Comprehensive Privacy Notice for Clients

1. IDENTITY AND ADDRESS OF THE CONTROLLER
NanoMax SA de CV (jointly or each of them individually as the “Controller”), with address at Guadalupe Lake Highway KM 27.5, Warehouse 1 Gate 2, San Pedro Barrientos Colony, Tlalnepantla, Zip Code 54010, State of Mexico.

2. PERSONAL DATA THAT WILL BE REQUIRED
Personal data obtained verbally, in writing, or through electronic means, from in accordance with the purposes for which you give your consent, will be the following:
a) Identification data
b) Financial/asset data.

3. PURPOSES OF THE PROCESSING OF PERSONAL DATA.
The personal data obtained will be used for the following purposes:
A. Primary Purposes: (a) Verify your identity and information; (b) Integrate your file; (c) Update your information in our database; (d) Analyze your capacity and credit rating for contracting a line of credit; (e) Manage payments derived from your credit and the collection derived from the relationship (f) Maintaining the legal relationship that is generated; (g) Identifying and/or registering you as a client or user of our site; (h) Carry out investigations for the purpose of verifying through contracted third parties for this purpose, department or authority, the veracity of the data you provide us; (i) Provide the services requested and carry out the sale of products requested by you (including without limitation the services of physical, telephone and internet sales); (j) Deliver your products to the store and/or to your home and/or lend you the services purchased; (k) Inform you and/or contact you by any optical, sound, technological or physical means (WhatsApp, SMS, telephone, email, messaging, among others), regarding the status of your purchases and/or Delivery of your products or services; (l) Return and/or exchange of products; (m) Issuance of invoices; (n) Comply with the applicable regulations and requirements of the authorities based on the Law for compliance with the legal provisions and requirements of various authorities; (o) Retain your information for compliance of the legal provisions and requirements of various authorities and/or regulatory entities; (p) Compliance with the provisions of customer knowledge and prevention of money laundering; (q) Address your questions, complaints, clarifications, complaints and suggestions as a client; (r) Provide you with personal attention through different electronic means of communication such as email, telephone, chat, among others; (s) Perform recordings of communications we have with you; and (t) Keep a history of your purchases and use of our services.

B. Secondary Purposes: Additionally, your personal information may be used for the following purposes: purposes: (a) To send you our promotions, newsletters, news, thanks, by various means, congratulations, offers arising from the relationship with us; (b) Conduct quality and satisfaction surveys, to evaluate the quality of products and services; (c) Invite you to participate in our events, campaigns, raffles, raffles and contests, if you are a winner, we will contact you to deliver the prize; (d) Advertise on social networks social media, news and information media, newspapers and magazines; (e) Offer you any of our services and products; (f) Marketing, commercial prospecting, and statistical and historical purposes; (g) To prepare Product usage analysis, market segmentation, statistics, records and information analysis; and (h) Purposes of image use in advertising and support media, corporate image, marketing, advertising campaigns, videos/photography and publications in any other media.
The owner of the personal data has the right to object to his/her personal data being used for the purposes contained in section B above. If you wish to exercise this right, the owner of the personal data You must do so in accordance with the procedure established in section IV of this Privacy Notice, within 5 business days following the date on which this Privacy Notice has been made available to you, effect that the Controller does not process your data for such purposes. Otherwise, it will be understood that the owner consent to the processing of your data for all the purposes listed above. We note that the above is without prejudice to the provisions of Article 26 of the Law and other applicable provisions. The refusal to use your personal data for Secondary Purposes will not be a reason for us to deny you our services.

4. OPTIONS OR MEANS OFFERED BY THE CONTROLLER TO LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA. To limit the use or disclosure of your personal data, the owner must send an email, addressed to the Information Privacy Office, at the following email address: info@eviter.com requesting the limitation of the use or disclosure in question, where you may request to be included in the lists internal exclusion rules for not contacting you for promotional and marketing purposes. You may also register for the public registry to avoid advertising from the Federal Consumer Protection Agency (REPEP), by accessing the following league, http://repep.profeco.gob.mx/ However, if the owner of the personal data limits the use that the Controller can give to his personal data, it is They may not be aware of additional benefits related to our purposes. secondary.

