June 4—7, 2024
Mexico, CDMX MX

EXPO PACK’S PRIVACY POLICY

1. IDENTITY AND DOMICILE OF THE ENTITY RESPONSIBLE.

This Privacy Policy (hereinafter, the “Policy”) establishes all the terms and conditions pursuant to which EXPO PACK MÉXICO, S.A. DE C.V., commercially known as “EXPO PACK”, as will be named below, whose domicile to hear and receive notices, as well as for any other communication hereunder, is located in Homero no. 418, Third Floor, Colonia Chapultepec Morales, Alcaldía Miguel Hidalgo, Postal Code 11570, Mexico City, as Controller, shall process the personal data that concern you as owner of your personal data, in order to protect your privacy and your right to informative auto determination, pursuant to the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), its Regulation and other related legislation (collectively, the "Data Protection Legislation").

2. PERSONAL DATA THAT WECOLLECT AND HANDLE.

EXPO PACK collects and processes the personal data that are shown below, depending on your relationship with EXPO PACK:

a. If you are a guest, prospect, client and/or speaker:

i. Identification and contact information.

ii. Video and/or audio recordings.

iii. Customer service calls, e-mails and conversations.

iv. Online identifiers.

v. Financial and economic data.

vi. Employment and academic data.

vii. Demographic information.

viii. Interests, experiences and responsibilities.

b. If you are a supplier:

i. Identification and contact information.

ii. Video and/or audio recordings.

iii. Financial and economic data.

iv. Employment data.

In the event you have provided personal data of a third party to EXPO PACK, you guarantee that you have their authorization and/or consent to provide such data to us for processing in accordance with the purposes of this Policy and you are responsible for informing such person (i) the terms and purposes for which EXPO PACK will contact them; and/or (ii) as applicable, the terms of this Policy and the processing of their personal data per the terms therin.

3. PURPOSES

In EXPO PACK we treat your personal data to carry out the primary activities and procedures focused on the fulfillment of the obligations originated and arising from any commercial and/or legal relationship that we establish with you, which are:

a. For guests, prospects, clients and speakers:

i. Register in our databases and guest, visitors, prospects, clients, and/or speakers’ directories.

ii. Manage and administrate events, including payments, technical assistance and operations.

iii. Monitor and control your access to events.

iv. Manage your security in EXPO PACK’s events, including video recording of activities and the management of security incidents.

v. Facilitate the sending of invitations from our speakers to your guests for the EXPO PACK’s events.

vi. Manage the payment of services and collection activities.

vii. Manage user and password keys to authenticate the identity of speakers and VIP guests, in order to allow them to use the online services and their tools, including the Speakers’ Manual.

viii. Allow and maintain the management, administration and security of your personal data and procedures related to such activities.

ix. Provide information, communications and notifications about our services.

x. Carry out strategies and market segmentation necessary for the granting of our services.

xi. Provide advice, clarifications and customer service and save the corresponding conversations, calls and mails for registration and follow-up to such service.

xii. Perform activities and actions, whether preventive and/or corrective, necessary to comply with internal protocols and plans and/or required by law in relation to the performance, prevention and mitigation of suspected and/or confirmed cases of infectious diseases and other health contingency plans and protocols or to procure health within the Controller’s facilities, including monitoring your health, sending notifications regarding cases of such diseases in the Controller’s facilities, creating histories of persons with such diseases, with symptoms of such or vulnerable to becoming infected and determining applicable measures.

xiii. Attend legal requirements of national and international competent authorities and to fulfill the obligations arising from the legal relationship between you and the Controller.

xiv. Comply with any legal provisions and obligations, national or international, applicable to the Controller, its subsidiaries and/or affiliates, as well as to manage any legal process of these.

xv. Carry out the transfers mentioned in section 4 of this Policy.

xvi. Carry out proceedings related to corporate restructurings of the Controller, including, merger, consolidation, sale, liquidation or transfer of assets.

xvii. Complementary activities necessary for the realization of the above purposes.

b. For Suppliers:

i. Allow access to EXPO PACK´s facilities and events.

ii. Manage the information of our suppliers to keep our databases updated.

iii. Manage the relationship with our suppliers in the selection and hiring process.

iv. Management of requests for purchase orders and/or hiring.

v. Prove your identity and verify the information you provide.

vi. Integrate the files and generate your profile.

vii. Manage the payment of your invoices and/or receipt of fees.

viii. Allow the management, administration and security of your personal data and procedures related to such activities.

ix. Monitor and control the physical and logical access to EXPO PACK’s technological and security resources, including video recording of activities.

x. Perform activities and actions, whether preventive and/or corrective, necessary to comply with internal protocols and plans and/or required by law in relation to the performance, prevention and mitigation of suspected and/or confirmed cases of infectious diseases and other health contingency plans and protocols or to procure health within the Controller’s facilities and events, including monitoring your health, sending notifications regarding cases of such diseases in the Controller’s facilities and events, creating histories of persons with such diseases, with symptoms of such or vulnerable to becoming infected and determining applicable measures.

xi. Attend legal requirements of national and international competent authorities and to fulfill the obligations arising from the legal relationship between you and the Controller.

xii. Comply with any legal provisions and obligations, national or international, applicable to the Controller, its subsidiaries and/or affiliates, as well as to manage any legal process of these.

xiii. Carry out the transfers mentioned in section 4 of this Policy.

xiv. Carry out proceedings related to corporate restructurings of the Controller, including, merger, consolidation, sale, liquidation or transfer of assets.

xv. Complementary activities necessary for the realization of the above purposes.

