1. Insurance policies in the line of the following business:
   • Transport
   • Containers
   • Aircraft hull
   • Ship hull
   • Environmental liability
   • Maritime liability
   • Civil liability for the entire logistics chain
   • Directors’ and officers’ liability
   • Civil liability for public servants
   • Warehousing
   • Financial institutions
   • Credit
   • Funds
   • Against fraud (CRIME)
   • Non-compliance
   • Data protection
   • Major and minor medical expenses
   • Pet insurance
   • Among other insurances
2. Bonds
3. Programs and Professional Advice in Risk Management Systems, Industrial Safety, Property, Environmental and Social Responsibility.
4. Formation and operation of the Regional Network of Promoters and Professional Advisors of GRUPO NUÑO through the affiliation of certified insurance agents, professional promoters and Business prompter.
   • b) TaxPurposes:
     Perform the corresponding tax billing derived from the marketing of products and / or services of GRUPO NUÑO to its customers, suppliers, distributors and / or affiliates, this in compliance with its tax obligations by GRUPO NUÑO.In case you make an electronic transaction to fulfill the obligations we have or will have with you, we will use your personal data to contact you or send you the products or services.In addition, GRUPO NUÑO will use your personal information for the following Secondary Purposes that are not necessary for the requested service, but that will allow and facilitate to provide you a better attention:
   • a) Marketing Purposes:In order to let you know the commercial information of GRUPO NUÑO, among which stand out are those of commercial marketing activities of their products or services, birthday greetings, changes in our products or services, request evaluation of the quality of service, conduct internal studies on consumer habits and any other promotional or issue related to the products and / or services of GRUPO NUÑO.Specifically, GRUPO NUÑO will perform:Physical and/or online marketing and dissemination activities (telemarketing and mailing of packages, discounts and/or new products of your products or services).Telephone calls and emails for collections and payments, location and verification of customer and/or employee information, confirmation of orders and purchase orders, renewal and delivery of insurance policies, clarifications, quotations and promotions, sending and receiving tax invoices, arranging appointments and after-sales follow-up, as well as providing follow-up on projects and quotations.Publication and posting in various social networks for contact and loyalty of customers and/or prospects.In case you do not want your personal data to be processed for these additional purposes, you can indicate below:I do not consent to my personal data being used for the following purposes:
     [ ] Marketing or Advertising.
     [ ] Commercial Prospecting.

     To make use of this right, from this moment you can download from the Internet site of GRUPO NUÑO: www.gruponuno.com and print our Simplified Privacy Notice and expressly with your name and signature you can deliver it in person to the person in charge of the processing of your data at the address assigned for this purpose, or you can send an email to GRUPO NUÑO indicating your refusal of consent or cancellation in the following email: soporte@gruponuno.com

     The refusal to use your personal data for these purposes may not be a reason for us to deny you the products and / or services you request or contract with GRUPO NUÑO.

5. Personal Data Collected.
   In order to carry out the purposes described in this Privacy Notice, GRUPO NUÑO will use the following personal data from you:
   1. a) Personal Data to be Collected Directly:
      Identification
      Full Name of the Person
      Full Name of Beneficiaries
      Date of Birth
      Place of Birth
      Gender
      Marital Status
      Fingerprints
      Handwritten Signature
      Electronic Signature
      Video Image
      Photographic Image
      Unique Population Registry Code (C.U.R.P.)
      Federal Taxpayers Registry (R.F.C.)
      Social Security Number (I.M.S.S.)
      Official IdentificationContact Information
      Complete Personal / Fiscal Address
      Landline Phone
      Mobile Phone
      Email Address
      Official Proof of Addressb) Personal Data that will be collected virtually or by telemarketing:
      Identification
      Full Name of the Person or Legal Representative
      Name of the CompanyContact
      Landline Phone
      Mobile Phone
      E-mail addressc) Personal Data to be Collected by Other Means Permitted by Law (Labor Applications):
      Identification
      Full Name of the Person
      Names of Economic Dependents
      Date and Place of Birth
      Nationality
      Age
      Gender
      Marital Status
      Handwritten Signature
      Photographic Image
      Unique Population Registry Code ((C.U.R.P.)
      Federal Taxpayers Registry (R.F.C.)
      Birth Certificate (optional)
      Marriage Certificate (optional)
      Driver’s License (optional)
      Passport (optional)
      S.M.N. Card (optional)
      Letter of No Criminal RecordContact Information
      Complete Personal Address
      Landline Phone
      Mobile Phone
      E-mail AddressEmployment Data
      Social Security Number (I.M.S.S.)
      AFORE Account
      Work History and/or Experience
      Work References
      Personal References

