Integral Privacy Notice

In due compliance with the articles 15, 16 and others related to the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter FLPPDHPP), regulation, guidelines and the principle of protection of personal data, we hereby submit the Integral Privacy Notice. The objective is to outline the scope and the general conditions of processing data, as notifying the data subjects for them to take informed decisions about the use of their personal data, and maintain the control in accordance with the following points: I. THE IDENTITY AND ADDRESS OF THE APPOINTED RESPONSIBLE WHO COLLECTS THE DATA. RISK PREVENTION D MEXICO S.C. is a legal entity with full legal capacity to exercise their rights in compliance with their obligations. Who has the legal character as responsible to handle, collect, protect, and preserve your personal data, including those referred as sensitive, financial and property data. It is worth mentioning that the responsible has a dominant activity as a service provider, training and consulting on the design and business risks mitigation. The address to receive notifications and all type of documentation is located in Av. A. López Mateos Norte N° 753-A. Colonia Providencia. Guadalajara Jalisco, Mexico. CP 44630. II. FORMS OF OBTAINING PERSONAL DATA. We can obtain information through the following means:

Written information provided to us directly
Verbal
Online or electronic forms
Telephone services
Photographs captured during trainings
CCTV
Any other form permitted by law.

III. THE PERSONAL DATA THAT WE COLLECT. The personal data that we obtain in compliance with the purpose set in the current Notice are:

Full name
Nationality
Unique Registry of Population Code (in Spanish CURP)
Federal Taxpayer Registry (in Spanish RFC)
Marital status
Migratory status
Age
Gender
Height
Weight
Skin Color
Iris eye color
Hair color
Particular signs
Scars
Home address
Private phone number
Private cell phone number
Email
Autograph signature
Electronic signtaure
Image, photograph and/or video
Finger print
Iris image
Palm of the hand

We inform you that during the activities provided by the Company, only authorized personnel with accredited identification of RISK PREVENTION DE MEXICO S.C. has authorization to take photographs, publish and broadcast the activities we carry out, in the internal media, websites or social network of the Responsible. As for this instance, we will request your express authorization to use your image in accordance with the purpose set in this Privacy Notice. In accordance with the law in the subject matter, we will consider that you have given us your consent in a tacit manner, when you accept the current Privacy Notice with regard processing your personal data, previously mentioned. In addition, we inform that you may object at any time to the processing of your personal data or publish your photograph captured during the trainings through the procedure established in the above point number VI, as The Means to exercise the ARCO rights of this Privacy Notice. In case of Sensitive, Financial or Property Data, your express consent is mandatory for us to process them. Therefore, we will request your signature on the formats we will provide. The Personal Sensitive Data are:

Religion
Ideological positions
Political positions
Philosophical positions
Moral positions
Racial or ethnic origin
Health condition
Genetic information
Blood type
Allergies
Personal habits
Sexual preferences
Policy number of medical expenses
Belonging to a union

Financial or Property Data are:

Property assets
Bank accounts
Account statements
In case of having, mortgage credit.

The Data Subject is responsible to guarantee that the Personal Data provided to RISK PREVENTION DE MÉXICO S.C. is accurate and complete, and to communicate any modification with our Data Controller, SERGIO DELGADO TORRES, through email: delgado@riskp.com, in order to comply with the obligation to keep the information updated. The preservation period of Personal Data of the Subject will not exceed the reasonable period to comply with the obligations that result from the bound between the Subject and RISK PREVENTION DE MÉXICO S.C. IV. THE PURPOSE OF PROCESSING PERSONAL DATA: RISK PREVENTION DE MÉXICO S.C. will handle the data subject for the following purposes: PRINCIPLE (which are essential to provide our services)

Provide the services we offer
Means to comply the contracted obligations
Billing

SECONDARY (In an additional manner, we will use your personal data for the following secondary purposes, which are not essential for the service provided, but will allow us to improve and facilitate the relationship with you).

Informative circulars
Quality surveys of the hired services and staff that assisted you
To send you commercial and service information
Send advertising and promotions
Publish photographs taken during trainings in order to promote the activities provided by RISK PREVENTION DE MÉXICO S. C., are considered as personal data that contain elements that identify or make identifiable the person that appears in the photograph.

In case you do not give your consent to process your personal data for secondary purposes, you can send revocation request to delgado@riskp.com emailing SERGIO DELGADO TORRES, who is the Data Controller, with the sole purpose to manifest your refusal. The revocation of consent for processing your personal data will not be a reason for us to deny you the services you request. V. THE OPTIONS AND MEANS WE OFFER TO THE OWNERS TO LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA: In order to ensure that your personal data is protected, RISK PREVENTION DE MÉXICO S. C., is committed to handle your personal data under strict security measures to guarantee your confidentiality. Administrative, legal and technological security standards have been established to prevent unauthorized third parties from taking your personal data. You may send your request for limitation of use or divulging to the email delgado@riskp.com with attention to the Data Controller SERGIO DELGADO TORRES. It is worth mentioning that the data subject can start an Access, Rectification, Cancellation or Opposition procedure (ARCO) to limit the use or disclosure of the personal data in accordance with Chapter VI of this Privacy Notice. In addition, there is an administrative procedure were you can reduce the number of publicity by calling the Registry to Avoid Publicity, provided by the Federal Consumer Procurator´s Office, you can consult the web page at: http://rpc.profeco.gob.mx/Solicitudnumero.jsp VI. THE MEANS TO EXCERCISE THE RIGHT OF ACCESS, RECTIFICATION, CANCELLATION OR OPPOSITION (ARCO) TO PROCESSING PERSONAL DATA. You may exercise your rights to Access, Rectification, Cancellation or Opposition of your personal data by submitting a request in accordance to the following procedure: Submit a letter addressed to the Data Controller, SERGIO DELGADO TORRES, who has the quality of attending ARCO procedures on behalf of the person in charge, whose address is located in Av. A. López Mateos Norte No. 753-A. Colonia Providencia. Guadalajara, Jalisco, México. CP 44630, in working days and schedule of 09:00 a 18:00 hours. Your request must contain the following data:

