Privacy Notice

This is the privacy notice of Enaitech Solution SA de CV, its websites, and any point of contact (hereinafter referred to as "Points of Contact"). This Privacy Notice applies only to the personal data that Enaitech Solution SA de CV and the entities within its group (hereinafter, Enaitech, "we," "our," "us") process about users through its points of contact, products, and services.

This statement explains how we will use the personal data we collect through our points of contact, products, and services, and the rights you have regarding your personal data.

Enaitech is committed to the privacy and protection of the personal data collected from its users, establishing the rules on the collection, recording, storage, use, exchange, enrichment, and disposal of user data collected within the scope of the products and services offered, in accordance with applicable laws, with transparency and clarity toward users and the market in general.

As a condition for accessing and using Enaitech's services, such as applications, websites, information, video conferences, and any other means of communication and information exchange, the user declares to have read this Privacy Policy in its entirety, being fully aware and thereby granting their free and express acceptance of the terms and conditions stipulated herein.

Definitions

The term "user" refers to any person or group of persons, whether clients, employees, suppliers, or any other interested party; in addition to the above, this also includes any type and technology of platform, Bot, autonomous system, entity, AI, or any element that interacts with any of our services and/or points of contact.

The term "points of contact" refers to any of the following, whether physical, digital, virtual, quantum, telepathic, or any other medium, used to provide a service or establish communication, as well as any communications material or mechanism, including but not limited to websites, forms, email, telephony (of any technology, old, current, or not yet known or disclosed), in addition to messaging services, calls, and/or video conferences, as well as any other means originated by the user and/or an Enaitech representative — including any point of contact originated by a third party that establishes the link between the user and an Enaitech representative.

The term "Enaitech representative" refers to an employee of any level, shareholder partner, external representative, or any digital system such as a Bot, Platform, or AI, that is identified as representing Enaitech.

Data Collection and Activity Log

Data is collected when our user enters and/or voluntarily submits it while using any of the various points of contact offered by Enaitech.

Data collection will take place at any time, or throughout the entire time the point of contact is being used, whether by the user, the Enaitech representative, or both.

The only data collected without the user's consent are the IP address and geolocation, in addition to the following cookies:

• Session, browsing, and page-visit data
• New sessions
• Domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and number of sessions
• Browsing behavior
• Browsing history
• User distinction
• First browsing session
• Log and browsing data
• Log data via IP address
• Browser and device information
• Device identifiers

The information Enaitech may obtain with the user's consent is:

• Full name
• Tax information
• Details regarding business segment, vertical, and category
• Contact details, such as phone number, email, social media username
• Address

Enaitech is not responsible for the accuracy, lack thereof, or the outdated nature of the information provided by our user, as it is the user's responsibility to provide it accurately or keep it updated.

The user is fully responsible for the settings on their devices and/or applications regarding the data they do or do not want to share; if the necessary data is not shared, Enaitech will not be held responsible in any way for any partial or total failure of any point of contact.

Enaitech's points of contact may use technologies such as:

• Cookies
• Web, digital, or physical beacons, or any other technology that allows collecting user-behavior data while using any point of contact
• Any other technology for obtaining browsing or usage data from the user

It is important to note that the various points of contact may link to other points of contact where this privacy notice will remain in effect, valid, and accepted with the full awareness of the user or the owner.

Data Use

Data collected from users at Enaitech's points of contact and activity logs may be used for the following purposes:

• Properly identifying and authenticating them
• Establishing communications between Enaitech representatives and users
• Managing system functions, providing services, and fulfilling obligations arising from the use of Enaitech's products and/or services
• Providing user support, including answering questions about products and/or services offered by Enaitech
• Optimizing and improving the user's experience
• Conducting statistics, studies, surveys, and research relevant to users' behavior when using the products and/or services
• Informing users about news, resources, content, and other relevant events to maintain our relationship with our users
• Safeguarding Enaitech's rights and obligations related to the use of its points of contact, products, and/or services, as evidence in cases of unlawful acts or acts contrary to this privacy policy or any other legal document made available by Enaitech; in the event of improper changes to its systems and records, or actions that could put the platform and its users at risk
• Enriching Enaitech's database and preventing improper use

User consent regarding the use of data

Consent for the purposes of data use will be obtained individually, without the user being obligated to grant consent to any of them.