      Academic Data
      Maximum level of schooling
      Résumé (optional)

      IMPORTANT: All information and personal data collected from candidates who are not accepted in the recruitment process, will remain in the custody of GRUPO NUÑO for the following 3 months (90 calendar days) from the date of receipt, then, at the end of this period of time, such information and data will be destroyed internally by GRUPO NUÑO.

      d) Personnel Authorized to Collect Personal Data:

      GRUPO NUÑO informs you that your personal data may be collected directly and in person through its team of collaborators, agents, sub-agents and Business prompter of the insurance promoter and/or service center, such personnel will be properly identified; likewise, the number of collaborators, agents, sub-agents, Business prompter and service centers may increase or decrease without affecting the quantity and quality of service that we offer.

      GRUPO NUÑO additionally informs you that:

      1. It DOES collect sensitive personal data through different capture channels, such as: personal data capture form in printed applications and/or on the website, and bank statements to justify the procedures to be applied.

   For the secure handling of sensitive personal data through electronic means, such as: web pages, digital applications, virtual stores, payment gateways, etc., GRUPO NUÑO informs you that such information will be encrypted under a very sophisticated method, using state-of-the-art technology, sending and transferring encrypted data through a secure connection layer, under SSL (Secure Sockets Layer) Encryption Certificates.

   GRUPO NUÑO undertakes that it will be treated under the strictest security measures to ensure its confidentiality and only to comply with the purposes mentioned in this Privacy Notice.

   Biometrics
   Certificate and/or Medical Record
   Blood Type
   Height and Body Weight
   Diseases or Allergies
   Prescribed or Prohibited Medications

   Patrimonial
   Bank Account Number
   Name of Bank Account Holder
   Interbank Transfer CLABE Number
   Recent Bank Statement
   Proof of Economic Income
   Audited Tax Returns Company Financial Statements (companies)

   In case of the use of sensitive personal data, you can express your right of opposition if you wish, so that your data and sensitive information are not treated in accordance with the purposes described above, you can indicate it below:

   [ ]. I do not consent to my sensitive personal data being collected and processed.

   Having indicated your intention, you agree to grant your Express Consent in writing, in accordance with the provisions of Article 9 of the Law, which is stated in paragraph 11 of this Privacy Notice, and likewise, through the signature of authorization in the Simplified Notice.

   1. 2) Collect and record digital video images of all persons entering the facilities, circulate and / or stay inside and / or outside the premises by entrance doors, corridors, premises, offices and common areas of GRUPO NUÑO, said images shall be captured by GRUPO NUÑO’s own video cameras, which shall remain in safekeeping and digital backup in the server and/or data center of the closed-circuit video surveillance system for a maximum storage period of 90 (ninety) calendar days, and the images and recordings shall be deleted at the end of this period of time (the time may vary and shall be determined by the technical and physical capacity of the installed equipment).

   The images and/or recordings may be used for security purposes, both by authorized GRUPO NUÑO management personnel, as well as by the security personnel on duty hired or that may be hired to provide surveillance, security and custody services for GRUPO NUÑO, personnel who must be aware at all times and who will be obliged to adhere to all the legal scope and responsibilities of this Privacy Notice, which may not be ignored and/or waived.

