In compliance with the Law on the Protection of Personal Data Held by Private Parties, its regulations and other applicable provisions ('The Law'), the following is made available to interested parties ('The Data Subject') who for any reason provide personal information to Mare Vera Coast Society® through the trademark known as Mare Vera (hereinafter the 'Controller'):

Privacy Notice

1. Identity and address:

Mare Vera Coast Society®, through the trademark known as Mare Vera, will be responsible for the use and protection of your personal data and designates its address as located at Mare Vera Coast Society®

2. Personal and sensitive personal data provided by you that will be subject to the corresponding processing:

a) Personal Data: Identification, contact, employment, and academic data. b) Sensitive Personal Data: Racial or ethnic data, current and future health status, genetic and biometric information, union affiliation, sexual orientation, immigration status, physical characteristics, and data regarding administrative proceedings in the form of legal and/or jurisdictional proceedings will not be collected by the Data Controller, as they are not necessary for any of the purposes established in sections 3 and 4 of this notice. c) Financial and/or Asset Data: The Data Controller informs you that under no circumstances will it or you request confidential information about your bank accounts, such as passwords. However, it may request any information necessary to analyze your ability to pay and/or credit history.

3. Primary purposes of the processing:

a) Clients: i. To analyze the risks and/or feasibility of entering into real estate purchase agreements between the Data Subject and the Data Controller. ii. To fulfill obligations arising from agreements entered into between the Data Subject and the Data Controller. iii. To provide service, assistance, and advice during the contractual relationship between the Data Subject and the Data Controller. iv. To respond to national and/or international financial and judicial entities or authorities in order to comply with our obligations under laws or international treaties, tax obligations, and official or judicial notifications or requests. v. Fraud prevention. vi. Statistical studies. b) Suppliers or providers of goods and/or services: i) For all purposes related to the legal/contractual relationship established between the Data Controller and the Data Subject. c) Human Resources (Employees and candidates): i) To evaluate a potential employment relationship between the Data Subject and the Data Controller, as well as to maintain, modify, or terminate an existing employment relationship, selection, recruitment, training, development, payment of employment benefits, additional benefits granted by the Data Controller, and compliance with tax and legal obligations. ii) Statistical studies

4. Secondary purposes of the treatment:

Additionally, personal data may be used for purposes other than those necessary for compliance with any legal obligation, including but not limited to the following: a) Sending, by any physical, electronic, or magnetic means, including regular mail, email, text messages, telephone calls, electronic downloads, personally, or through agents, distributors, telemarketing companies, or any other person authorized for this purpose by the Data Controller: i) Updates on the status of the legal relationship with the Data Controller. ii) Information about the products or services offered, including, without limitation, information regarding new products, additional benefits, or promotions. iii) Advertising, promotions, benefits, employee discounts, bonuses, contests, raffles, invitations to volunteer, and congratulations. iv) News and announcements related to the Data Controller. b) Conducting market research internally or through third parties to evaluate our services, gather your opinion regarding the launch of any new product, and assess sales concepts. c) Human Resources: Job Bank (Exchange of resumes with other institutions). d) Participation in contests, raffles, invitations, and volunteer opportunities. If we do not receive your express objection to the processing of your personal data for these purposes, we will understand that you have tacitly consented to it. You may also object to the processing of your data for the purposes described in this section by following the procedure detailed in section 7 of this Privacy Notice.

5. Data transfer:

Your personal data may be transferred for the primary and secondary purposes described above in sections 3 and 4. The categories of companies and their purposes to which the Data Controller may make transfers are: a) Transfers that do not require your consent in accordance with Article 37 of the Law: i) Trusts and/or companies in which the settlors and/or beneficiaries have an interest. ii) National and international financial authorities, for the purpose of complying with our obligations arising from laws and/or treaties, tax obligations, as well as complying with official notifications or requirements. iii) Mexican Social Security Institute (IMSS) for the purpose of complying with obligations contained in social security legislation. iv) National Housing Fund Institute (INFONAVIT) for the purpose of complying with obligations contained in applicable legislation. v) Institutions, organizations, or entities in the insurance sector for the purposes of risk selection and fraud prevention. vi) CONDUSEF for the purpose of resolving complaints filed by the Data Subject. vii) Service providers for the evaluation of a potential relationship with the Data Subject and/or for the fulfillment of the Data Controller's obligations to clients, human resources, and suppliers. b) Transfers that require your consent: i) Service providers for additional purposes. ii) Advertising and marketing agencies as described in section 4. In this regard, the third party receiving the information must first assume the same obligations regarding the handling and care of the information as established in this privacy notice.

