PRIVACY NOTICE

The present document stablishes the Privacy Notice in accordance with the Federal Law for the Protection of Personal Data held by Private Individuals, and those provisions emanating or related to this Law. This Privacy Notice is applicable to the Personal Data collected by “MUVOIL CONSULTING, S.C.” with address located at Paseo de la Reforma 250, 8th Floor, Suite 800, Z.C. 06600, Juárez, Mexico City, Mexico, as Responsible, from any natural person as Holder.

This Privacy Notice will be regulated by the following Terms and Conditions:

1. DEFINITIONS.

For the purposes of this Notice, and in accordance with the Federal Law for the Protection of Personal Data held by Private Individuals, it will be understood as:

a) Privacy Notice.- Physical and / or electronic document generated by the Responsible, available to the Holder, prior to the processing of their personal data.

b) Tacit Consent.- The processing of Personal Data will be considered consented if the Holder does not express opposition once he knows the content of this Privacy Notice.

c) Personal Data.- Any information concerning an individual, identified or identifiable (refers to any information regarding with your person).

d) Sensitive Personal Data.- Personal data regarding the most intimate sphere of its owner, or whose improper use may rise to discrimination or entails a serious risk to it. In particular, it is considered sensitive the information that can reveal aspects such as racial or ethnic origin, present and future health condition, genetic information, religious, philosophical and moral beliefs, union affiliation, political opinions and sexual preference.

e) ARCO Rights.- In accordance with the provisions of the Federal Law for the Protection of Personal Data held by Private Individuals, the exceptions established therein and in this Privacy Notice, means the right of Access, Rectification, Cancellation and Opposition that each Holder has, in relationship with the Personal Data collected by the Responsible and / or its staff, and which are described below:

Access Right.- It is the right of the Holder to know about the Personal Data held by the Responsible and / or its staff, as well as to whom the information has been shared and its purpose.

Rectification Right.- Refers to the right of the Holder to modify its Personal Data held by the Responsible, whenever it is inaccurate or incomplete.

Cancellation Right.- The Holder has the right to request at any time the deletion of his Personal Data, which will happen once the blocking period is over. The blocking involves identifying and retaining the Personal Data, once the purpose for which they were collected is fulfilled, and it is intended to determine the possible responsibilities in relation to their processing, up to the term of legal or contractual prescription of said responsibilities. During this period, your Personal Data will not be processed and after this, we will proceed with its deletion in the corresponding database or file. Once the information is deleted, the Responsible will provide the Holder the respective notice. In case the Personal Data would have been processed before the Rectification or Cancellation and this is still shared with third parties, the Responsible will notify the third party about the Cancellation or Rectification, for them to procced the same way.

Opposition Right.- The right that the Holder has at all times, as long as there is a legitimate cause, to request the Responsible to stop processing their Personal Data.

f) Delegate.- Means the natural or legal person that by itself or together with others, processes the Personal Data, on behalf of the Responsible.

g) Law.- Federal Law for the Protection of Personal Data held by Private Individuals.

h) Responsible.- Refers to the person or company who decides about the Personal Data processing, in this case “MUVOIL CONSULTING, S.C.”

i) Website.- The reference of a Website in this document means “www.muvoil.com”.

j) Holder.- Is the natural person holding the Personal Data, or authorized to deliver Personal Data of a third party in accordance with applicable legal framework, to the Responsible.

k) Transfer of Personal Data.- Any communication of Personal Data made to any person other than the Responsible or the person in charge of its processing.

2. CONSENT OF THE HOLDER.

For the purposes provide by the article 17 of the Law, the Holder states that: (i) knows and understands the content of this Privacy Notice, made available by the Responsible, (ii) having read, understood and agreed to the terms set forth in this Privacy Notice, grants its consent regarding the processing of its Personal Data, in accordance with the Law and applicable legal framework, and (iii) grants its consent for the Responsible, or its Delegates to make Transfers of Personal Data to national or foreign third parties, in the understanding that the processing that said third parties of their Personal Data must comply with the provisions of this Privacy Notice. In the event that the Personal Data collected includes Sensitive or Financial Personal Data, the explicit consent of the Holder will be constituted in terms of the second paragraph of article 8 of the Law and applicable legal framework, by signing the corresponding contract, whether in printed format, or using electronic means and their corresponding processes for the formation of consent, for example, but not limited to, the provision of Personal Data through the dialogue windows, or on-screen display of Terms and Conditions.

