GCEFE Consulting Group LLC, located at 600 B St, Suite 300, San Diego, CA 92101, is a company incorporated under the laws of the United Mexican States that provides specialized consulting services in tax, financial, legal, and business areas throughout the country. In the course of our activities, GCEFE Consulting Group LLC is responsible for collecting your personal data, as well as its use and protection. Therefore, we are fully committed to protecting the personal data and privacy of our clients, suppliers, employees, and related third parties (hereinafter "Personal Data"). In compliance with the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations, we provide you with this privacy notice.

‍

Controller's name

GCEFE Consulting Group LLC.

‍

Controller's address

600 B St, Suite 300, San Diego, CA 92101

‍

Purposes for processing your personal data

Your personal information will be used for the following primary purposes, which are necessary to provide you with our products and services in the most timely and efficient manner:

• Identify it.
• Establishing contact with you.
• Creating your client or prospective client file and registering you in our systems and databases.
• Verifying that there are no conflicts of interest with our staff, suppliers, partners, and other related third parties.
• Providing you with the products and services you contract from us in the most efficient and timely manner.
• Fulfilling the obligations contracted with you through the various means and methods by which our services have been engaged.
• Complying with personal data protection regulations and other laws applicable to our operations.
• Complying with tax regulations when processing invoices for the products and/or services contracted.
• Managing collection efforts, if necessary.
• Providing you with the opportunity to evaluate the quality of our service and allowing us to conduct internal assessments.
• Inviting you to professional, academic, and cultural events related to the products and services we offer that may be of interest to you.

‍

Additionally, and on a secondary basis (meaning not essential to our legal relationship with you), your data may be used for marketing, advertising, and commercial prospecting purposes. If you do not wish for your data to be used for these secondary purposes, you may notify us at any time through the contact methods indicated in the "Exercise of ARCO Rights" section of this notice, without this affecting the provision of the primary products or services you have contracted.

Personal data that may be collected

To carry out the aforementioned purposes, we may collect the following data:

‍

For individuals:

1. Full name and signature
2. Date and place of birth
3. Nationality
4. Gender
5. Marital status
6. Full address
7. Phone number
8. Email address
9. Photograph and video recording
10. Unique Population Registry Code (CURP)
11. Immigration status (if applicable)
12. Academic, professional training, and professional qualification data
13. Employment data such as work history, compensation, benefits, employment terms, and professional references
14. Identification and contact information for family members, dependents, or beneficiaries, such as full name, phone number, and/or email address
15. Social security information, such as your Mexican Social Security Institute (IMSS) registration number, INFONAVIT credit number, FONACOT credit number, AFORE affiliation number, among others

‍

If you are a legal entity:

1. Company name or trade name
2. Nationality and registered office address
3. Corporate purpose
4. Share capital
5. Registration and filing details with the Public Registry of Property or the Public Registry of Commerce
6. Information regarding partners, shareholders, or members of the entity, as well as its shareholding structure or equivalent
7. Information regarding administrators, board members, directors, statutory auditors, and other entity officials
8.  Information on your beneficial owner
9. Information on related entities, such as subsidiaries, affiliates, or parent companies
10. Articles of incorporation and any subsequent acts or documents relating to the company

‍

Sensitive personal data

GCEFE Consulting Group LLC does not request, except in exceptional cases, information considered sensitive personal data; examples include data related to ethnic origin, religious beliefs, criminal records, or physical and mental health, among others. In the extraordinary event that such information is required for the provision of our services and/or products, it will be obtained with your express written consent (including handwritten signature, electronic signature, or any equivalent authentication mechanism), under the terms and conditions disclosed at that time, in accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties.

