Basham, Ringe y Correa, S.C., with address at Paseo de los Tamarindos 100, 5th floor, Col. Bosques de las Lomas, Del. Cuajimalpa de Morelos, C.P. 05120, Mexico City, (hereinafter «Basham»), recognizes the importance of legitimate, controlled and informed processing of the personal data of its clients and users of our website, our ‘Basham App’ application and other websites owned by Basham (hereinafter, collectively «our website», as appropriate), and makes available this Privacy Notice so that you are aware of its practices when obtaining, using, storing and, in general, processing your personal data, in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and other applicable regulations (hereinafter «the Law»).

Personal Data We Collect Purposes and/or Uses of Personal Data Use of Tracking Technologies Transfers of Personal Data Security Measures Rights regarding Your Personal Data Changes to the Privacy Notice Security Measures Contact

PERSONAL DATA WE COLLECT

You can browse our website without providing personal data, however, there are certain sections within it where you can voluntarily provide your data. Your data may be collected in different situations, for example, when you decide to provide us with your curriculum vitae, when you send us an email, when you register to access Basham app or contact us through the same means, when you register to receive information of interest or our newsletter, as well as those that you provide to us with a view to establishing a legal relationship, for example, when you decide to hire our legal services or provide us with any service. The personal data we may collect belongs to the following categories:

Identification data: name, home address, date of birth, fixed and/or mobile phone number, fax, email, image. Academic data: educational trajectory, title, professional license number, specialty, certificates. Employment data: position, address, email, fixed or mobile phone number and fax. Billing data: entity to which the charge will be made, fiscal address, RFC. Financial data: information on bank accounts, payment method.

We remind you that we do not process sensitive personal data.

MINORS AND INCAPACITATED INDIVIDUALS

Basham is a firm committed to the privacy of minors and incapacitated individuals; therefore, we do not intentionally collect or process personal data of minors and incapacitated individuals when we do not have the express consent of their parents, guardians, or legal representatives. If you are a parent, guardian, or legal representative of a minor or incapacitated individual and know that they have provided us with personal data without your consent, you may request that it be cancelled at the following email address: privacidad@basham.com.mx.

We may use your personal data for various purposes, depending on the particular circumstances in which it is collected, always in compliance with the relationship we have with you and the specific privacy notice that, in your case, has been made available to you.

Necessary purposes when you:

Visit our facilities:

• To control access and maintain security in our facilities.
• To verify your identity.

Contact us:

• To respond to your doubts and comments.
• To establish a legal relationship.
• To stay in touch with you.

Decide to send your Curriculum Vitae:

• To establish contact with you and consider you for a recruitment and selection process.

Register as a user on the «Basham App»:

• To allow you access to your profile and to features of the site developed exclusively for users.
• To personalize the functions of your user account.
• To send you an email or message confirming your registration.

In general:

• To safeguard the public interest or for the procurance or administration of justice.
• To recognize, exercise or defend a right in a judicial process, as well as in cases specifically permitted by law.
• To respond to your comments, inquiries and/or provide the information you request.
• To protect or defend the rights and property of Basham, as well as its confidential information.
• To maintain the security of our website, our users and/or clients.

Your data may also be used for the following secondary purposes, provided that you give your consent:

• To send you our newsletter.
• To send you information of your interest.

You may unsubscribe from our newsletters and informational emails by clicking on the option provided for this purpose in each communication you receive.

USE OF TRACKING TECHNOLOGIES

When you browse our website, certain non-personal information is collected through «cookies» and «server logs» or «web beacons.» This information is obtained simply by using and interacting with our website, and the information collected may consist of internet protocol addresses, your operating system, browser type, information about your location (provided by mobile devices), and the path you follow during your time on our site.

This data is collected solely for the following purposes: to generate statistics relating to visits to our website, the time spent on the site, and the referral sites that may have brought you to ours. This information is also used to maintain and update user profiles and to adapt or personalize the information provided through this medium.

It is possible to disable these tracking technologies in all types of browsers; however, to exemplify, the steps to follow to disable them in Google Chrome are as follows: go to the «Tools» menu; click on «Clear browsing data,» select the option «Delete cookies and other site data and plug-ins,» click on «Accept.» Disabling or blocking these mechanisms may cause our site to not function correctly. To learn more about this topic, please visit http://www.allaboutcookies.org/es/.

TRANSFER OF PERSONAL DATA

Basham may transfer your personal data to third parties with whom it has a legal relationship, solely for the purpose of fulfilling the purposes described in the privacy notice. Among the transfers we may make are:

Basham may also transfer your personal data in cases specifically provided for by law.

SECURITY MEASURES

Basham has adopted and maintains administrative, technical, and physical security measures necessary and within its reach to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

RIGHTS WITH REGARD TO YOUR PERSONAL DATA

As the owner of personal data, you may exercise the rights of access, rectification, cancellation, and opposition («ARCO rights») before the Personal Data Controller of Basham. You may also revoke, at any time, the consent you have granted and which is necessary for the processing of your data, as well as limit their use or disclosure.

The above can be done by sending your request in the terms established by law to the email address: privacidad@basham.com.mx or to the address specified in the first paragraph of this document.

For your easy reference, the ARCO rights are briefly described as follows:

• Access: to be informed which of your personal data are contained in Basham’s databases, the purposes for which such personal data are used, their origin, and the communications that have been made with them, as well as the generalities and conditions of the treatment.
• Rectification: to correct or update your personal data in case they are inaccurate or incomplete.
• Cancellation: to delete your personal data from files, records, systems, and databases when appropriate.
• Opposition: to legitimately object to the processing of your personal data.

If you wish to know the requirements and procedures for exercising ARCO rights, please contact the Personal Data Controller of Basham.

CHANGES TO THE PRIVACY NOTICE

Substantial changes to this Privacy Notice will be communicated to you through our website www.basham.com.mx.

CONTACT

If you have any questions or comments regarding the Privacy Notice, please contact the Department of Personal Data Protection at the following email address: privacidad@basham.com.mx or at the address specified above.

CONSENT