In case the Holder does not oppose the Terms of this Privacy Notice within the following 48 hours in which it was made available, its content it will be considered agreed and consented, in terms of the third paragraph of article 8 of the Law. The Holder may revoke its consent at any time, without retroactive effects attributed, in accordance with the procedures established later in this Privacy Notice.

Notwithstanding any provision of this Privacy Notice, the Holder acknowledges that its consent for the processing of Personal Data by the Responsible or third parties will not be required in any of the cases indicated in Article 10 of the Law.

3. INFORMATION TO BE COLLECTED; MAIN OBJECT OF THE PRIVACY NOTICE.

The purpose of this Privacy Notice is to establish the terms and conditions under which the Responsible, or the Delegate designated by the Responsible will: (i) receive and protect the Personal Data of the Holder, to protect its privacy and right to informational self-determination, in compliance with the provisions of the Law; (ii) use the Personal Data of the Holder, and (iii) carry out, when applicable, transfers of Personal Data to third parties.

The Responsible shall collect and process the Personal Data of the Holder, that is, the information that can reasonably identify the Holder, through the receipt of documents, whether in printed and / or digital format.

1. INFORMATION TO BE COLLECTED.

The information that the Responsible can collect may include in not a limited manner: name and surname; date of birth; age; marital status; nationality; domicile, whether particular, office, or fiscal; personal or work email address; phone number; credit card number, debit card or bank accounts; Federal Taxpayers Registry (RFC, by its Spanish acronym) key; Unique Population Registration Code (CURP, by its Spanish acronym); affiliation number to the Mexican Social Security Institute, as well as others of a similar nature.

The collection of Personal Data may be carried out when the Holder communicates by telephone with the Responsible or its Delegates, or by direct delivery to the Responsible, the use of emails and / or the use of its Website, through voluntary provision of information through the dialog windows enabled on the Website, or through the use of automatic data capture tools. These tools allow to collect the information that the browser sends to the Website, such as the type of browser used, the user language, access times, and the Website address used to access the Website of the Responsible or its Delegates within the documentation that can be collected by the Responsible, for the verification of the identity of the Holder of the Personal Data, it is foreseen the voter’s credential; in the case of foreigners, the Resident Card (Temporary or Permanent) the identity card of the national military service released; the RFC card; CURP; proof of address: water rights payment receipt, property tax payment receipt, or electricity supply service payment receipt; the special credit report issued by a Credit Information Society.

The Responsible may also collect Personal Data from publicly available sources and other sources available in the market to which the Holder may have given its consent to share its Personal Data.

2. MAIN OBJECT OF THE PRIVACY NOTICE

Personal Data of the Holder are collected and processed by the Responsible or its Delegates in order to allow the Holder to carry out the following activities and purposes:
a. Provide our professional and technical services in the legal, economic, fiscal, financial, logistic, engineering, information and communication areas for the Energy Sector, which include not in a limited matter,
b. Provision of professional consulting, advisory and administration services in the field of hydrocarbons,
c. Provision of promotion, offering, organization and training services to the Energy Sector through courses, seminars, workshops, among others,
d. Identification purposes,
e. Statistic purposes and internal analysis,
f. Delivery of communications and publications,
g. Contact the Holder via email for the aforementioned purposes.
h. Reports regarding our products or services and information about our business special deals,
i. Reports on various topics of interest to our company,
j. Have adequate control of current collaborators,
k. Give banking treatment to make payments in a timely manner,
l. Issue proof of remuneration,
m. Billing and collection for services,
n. Preservation of records for monitoring services, provision of services in the future and in general to follow up on any contractual relationship,
o. To contact the Holder via email or telephone in order to share news of interest regarding the Responsible, as well as the labor and human resources (articles, reforms to Mexican legislation, congresses, special deals, services, courses and events, etc.).

The Responsible requires sharing the Personal Data of the holder with suppliers of database administration and management services; automated processing of Personal Data and its storage; authentication and validation of emails; audit services, and other services of a similar nature to those described. Data collection when browsing the Website of the Responsible within the automatic data capture tools, where cookies, Web beacons, and links in emails are located.

4. USE OF COOKIES.

The correct functioning of the Website and the suppliers of the Responsible require the authorization of “cookies” in your Internet browser. Cookies are small data files transferred by the Website to the hard drive of your computer while browsing. Cookies can be session or permanent. Session cookies do not remain on your computer after you log out of your browser, while permanent cookies remain on computers until they are deleted or expire. In most browsers cookies are automatically accepted under their default settings, you can adjust your browser preferences to accept or reject cookies. The deactivation of cookies may disable various functions of the Website or not allow them to be displayed correctly. In case you prefer to delete the information of the cookies sent by the Responsible, you can delete them at the end of each browser session.

