Effective Date of this Privacy Notice: April 1, 2025.

Last Updated: April 1, 2025.

We inform you that the privacy and processing of your personal and sensitive personal data are protected in accordance with our privacy policy.

This Privacy Notice explains how Aviglass, S.A. de C.V. [AVI] handles the processing of personal data collected by AVI through questionnaires, consents granted via telephone, written, electronic means, document completion, and AVI-controlled websites linked to this Privacy Notice (collectively referred to as "AVI Sites"). This Privacy Notice applies to personal data collected by AVI within the United Mexican States and does not apply to third-party websites that may be linked from AVI Sites. The use of AVI Sites is subject to this Privacy Notice and the Internet Terms of Use.

Please read this Privacy Notice before using the AVI Sites or providing us with personal data.

What are “Personal Data” according to this Privacy Notice?

"Personal Data" means any information concerning an identified or identifiable natural person that is collected by AVI by any means.

Who is responsible for protecting your personal data?

AVI, with its registered address at Calle Maíz, 180, Local 2, Granjas Esmeralda, Iztapalapa, C.P. 09810, Mexico City, is responsible for processing your personal data in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Journal of the Federation on July 5, 2010.

How to Contact Us?

You can contact us via email at info@aviglass.com.mx or at AVI's registered address: Calle Maíz, 180, Local 2, Granjas Esmeralda, Iztapalapa, C.P. 09810, Mexico City.

For What Purposes Do We Collect and Use Your Personal Data?

Your personal data will be used for one or more of the following purposes: (i) compliance with the company's internal policies and procedures; (ii) compliance with applicable laws and regulatory requirements; (iii) personnel management; (iv) generation of studies, statistics, metrics, programs, reports, and projects; (v) service quality assessment; (vi) sending advertising and promotional materials; (vii) sending product information; (viii) user, customer, and supplier registration; (ix) receipt, documentation, and follow-up of complaints and technical service requests, where applicable; (x) registration and activation of warranties, where applicable; (xi) access and security registration; (xii) fulfillment of obligations with customers and suppliers; (xiii) coordination of congresses and medical or health events; (xiv) provision of services and products; and (xv) external recruitment and selection of personnel.

What Personal Data Do We Collect and From Where?

For the purposes stated in this Privacy Notice, we may collect your personal data in different ways: when you provide it directly to us, when you visit our website or use our online services, and when we obtain information through other legally permitted sources.

Personal data collected directly, when you visit our website or use our online services, and through other sources:

We collect your personal data directly when you provide it to us through various means, such as when you participate in our promotions or provide information to receive a service. The data we collect may include one or more of the following: (i) name; (ii) address; (iii) gender; (iv) date of birth; (v) social security number; (vi) Unique Population Registry Code (CURP); (vii) Federal Taxpayer Registry (RFC); (viii) information related to your medical record or health history; (ix) phone number; (x) email address; (xi) relevant data; (xii) profession and occupation; (xiii) professional license; (xiv) passport number; (xv) photo or image.

What Are “Sensitive Personal Data” According to This Privacy Notice?

We inform you that, to fulfill the purposes set forth in this Privacy Notice, sensitive personal data will be collected and processed. This includes data related to your present and future health status, racial or ethnic origin, genetic information, religious, philosophical, and moral beliefs, trade union affiliation, political opinions, or sexual preference.

We are committed to processing this information under the strictest security measures to ensure its confidentiality.

In accordance with Article 9 of the referenced Law, we require your explicit consent for the processing of sensitive personal data. By submitting sensitive personal data through AVI's Sites, you expressly grant your consent and explicitly accept that such data will be processed in accordance with the terms and conditions of this Privacy Notice.

How Can You Limit the Use or Disclosure of Your Personal Data?

You may limit the use or disclosure of your personal data by requesting it through the procedure for exercising ARCO Rights, revoking consent, or refusing the use of personal data for secondary purposes, as described later in this document. Upon receiving your request, we will, if applicable, include you in the exclusion list for the corresponding use and disclosure of personal data to fulfill your request.