‍

Protection of Personal Data

To fulfill the purposes set forth in this notice, Personal Data will be collected and processed under strict security and confidentiality measures. Therefore, the Personal Data provided, and which is currently or may in the future be in the possession of GCEFE Consulting Group LLC, will be handled, processed, and/or used in accordance with the principles of lawfulness, consent, quality, information, proportionality, and responsibility. GCEFE Consulting Group LLC is committed to observing and complying with these principles, and to not selling, renting, sharing, or disclosing your personal information for illicit purposes or purposes contrary to those for which it was provided, except in the exceptional cases indicated in the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations. GCEFE Consulting Group LLC will make its best efforts to protect Personal Data and safeguard the security of the systems used to store it.

However, GCEFE Consulting Group LLC assumes no obligation to keep confidential any information provided by the data subject in addition to what is requested, including information provided through forms on the Website.

‍

Transfer of your personal data

• Law firms: for legal consulting and debt collection purposes.
• Government agencies: for compliance with applicable legislation.
• Professional services firms: for audit, consulting, and support purposes.
• Certification bodies: for the validation of compliance with best practices.
• Affiliates, subsidiaries, or parent companies of GCEFE Consulting Group LLC, as well as third-party service providers acting on our behalf and under our instructions, for the purposes described in this notice.

‍

GCEFE Consulting Group LLC may share your Personal Data only in the cases and for the purposes described below, which are covered by the provisions of Article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties, and therefore do not require your consent:

Additionally, your Personal Data may be shared with a third party in the event of a reorganization, merger, spin-off, sale, assignment, transfer, or other disposition of all or part of our business, assets, or shares, including corporate restructuring processes or due diligence reviews by potential investors. In all cases, such third parties will be contractually obligated to treat your data confidentially and in accordance with the purposes described herein.

For any transfer of your Personal Data not covered by the exceptions under Article 37 of the Law—including, where applicable, transfers to persons or organizations other than those mentioned above, or to countries with data protection laws different from those of Mexico—GCEFE Consulting Group LLC will request your prior consent, unless the transfer is required by a legal obligation.

To the extent that international data transfers may occur based on the above (for example, to the United States of America or other countries where GCEFE Consulting Group LLC operates), you will be specifically informed, and when required by law, your prior consent will be obtained.

‍

Personal data retention period.

In accordance with our internal policies, your Personal Data will be retained for 10 years from the conclusion of the legal, contractual, or service relationship between you and GCEFE Consulting Group LLC, unless applicable tax, labor, or other regulations establish a different period, in which case the corresponding legal period will be observed.

‍

Information collection

As a visitor, you do not have to provide personal information to use our website, as we only collect specific personal information voluntarily provided by visitors interested in any of our products or services, whether as clients or prospects. See the "Personal data that may be collected" section.

‍

Use of information

• Marketing, advertising, and market research.
• Sending you promotional materials and/or communications regarding the services we provide that we believe may be of interest to you.
• Conducting satisfaction surveys regarding the service provided by our employees, partners, suppliers, and related third parties.
• When such information is required by an authority or is necessary to provide in a judicial and/or non-judicial proceeding.

‍

GCEFE Consulting Group LLC may use the personal information provided by our clients and visitors for the following purposes:

You may request at any time that we stop sending you emails or other promotional communications generated in response to your registration on this website. If you wish to stop receiving promotional messages from us, you may request this by calling +1 (619) 853 1700, or by writing to us through the channels indicated in the "Exercise of ARCO Rights" section of this notice.

‍

Transfer of personal data to third parties and its purpose

GCEFE Consulting Group LLC may provide your personal information to the entities specified in the "Transfer of your personal data" section of this notice so that they may provide you with information that may be of interest to you, or to respond to your requests or questions regarding the services you have contracted or intend to contract with us. Likewise, your personal information may be disclosed to various competent authorities to comply with obligations or requirements issued to GCEFE Consulting Group LLC, its staff, and related third parties.

Please note that such disclosures may involve the transfer of Personal Data to countries or regions whose data protection standards may differ from or provide less coverage than those applicable in Mexico. In such cases, we will adhere to the provisions set forth in the "Transfer of your personal data" section regarding any consent that may be required beforehand.

‍

Blogs, forums, and social media

This website may host blogs, forums, social media, and other applications or services that allow you to share content with other users.