6. Rights of Access, Rectification, Cancellation or Opposition (A.R.C.O.).In accordance with the provisions of the Law, you have the right to know what personal data GRUPO NUÑO has about you, what it uses them for and the conditions of use that you give them (Access), likewise it is your right to request the correction of your information if it is outdated, inaccurate or incomplete (Rectification), it is removed from the records or databases when you consider that it is not being used in accordance with the principles, duties and obligations set forth in the regulations (Cancellation ), as well as oppose the processing of your personal data for specific purposes (Opposition). These rights are known as a whole and hereinafter as A.R.C.O Rights.
   To exercise any of the A.R.C.O. Rights, GRUPO NUÑO offers you the following procedure:
   • 6.1. Office or Person in Charge of the Privacy of Personal Data.GRUPO NUÑO has appointed Carlos Saúl Aviña Hernández as the person in charge of the treatment and custody of personal data (hereinafter the Person in Charge), who will process your requests, answer any questions you may have in this regard and promote the protection of personal data within GRUPO NUÑO.
     For the above, the Manager makes available the following forms of contact and receipt of information and related documentation:
     • Single Physical Location: at the address: Calle Mexicaltzingo 2379, Colonia Arcos Sur, 44150, Guadalajara, Jalisco. Mexico.
     • Single Personal Attention: by telephone you can call: (01 33) 36 30 – 16 59; Virtually, you will be able to get in touch through the online chat within the Internet sites of GRUPO NUÑO; Likewise, you can send an email to the address: support@gruponuno.com
   • 6.2 Request for Access, Rectification, Cancellation or Opposition.
     As the owner of your personal data, you can download, print and duly request our Request to Exercise Rights A.R.C.O. and expressly with your name and handwritten signature you can deliver it in person to the executive in charge of processing your data at the address assigned for this purpose, or you can send the request by email to GRUPO NUÑO clearly indicating your request for access, rectification, cancellation or opposition, regarding your data to the following email address: soporte@gruponuno.comSaid request shall contain, at least:
     • Full name and address of the owner of the personal data, and some means to notify you and give you the corresponding response to your request.
     • Documents that officially prove the identity or legal representation of the owner of the personal data.
     • Clear and precise description of the request to exercise any of your A.R.C.O. rights regarding personal data.
     • Any other element or document that facilitates the location of personal data.
     • Indicate the modifications to be made and/or the limitations on the use of personal data, in accordance with the provisions of section 8.2 of this Privacy Notice.
     • Provide GRUPO NUÑO with the application form and the documentation that supports your request.
   • 6.2 Resolution and Communication.
     • GRUPO NUÑO will notify the owner of the personal data of the determination adopted, within a period not exceeding 20 (twenty) business days from the date the request was received. This period may be extended by GRUPO NUÑO on a single occasion for an equal period, as long as the circumstances of the case justify it. Based on the foregoing, and in accordance with the provisions of the Law, GRUPO NUÑO will inform the owner of the personal data of the meaning and motivation of the resolution, by the same means by which the request was made, and will accompany with the relevant evidence said resolution in your case.When the request is appropriate, it will be made effective by GRUPO NUÑO within 15 (fifteen) business days following the communication of the resolution adopted.Likewise, the owner may submit to the National Institute of Transparency, Access to Information and Protection of Personal Data (I.N.A.I.) a request for data protection for the response received or for the lack of response from GRUPO NUÑO. Said request must be submitted by the owner within 15 (fifteen) business days following the date on which the response is communicated to the owner by GRUPO NUÑO, and will be subject to the provisions of the Law.In case of requests for access to personal data, it will be necessary for the applicant, either the owner or his legal representative, to previously prove his identity.The obligation to access the information will be considered fulfilled when GRUPO NUÑO makes the personal data available to the holder or by issuing simple copies or by means of electronic documents.

       In the event that any person requests access to personal data from GRUPO NUÑO assuming that he is the owner and/or responsible and it turns out that he/she is not, it will suffice for GRUPO NUÑO to indicate this to the applicant by any means, (of those established in the application form), in order to consider said request as cleared.