Additionally, we will treat your personal data for other secondary purposes, which do not originate or are necessary for the commercial and/or legal relationship that we establish with you, which are:

a. For guests, prospects, clients and speakers:

i. Send you newsletters and information via instant messaging, print and electronic media about EXPO PACK’s events, invitations, promotions, services and products, as well as other fairs or events in Mexico and/or abroad from suppliers, speakers and/or sponsors that we estimate for your interest.

ii. Send you communications for marketing, advertising or commercial prospecting purposes related to EXPO PACK’s events, either through print or electronic means.

iii. Carry out market studies and for statistical purposes.

b. For Suppliers (natural persons):

i. Prepare comparative market studies.

ii. Manage the sending of communications with advertising, notices, messages, news, invitations to events and meetings, whether through printed, electronic, telephone and/or face-to-face media for advertising, promotional, commercial prospecting or marketing purposes.

In case you do not want your personal data to be processed for these secondary purposes, you can send an e-mail to [email protected], following the procedure referred to in section 5 of this Policy.

4. DATA TRANSFER TO THIRDPARTIES.

By virtue of the foregoing, EXPO PACK may transfer your personal data within the national territory or abroad, in accordance with the following:

a. To the authorities, governmental agencies or entities, in compliance with or in connection with the obligations of EXPO PACK contemplated in the applicable legislation, its subsidiaries and/or affiliates, as well as in fulfillment of the requirements made to them;

b. To authorities, government agencies or entities and notaries and public brokers when the transfer is officially required and/or necessary for the recognition, exercise or defense of a right of EXPO PACK in a judicial process;

c. To third party acquirers, arising from a corporate restructuring of EXPO PACK, including, merger, consolidation, sale, liquidation or transfer of assets, when the transfer is necessary for the maintenance or fulfillment of the relationship between you and EXPO PACK;

d. To consultants, suppliers and suppliers of EXPO PACK, when the transfer is necessary for the maintenance or performance of the relationship between you and EXPO PACK; and

e. To controlling companies an companies controlled or subject to common control with EXPO PACK, which operate under the same processes and internal policies of EXPO PACK, for purposes of centralized safekeeping of information, service provision, administrative, analytical and statistical purposes and customer registration, as well as any other administrative processes of the EXPO PACK corporate group;

f. Based on the other assumptions established in the Data Protection Legislation, which do not require your consent; y

g. To national or foreign third parties in the packaging, processing, hotel, food, services and congresses and exhibitions industries, for marketing, advertising, promotion and commercial prospecting purposes.

With exception of those mentioned in subsection g., these transfers do not require your consent. If you do not express your refusal to such transfer, which you can do from this moment by sending an email to [email protected] in accordance with the provisions of section 5 below, we will understand that you have granted us your consent.

5. PROCEDURE TO EXERCISE THEARCO RIGHTS AND REVOCATION OF CONSENT.

At all times you have the right to (i) access, rectify and cancel your personal data (hereinafter, the "ARCO RIGHTS"), (ii) revoke your consent regarding the processing of your personal data in accordance with the terms of the law; and (iii) express your refusal for the processing of your personal data with respect to the secondary and accessory purposes mentioned above. This can be done directly or through your legal representative, for which you must send an email to [email protected] entitled “Exercise of Data Protection Rights” with the information and documentation that follows:

a. Full name;

b. Email or address to communicate the answer regarding your request;

c. Official identification:

d. If applicable, the full name of your legal representative, document proving the identity of you and your representative (valid official identification with photograph) and copy of the instrument by means of official power of attorney or power of attorney signed by two witnesses, evidencing the authority of such legal representative to act on your behalf, in accordance with the terms set forth in the Data Protection Legislation.

e. Right you would like to exercise and why;

f. Clear and precise description of the personal data with respect to which you seek to exercise any of the rights;

g. Any other element or document that facilitates the location of your personal data; and

h. In case of exercising the right of rectification, the documentation that accredits the modification to your data.

Once you have sent the email to be able to exercise your rights, within a maximum period of 20 (twenty) business days counted from the moment that such request was received, you will receive the determination adopted by EXPO PACK, in order that, if it is appropriate, it becomes effective within 15 (fifteen) business days following the date on which you are notified of the response. In all cases, the response of EXPO PACK will be given to you by the same way that you have submitted your application to us. The aforementioned periods may be extended once for an equal period, as long as the circumstances of the case are justified, as foreseen in the Data Protection Legislation.

