) landline and cell phone numbers, both personal
and those of assigned contacts; as well as all those indicated in their individual employment contracts
or in the corresponding service provision contracts.

3. Handling and Confidentiality of “Sensitive Data”

In accordance with Article 3, Section 6 of the Federal Law on Protection of Personal Data Held by Private Parties.

IBS DEL NORTE S.A. DE C.V. understands that your personal and sensitive data are of utmost importance, as
they are part of your most intimate sphere. For this reason, IBS DEL NORTE S.A. DE C.V. will not
publish them and will safeguard all the information you have provided to IBS DEL NORTE S.A. DE C.V. with the utmost security
in order to fulfill the legal and employment relationship in which you were
hired. However, if you publish any of the data that the law considers “sensitive” and which is
mentioned in the previous point, either via your official websites, or on your business cards
, social networks, or by any other means, it will be tacitly UNDERSTOOD that you have wished
them to be in the public domain and, therefore, although IBS DEL NORTE S.A. DE C.V. will continue to store them
with the utmost security and professionalism that characterizes it, you, as the owner of such data, have
stated by that mere fact that they should no longer be considered as such, that is, sensitive.

Any request to the contrary must be made within the framework indicated in the respective point for the exercise
of your rights of access, rectification, cancellation, or opposition (ARCO rights) indicated in this NOTICE
in the following point.

4. Authorization and transfer of data

IBS DEL NORTE S.A. DE C.V. may carry out operations with Service Providers that are
considered specialized and/or related entities that, in accordance with the Law and its Regulations,
shall be considered as CONTRACTORS for the requested information; noting that it is
essential to rely on them for the success of many of its activities and the nature of the relationship itself and
the nature of what is carried out, so that these may consist, by way of example but not
limited to, lawyers, accountants, tax specialists, notaries, companies or those whose trade is the transport of
goods. Likewise, when requesting the services of IBS DEL NORTE S.A. DE C.V., the
data subject expressly consents to the transfer of such information without the need for
specific prior or subsequent authorization, since otherwise it would be impossible to carry out the
services offered by IBS DEL NORTE S.A DE C.V, especially if what is required is detailed or
technical information that needs to be assessed by a third party, such as laboratories or technical products.

Similarly, IBS DEL NORTE S.A. DE C.V. may need to hire temporary or occasional service providers
to provide the services it offers, and therefore IBS DEL NORTE S.A. DE C.V. will be responsible for
ensuring that those in charge of and responsible for your personal information are treated in accordance with this
NOTICE and the excellence of the service provided by IBS DEL NORTE S.A. DE C.V.

IBS DEL NORTE S.A. DE C.V. does not normally transfer data to third parties for marketing purposes.
Consequently, no advertising campaigns are carried out, nor are third-party products or services offered other than those
carried out personally by IBS DEL NORTE S.A. DE C.V. personnel. Any
other action must be submitted for approval to your legal representative.

5. EXERCISING YOUR RIGHTS TO ACCESS, CORRECT, CANCEL, AND OBJECT

What are my A.R.C.O. rights?
This set of rights corresponds to the owner of personal data and can be exercised by them or
by their legal representative. Each initial corresponds to a right, which is as follows:

ACCESS: This is the right to this Notice, as well as to be able to verify and corroborate the
data we hold in our databases about the owner of the data.
RECTIFICATION: This is your right to modify inaccurate or incomplete data, as well as to make
any corrections you deem necessary in this regard, whether for reasons of accuracy,
validity, or modification of the data on file.
CANCELLATION: This is your right to block or suspend data found in the
databases of IBS DEL NORTE S.A. DE C.V.. If either of these two options is applicable, IBS DEL
NORTE S.A. DE C.V. will keep it for the period of time that its use is legally applicable and then
proceed to its complete removal from the databases.
OBJECTION: This is the right granted to the data subject to legitimately object to the processing of their
personal data when: (i) There is a legitimate reason and their specific situation so requires, which must
justify that, even if the processing is lawful, it must cease to prevent its persistence from causing
harm to the owner, or; (ii) It is necessary to express opposition to the processing of personal data
so that the processing is not carried out for specific purposes.

Important. The right to object shall not apply in cases where the processing is necessary for compliance with a legal obligation imposed on the controller.
To exercise your ARCO rights, you must submit the request in accordance with the provisions of

To exercise your ARCO rights, you must submit the legal request with the points indicated in
Articles 29 and 31; only in this way can IBS DEL NORTE S.A. DE C.V. respond to you
and process your request in relation to Articles 28, 30, 32, and others related to the law and its
Regulations.