Any personal or other information you share through such applications may be read, collected, manipulated, and used by other users of those applications, and GCEFE Consulting Group LLC has no control over such use. Therefore, GCEFE Consulting Group LLC is not responsible for the use that any other person or entity may make of the information you share or provide through such means, nor for any misuse or misappropriation of information provided by you through social media or any other mentioned applications.

‍

Security measures to protect your personal information

Your personal information will be kept strictly confidential. To prevent unauthorized use or disclosure, GCEFE Consulting Group LLC has implemented various administrative, technical, and physical security measures in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties and other applicable regulations. Your personal data will be used solely and exclusively by authorized members of GCEFE Consulting Group LLC.

‍

Exercise of ARCO Rights and revocation of consent

To the extent permitted by applicable law, you have the right to:

‍

• Access the Personal Data we hold and learn the details of its processing.
• Rectify your Personal Data if it is inaccurate or incomplete.
• Cancel your Personal Data when you believe it is no longer required for any of the purposes stated in this notice, is being used for purposes to which you have not consented, or the contractual or service relationship has ended.
• Object to the processing of your Personal Data for specific purposes.
• Revoke, at any time, the consent you may have granted us for the processing of your data, without retroactive effect.
• Limit the use or disclosure of your Personal Data, particularly for marketing, advertising, or commercial prospecting purposes.

‍

To exercise any of these rights, you (or your legal representative, providing proof of such representation) may contact us via:

• Phone: +1 (619) 853 1700
• Email: info@gcefe.com
• Or by visiting the "Contact" section of our website

‍

Your request must contain, at a minimum: your name and address or another means to communicate the response to you; documents proving your identity or, where applicable, your legal representation; a clear and precise description of the Personal Data for which you are seeking to exercise the corresponding right; and any other element that facilitates the location of the data.

GCEFE Consulting Group LLC will respond to your request within a maximum period of 20 business days from the date the request was received, and if it is found to be valid, it will be made effective within 15 business days following the date the response is communicated to you.

If you do not express your opposition to your Personal Data being processed in accordance with the purposes indicated in this notice, it will be understood that you have given your consent for it.

If at any time you believe that this website has not adhered to the principles established herein or to the applicable legislation regarding the protection of personal data, please notify GCEFE Consulting Group LLC by email at info@gcefe.com, and we will use all commercially reasonable efforts to determine and correct the problem as soon as possible.

‍

Modifications to this Privacy Notice

GCEFE Consulting Group LLC may modify and/or update this privacy notice at its discretion and unilaterally, informing you of any modification or update through our website https://grupoconsultorefe.com/. We recommend that you periodically review this Privacy Notice to stay informed and up to date on how we are protecting your information.

‍

Questions or inquiries about our website, our company, and the services provided

If you have any questions about this page, our company, or the services we provide, please contact us by calling +1 (619) 853 1700, or visit the "Contact" section of our website.

‍

ARCO Rights: what do they entail?

Every individual, as the owner of their Personal Data or through their legal representative, has the right to access, rectify, cancel, or object to the processing of their data. Under the Federal Law on the Protection of Personal Data Held by Private Parties, these rights are known by their Spanish acronym as ARCO Rights. Below, we explain what each one entails:

Right to access: the right to request access to Personal Data held in the databases, systems, files, records, or dossiers of anyone who possesses, stores, or uses it, as well as to be informed about the conditions and general aspects of how it is being processed.

Right to rectification: the right to request the correction of Personal Data in the possession of the data controller when it is inaccurate, incomplete, or outdated.

Right to cancellation: the right to request that Personal Data be deleted or removed from the files, records, dossiers, systems, or databases of anyone who possesses, stores, or uses it, and that it no longer be processed by them.

Right to object: the right to request that anyone storing, possessing, or using your Personal Data refrain from using it for certain purposes—for example, publishing it in a publicly accessible source—or to request that its use be terminated to prevent harm or damage to you.