DATA CONTROLLER

Through this privacy notice (the “Notice”), we inform you that VON WOBESER Y SIERRA, S.C., with its address at Torre SOMA Chapultepec, 18th Floor, Campos Elíseos 204, Polanco, 11560, Mexico City, is responsible for the collection, use, recording, organization, retention, preparation, use, communication, dissemination, storage, possession, access, handling, exploitation, disclosure, transfer or disposal (each and all of them jointly, the “Processing”) of information concerning you (the “Personal Data”), in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties and its applicable Regulations and guidelines (jointly, the “Law”).

PERSONAL DATA PROCESSED

Processing may include the following Personal Data of any visitor to the VON WOBESER Y SIERRA, S.C. website:

General Personal Data: first and last names, email address, current position and the name of the company for which you work, and current work telephone number.

VON WOBESER Y SIERRA, S.C. will not Process Financial or Sensitive Personal Data.

PURPOSES OF PROCESSING

Personal Data will be Processed solely and exclusively for the following primary and secondary purposes (jointly, the “Purposes of Processing”):

A) Primary Purposes

  • Responding to information requests: to respond to your questions and comments submitted through our website.
  • Managing professional relationships: to administer and follow up on initial consultations regarding legal services.
  • Employment opportunities: to establish contact regarding potential recruitment, selection and/or hiring processes.

B) Secondary Purposes

  • Event invitations: including sending information about our services, conferences, seminars, webinars and events organized or sponsored by our firm.
  • Specialized publications: to share articles, informational memoranda and publications of legal interest, including our newsletter.
  • Market research: to conduct analyses regarding legal market trends and the needs of prospective clients.

VON WOBESER Y SIERRA, S.C. will not Process your Personal Data for any purpose incompatible with the Purposes of Processing, unless it has obtained your consent to do so or unless such additional Processing does not require your consent under the Law.

SECURITY MEASURES

VON WOBESER Y SIERRA, S.C. and all of its personnel recognize the importance of appropriate Processing of your Personal Data and, as a result, appropriate administrative, technical and physical measures have been and will continue to be implemented to protect your Personal Data in accordance with the Law, including requiring third parties to use appropriate measures to protect their confidentiality and security.

PERSONAL DATA TRANSFERS

VON WOBESER Y SIERRA, S.C. does not share or transfer your Personal Data with third parties, except when required by federal or local authorities and in all cases listed by the Law.

ARCO RIGHTS

In accordance with the Law, you have the right to request from VON WOBESER Y SIERRA, S.C. Access, Rectification, Cancellation and/or Objection (the “ARCO Rights”) in connection with the Processing and/or your Personal Data, as described below:

  • Access: the right to access your Personal Data held by VON WOBESER Y SIERRA, S.C. and obtain information regarding the conditions and scope under which your Personal Data are Processed.
  • Rectification: the right to rectify or correct your Personal Data if they are inaccurate, incomplete or out of date.
  • Cancellation: the right to request that VON WOBESER Y SIERRA, S.C. cease Processing your Personal Data and request their cancellation from the files, records, dossiers and systems of VON WOBESER Y SIERRA, S.C., when you believe they are not being Processed in accordance with the principles and obligations established in the Law or its Regulations.
  • Objection: the right to object to the Processing of your Personal Data (or require it to cease) for certain specific Purposes of Processing set out in this Notice, when there is a legitimate reason and your particular situation so requires, to prevent its continuation from causing you damage or harm, or in the case of automated Processing that produces unwanted legal effects or significantly affects your interests, as provided by the Law.

To exercise your ARCO Rights, please contact the data protection officer of VON WOBESER Y SIERRA, S.C., as provided in the section entitled “Contact” of this Notice.

Your request to exercise ARCO Rights must contain at least the following information:

  • Your full name, address and contact information to communicate the response to your request.
  • Documents proving your identity or, as applicable, the authority and identity of your representative.
  • A clear and precise description of the Personal Data with respect to which you seek to exercise any of the ARCO Rights, except in the case of the right of Access.
  • A description of the ARCO Right you intend to exercise.
  • Any other element that facilitates the location of your Personal Data, as applicable.
  • The changes you wish to make / the limitations you wish to apply to the Processing of your Personal Data.

Once your request has been submitted in accordance with the preceding paragraph, VON WOBESER Y SIERRA, S.C. will notify you of the validity of your request within a maximum period of 20 (twenty) business days from the date the request was received. This period may be extended once for an equal period when the particular circumstances of the case warrant it. If further information and/or documentation is required, the privacy department will contact you.

In accordance with the Law, VON WOBESER Y SIERRA, S.C. will send you its response to your request and attach evidence of its determination. Your requests regarding the exercise of your ARCO Rights will be evaluated in accordance with the Law, and their validity will be assessed in light of the provisions of the Law.

