In compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Federal Law on the Protection of Personal Data Held by Private Parties), its regulations, and all other applicable provisions (the 'Law'), the following notice is made available to all interested parties (the 'Data Subject') who, for any reason, provide personal information to Mare Vera Coast Society® through the commercial brand known as Mare Vera (hereinafter the 'Data Controller'):

Privacy Notice

1. Identity and address:

Mare Vera Coast Society®, through the commercial brand known as Mare Vera, shall be responsible for the use and protection of your personal data and designates as its address the premises located at Mare Vera Coast Society®.

2. Personal and sensitive personal data provided by you that will be subject to the corresponding processing:

a) Personal data: Identification, contact, employment, and academic data. b) Sensitive personal data: Racial or ethnic data, present and future health status, genetic and biometric information, union membership, sexual preference, immigration status, physical characteristics, and data regarding administrative proceedings conducted in the form of a trial and/or jurisdictional proceedings shall not be collected by the Data Controller, as they are not necessary for any of the purposes set forth in sections 3 and 4 of this notice. c) Financial and/or asset-related data: The Data Controller hereby informs you that under no circumstances shall it or any of its representatives request confidential information regarding your bank accounts, such as passwords. However, it may request any information that allows the analysis of your creditworthiness and/or credit history.

3. Primary purposes of data processing:

a) Clients: i. Analyze risks and/or feasibility to, where applicable, execute real estate purchase agreements between the Data Subject and the Data Controller. ii. Fulfill obligations arising from contracts entered into between the Data Subject and the Data Controller. iii. Provide service, assistance, and advisory support during the contractual relationship between the Data Subject and the Data Controller. iv. Respond to national and/or international financial and judicial entities or authorities, in order to comply with our obligations under applicable laws, international treaties, tax obligations, as well as official notifications or judicial requirements. v. Fraud prevention. vi. Statistical studies. b) Suppliers or providers of goods and/or services: i) For all purposes related to the legal/contractual relationship entered into between the Data Controller and the Data Subject. c) Human Resources (Employees and candidates): i) To evaluate a potential employment relationship between the Data Subject and the Data Controller, as well as to maintain, modify, or terminate an existing legal relationship, including selection, recruitment, training, development, payment of employment benefits, additional benefits granted by the Data Controller, and compliance with tax and judicial obligations. ii) Statistical studies.

4. Secondary purposes of data processing:

Additionally, personal data may be used for purposes other than those necessary for the fulfillment of an existing legal obligation, which may include any of the following: a) Send, by any physical, electronic, or magnetic means, including regular mail, email, text messages, telephone calls, electronic downloads, in person, or through agents, distributors, telemarketing companies, or any other person authorized for such purpose by the Data Controller: i) Updates on the status of the legal relationship with the Data Controller. ii) Information about the products or services offered, including without limitation, information regarding new products, additional benefits, or promotions. iii) Advertising, promotions, benefits, employee discounts, bonuses, contests, sweepstakes, volunteer invitations, and greetings. iv) News and announcements related to the Data Controller. b) Conduct market research internally or through third parties to evaluate our services, learn your opinion regarding the launch of any new product, and assess sales concepts. c) Human Resources: Job Bank (exchange of resumes with other institutions). d) Participation in contests, sweepstakes, invitations, and volunteer activities. If we do not receive your express objection to the processing of your personal data for these purposes, we will understand that you have given your tacit consent thereto. Likewise, you may express your refusal for your data to be processed for the purposes described in this section through the procedure detailed in section 7 of this Privacy Notice.

5. Data transfer:

Your personal data may be transferred for the primary and secondary purposes described above in sections 3 and 4. The categories of companies and their purposes to which the Data Controller may make transfers are as follows: a) Transfers that do not require your consent in accordance with Article 37 of the Law: i) Trusts and/or companies in which the trustors and/or beneficiaries hold a participation. ii) National and international financial authorities, in order to comply with our obligations under applicable laws and/or treaties, tax obligations, as well as official notifications or requirements. iii) IMSS (Mexican Social Security Institute), in order to comply with obligations set forth in social security legislation. iv) INFONAVIT (National Workers' Housing Fund Institute), in order to comply with obligations set forth in applicable legislation. v) Institutions, organizations, or entities in the insurance sector for risk assessment and fraud prevention purposes. vi) CONDUSEF (National Commission for the Protection and Defense of Financial Services Users), in order to resolve claims filed by the Data Subject. vii) Service providers in the evaluation of a potential relationship with the Data Subject and/or for the fulfillment of the Data Controller's obligations to clients, human resources, and suppliers. b) Transfers that require your consent: i) Service providers for secondary purposes. ii) Advertising and marketing agencies described in section 4. In this regard, the third party receiving the information must previously assume the same obligations regarding the handling and care of information as those set forth in this privacy notice.