The name of the owner of personal data
The address of the owner and, where appropriate, the address of the Legal Representative
A second communication option to communicate the response to your request.
The documents that prove the identity of the owner of the personal data or, where appropriate, if a third party does so, prove the Legal Representation
The clear and precise description of the personal data regarding which one seeks to exercise any of the rights of ARCO
Any other element or document that facilitates the location of your Personal Data.
When appropriate, request for rectification of personal data (the owner must indicate the modifications that need to be made and provide the documentation supporting the request).

In case of missing any information in your submitting, you´ll be requested to correct the omission as soon as possible. If there is any doubt about your identity, RISK PREVENTION DE MÉXICO S. C. reserves the right to request any other document to prove your identity. Once you comply with all the required formalities, you will receive a response within a maximum period of twenty days, starting from the date when the request was received or when the total preventions had been rectified. The aforementioned period may be extended only once for an equal period, as long as the circumstances of the case are justified in accordance with article 32 of the FLPPDHPP. It is important that you keep in mind that not in all cases we will be able to attend your request in favor or in an immediate way. It is possible that due to some legal obligations we need to continue processing your personal data. You could consider for certain purposes, the revocation of your consent, this action will imply that we cannot continue with the service you requested or the conclusion of your relationship with us. You become aware and accept that the rights of opposition or cancellation of personal data contained in photographs must be exercised prior to the disclosure of the information, as in case of exercising any of the ARCO rights after the publication of the images, The Responsible only undertakes to eliminate or block the files that are in its database. If you have any questions regarding the procedures, requirements and deadlines, you can contact our Personal Data Controller Officer, SERGIO DELGADO TORRES, by email: delgado@riskp.com VII. TRANSFERS OF DATA. We inform you that RISK PREVENTION DE MÉXICO S. C. makes transfers of personal data to third parties, without a commercial purpose, or illegal, but only to comply with the provision of contracted services. These third parties are suppliers of products or services that were selected to support the activities that allow us to assist you, or facilitate the verification of the authenticity of the information you provide us. In the same way, RISK PREVENTION DE MÉXICO S. C. without any commercial purpose may share or transmit Data with its subsidiaries for the same purpose. In the event that RISK PREVENTION DE MÉXICO S. C. requires transferring your personal data to other than the above-mentioned national or international third parties, in order to accomplish our services, you will be previously informed in order to obtain your authorization. You will be informed about the third parties and purpose of such transfers in terms of provisions in articles 36 and 37 of the Federal Law on Protection of Personal Data Held by Private Parties and of its Regulation 68. In any case, RISK PREVENTION DE MÉXICO S. C. will communicate this Privacy Notice to the receivers of personal data in order to respect the terms. VIII. WITHDRAWAL OF YOUR CONSENT TO PROCESSING PERSONAL DATA. You can revoke the consent you have given us to processing your personal data. We will require that you send your petition to the Data Controller, SERGIO DELGADO TORRES by email: delgado@riskp.com However, it is important that you are aware that not in all cases we will be able to meet your requirements or terminate the use of your personal data immediately. It may be possible that due to a legal obligation we need to continue handling them, you should consider those purposes. The revocation of your consent could imply that we will not continue to provide the service you requested, or to conclude your relationship with us. To know the procedures and requirements to withdrawal your consent, you may contact the data controller SERGIO DELGADO TORRES by email: delgado@riskp.com IX. COOKIES, WEB BEACONS OR ANY OTHER ANALOGUE TECHNOLOGY. RISK PREVENTION DE MÉXICO S. C. uses cookies, web beacons and other analogue technologies in order to monitor your behavior when using our website, in order to provide you with a better service and experience while navigating the site, and offering new products and services according to your preferences as a user. With the use of these technologies, we obtain Your personal data:

Web navigation schedule
Web navigation time spent
Consulted sections in our portal
Visited webpages prior accessing our website

In addition, we inform you that the obtained information using cookies, web beacons and other analogue technologies will be handled in accordance with this Privacy Notice and its transfer, accordingly with the ones established in chapter VII. To disable cookies from our portal, www.riskp.com, click on the name of the browser you use:

X. THE MEAN AND PROCEDURE THROUGH WHICH THE RESPONSIBLE WILL COMMUNICATE THE DATA SUBJECT OF THE CHANGES IN THE NOTICE OF PRIVACY, IN ACCORDANCE WITH THE PROPOSED IN THE FLPPDHPP. RISK PREVENTION DE MÉXICO S. C., reserves the right to make any additional modification to this Privacy Notice at any time. Any modification, derogation or addition to the Privacy Notice may be consulted on the website www.riskp.com. Date of last modification and publication: November 30, 2018.