       The response to the request for access, rectification, cancellation or opposition of personal data will be completely free. Only the justified expenses for shipping reasons or the cost for reproduction in copies or other formats must be covered, which, at the time, GRUPO NUÑO will let you know.

       In the event that the same person reiterates the request for access, rectification, cancellation or opposition of personal data in a period of less than 12 (twelve) months from the date of the last request, the answer to his/her request may have an additional cost, this will be the one indicated by GRUPO NUÑO, in accordance with the provisions of article 35 of the Law.

   • 6.4. Refusal to Access Personal Data.
     GRUPO NUÑO may deny total or partial access to personal data or the rectification, cancellation or opposition to their processing, in the following cases:
     • When the applicant is not the owner or the legal representative is not duly accredited to do so.
     • When the applicant’s personal data is not found in the GRUPO NUÑO database.
     • When the rights of a third party are violated.
     • When there is legal impediment or resolution of any authority.
     • When the rectification, cancellation or opposition has been previously made, so that the request lacks substance.
   • 6.5. Consequences of Cancellation.The cancellation of the personal data will give rise to a blocking period after which GRUPO NUÑO will proceed to the deletion of the personal data.Once the corresponding personal data has been cancelled, GRUPO NUÑO will notify its owner. Having done the foregoing, GRUPO NUÑO may keep the personal data exclusively for the purposes of the responsibilities derived from the treatment referred to in the Advertising Notice.When the personal data had been transmitted to third parties before the rectification or cancellation and these are processed by said third parties, GRUPO NUÑO must inform you of the request presented by the owner, so that the latter proceeds to make the corresponding rectifications or cancellations of the third parties involved.GRUPO NUÑO will not be obliged to cancel your personal data in the case of any existing assumptions established in article 26 of the Law.

     Likewise, when the information collected in the personal data is no longer necessary for the fulfillment of the purposes set forth in this Privacy Notice and in the applicable legal provisions, the personal data will be canceled from the GRUPO NUÑO databases.

7. Acceptance or Revocation of the Treatment of Personal Data.
   In order for GRUPO NUÑO to carry out the processing of personal data, customers, prospects, suppliers, distributors, affiliates and/or holders of GRUPO NUÑO’s personal data must grant express or tacit acceptance for said processing, which will be carried out by any of the following means:
   • 7.1. Acceptance through Electronic Means:a) Publication on the Internet Pages of GRUPO NUÑO. GRUPO NUÑO will publish this Privacy Notice on its Internet sites, so that, once you become aware of its content, you grant or deny your consent so that GRUPO NUÑO can carry out the processing of your personal data.This will also apply if, for any reason, GRUPO NUÑO does not have your email address or when your personal data is wrong, obsolete or out of date and you cannot be located.b) Email.

     Based on the information that you provide or have provided, GRUPO NUÑO will send you this Privacy Notice by email, so that, once you become aware of its content, you grant or deny your consent for GRUPO NUÑO to carry out the processing of your personal data.

   • 7.2. Acceptance or Rejection of the Privacy Notice by Electronic Means.
     The acceptance or rejection of the Privacy Notice of GRUPO NUÑO by electronic means will be carried out as follows:a) GRUPO NUÑO will send the following information to the email address registered in your name: The declaration that GRUPO NUÑO Privacy Notice exists. The content of the Privacy Notice and, where appropriate, the modifications, updates, adaptations or changes made to said notice. An electronic link through which you can accept or not accept the Privacy Notice, or the changes that it may have.
     b) Once you have read and are aware of the content of the Privacy Notice, or of the changes made to it, you will have the following options:
     • Accept. By accepting it, you grant consent and authorization for GRUPO NUÑO to use your personal data in accordance with the treatment purposes established in the Privacy Notice.
     • Not accept. When you do not accept the content of the Privacy Notice or its modifications, deny or cancel your consent and authorization for GRUPO NUÑO to use your personal data.

