I. Identity and Domicile.

CG Legal & Real Estate Consulting, S.C. (the “Data Controller”) in compliance with the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations and the Guidelines for the Privacy Notice (the “Law”) provides this privacy notice (the “Privacy Notice”), to inform the terms and conditions for the use, processing and protection of the personal data that, from time to time, may be collected.

For purposes of the present Privacy Notice, the Data Controller appoints as domicile the one located in Plaza El Faro, at Carretera Transpeninsular Km. 26.5, Lote A-101 Palmilla, C.P. 23406, San José del Cabo, B.C.S., México.

II. Personal data, its processing and its purpose.

All personal information available to the Data Controller will be used, as applicable, to: (i) contact you; (ii) provide the requested legal services; (iii) create, upload and maintain updated your profile in the Data Controller’s database; (v) meet the purpose of the relationship that has given rise to the processing of personal data.

For the purposes mentioned above, the Data Controller may need to obtain the following personal information: complete name, corporate name or business name, nationality, place and date of birth, place of residence, domicile, Federal Taxpayer Regsitration (its acronym in Spanish RFC), Unique Population Registry Code (its acronym in Spanish CURP), email address, phone number, cell phone number, marital status, matrimonial regime, professional and labor information, financial and patrimony information (the “Personal Data“).

III. Means for limiting the use or disclosure of Personal Data.

The Personal Data of the holder, will be kept in strict confidentiality, in accordance with the administrative, technical and physical security measures that CG Legal & Real Estate Consulting, S.C. implements in its security policies and procedures, which is why its illegal disclosure is forbidden and its use is limited to third parties, in accordance with the provisions of the present Privacy Notice. You may at any time choose to limit the use or disclosure of your Personal Data or revoke your consent for the processing of the same.

IV. Means to ratify, cancel and/or oppose the processing of Personal Data.

If you have any questions or concerns about how the Data Controller processes the Personal Data, if you want to access, rectify, cancel or oppose to the processing of the Personal Data, contact the Personal Data department by sending an email to contacto@cglegal.com.mx or calling (624) 247-2504 indicating your name, email address, phone number and your query, attaching identification documentation demonstrating your identity as holder of the Personal Data. The Personal Data department will acknowledge receipt of your request and analyze it pursuant to the Law. The Personal Data department will respond to your request no later than five working days after the day on which it was received to the email address you used to file such request.

V. Transfer of Personal Data.

Your Personal Data will not be transferred, disseminated or distributed, except as indicated in Chapter V of the Law or in the case there is an express consent on your side by written or by a similar means of authentication. Only the holder of the Personal Data, the Data Controller and the third parties necessary for the achievement of the objectives described in item II will have access to this information.

VI. Amendments to the Privacy Notice.

The present Privacy Notice may be amended in order to implement improvements and/or new security measures, or to comply with new legal requirements. Any amendment to this Privacy Notice will be available through the webpage www.culebroabogados.com The amended Privacy Notice will be implemented seven working days after it was published.

VII. Comprehensive Privacy Notice.

The comprehensive Privacy Notice is available at the Data Controller’s domicile. You can also send an email to the Personal Data department requesting the comprehensive Privacy Notice. The Personal Data department will acknowledge receipt of your request and send the comprehensive Privacy Notice no later than one working day after the day on which such request was received, to the email address used to file such request.

June 2018.