Please note that your requests may not be approved where the Processing of your Personal Data is necessary to comply with the Law or with the rights or obligations of VON WOBESER Y SIERRA, S.C.

If the request is granted, VON WOBESER Y SIERRA, S.C. will have a period of 15 (fifteen) business days from the date it is communicated to implement it. This period may be extended once for an equal period when the particular circumstances of the case warrant it.

VON WOBESER Y SIERRA, S.C.’s response to your request to exercise ARCO Rights will be provided free of charge. You will only be responsible for the costs related to sending or duplicating documents related to the request (whether photocopies or other formats), which VON WOBESER Y SIERRA, S.C. will disclose to you if applicable. If you do not provide the magnetic, electronic or other means necessary to reproduce your Personal Data, they will be delivered at no cost.

If you are dissatisfied with VON WOBESER Y SIERRA, S.C.’s response, or if you receive no response after the extended resolution and notification periods stated above have elapsed, you may initiate the procedure to protect your rights before the Secretariat for Anti-Corruption and Good Government within 15 (fifteen) business days from the date on which you receive, or should have received, as applicable, VON WOBESER Y SIERRA, S.C.’s response to your request.

WITHDRAWAL OF CONSENT

In accordance with the Law, you have the right to withdraw the consent you have granted to VON WOBESER Y SIERRA, S.C. in relation to the Processing of your Personal Data. The mechanisms, procedures and time limits to exercise such withdrawal will be the same as those established for the exercise of ARCO Rights.

To withdraw consent previously granted with respect to Processing, please contact the data protection officer of VON WOBESER Y SIERRA, S.C. as provided in the section entitled “Contact” of this Notice. The validity and appropriateness of your request will be evaluated in accordance with the Law; therefore, your request for withdrawal may not be granted while Processing is necessary for, or legally required of, VON WOBESER Y SIERRA, S.C.

LIMITS ON THE USE AND/OR DISCLOSURE OF YOUR PERSONAL DATA

In accordance with the Law, VON WOBESER Y SIERRA, S.C. may implement options or means to limit the use and disclosure of Personal Data. Where applicable, such options or means will be exercised through the same mechanisms, procedures and time limits established for the exercise of ARCO Rights.

If you need to limit the use or disclosure of your Personal Data, or to obtain information about these options and means, you must request it from the data protection officer of VON WOBESER Y SIERRA, S.C. as provided in the section entitled “Contact” of this Notice. The validity and appropriateness of your requests in this regard will be evaluated in accordance with the Law; therefore, they may not be granted.

REMOTE AND AUTOMATED PROCESSING METHODS

As part of the Processing, VON WOBESER Y SIERRA, S.C. may use various technologies to improve the efficiency of its Internet portal. These technologies may collect and otherwise Process your Personal Data automatically and simultaneously while you interact with them, including cookies and web beacons.

Cookies are small digital documents created by a website and stored on the devices of those accessing that website, either temporarily (only for the duration of your session on the site) or permanently (when stored on the hard drive of the device in question). Web beacons are small images placed in the source code of web pages for purposes and functions similar to cookies. Cookies and web beacons enable websites to recognize you and track your online preferences.

Some of our sites may require the use of cookies. You may freely adjust your devices or Internet browser to limit tracking or deny the use of such cookies. Please review your device settings or the “Help” section of your Internet browser for more information on how to delete and/or disable access to, or control, navigation preferences on your device or browser through such cookies. Our system may not respond to tracking-disable requests from some Internet browsers.

AMENDMENTS AND UPDATES TO THE PRIVACY NOTICE

VON WOBESER Y SIERRA, S.C. reserves the right to update and/or modify the terms of this Notice at any time. If substantial amendments are made, VON WOBESER Y SIERRA, S.C. will publish the Notice on its website (www.vonwobeserysierra.com) and communicate such amendments by means of [___], and, where applicable, will require you to grant your consent again.

CONTACT

To share with VON WOBESER Y SIERRA, S.C. any question or comment concerning this Notice or the Processing; to exercise your ARCO Rights; to withdraw consent previously granted with respect to Processing; and to use, or inquire about, the options or means through which VON WOBESER Y SIERRA, S.C. may limit the use and disclosure of Personal Data, please contact VON WOBESER Y SIERRA, S.C.’s data protection officer by any of the following means:

privacidad@vwys.com.mx, attention: Diego Martínez, head of our privacy department.

CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA

You acknowledge that you have read and understood this Notice and grant your consent for your Personal Data to be Processed in accordance with the purposes (including Personal Data Transfers) and all terms described in this Notice.

Last updated: August 2026.