If the user does not grant consent for purposes directly tied to the provision of services by Enaitech, the services will not be made available to them.

If the user does not grant consent for optional purposes, Enaitech will continue providing services as usual.

The user may change their granted consent by opening a ticket with Enaitech's Compliance area (compliance@enaitech.com), and may grant new permissions or withdraw consent for existing permissions, having been warned of the consequences that withdrawing consent may cause.

Collected data and logged activities may also be shared

• With competent judicial, administrative, or governmental authorities, whenever there is a request or court order
• Automatically, in the event of corporate transactions such as mergers, acquisitions, and incorporations
• Automatically, with the following categories of companies that provide services to Enaitech to collect, process, or use personal data on Enaitech's behalf and in accordance with its instructions, for the respective purposes:
  • Hosting service providers: data-center services for capacity and/or hosting services
  • Software as a service: used for data processing for internal management
  • Software and hardware maintenance providers: for the replacement and maintenance of defective parts, as well as for software updates
  • Telecommunications services: data links and Internet connectivity
  • Consulting (information technology, legal, administrative, accounting, human resources, and other internal areas) — for operational management and internal procedures
  • Advertising agencies: to send Enaitech newsletters, information, and/or ads
  • Event management: organizers, to communicate with clients and prospects
  • Marketing and/or operational platforms: to communicate with clients and prospects

If these external companies have access to personal data, Enaitech ensures that the respective parties have previously signed data-processing and confidentiality agreements with Enaitech in order to comply with applicable data-protection legislation.

Enaitech is solely responsible for the database formed by the data collected from its points of contact, services, and products.

The use, access, and exchange of data from Enaitech's database will only be carried out within the limits and purposes established in this document.

Enaitech may also share data from its database with authorities when legally required to do so.

The user is responsible for the confidentiality of their personal data. Sharing passwords and login credentials violates this privacy policy and the terms and conditions of use of our points of contact, products, and services.

Internally, access to user data is restricted solely to Enaitech's authorized employees.

Data Storage

User data collected by Enaitech is stored in a secure, controlled environment for a minimum period of 6 (six) months following the user's last contact with any of our points of contact, services, and/or products, in accordance with the civil framework governing the Internet and subject to the state of the art available. This period may vary according to specific client requirements. However, considering that no security system is infallible, Enaitech disclaims any liability for damages and/or losses resulting from failures, viruses, intrusions, and/or attacks on Enaitech's database, except in cases of intentional misconduct or fault.

Data may be deleted before the 6 (six) months at the user's request, provided there is no legal obligation to keep it stored.

Enaitech may retain anonymized data for more than 6 (six) months, or sooner, if the user objects to the use of their data.

This storage period will also be subject to specific terms for the provision and/or use of services and/or products; this must be approved and agreed to by the user.

Data collected from users will be stored in data centers; these data centers may be Enaitech's own infrastructure and/or third-party infrastructure, depending on the platforms that will host them.

Access, Rectification, Restriction, Objection, and Deletion of Data

Users may request to view or modify their personal information through their product or service accounts, or open a ticket with the DPO (Data Protection Officer) via email at compliance@enaitech.com.

By contacting the Compliance area, users may request a restriction on the use of their personal data.

The user may object to the use of their personal data or request the deletion of the personal data collected and recorded by Enaitech.

Once the contract between the user and Enaitech ends, all accounts are canceled and all access is revoked.

If the user withdraws consent for purposes that are essential to the proper functioning of the products and services offered by Enaitech, the features of those products and services may become unavailable to the user.

Enaitech may (for purposes of auditing, compliance, security, fraud control, and the preservation of rights) retain the user's data-record history for a period longer than that established by law or regulatory standards.

Data Containers

Your personal data will be handled by Enaitech professionals in the respective departments that need access to it:

• Contact data: any department that may be involved in processing your request
• Comment data: marketing or the respective product departments responsible for operating blogs or discussion forums
• Job application data: HR and the departments responsible for the position applied for
• Direct marketing data: marketing and sales departments responsible for your region
• Usage and browser data: marketing and IT departments responsible for operating the respective points of contact, products, and services

For data backup purposes, it may be necessary to transfer your data to other countries (see the International Data Transfers section). However, the legality of exporting data will be based on an adequacy decision.

