Privacy Notice

The Management Trust with Business Activities of Banco CIBANCO, Sociedad Anónima, Multiple Banking Institution, Grupo Financiero Invex, in its capacity as trustee of Trust F/3960 (hereinafter “Trust F/3960”), with address for notifications at Sin Calle, Sin Cruzamientos, Tablaje Catastral 24776, Chablekal, Municipality of Mérida, Yucatán, Mexico, C.P. 97308; pursuant to Articles 15, 16, and other applicable provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (the “Law”) and Article 8 of its Regulations, hereby informs you that it is responsible for the use and protection of your personal data and accordingly provides the following information:

PERSONAL DATA SUBJECT TO PROCESSING

For the purposes described in this Privacy Notice, the following personal data are required:

• Identification data: name, place and date of birth, nationality, residential address, Federal Taxpayer Registry (RFC), Unique Population Registry Code (CURP), identification number, immigration status, voiceprint, or any other biometric data that allows identification.
• Contact data: address, landline, mobile phone, email.
• Financial data: contracted amounts, payments made, and banking details.

In addition, upon entering our facilities, your image will be recorded on video for purposes of protection, security, and crime prevention. These recordings will be stored for 60 days, after which they will be deleted from our servers/cloud.

Note: To carry out the purposes of this Privacy Notice, the collection of sensitive personal data is not required.

MEANS OF OBTAINING PERSONAL DATA

To carry out the purposes set forth in this Privacy Notice, your personal data may be collected directly at offices and sales points, through our website, and from other public sources permitted by law.

PRIMARY PURPOSES

The personal data you provide will be used for the following primary purposes, which are necessary to establish and maintain a legal relationship:

• Provision of real estate sales services.
• Creation, update, and maintenance of an identification file.
• Issuance of invoices corresponding to your purchase.
• Communication to provide better service.
• Compliance with federal and local laws.

SECONDARY PURPOSES

Additionally, your personal data will be used for the following purposes, which are not necessary to maintain a legal relationship, but which allow us to provide you with better service:

• For marketing, advertising, or commercial prospecting purposes.
• To notify you about new services or products related to those already contracted, or to communicate changes in them.
• To carry out periodic evaluations of the products and services offered in order to improve their quality.
• To identify the Client and authorize activities related to any contract or agreement between the parties, such as agreements, payments, and other transactions.

If you do not wish your personal data to be processed for these additional purposes, you may express your refusal by exercising your right of Opposition, through the mechanism described in the following section.

Refusal to use your personal data for these additional purposes will not be a reason to deny you the products and services requested.

ARCO RIGHTS AND/OR CONSENT REVOCATION

You are hereby informed that at any time you may exercise your rights of Access, Rectification, Cancellation, or Opposition (ARCO Rights), as well as the Revocation of consent for the processing of your personal data.

However, please note that it may be necessary to continue processing your personal data due to a legal obligation; therefore, not all requests may proceed or may not be concluded immediately.

To exercise your ARCO Rights and/or revoke your consent for the processing of your personal data, you must send a written request, signed by you or your duly authorized legal representative, to the following email address: avisos@inmobilia.mx. The request must include the following requirements:

• The name of the data subject.
• Telephone number and email address.
• A clear and precise description of the personal data regarding which any of the rights are being exercised, as well as any other element or document that facilitates locating the personal data.
• A simple copy of the applicant’s official identification, and if applicable, the document granting representation.
• In the case of requests for Rectification of personal data, the data subject must also indicate the modifications to be made.

From the date of receipt, Trust F/3960 will have a period of 20 business days to respond to your request; however, this period may be extended once for an equal period, in which case you will be notified through the means you indicated for such purposes, stating the reasons for the extension, in accordance with Article 32 of the Law.

If the information provided in the request is insufficient or incorrect, or if it is not accompanied by the required documents or does not clearly indicate the modifications to be made, this will be requested once within five days following receipt of the request.

You will then have ten days to provide the information and documents, counted from the day you receive the request. If you fail to respond within this period, the request will be considered as not submitted.

TRANSFER OF PERSONAL DATA

Your personal data may be transferred and processed within and outside Mexico by entities belonging to or distinct from Trust F/3960, for the following purposes: creation, update, and maintenance of an identification file; and compliance with federal and state laws.

Recipients may include:

• Irrevocable Trust for the Issuance of Development Certificates “Invex F/3319”.
• Inmobilia Funds, S.A. de C.V.
• Inmobilia Management I, S.A.P.I. de C.V.

You are hereby informed that your personal data will not be transferred without your consent to persons or entities other than those mentioned in this Privacy Notice, except as provided in Article 53 of the Law with respect to data transfers.

LIMITATION OF USE OR DISCLOSURE OF PERSONAL DATA

In addition to exercising your ARCO Rights and the Revocation of consent, it is possible to limit the use and disclosure of your personal data through the following mechanisms:

• Registration in the Public Registry to Avoid Advertising (REPEP), managed by the Federal Consumer Protection Agency (PROFECO).
• Registration in the Public Registry of Users (REUS), managed by the National Commission for the Protection and Defense of Financial Services Users (CONDUSEF).

USE OF TRACKING TECHNOLOGIES ON THE WEBSITE (COOKIES, WEB BEACONS)

We inform you that at the following website: https://www.casamitos.com, cookies, web beacons, and similar technologies are used to collect personal data.

CHANGES TO THE PRIVACY NOTICE

This Privacy Notice may be modified, changed, or updated due to new legal requirements, business needs, or internal privacy policies.

Any changes to the terms of this Privacy Notice will be communicated to you through the contact details you have provided.

CONSENT

By acting as the owner of my personal data, I grant my consent for them to be processed and transferred by Trust F/3960 in accordance with the terms and purposes set forth in this Privacy Notice.

Date: January 23, 2024