Privacy Notice

I. Purpose of the Processing of Personal Data.

The Personal Data that ARAGON and AIR may request and use for the purposes of the services they provide are: identification and gender data; contact and address data; data regarding your occupation; financial data; academic background data; travel and immigration data; data on administrative and judicial matters; and any other data considered Personal Data under the Data Law. ARAGON and AIR may also request and use the following Sensitive Data: data about your health; personal characteristics and habits, and physical characteristics; and any other data considered Sensitive Data under the Data Law.

ARAGON and AIR will use the Personal Data collected primarily to carry out all actions necessary to provide the services that ARAGON and AIR manage on your behalf, such as advisory services on insurance and surety bonds; determining the type of coverage you require; issuing, maintaining, administering and renewing insurance policies; handling losses, and processing and paying insurance claims; contacting your relatives in an emergency; requesting references and conducting inquiries, investigations and reviews in connection with losses; and fulfilling obligations undertaken with you or before the relevant Authorities.

Additionally, ARAGON and AIR will use the Personal Data collected, on a secondary basis, to create databases for statistical, research and new product or service development purposes; to conduct risk and actuarial studies; to evaluate service quality; to send you information about the services ARAGON and AIR provide to you; and to send you advertising about services and promotions offered by ARAGON and AIR (the "Secondary Purposes").

II. Limitation of the Use and Disclosure of Personal Data.

Except for the Personal Data that the Data Law or any other applicable law deems essential for ARAGON and AIR to provide the services and to comply with their obligations arising from intermediation activities in the contracting of insurance and surety bonds, you may limit the use and disclosure of your personal data for the purposes set out in section I of this Privacy Notice. To do so, you must notify the ARAGON and AIR Privacy Department by email at avisodeprivacidad@aragon.com.mx and avisodeprivacidad@air.com.mx.

III. Rights of Access, Rectification, Cancellation or Opposition ("ARCO Rights").

In accordance with article 28 of the Data Law, you are entitled to request from ARAGON and AIR, at any time, access to, rectification or cancellation of, or opposition to the processing of, the Personal Data concerning you.

To exercise your ARCO Rights, you must send an email to the ARAGON and AIR Privacy Department at avisodeprivacidad@aragon.com.mx and/or avisoprivacidad@air.com.mx, which must contain and be accompanied by: (i) the data subject's name and address or other means of communicating the response to the request; (ii) the documents proving the identity or, where applicable, the legal representation of the data subject; (iii) a clear and precise description of the Personal Data with respect to which any of the ARCO Rights is to be exercised; and (iv) any other element or document that helps locate the personal data.

ARAGON and AIR will inform you of the decision adopted within a maximum of 20 (twenty) business days from the date on which the request to exercise ARCO Rights was received, so that, if appropriate, it takes effect within the 15 (fifteen) business days following the date on which the response is communicated.

Exercising ARCO Rights is free of charge; at the discretion of ARAGON and AIR, you may only be required to cover justified shipping or reproduction costs for copies or other formats.

IV. Data Transfers.

ARAGON and AIR will transfer your Personal Data to third parties in order to provide the services and to comply with their obligations arising from the intermediation activities in the contracting of insurance and surety bonds referred to in the second paragraph of section I of this Privacy Notice.

For the Secondary Purposes, ARAGON and AIR may transfer your personal data to third parties, for which we will understand that you grant your tacit consent if you do not express your objection to such transfer: (i) at the time the Privacy Notice is made known to you; (ii) when the data is collected directly or in person; or (iii) by email to the ARAGON and AIR Privacy Department at avisodeprivacidad@aragon.com.mx and/or avisoprivacidad@air.com.mx.

In the event that ARAGON and AIR need to transfer Personal Data considered Sensitive Data under the Data Law, ARAGON and AIR will inform you and, where applicable, obtain your express or written consent, as required.

V. Changes to the Privacy Notice.

The ARAGON and AIR Privacy Notice, as well as any changes to it, is available to you: (i) on the websites https://aragon.com.mx/ and/or https://www.air.com.mx/index-es.html; (ii) in printed brochures at the ARAGON and AIR offices; and (iii) through any other means of communication that ARAGON and AIR may consider appropriate at the time.