Such request must generally contain: (a) Name and address or other means of
communicating the response to your request; (b) Documents proving your identity or, where applicable,
legal representation; (c) A clear and precise description of the personal data with respect to which
you wish to exercise any of the ARCO rights; (d) The purpose of the request and attach a copy of the elements
supporting your request.
IBS DEL NORTE S.A. DE C.V. will communicate the response within a period not exceeding 20 business days from
the receipt of the request, and the response will be notified to the owner by the means indicated in the
request.

The obligation to provide access to the information will be considered fulfilled when the personal data is made available to the owner, or by issuing simple copies, electronic documents, or any other means determined by IBS DEL NORTE S.A. DE C.V. in accordance with the terms of this NOTICE.
The owner may exercise their ARCO rights by sending a written request to the address indicated in this NOTICE.

In the event that the owner requests access to the data from a person who is presumed to be responsible and
this person turns out not to be so, it will suffice to inform the owner of this by any of the means referred to in
the previous paragraph, in order to consider the request fulfilled.
IBS DEL NORTE S.A. DE C.V., in accordance with Article 34 of the Law, may deny access to personal data,
or refuse to rectify or cancel it, or grant opposition to its processing
in the following cases: (i) When the applicant is not the owner of the personal data, or
the legal representative is not duly accredited to do so; (ii) When the applicant's personal data is not found in its database;
(iii) When the rights of a third party are infringed; (iv)
When there is a legal impediment, or a resolution by a competent authority, that restricts
access to personal data, or does not allow the rectification, cancellation, or opposition thereof, and; (v)
When the rectification, cancellation, or opposition has been previously carried out.

The refusal referred to in this article may be partial, in which case the controller shall carry out the
access, rectification, cancellation, or opposition requested by the data subject.

In all of the above cases, the controller must inform the data subject of the reason for their decision and communicate it to them, or where applicable, to their legal representative, within the time limits established for this purpose, by the same means by which the request was made, accompanied, where appropriate, by any relevant evidence.

6. MEXICAN REGULATORY FRAMEWORK

The laws and regulations of different countries may impose different (and even conflicting) requirements on the protection of information. IBS DEL NORTE S.A. DE C.V., being located in Mexico, hereby states that the use of your information is and will be governed by Mexican law.
If you are located in another country and contact us, please note that any information you provide will be transferred to Mexico, and by entering your information, you authorize this transfer. If you are
in another country and contact us, please note that any information you provide to us
will be transferred to Mexico, and by entering your information, you authorize this
transfer and accept this NOTICE, subject to the relevant laws.

This NOTICE therefore has no jurisdiction outside the national territory, nor is it valid or enforceable for
events that occur abroad.

It may be that for reasons of filling out documents and digital files, IBS DEL
NORTE S.A. DE C.V. may obtain or update its databases. Therefore, when you enter any personal data into the
systems, forms, worksheets, bills of lading, and other necessary documents for the provision of the
services offered by IBS DEL NORTE S.A. DE C.V., you are expressly accepting and expressing your
willingness for it to be stored and used by IBS DEL NORTE S.A. DE C.V. for the purposes set forth therein
subject to the terms of this NOTICE and the legal relationship that regulates it.

8. CHANGES TO THIS NOTICE

IBS DEL NORTE S.A. DE C.V. reserves the right to make changes or updates to the NOTICE at any time, in order to comply with new legislation, improve internal policies, or meet new requirements for the provision or offering of our services at any time and without prior notice.
In the event of any changes to this NOTICE, you will be notified primarily by sending an email to the account you have provided for communication purposes.
You will also be notified by posting the updated NOTICE on our website.
If you do not agree with the changes made to this NOTICE, you may withdraw your consent by contacting us at the email address provided in the NOTICE.
You may also withdraw your consent by contacting us at the address provided in the NOTICE.

In the event of any change to this NOTICE, data subjects will be notified
primarily by sending an email to the account they have provided for communication purposes.
Likewise, for your security, please review the content of
this NOTICE at any time, which will also be printed and visible at the reception of our address and
official website.

9. REQUIREMENTS FOR CONFIDENTIALITY AND SECRECY AGREEMENTS

If you need to enter into a confidentiality and secrecy agreement and/or contract
with IBS DEL NORTE S.A. DE C.V. without a prior legal relationship or on the eve of
its conclusion, IBS DEL NORTE S.A. DE C.V. reserves the right to sign it or not, in accordance with its
policies, internal procedures, or agreements.

However, if a legal relationship already exists, you may also request the signing of a confidentiality document, which, in accordance with this NOTICE, will be provided by the contact person, who will indicate the procedures to follow.