5. MEANS TO EXERCISE THE RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION OR OPPOSITION (“ARCO RIGHTS). In accordance with the Law, the owner of personal data has the right to Access ("Access") the data that The Controller already has the details of their processing, as well as the right to rectify them if they are inaccurate. or incomplete ("Rectification"); Cancel them in accordance with the Law ("Cancellation") or Oppose the processing of the same for specific purposes (“Opposition”).
The owner of the personal data or his legal representative may exercise the rights described above at through our Éviter warehouse at the address described or by sending an email to the following address electronic: info@eviter.com indicating that you request to exercise your ARCO rights. This request can be through a free writing considering the elements of article 29 of the Law or the Privacy Office will send the format for exercising ARCO rights in response.
To request the exercise of your ARCO rights, you must consider the following requirements:
Official identification of the holder.
Please provide your email address to inform you of the response to your request.
Clear and precise description of the personal data in respect of which you seek to exercise any of the rights above mentioned.
In case the right is exercised by a representative, official identification and the document that proves your representation.
In the event that the information provided in the request is insufficient or erroneous to address it, or, the necessary and indispensable documents for your attention are attached, the Responsible Party may request the information and/or documentation necessary to process it in accordance with article 96 of the regulations. The owner will have 10 business days to respond to this request. The responsible party will respond to your request. request within a period of 20 (twenty) business days from the date of receipt of your request, this The deadline may be extended only once for an equal period in accordance with Article 32 of the Law. If the request is This will be effective within a period of 15 business days.
In case of exercising the right of access, the means by which you can obtain the information or personal data requested will be in simple copies or electronic documents (which will be sent to the email indicated in your request). The Controller may deny access to personal data, or carry out rectification or cancellation or grant opposition to the processing of the same, in the cases established in article 34 of the Law. The Controller will not be obliged to cancel the personal data of the owner, under the assumptions established in article 26 of the Law.
To clarify doubts about the procedure and requirements for the exercise of ARCO rights, the person empowered to providing care is the Information Privacy Office, the contact information is as follows: info@eviter.com

6. REVOCATION OF CONSENT
The Owner may revoke the consent he has given us for the processing of his personal data at any time. At this time, as established in article 8 of the Law, for the above it will be necessary to send an email email to the Privacy Office, at the following email address: info@eviter.com where you will be will inform you of the procedure to follow.

7. TRANSFER OF PERSONAL DATA THAT ARE MADE.
The transfers made by the Controller will be in terms established in article 37 of the Law, and in compliance with Article 68 of the Regulations.

8. USE OF COOKIES.
We use cookies to improve our services and show you advertising related to your preferences. navigation and the content of your previous visits. When you visit the Controller's websites again, cookies may allow us to customize our content according to your preferences.
We note that the Controller's internet pages do not use or store cookies to obtain data from personal identification of the Data Subject's computer that was not originally sent as part of the cookie. Although most browsers accept "cookies", the owner can configure his browser so that they are not accepted. accept. These technologies can be disabled by following the procedures for each browser, however, You should take into account that disabling them could limit the functionality offered by the platform.

9. NOTIFICATION OF CHANGES / UPDATES TO THE PRIVACY NOTICE.
This Privacy Notice may be modified and/or updated at any time by the Controller, for the attention to legislative or jurisprudential reforms, internal policies, or new requirements, the version being updated the one published on our website https://www.eviter.com/ applicable in all moment.
In the event that the Controller changes his identity, requires collecting personal, financial or patrimonial data additional, change the purposes for obtaining your personal data or modify the conditions of the transfers that may be made under the provisions of this Privacy Notice, will be made available of the data holders a new privacy notice, through the email that the holder has provided to the Controller or through the Controller's website.