Estudio 7 Street, S.A. de C.V. (hereinafter referred to as “Estudios 7”), for the purposes of this Privacy Notice, with its registered address at Calle 5 de Febrero No. 246, Local 21, Colonia Obrera, Alcaldía Cuauhtémoc, C.P. 06800, Mexico City, Mexico, and through its website www.estudios7.com.mx, in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties and its corresponding Regulations (hereinafter the “Law”), informs you that it is responsible for collecting your personal data, for the use given to such data, and for its protection when collected through printed, electronic, telephone, audiovisual, or any other means permitted by applicable law (hereinafter the “Means”).

I. PURPOSE OF PERSONAL DATA PROCESSIN: Estudios 7 will treat the personal data of the data subject confidentially, with the purpose of carrying out the activities and procedures necessary to comply with obligations arising from the legal or commercial relationship established with the data subject. These include, but are not limited to: provision of services, production, distribution; notifying changes to services; marketing, advertising, or commercial prospecting purposes; administration of the websites of Estudios 7’s brands and companies; customer profiling; the creation and implementation of analytical and statistical processes necessary for service development; satisfaction and quality surveys; offering services through any communication means available to Estudios 7; consumption analysis; conducting internal studies on service usage habits; requesting data and/or ID updates; monitoring telephone conversations with the data subject; processing job applications and formats related to past, present, or future employment relationships with Estudios 7; recruiting, selecting, hiring and evaluating personnel; background checks (employment or credit), credit openings, and/or insurance contracting; service outsourcing with various vendors; invoicing and collections; compiling statistical and financial reports; updating data subject and supplier records and systems; maintaining exclusion lists to record a data subject’s refusal to have their data processed; fulfilling obligations with data subjects; and contacting them regarding any matter related to the services provided by Estudios 7 or this Privacy Notice.

II. CONSENT FOR THE USE OF PERSONAL DATA: The processing of personal data will always be subject to the data subject’s consent, which may be provided either expressly—through verbal communication, electronic means, optical or any other technology, or through unequivocal actions—or tacitly. For the purposes of this Privacy Notice, tacit consent will be understood as granted when this Privacy Notice has been made available to the data subject and no objection is expressed.

For both types of consent, the data subject has a period of five (5) days to express their objection to the processing of their personal data, following the procedure described in the section titled “Procedure to Revoke, Report Misuse of Personal Data, and Exercise ARCO Rights” in this Privacy Notice. If no objection is made, it will be understood that the data subject has given their consent.

The data subject declares that this Privacy Notice has been made known to them by the data controller. In the event that the data subject does not agree with the way the data controller will process their personal data, as outlined in this Privacy Notice, they may deny their consent through the following statement:

I agree to the processing of my personal data under the terms of this Privacy Notice:

• I do accept the processing of my personal data under the terms and conditions of this Privacy Notice.
• I do not accept the processing of my personal data.

When the personal data collected is not considered sensitive, financial, medical, or patrimonial, and the data subject does not object to the terms of this Privacy Notice, it shall be deemed accepted and consented, in accordance with the third paragraph of Article 8 of the LFPDPPP.

The data subject may revoke their consent at any time, without retroactive effect, according to the procedures established herein.

Notwithstanding any provision in this Privacy Notice, the data subject acknowledges that consent will not be required for the processing of personal data by the data controller or third parties in any of the cases provided under Article 10 of the LFPDPPP.

If the personal data collected includes sensitive, financial, medical, and/or patrimonial data, the data controller will obtain the express consent of the data subject in accordance with Article 8, second paragraph of the LFPDPPP, and other applicable laws—either through a signed form (physical or electronic), through direct responses in telephone interviews, or through similar consent formation mechanisms.

Therefore, in compliance with Article 9 of the LFPDPPP, we request your express consent for the processing of the following categories of personal data:

• I consent to the processing of my financial and/or patrimonial personal data under the terms and conditions of this Privacy Notice.
• I consent to the processing of my sensitive personal data under the terms and conditions of this Privacy Notice.

III. INFORMATION TO BE COLLECTED: For the purposes outlined in this Privacy Notice, Estudios 7 may collect your personal data through various means. This includes information you provide directly through any method, such as your full name, date of birth, age, gender, marital status, home, work or tax address, email address (personal or work), telephone number (landline or mobile), Federal Taxpayer Registry (RFC), Unique Population Registry Code (CURP), and login credentials used to access Estudios 7’s services. In some cases, we may also request your preferred method of payment and related details in order to process payments required under the terms and conditions agreed upon.

Personal data may also be collected when you visit our website or use our online services, including through the use of cookies, web beacons, or other electronic tracking tools. Additionally, we may obtain personal information from third-party sources permitted by law, such as telephone directories, market research firms, or advertising agencies. We may also collect data through employment applications submitted physically or electronically as part of any employment relationship with Estudios 7.

Estudios 7 will process your personal data only for the period permitted by law and will delete your information once this period has expired. For identity verification purposes, we may request supporting documentation, including but not limited to: voter identification (INE), birth certificate, CURP, passport, military ID, professional license, or immigration documentation.