6. Regarding consent:

The Data Controller will not require the Data Subject's consent to process personal data when doing so pursuant to Article 10 of the Law. When dealing with sensitive personal data, the Data Controller must obtain the corresponding consent for its processing. This consent, together with this Privacy Notice, authorizes the Data Controller to process the data as authorized by the Data Subject. The Data Subject acknowledges that, if they submit any request or express interest in entering into a contract, or if they have a current legal relationship with the Data Controller, they have given their full consent for their personal data to be used for the primary purposes, as well as for the secondary purposes and data transfers described in sections 3, 4, and 5. Note: You may request the revocation of your consent to the processing of your sensitive data for the purposes described in this Privacy Notice through the procedure detailed herein.

7. Means and Procedures to express your refusal to the processing of your data, revocation of your consent, limit the use or disclosure of personal data, as well as to exercise your ARCO rights:

At any time, you may exercise your rights of Access, Rectification, Cancellation, and/or Opposition (ARCO rights) in accordance with the requirements and procedures outlined below: a) Requirements i) Complete the ARCO rights request form, which the Data Controller makes available through its website https://marevera.mx or in person at its offices located at the address indicated in section 1 of this Notice. ii) Valid official identification. iii) If representing a legal entity, a power of attorney that accredits your authority to perform administrative acts. b) Procedure Request the ARCO rights form at the following email address: info@marevera.com and send it duly completed and signed. Subsequently, the Data Controller will provide the Data Subject with a written response and other documentation to answer their request within the timeframe established in Article 32 of the law. If you wish, you may appear at the address of the Data Controller, indicated in section 1 of this Privacy Notice, with the requirements specified in the preceding paragraph. The Data Controller will verify the information provided and proceed to process your request. Subsequently, the Data Controller will provide you with a written response and other documentation to answer your request within the timeframe established in Article 32 of the law. c) Refusal to the processing of your data. If you receive this Privacy Notice indirectly, in accordance with Chapter I, Article 3 of the Privacy Notice Guidelines, you will have five (5) business days to express your disagreement or rejection of it. Once the five (5) day period has expired, you must follow the procedure contained herein for exercising your ARCO rights (Access, Rectification, Cancellation, and Opposition). d) Limitation of the use and disclosure of your personal data. Mare Vera informs you that you can access the Public Registry of Individual Users (REUS), which allows you to register in a database to restrict promotional calls to your personal (landline or mobile), work, or email address. This aims to protect your privacy and prevent the annoyance caused by these calls or unwanted information. For more information, please visit the CONDUSEF website at www.condusef.gob.mx or call 01-800-999-8080.

8. Provision of the Privacy Notice:

The Data Controller will notify the Data Subject of any changes made to this Privacy Notice through the following means, according to its choice: i) Notices posted on the Data Controller's website and/or, ii) Notices posted in a visible location at the Data Controller's offices and/or optionally, iii) Institutional email or any other email address provided by the Data Subject to the Data Controller.

9. Contact:

At Mare Vera, we consider it very important to maintain the privacy of your personal data, acting in accordance with the parameters established by law to respect security procedures. Therefore, we inform you that if you have any questions about the content, scope, or interpretation of this document; about the processing of your personal data; or about the process for exercising your ARCO rights (Access, Rectification, Cancellation, and Opposition), the limitation of use and disclosure, or any other matter related to this privacy notice, you can contact us by email at info@marevera.com or by phone at +52 297 688 1111. You can also contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) to clarify any doubts and/or make any comments related to your personal data by calling +52 800 835 43 24 or visiting their website at http://inicio.ifai.org.mx/SitePages/ifai.aspx

10. Cookies:

The Data Controller informs you that a 'cookie' is the term for alphanumeric identifiers that a web server transfers to your computer through your internet browser to improve your browsing experience on our sites. When your internet browser visits a webpage, a cookie is generated with a unique and anonymous number to recognize your browser, which is stored in the cookie directory of your hard drive. Cookies can be permanent (remaining on your computer until you delete them) or temporary (lasting only until you close your browser or for a limited period). The Data Controller uses cookies on its websites to record information about your browsing preferences, as well as technical information (number of visits, visit flow, selections, and options executed using the mouse or equivalent device). This information is anonymous, so users are not personally identified; only their computers are identified. Cookies can be enabled or disabled through your computer and/or internet browser settings. However, if you disable this option, you may not be able to access some of the customized features of our websites.