Privacy notice.

Privacy Notice – Sabag, Becker & Gerrit-Cohen

1. Identity and Address of the Data Controller

Rubén Moya Bocanegra, with address at Prolongación Paseo de la Reforma 625, interior 204, colonia Paseo de las Lomas, alcaldía Cuajimalpa de Morelos, postal code 01330, "Torre Lexus" (Sabag, Becker y Gerrit Cohen, Abogados), is responsible for the personal data subject to processing.

2. Definitions

For purposes of this Notice, all definitions shall have the meaning assigned to them in the Terms and Conditions available at https://sabagbecker.mx. Any other terms appearing in this Privacy Notice with an initial capital letter shall have the meaning assigned to them herein.

3. Means of Collecting Personal Data

The Data Controller may collect personal data through the following means:

1. Collected digitally through the website;
2. Collected electronically through WhatsApp;
3. Collected by telephone call;
4. Collected through an in-person conversation at our offices;
5. Collected indirectly when transferred to us by other companies that have made this Privacy Notice available to you, as well as the applicable privacy notice of the company in question.

4. Personal Data Subject to Processing

5. Purposes of Data Processing

These purposes are necessary to fulfil the contractual obligations arising from the legal relationship between Sabag, Becker & Gerrit-Cohen, through its legal representative Rubén Moya Bocanegra, and the data subjects, and are therefore not subject to consent.

Primary Purposes:

• Verification: To verify and confirm the identity of data subjects.
• Validation: To validate and confirm the personal information of data subjects.
• Advisory: Processing of data in order to provide data subjects with legal and/or professional advice by any member of Sabag, Becker & Gerrit-Cohen.
• Payment and billing management: Processing of payments, invoicing, and client administration of Sabag, Becker & Gerrit-Cohen.
• Customer service: Handling of complaints and inquiries regarding Sabag, Becker & Gerrit-Cohen.
• Judicial compliance: Where applicable, to comply with judicial and/or administrative obligations and requirements addressed to data subjects by domestic authorities.
• Technology tools: To validate the quality of information provided by data subjects through information technology and artificial intelligence tools.

Secondary Purposes:

• Statistical purposes: Preparation of reports on the types of clients seeking advice from Sabag, Becker & Gerrit-Cohen.
• Marketing and promotions: Sending information about new services, updates on legislative and regulatory changes, marketing and advertising notices, as well as information on products and services of third-party business partners of Sabag, Becker & Gerrit-Cohen that may be of interest to data subjects who have consulted the Firm for legal and/or professional matters.
• Surveys and market research: Conducting surveys and market research among data subjects who have consulted the Firm for legal and/or professional matters.

Opt-out notice: If you do not wish your data to be processed for secondary purposes, please send an email to info@sabagbecker.mx. This will not affect the provision of services.

6. Express Consent for Sensitive Data

In accordance with Article 9 of the LFPDPPP, by providing your personal, banking and/or legal information to Sabag, Becker & Gerrit-Cohen, through its legal representative Rubén Moya Bocanegra, and by continuing to use the service, you grant your express consent for your sensitive personal data to be processed in accordance with this notice.

7. Transfer of Personal Data

Your personal data will not be transferred, under any circumstances, to third parties for marketing or advertising purposes.

8. Security Measures

The Data Controller has implemented administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing. These measures include:

• Data encryption in transit and at rest (SSL/TLS).
• Access controls restricted to authorized personnel.
• Ongoing vulnerability monitoring of the Firm's database infrastructure.

9. How to Exercise Your ARCO Rights

The data subject and/or their legal representative may exercise their rights of access, rectification, cancellation, and opposition ("ARCO rights") and withdraw consent with respect to their personal data by sending an email to info@sabagbecker.mx.

To verify your identity, please include a copy of a valid official ID with your request, as well as a precise description of the personal data regarding which you wish to exercise your rights. The Firm will communicate its decision within a maximum of twenty (20) business days, and if the request is approved, it will be carried out within the following fifteen (15) business days. The response will be sent by email.

10. Limitation of Use and Disclosure of Information

The data subject or their legal representative may limit the use or disclosure of their personal data by submitting a request to info@sabagbecker.mx. If the request is approved, you will be registered on our internal exclusion list.

11. Personal Data Protection Authority

If you consider it necessary, the data subject and/or their legal representative have the right to file a complaint with the Personal Data Protection Unit of the Secretaría Anticorrupción y Buen Gobierno to assert any grievance related to their right to personal data protection and, in particular, those protected by "GGV".

12. Use of Cookies

Our website uses remote or local electronic communication mechanisms that allow us to collect personal data automatically and simultaneously when the data subject interacts with them, including Cookies and Web Beacons, to simplify navigation. Cookies are text files automatically downloaded and stored on the user's device when browsing a specific website; they allow the web server to remember certain data about the user, including browsing preferences, username, and password. Web Beacons are images embedded in a webpage or email that can be used to monitor a visitor's behavior, such as storing information about the user's IP address, duration of interaction on the page, and type of browser used, among others.

We inform you that we use Cookies and Web Beacons to obtain personal data from data subjects, including: (i) the type of browser and operating system used; (ii) the websites visited immediately before and after entering our site; (iii) the links followed and time spent on the website; (iv) IP address; (v) location from which the website is visited and browsing statistics.

These Cookies and other technologies may be disabled. You may find information about common browsers and how to adjust Cookie preferences on their respective websites. When using Cookies, the "help" button in the toolbar of most browsers will tell you how to prevent accepting new Cookies, how to have the browser notify you when you receive a new cookie, or how to disable all Cookies.

13. Changes to the Privacy Notice

The Data Controller reserves the right to update and modify this Privacy Notice in order to reflect changes in its data protection practices arising from our continuous improvement process, as well as from any legal, regulatory, and/or administrative changes that may occur. Any modifications to this notice will be communicated through our website.

Last updated: June, 2026.

By providing your data by telephone, via WhatsApp, or through an in-person conversation at our offices and requesting legal and/or professional advice from any member of our Firm, you express your consent in accordance with Article 9 of the Federal Law on the Protection of Personal Data Held by Private Parties and Article 15 of its Regulations.