The delivery of personal data will be free of charge, you only have to cover the justified shipping costs or the cost of reproduction in copies or other formats. In the event that you repeat an application within a period of less than 12 (twelve) months, you must cover the corresponding costs in terms of the Data Protection Legislation, unless there are substantial modifications to the privacy policy that motivate further consultations.

For the reception, registration, attention and response of requests to exercise your ARCO rights and other rights provided in the Data Protection Legislation, we make available the Privacy Officer, which you can contact at the offices indicated in section 6 of this Policy.

In case the information provided in your application is wrong or insufficient, or the corresponding accreditation documents are not attached, we may request, within 5 (five) business days following the receipt of your request, that you provide elements or documents necessary to process it. You will have 10 (ten) business days to meet our requirement, counted from the day after you received it. In case of not responding within such term, the corresponding request will be deemed not filed.

6. PRIVACY OFFICER.

For any questions you may have regarding the protection of your personal data, please contact EXPO PACK’s Privacy Officer at: Homero no. 418 Piso 3, Colonia Chapultepec Morales, Alcaldía Miguel Hidalgo, C.P. 11570, Mexico City, Mexico or via e-mail to: [email protected].

7. LIMITATION OF USE AND DISCLOSURE OF INFORMATION.

To limit the use and disclosure of your personal data in accordance with the assumptions established by law, send an email entitled "LIMITATION OF DATA" to our Privacy Officer at [email protected] communicating your request and listing the information you want to limit.

Likewise, you may register in the Public Registry of Consumers of the Federal Attorney's Office (Registro Público de Consumidores de la Procuraduría Federal del Consumidor) (http://rpc.profeco.gob.mx/) to avoid receiving telephone calls with advertising communications, promotions and/or other offers of products and services.

8. MEANS BY WHICH PERSONAL DATA CAN BE COLLECTED AUTOMATICALLY.

EXPO PACK can collect personal data through its website https://www.expopack.com.mx/index.html (the “Site”), your social or through the use of automatic data capture tools. Among the automatic data capture tools used by EXPO PACK on its Site are cookies, Web beacons, and links in emails.

The personal data collected through these technologies are:

i. data on the type of browser you use;

ii. the language you use;

iii. means of identification of the session with our websites;

iv. passwords to access EXPO PACK's website;

v. access times;

vi. IP address;

vii. browser type;

viii. operating system of the computer system or device you have used to access the EXPO PACK website; and

ix. interaction with our e-mails and our website.

The correct functioning of EXPO PACK’s websites requires the enabling of cookies in your Internet browser. Cookies are small data files transferred by the website to the hard drive of your computer or mobile device when you browse our websites. In most browsers, cookies are automatically accepted by virtue of their default settings, you can adjust your browser preferences to accept or reject cookies. Disabling cookies may disable various features of the Site or may not display correctly. In case you prefer to delete cookies, you can delete the file at the end of each session of the browser.

In addition, these cookies can be disabled. To know how to do it, you can consult the following link or electronic address:

Internet Explorer: http://windows.microsoft.com/es-MX/windows-vista/Block-or-allow-cookies

- Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=es&hlrm=en&answer=95647

- Safari: https://support.apple.com/en-us/HT201265

- Firefox: https://support.mozilla.org/en-US/kb/block-websites-storing-cookies-site-data-firefox

Web beacons, also known as Internet tags, pixel tags and clear GIFs, are single-pixel (1x1) electronic images or GIFs that can recognize information that is processed on your computer, as in the case of cookies, as well as the time and date when the site and its sections are displayed. EXPO PACK uses them on their websites and in their HTML-formatted emails, alone or in combination with cookies, to collect information about the use of the Site and their interaction with email.

EXPO PACK can send emails that include links that allow EXPO PACK to know if you have activated the link and if you visited the destination website, information that can be included in your profile.

For additional information about the cookies mentioned in this section, you can visit http://www.allaboutcookies.org/es.

9. PERSONAL DATA OF MINORS AND DISABLED.

EXPO PACK does not collect or process personal data of minors, persons in an interdicted or incapacitated state and encourages parents and/or guardians to take an active role in the online activities of their children and/or their representatives. In the event that EXPO PACK considers that the personal data has been provided by a minor, a disabled person or in a person in interdicted status, in violation of this Policy, we will proceed to eliminate such personal data as soon as possible. If you are aware that such personal information has been provided by such a person, please send us an email entitled "DISABLES INFORMATION" to: [email protected], where you establish the data that corresponds to the minor or incapable so that we can eliminate them from our database.

10. AMENDMENTS TO PRIVACY POLICE

EXPO PACK reserves its right to update this Policy to reflect changes in our practices regarding data protection derived from our continuous improvement process, as well as the legal, regulatory and administrative changes that take place. We invite you to periodically review the content of the Policy in the appropriate section of the Site, where we will post any changes made along with the date of the last update.

Last update: November, 2023.