Additionally, we do not forward your data to third parties unless required to do so by the legal provisions of the competent authority. Your personal data will not be sold, rented, or exchanged.

International Data Transfers

The recipients of your personal data (in the case of backup copies) may be located outside of Mexico, the US, or Canada, where laws may not be equivalent to the region's data-protection laws. In such cases, the recipient will be required to take measures to protect your data in accordance with applicable privacy and data-protection laws.

We will take all necessary measures to ensure that transfers to such organizations are adequately protected in accordance with applicable data-protection legislation, for example by signing an agreement with the standard contractual clauses stipulated by the region's applicable privacy laws (for example, the GDPR (General Data Protection Regulation) for EU countries, and Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP)).

If a transfer of data to official authorities in countries outside of Mexico, the US, or Canada is required, and if the law requires it of us, by consenting to this privacy policy you have given us your express consent for the international transfer of data.

General Provisions

Enaitech may change the content of this Privacy Policy at any time, according to purpose or need — for example, to adapt to and comply with a legal provision or standard of equivalent legal force — and it is our user's responsibility to check it every time they access any of Enaitech's points of contact, products, or services.

In the event of significant updates to this document that require obtaining consent again, Enaitech will notify the user through the tools available in the products and/or available support tools.

If you have questions about this policy, please contact Enaitech at compliance@enaitech.com.

If subcontracted companies process any data collected by Enaitech, they must mandatorily comply with the conditions stipulated herein and with Enaitech's information-security rules and compliance standards.

If the authority of the place where our user resides, or of their Internet connection, determines that any provision of this Privacy Policy is unlawful or illegitimate, the remaining conditions will remain in full force and effect.

The user acknowledges that all communications made through any point of contact are valid, effective, and sufficient for disclosing any matter relating to the services provided by Enaitech, as well as the terms of their provision or any other matter addressed therein, except as expressly otherwise provided in this Privacy Policy.

Use of cookies

This site uses necessary cookies to work, such as the one that remembers your language (lang) and the one that stores your cookie choice (cookie_consent). They do not require your consent.

Analytics cookies are only enabled if you accept them in the notice shown on your first visit. You can accept, reject or change your choice at any time from the Cookie preferences link in the footer. You can also delete cookies from your browser settings.

If you accept analytics cookies, we use Google Analytics 4 (Google LLC) to understand how the site is used: pages visited, traffic source, device type and approximate country. This sets the _ga and _ga_4ZJM0DLTCE cookies (up to 2 years). Google processes this data and it may be stored outside Mexico; see its privacy policy. If you reject them, Google Analytics is not loaded and these cookies are not set.

We currently do not use marketing cookies. If this changes, we will let you know and ask for your consent.

Glossary

• Beacons: Small devices that use Bluetooth Low Energy (BLE) technology, which emit signals that can be picked up by technology resources, enabling interaction between the user and the technology resource. Digital beacons are programs designed to monitor a user's browsing on a website, application, or platform.
• Cloud Computing: a service-virtualization technology built on the interconnection of more than one server through a shared information network (for example, the Internet), with the aim of reducing costs and increasing the availability of sustained services or access to computing power beyond what is physically accessible.
• Cookies: Files sent by the Platform's server to the user's computer, in order to identify the computer and obtain access data, such as pages browsed or links accessed, allowing users to customize their browsing experience on the Platform according to their profile.
• Access Account: a user's credential that may be required to use or access restricted areas or Enaitech's products and services.
• DPO: Data Protection Officer. Responsible for users' personal data within Enaitech, regarding data protection and privacy matters.
• Logs: records of the user's activities carried out at Enaitech's points of contact and products.
• Session ID: Identification of the user's session in order to access restricted areas of Enaitech's products and/or points of contact.

Questions about this notice

All questions or requests related to privacy may be directed to the current Data Protection Officer by email at compliance@enaitech.com, or at the following address:

Enaitech Solution SA de CV
Av. Américas 1254, Piso 10
Country Club, CP: 44610
Guadalajara, Jalisco, Mexico

Last updated: August 4, 2023