6. Consent:

The Data Controller shall not require the consent of the Data Subject to process personal data when such processing is based on Article 10 of the Law. In the case of sensitive personal data, the Data Controller must obtain the corresponding consent, which, together with this Privacy Notice, authorizes the Data Controller to process the data as consented to by the Data Subject. The Data Subject acknowledges that, upon submitting any request or expressing interest in entering into a contract, or in the event of an existing legal relationship with the Data Controller, full consent has been granted for personal data to be used for the primary purposes, as well as for the secondary purposes and data transfers described in sections 3, 4, and 5. Note: You may request the revocation of your consent so that your sensitive data is no longer processed for the purposes described in this Privacy Notice through the procedure detailed in this instrument.

7. Means and procedures to express your refusal to the processing of your data, revocation of consent, limitation of use or disclosure of personal data, and to exercise your ARCO rights:

At any time, you may exercise your rights of Access, Rectification, Cancellation, and/or Opposition (ARCO rights) in accordance with the requirements and procedures set forth below: a) Requirements: i) Complete the form to request the exercise of your ARCO rights, which the Data Controller makes available through its website at https://marevera.mx or in person at the offices located at the address indicated in section 1 of this Notice. ii) Valid official identification. iii) In the case of representing a legal entity, a power of attorney demonstrating authority to perform administrative acts. b) Procedure: Request the form to exercise your ARCO rights at the following email address: info@marevera.com and proceed to submit it duly completed and signed. Subsequently, the Data Controller shall provide the Data Subject with a written response and all accompanying documentation within the timeframe established in Article 32 of the Law. If you wish, you may appear in person at the Data Controller's address indicated in section 1 of this Privacy Notice with the requirements set forth in the preceding paragraph. The Data Controller shall verify the information provided and proceed to process your request. Subsequently, the Data Controller shall provide the Data Subject with a written response and all accompanying documentation within the timeframe established in Article 32 of the Law. c) Refusal of data processing: In the event that you receive this Privacy Notice indirectly, in accordance with Chapter I, Article 3 of the Privacy Notice Guidelines, you shall have a period of five (5) business days to express your disagreement or rejection thereof. Once the five (5) business day period has elapsed, you must follow the procedure contained in this instrument for the exercise of your ARCO rights. d) Limitation on the use and disclosure of your personal data: Mare Vera hereby informs you that you may access the Public Registry of Individual Users, known as "REUS," which allows you to register in a database in order to restrict promotional calls to private numbers (landline or mobile), work numbers, or email, thereby safeguarding your privacy and avoiding the inconvenience caused by such calls or information mailings. For more information, please visit the CONDUSEF website at www.condusef.gob.mx or call 01-800-999-8080.

8. Privacy Notice provisions:

The Data Controller shall be responsible for communicating to the Data Subject any changes made to this Privacy Notice through the following means, at its discretion: i) Notices posted on the Data Controller's website and/or, ii) Notices posted in a visible location at the Data Controller's offices and/or optionally, iii) Institutional email or any other means of contact provided by the Data Subject to the Data Controller.

9. Contact:

For Mare Vera, maintaining the privacy of your personal data and acting within the parameters established by the Law to uphold security procedures is of the utmost importance. Therefore, we inform you that if you have any questions regarding the content, scope, or interpretation of this instrument; the processing of your personal data; the procedure to exercise your ARCO rights; the limitation on use and disclosure; or any other matter related to this Privacy Notice, you may contact us at the email address: info@marevera.com or by telephone at 297 688 1111. Likewise, you may contact the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) to clarify any questions and/or submit any comments related to your personal data by calling: 01 800 835 43 24 or visiting the website at http://inicio.ifai.org.mx/SitePages/ifai.aspx

10. Cookies:

The Data Controller hereby informs you that a "Cookie" is the term used for alphanumeric identifiers that a web server transfers to your computer through your Internet browser to improve the ease of navigation on our websites. When your Internet browser visits a web page, a cookie with a unique and anonymous number is generated to recognize your browser, which is stored in the cookies directory of your hard drive. Cookies may be permanent (they remain on your computer until you delete them) or temporary (they last only until the user closes the browser or for a limited period). The Data Controller uses cookies on its websites to record information about your browsing preferences, as well as technical information (number of visits, visit flow, selections, and actions performed via mouse or equivalent device). Such information is anonymous, meaning that individual users are not personally identified—only their computing devices. Cookies may be enabled or disabled through the settings of your computing device and/or Internet browser. However, if you choose to disable this option, you may not be able to access some of the personalized features of our websites.