Relevant information can be consulted on the sites of the main Internet browsers. Use of Web beacons (also known as Internet tags, pixel tags and clear GIFs). The Responsible can use Web beacons, alone or in combination with cookies, on their websites and in HTML emails collect information about the use of websites and their interaction with email. The Web beacon is an electronic image, called single pixel (1×1) or .GIF that can recognize information that is processed on your computer, such as cookies, the time and date when the site and its sections are displayed. The emails that include links allow the Responsible to know if you activated this link and visited the destination website, and this information can be included in your profile.

The Personal Data that the Responsible obtains from its commercial sources can be used together with the Personal Data that it collects through its websites.

5. TRANSFER OF PERSONAL DATA.

Once the terms set forth in this Privacy Notice have been read, understood and agreed upon, the Holder expresses its consent for the Responsible, or any designated Delegate, to transfer Personal Data to national or foreign third parties, in the understanding that the processing given by said third parties to the Personal Data of the Holder must comply with the provisions of this Privacy Notice.

The Holder acknowledges and accepts that the Responsible does not require authorization or confirmation to make transfers of national or international Personal Data in the cases provided for in Article 37 of the Law or in any other case of exception provided by said Law or other applicable legal framework.

6. SAFEGUARD AND PROTECTION OF PERSONAL DATA.

The Responsible and / or its Delegates will retain the Personal Data of the Holder for the time necessary to process their information request, products and / or services, as well as to maintain accounting, financial and audit records in terms of the Law and of the commercial, fiscal and administrative legal framework in force. The Personal Data collected will be protected by appropriate administrative, technical and physical security measures against damage, loss, alteration, destruction or unauthorized use, access or treatment, in accordance with the provisions of the administrative regulations. Notwithstanding the foregoing, the Responsible does not guarantee that unauthorized third parties cannot access the physical or logical systems of the Holder or the Responsible or in the electronic documents and files stored in their systems. Consequently, the Responsible will not be liable in any case for damages that may arise from such unauthorized access.

7. PROCEDURE TO EXERCISE ARCO RIGHTS.

To exercise the ARCO Rights, the Holder or his representative must submit a written request for access, rectification, cancellation or opposition with the following information and documentation:
a. Name of the Holder and address or other means to communicate the response to your request,
b. The documents that prove identity of the Holder (simple copy in printed or electronic format of voter’s credential, passport or temporary or permanent resident card) or, where applicable, the legal representation of the Holder (simple copy in printed or electronic format of the simple power of attorney with autograph signature of the Holder, the mandatary and its corresponding official identifications -voter credential, passport, temporary or permanent resident card-),
c. The clear and precise description of the Personal Data to exercise any of the ARCO Rights, and
d. Any other element or document that facilitates the location of the Personal Data of the Holder.

In the case of requests for rectification of Personal Data, the corresponding Holder must also indicate the modifications to be made and provide the documentation that supports its request.

For the reception, registration and attention of the requests to exercise any ARCO right, as well as to limit the use or disclosure of your data, and the other rights provided in the Law, please contact Ana Frias to the email address: ana.frias@muvoil.com

The Responsible or its Delegates will respond to the Holder the determination adopted within a maximum period of twenty working days, as of the date on which the request was received, so that if it is appropriate, it will be effective within fifteen working days following the date on which the response is communicated to the Holder. In the case of requests for access to Personal Data, the Responsible or its Delegates will proceed with their delivery, prior accreditation of the identity of the applicant or their legal representative, as appropriate. The aforementioned deadlines may be extended only in terms of the Law.

The delivery of Personal Data will be free; it will only correspond to the Holder to cover the justified shipping costs or the cost of reproduction in copies or other formats.

For the purposes of the requests for cancellation of Personal Data, in addition to the provisions of this Privacy Notice, the provisions of Article 26 of the Law shall be applied, including the cases of exception of cancellation of Personal Data indicated.

8. MODIFICATIONS TO THE PRIVACY NOTICE.

The Responsible reserves the right to periodically update this Notice to reflect changes in our information practices. It is the responsibility of the Holder to periodically review the content of the Privacy Notice on the site www.muvoil.com. The Responsible shall understand that if the Holder does not express otherwise, it means that the Notice has been read, understood and agreed to in the terms set forth, which represents his consent to the changes established in said updates regarding the treatment of your Personal Data for the purposes of the Law and other applicable legal framework.