How Can You Access, Rectify, or Cancel Your Personal Data, or Object to Its Use?

You have the right to know what personal data we have about you, how we use it, and the conditions under which we process it (Access). Likewise, you have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); request its deletion from our records or databases when you believe it is not being used properly (Cancellation); and object to the use of your personal data for specific purposes (Objection). These rights are known as ARCO rights.

PROCEDURE FOR REQUESTING ARCO RIGHTS

The mechanism implemented for exercising ARCO rights is through a request sent to the email address info@aviglass.com.mx or in person at the address mentioned in this Privacy Notice. In your email or in-person request, you must meet all the following requirements:

1. Provide the following information:

• Full name.
• Email address.
• Contact phone number.
• Preferred method of communication for the response to your request.
• City and State.

2. Attach or present a copy of official documents that verify your identity (voter ID, passport) or, if applicable, documents that prove legal representation of the data owner according to relevant legislation.

3. Provide a clear and precise description of the personal data for which you seek to exercise any of your ARCO rights, revoke consent, or refuse the use of data for secondary purposes.

4. Provide any other element, information, or document that may help locate your personal data:

• Your relationship with AVI (e.g., "I am a consumer of product or service X").
• Name of the department or AVI representative who contacted you.
• Means through which AVI contacted you.
• Name of the product, service, event, or program for which you were contacted.

The timeframe for providing a response regarding the determination made about your ARCO request is twenty (20) business days from the date of receipt of your properly completed request.

The aforementioned timeframe may be extended once for an equal period, provided that the circumstances of the case justify it.

How Can I Revoke My Consent for the Use of My Personal Data?

You may revoke the consent you have granted us for the processing of your personal data. However, it is important to note that we may not always be able to process your request or immediately stop using your data, as we may be legally required to continue processing it. Additionally, please consider that for certain purposes, revoking your consent may mean that we can no longer provide you with the requested service or that our relationship with you will be terminated.

To revoke your consent, you must submit your request through the "procedure for requesting ARCO rights, revocation of consent, or refusal of the use of personal data for secondary purposes."

Can Your Data Be Transferred or Shared with Others?

Your personal data may be transferred and processed within and outside the United Mexican States by entities other than AVI. In this regard, your information may be shared with other AVI companies, affiliates, suppliers, authorities, distributors, collaborators, business partners, or agents to help us provide services or carry out legally authorized processing.

We commit not to transfer your personal information to third parties other than those mentioned above without your consent, except for the exceptions provided in Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties, and to conduct such transfers in accordance with the provisions of that law.

Except in the cases established by Article 37 of the Law: If you do not express your objection to the transfer of your personal data, it will be understood that you have given your consent for it.

Since some sensitive personal data will be transferred, we require your explicit consent. By sending us sensitive personal data through AVI Sites, you explicitly grant your consent and expressly accept that this data will be processed in accordance with the terms and conditions of this privacy notice.

Who Will Have Access to My Personal Data?

A restricted number of AVI employees, as well as those of its affiliates, subsidiaries, or parent company, certain companies with which AVI may have joint programs, and third parties contracted by AVI to perform activities for AVI may have access to personal information. We train our employees on the importance of privacy and how to handle personal data appropriately and securely. AVI understands that you give your consent when enrolling in a program conducted jointly with another company that may require access to your personal information. Additionally, it is AVI’s practice to require its suppliers or contractors to keep your personal information confidential and to use it solely to perform functions for AVI.

How Long Will AVI Retain Personal Information?

AVI will retain your personal information for as long as necessary to fulfill the purposes of personal data processing, as well as to comply with applicable legislation, contracts, policies, and AVI’s internal procedures.

Modifications to the Privacy Notice

This privacy notice may undergo modifications, changes, or updates due to new legal requirements, our own needs regarding the products or services we offer, our privacy practices, changes in our business model, or other reasons.

We commit to keeping you informed about any changes to this privacy notice through this site or directly via email, should you request it in writing through the following means: via our email, by correspondence, or in person at our address mentioned in this privacy notice.

For more information, please contact us at: info@aviglass.com.mx