In compliance with the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations (hereinafter "the Law"), we inform you that GRUPO DG FRESH S DE RL DE CV protects your personal data to avoid damage, loss, destruction, theft, misplacement, alteration, as well as the unauthorized treatment of your personal data and makes this Privacy Notice available to you, so that you are aware of its practices when obtaining, using, storing and, in general, treating your personal information.

1. Responsible for the Processing of Personal Data.

 - GRUPO DG FRESH S DE RL DE CV (hereinafter “The Responsible Party”), with address at Alvaro Obregon #305 in Gomez Farias Jalisco San Sebastian del Sur Col. Centro CP 49120

2. Personal Data that may be collected.

 -The Personal Data that you provide us freely and voluntarily, including but not limited to, may be the following:

• Identification data, such as: name, private address, place and date of birth, marital status, occupation, education, CURP, telephone number, landline or mobile, email.

• Labor data, such as: position, work address, email, telephone number, landline or mobile and position.

• Billing data, such as: entity to which the charge will be made, tax address, RFC.

• Financial data, such as: bank account information, payment policies, contact details for accounts payable and accounts receivable areas.

• Business data, such as: addresses of establishments, manufacturing plants, sales offices, product requirements and needs, prices of products and services, contact information for sales areas.

The Controller may collect your personal data in the following ways: when you provide it to us directly, when we obtain information through other sources that are permitted by law, such as telephone directories, references from other companies or individuals, public databases of any entity or public or private agency, among others.

SOCIAL NETWORKS

 -Social networks (such as Facebook® and Twitter®, among others) constitute a platform for communication and interconnection between digital platforms of different users, they are alien to THE COMPANY and, therefore, Therefore, they are not under your responsibility.

The information that you provide within social networks in which The Responsible participates as a user, does not constitute or form part of the Personal Data subject to the protection of this Privacy Notice, being the responsibility of the company that provides that platform and whoever provides it. publish.

In the collection and treatment of personal data that you provide us, we comply with all the principles established by the Law: legality, quality, consent, information, purpose, loyalty, proportionality and responsibility.

The veracity of the information you provide is under your responsibility, so "The Responsible Party" will at no time be responsible for its authenticity.

3. Purposes of the Processing of Personal Data.

The Responsible will collect your Personal Data without the purpose of disclosure or commercial use, and will only use it for the following purposes:

• Collection, billing, payment and transactions: in order to make economic charges.

• Evaluate the quality of our products and services.

• Formalize in contracts or other documents the relationship that is generated with you.

• Inform you of the commercial information of THE COMPANY, among which stands out that related to promotions, information on new products, changes in our products, conduct internal studies on consumer habits and any other promotional or issue related to the products and/or services that are part of the commercial concept of "The Responsible".

• Delivery of products and fulfillment of obligations derived from our commercial relationship with you.

• Register it in our systems as a supplier and/or client, either in its eventual or permanent modalities.

 -Your personal data will be kept under the strictest confidentiality and may not be used for purposes other than those mentioned above unless there is a change to this Privacy Notice and your express agreement with said change is obtained .

Once the purpose of the processing of your personal data is fulfilled, they will be blocked for the sole purpose of determining possible responsibilities in relation to their processing, up to the legal or contractual prescription period of these. During this period, personal data may not be processed and after this, it will be canceled in the database que correspond

4. Transfer of Personal Data.

 -The Responsible does not assign or transfer personal data without the prior consent of the data owner. Any transfer of personal data that The Responsible makes, will be only for the purposes permitted by law.

5. Security Measures/Access Limits.

 -The Controller has adopted the necessary and sufficient technical, administrative and physical security measures to protect your personal data against damage, loss, alteration, destruction or unauthorized use, access or treatment.

Personal data is safeguarded in databases and computer equipment that have the necessary security to prevent information leaks. Physical and logical access controls, environmental controls, anti-intrusion protection systems (IPS, Firewall), antivirus protection tools and web filtering are some of the tools used to maintain data security in the information systems of The Responsible.

The computer security tools mentioned in the previous paragraph are supported by an internal information security policy that explains to the employees of The Controller the security considerations that they must take into account when using a computer system and is constantly reinforced.

However, it is clear that no data transmission over the Internet is completely secure and, therefore, The Controller cannot guarantee that the processing of personal data will be free from any damage, loss, alteration, destruction or unauthorized use, access or treatment. authorized.

 -Only authorized personnel who have complied with and observed the corresponding confidentiality requirements may participate in the processing of your personal data.

Therefore, you are informed of the options that you have to request the limitation of the use or disclosure of your personal data, subject of this Privacy Notice:

a) In writing sent to the Person in Charge of the Processing of Personal Data (at the address indicated in point 6 below); or via email addressed to the address; info@dgfreshavocados.com

b) By telephone with the Person in Charge of the Processing of Personal Data at the telephone number 341 433 2071

6. Rights that correspond to the owner of Personal Data.

 -As the owner of personal data, you can exercise before the Personal Data Protection Officer, the rights of Access, Rectification, Cancellation and Opposition ("ARCO" rights). Likewise, you can revoke, at any time, the consent that you have granted and that is necessary for the processing of your Personal Data, as well as limit the use or disclosure thereof.

The request to exercise the ARCO rights must contain and accompany the information and documents indicated by the Law, which by way of example but not limitation includes the following:

• The name and address of the owner or other means to communicate the response to your request.

• The documents that prove your identity or, where appropriate, the legal representation of the owner.

• The clear and precise description of the personal data with respect to which one seeks to exercise any of the ARCO rights.

• Any other element or document that facilitates the location of personal data, as well as any other document required by the legislation in force at the time the application is submitted.

 -In case you do not wish to receive emails with updates on the products and/or services marketed by The Responsible, as well as reminders regarding compliance with certain obligations that apply to you due to your activity company, you can send us your request to the electronic address of the person in charge of the Processing of Personal Data designated by the Responsible.

The Responsible will not be obliged to cancel your Personal Data in the case of any of the cases established in the Law, among others the following:

• that refers to the parts of a private, social or administrative contract and are necessary for its development and fulfillment;

• must be treated by legal provision;

• judicial or administrative actions related to tax obligations, the investigation and prosecution of crimes or the updating of administrative sanctions are hindered;

• are necessary to protect the legally protected interests of the holder;

• are necessary to carry out an action based on the public interest.

7. Revocation

 -The owner of the Personal Data may revoke his consent for the processing of Personal Data at any time, and must, solely for such purposes, send a written request to the Personal Data Manager, and either by courier to the address or email mentioned in this Privacy Notice.

We will have a maximum period of 20 business days to inform you about the origin of the same and if it is appropriate, it becomes effective within fifteen business days following the date on which the response is communicated to the email that you provide us for such effects.

8. Modifications to the Privacy Notice

 -The Responsible Party reserves the right to make changes or updates to this privacy notice at any time, to attend to new legislation, internal policies or new requirements for the provision and offering of our services . These modifications will be available to the public and we will send them to the last email that you have provided us.

 -We will not be responsible if you do not receive the notification of change in the Privacy Notice if there is any problem with your email account or data transmission over the internet.

​

​

DG FRESH GROUP S DE RL DE CV

Date of last update of this Privacy Notice: May 1, 2020