IV. TRANSFER OF DATA: Your personal data may be transferred and processed by individuals or legal entities related to Estudios 7. Accordingly, your information may be shared with: (a) companies that are part of the Estudios 7 group; (b) external auditors, whether legal or accounting professionals; (c) insurance companies with whom Estudios 7 maintains a legal relationship; (d) entities that operate jointly with Estudios 7 any software or IT infrastructure used to maintain and secure databases; (e) messaging, security, and cash-in-transit companies that assist Estudios 7 in fulfilling its functions; and (f) legal entities or authorities in the event of any legal controversy in which Estudios 7 needs to defend its interests.

The transfer of your personal data to third parties will only take place under the exceptions established in Article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and in accordance with the terms set forth in said law. Furthermore, Estudios 7, as the data controller, and/or its data processors, may transfer your personal data to other entities within the same corporate group, including parent companies, subsidiaries, or affiliates, or those operating under the same policies and procedures. This includes the sharing of data with Estudios 7 clients for purposes such as user account creation, system platform operations, and other necessary activities, whether such entities are located in Mexico or abroad. In accordance with the LFPDPPP, these specific data transfers do not require your express consent.

This Privacy Notice stipulates that the recipient of your personal data must demonstrate that they have designated and trained personnel responsible for the appropriate processing of such data. This must be evidenced through documented measures such as internal policies, processes, procedures, organizational charts, job descriptions, or an official letter identifying the department or individual responsible for data protection.

V. MODIFICATIONS TO THE PRIVACY NOTICE: Estudios 7 reserves the right to modify or update this Privacy Notice at any time, in response to legislative changes or internal policies. Any such modifications will be made available to the public through the company’s Data Protection Department located at the address mentioned above and/or through the website at www.estudios7.com.mx.

VI. USE OF COOKIES AND WEB BEACONS: We inform you that the Estudios 7 website uses cookies, web beacons, and other technologies that allow us to monitor your behavior as an internet user, improve your browsing experience, and offer you services based on your preferences. These technologies are used to collect personal information such as: (i) the web pages you visit; (ii) the links you click; (iii) your IP address; and (iv) the website you visited prior to entering our site. The information collected helps us provide better services and customize your experience on our platforms.

You may disable cookies and similar technologies through your browser settings. Please refer to your browser’s help menu for instructions on how to do so. Note that if you disable cookies, some personalized features of our website may no longer be available or function properly.

VII. ARCO RIGHTS: The individuals holding personal rights in possession of Estudios 7 may, at any time, exercise the right to ACCESS their personal data and details of its processing, as well as to RECTIFY it in case it is inaccurate or instruct its CANCELLATION when it is considered excessive or unnecessary for the purposes that justified its collection, or to OPPOSE its processing. The rights described above will be referred to as ARCO Rights. The procedure to exercise the ARCO Rights will be carried out following the steps outlined in the section “Procedure to Revoke, Notify the Misuse of Personal Data Processing, and Exercise the ARCO Rights” of this privacy notice.

VIII. PROCEDURE TO REVOKE, NOTIFY THE MISUSE OF PERSONAL DATA PROCESSING, AND EXERCISE ARCO RIGHTS: In case you wish to: (i) Revoke your consent for the processing of your personal data for the additional purposes described in the section “Purpose of Personal Data Processing” of this notice; and/or (ii) Notify the misuse of personal data processing because you believe that Estudios 7, or its actions or responses, violate your data protection rights, or suspect there is a violation of the provisions set forth in the Law; and/or (iii) Exercise your ARCO Rights. You must submit a written request addressed to the Data Protection Department at the address mentioned earlier, between 9:00 AM and 2:00 PM, Monday to Friday, or to the email: administracion@estudios-7.com. The written request must include at least the following information: Name of the data subject, address, phone number, and email address (if available); A copy of the data subject’s official identification (INE, valid Passport, and/or Military ID); A description of the purpose of the request, which may include, but is not limited to, the following: (i) Revocation of consent to process personal data; and/or (ii) Notification of misuse of personal data processing; and/or (iii) Exercising your ARCO Rights, with a clear and precise description of the data to Access, Rectify, Cancel, or Oppose. In the case of Rectification of personal data, you must specify the exact modification and attach supporting documentation; and Any other element or document that facilitates the identification of your personal data, such as the person and/or area of Estudios 7 to whom it was provided.

Additionally, you may stop receiving promotional messages via landline or mobile phone, stop receiving postal advertising, or stop receiving promotional emails by following the steps described above. Estudios 7 informs you that when it comes to revoking your consent, in some cases, your request may not be processed immediately, as there may be a legal obligation to continue processing your personal data; and/or for certain purposes, revoking consent may mean that Estudios 7 will no longer be able to provide the requested service.

IX. RISKS: The data subject acknowledges that there is no infallible method or security system, either technological or physical, that could unequivocally guarantee the prevention of loss, modification, alteration, or unauthorized extraction of information. Therefore, by signing this privacy notice, the data subject accepts the risks that may arise, understanding that the party responsible has implemented all possible measures to prevent such incidents and the management methods to notify the data subject if any information vulnerability occurs.

X. JURISDICTION IN CASE OF DISPUTE: This privacy notice, as well as the general handling of the Law by Estudios 7, is governed by the current and applicable legislation in the United Mexican States. Therefore, any dispute arising from its application must be resolved before the competent judicial bodies in Mexico City. Additionally, if the data subject believes that their right to personal data protection has been violated due to the improper processing of their personal data, they may file a complaint or report with the National Institute for Transparency, Access to Information, and Personal Data Protection (INAI). For more information, click on the following link: https://home.inai.org.mx/

Sincerely,

Estudios 7