     In this case, GRUPO NUÑO will cancel and stop using your personal data for the treatment purposes established in this Privacy Notice.

   • 7.3. Personal Acceptance.When personal data is obtained personally from the owner, GRUPO NUÑO will make this Privacy Notice available to you at the time your personal data is collected and in a clear and reliable manner, through the formats that GRUPO NUÑO uses or will use for this purpose. In addition, through said formats, GRUPO NUÑO will obtain the acceptance or denial of the consent of the owner to submit said data to the purposes of the treatment established in this Privacy Notice.
   • 7.4. Tacit Acceptance.Based on the provisions of article 8 of the Law, the content of this Privacy Notice, as well as any modification or addition to it, will be made known to you by any of the means established in sections 7.1 and 7.2 above, and in case you do not express opposition to the content and scope of the same within a period of 30 (thirty) calendar days, counted from the date on which GRUPO NUÑO informs you about the Privacy Notice or its modifications, it will be understood that you grant your tacit consent for GRUPO NUÑO to process your personal data based on the purposes of the treatment established in the Privacy Notice.
   • 7.5. Retroactive Acceptance.For all our clients, prospects, suppliers, distributors, affiliates and/or holders of personal data who, on dates prior to the notification or publication of this Privacy Notice, have provided us with their personal data, either by filling out registration forms to obtain information or quotation of the products and/or services of GRUPO NUÑO, or by any other form or means, they will be informed of the Privacy Notice in accordance with the provisions of sections 7.1 and 7.2 above, in order that they grant or deny their consent (express or tacit) so that GRUPO NUÑO may or may not continue to process your personal data based on the purposes of the treatment established in the Privacy Notice.
8. Limitation of Use or Disclosure of Personal Data.
   • 8.1. Actions to Prevent Unauthorized Use or Disclosure.In order to guarantee the protection of your personal data and to limit the unauthorized use or disclosure thereof, GRUPO NUÑO continuously carries out and will carry out the following actions:a) Confidentiality of Information.
     GRUPO NUÑO will keep confidentiality regarding the personal data collected from you, which will continue even after the end of its commercial relations or of another nature with the customer or owner of said personal data.

     b) Confidentiality Notice.
     In the event that, for any reason, GRUPO NUÑO finds it necessary to provide your personal data to third parties (in the terms provided in the Law or in this Privacy Notice), it will notify said third parties of the obligation to comply with the established provisions in the Law and the confidentiality of your personal data.

     c) Database Administration.
     Personal data is managed and protected through the use of databases, which are managed only by the people designated by GRUPO NUÑO for this purpose, without allowing their use, consultation, management or access to unauthorized people.

     d) Computer and Information Systems.

     Our Databases are protected by firewalls and computer and/or IT systems focused on preventing unauthorized or non-GRUPO NUÑO people

   • 8.2. Requests to Limit Use or Disclosure.In the event that you wish to limit the use or disclosure of your Personal Data, in relation to one or more of the purposes of processing personal data (such as, for example, advertising mailings, birthday wishes, job offers, delivery of prizes, among others), you may send the respective request in accordance with the procedure established in any of the sections of point 7.0 of this Privacy Notice, or by accessing the links that are loaded or will be loaded on the internet pages of GRUPO NUÑO, or through the promotional information that we send you.
9. Use of Tracking Technologies on Our Website.
   We inform you that cookies, web beacons and other tracking technologies may be used in the near future on the GRUPO NUÑO Internet sites through which it is possible to monitor your behavior as an Internet user, as well as to provide you with a better service and user experience when browsing said sites.
   • Cookies: These are text files that are automatically downloaded and stored on the hard drive of the user’s computer when browsing a specific internet page, which allow the internet server to remember some data about this user, including their preferences for visualization of the pages in that server name and password.
   • Web Beacons: These are images inserted into a web page or email that can be used to monitor the behavior of a visitor, such as storing information about the IP address, duration of interaction time on that page and the type of browser used among others.At any time, these technologies may be disabled if you wish. You can disable the use of Cookies and Web Beacons by performing the following procedure:

     From Internet Explorer (on Windows):

     1. Open the Internet Explorer browser.
     2. Display the Internet Explorer general settings menu bar on the upper right side, with the Alt key (if it is not visible), select the Tools option.
     3. In the Tools menu select Internet Options
     4. In the Privacy section.
     5. Click on the Advanced button.
     6. Check the Override Automatic Cookie Management box.
     7. In the Origin Cookies section, uncheck the Accept box by selecting the Block box; and then, in the Third Party Cookies section, uncheck the Accept box by selecting the Block box.
     8. Uncheck the Always accept Session Cookies box.
     9. Click the Accept button (Advanced Privacy Settings Window).
     10. Click on the Apply button, and then on the OK button (Internet Options Window).

     From Mozilla Firefox:

     1. 1. Open the Mozilla Firefox browser.
     2. Display the Mozila Firefox general settings menu bar on the upper right side, or with the Alt key (if it is not visible), select the Tools option.
     3. In the Menu select Options.
     4. Click on the Privacy section.
     5. In the History section in the Firefox option, select the Use Custom Settings for History option.
     6. Uncheck the Accept Cookies box.
     7. Click on the Accept button.

     From Google Chrome:

     1. Open Google Chrome browser.
     2. Open the Google Chrome general settings menu bar on the upper right side, and select the Settings option.
     3. Click on the Show Advanced Options link.
     4. In the Privacy section, click on the Content Settings button.
     5. In the Cookies section, select the option Do not allow Site Data to be saved, and then check the Block Site Data and Third Party Cookies box.
     6. Click the Done button.
     7. Click on the Hide Advanced Options link.
     8. Close the window to finish.

     From Opera:

     1. Open the Opera browser.
     2. Display the Opera general settings Menu bar with the Alt key (in case it is not visible).
     3. Click on the Settings section, and select the Privacy and Security option.
     4. In the Cookies section, select the option Prevent Sites from Saving Any Data, and then check the Block Third-Party Cookies and Site Data box.
     5. Close the window to finish.

     From Safari on Mac:

     1. Open Safari browser.
     2. Display the Safari general settings menu on the upper right side, and select the Preferences option.
     3. Click on the Privacy option.
     4. In the Block Cookies section, uncheck the Never box, and then check the Advertising and Third Party box.
     5. Then in the Limit Access to Websites to Location Services… section, check the Deny Without Warning box.
     6. Close the window to finish.
10. Changes to the Privacy Notice.
    GRUPO NUÑO reserves the right to make, at any time, modifications or updates to this Privacy Notice, for the attention of new legislation or jurisprudence, internal policies, new requirements for the provision or offering of the products and / or services offered, or due to business and privacy practices, changes in our business model, or for other reasons.Due to the foregoing, GRUPO NUÑO undertakes to keep you informed of said changes, this will be done through the forms and means established within the Privacy Notice.
11. Consent of the Owner of the Personal Data
    By my free right, I expressly and/or tacitly consent and authorize my personal data to be processed in accordance with the terms and conditions set forth in this Privacy Notice.Authorization for the processing of your personal data:

    NAME AND HANDWRITTEN SIGNATURE OF THE DATA HOLDER

FINAL CONSIDERATIONS

Informative Nature of This Document. The content of this Privacy Notice is merely informative, in case you wish to express your acceptance or rejection of its content, we invite you at all times to contact GRUPO NUÑO through the means already established above.

Complaints and Reports.
If you consider that your right to protection of your personal data has been violated by GRUPO NUÑO or by the operational staff in charge, this derived from conduct, actions or responses; presumes that in the treatment of your personal data there is a violation of the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, you may file the corresponding complaint with the National Institute of Transparency, Access to Information and Protection of Personal Data (I.N.A.I.) directly by registering on the INAI-PRODATOS web portal: www.datospersonales.org.mx or for more information visit the website: www.inai.org.mx

This Privacy Notice was last updated on:

June 10, 2020