INTEGRAL PRIVACY NOTICE FOR CANDIDATES OF KUESKI, S.A.P.I. DE C.V., SOFOM E.N.R.

Pursuant to the Federal Law on the Protection of Personal Data Held by Private Individuals (Ley Federal de Protección de Datos Personales en Posesión de Particulares) (“LFPDPPP” by its Spanish acronym), its Regulation, the Privacy Notice Guidelines, and any other applicable legal dispositions (hereinafter jointly referred to as the “Law”), this Privacy Notice is issued in the following terms:

A. PROCESSOR OF THE PERSONAL DATA

For the purposes of this Privacy Notice, Kueski, S.A.P.I. de C.V., SOFOM E.N.R. (hereinafter the “Processor” or “Kueski”, indistinctly), with address at Av. Américas 1297, Piso 03-15, Col. Circunvalación Américas, Guadalajara, Jalisco, México. C.P. 44630, is the Controller in terms of the Law of obtaining, disclosing, storaging, and/or using, including the accessing, handling, exploiting, transferring or disposing (hereinafter “Processing”) your personal data gathered from you as a candidate to an open job position at Kueski (hereinafter the “Data Subject(s)”)

B. PERSONAL DATA COLLECTED AND ITS TREATMENT

Kueski will gather your personal data throughout the following ways:

1. Personally:When you provide your personal data in a physical and personal manner in order to start or to manage the procedure for an open job position at Kueski.
2. Directly:When you provide your personal data for the purposes of applying to an open job position at Kueski, whether by email, telephone or through our website.
3. Indirectly:From any other public available source of information and/or allowed by the Law. As well as from any public or private recruiting event to which you assist as a candidate or from private entities to which you authorize the transference of your personal data according to the purposes described below.

The types of the personal data that are collected are the following:

a) Identification data.

b) Biometric data.

c) Academic data.

d) Property data.

e) Employment data and work references.

f) Financial information.

g) Personal references.

The types of the sensitive personal data that are collected are the following:

a) Health data.

b) Immigration data.

For the purpose of referring a third person, you will be responsible of notifying him or her of the transfer of his or her personal data to the Processor. Likewise, Kueski will process such information pursuant to the Law.

C. PURPOSES TO WHICH THE PROCESSING OF THE PERSONAL DATA IS SUBJECT

The processing of your personal data, including the sensitive personal data gathered, has the primary purposes of:

1. Recruitment.
2. Placement.
3. Identification of risks while hiring.
4. Notifications of changes in hiring conditions.
5. Attend legal requirements from competent authorities.
6. Request work references to third parties.
7. Analyze and research for socioeconomic studies.

The purposes described above, gave birth to and are necessary for you hiring process.

Additionally, Kueski could use your personal data for the secondary purpose described below:

1. Notification of contests.
2. Referrals campaigns.
3. Invitation to recruitment events.
4. Mailing of articles and information of interest.

If you don’t want Kueski to use your personal data for this additional purposes and/or you want to update your previous consent, please follow the instructions in section H.

In case you wish to revoke your consent for any of the primary purposes, it is necessary for you to follow the procedure set for in section F, applicable to ARCO rights. In which case, we make of your knowledge that said revocation will imply that Kueski won’t be able to move forward with you present or future recruitment process.

D. OPTIONS AND MEANS THAT KUESKI PROVIDES FOR THE DATA SUBJECTS TO LIMIT THE USE OR DISCLOSURE OF THEIR PERSONAL DATA

You can limit the use of your personal data by following the instructions in section C; the disclosure in section G; or addressing the corresponding request to exercise the your ARCO rights to the Legal and Compliance department accordingly with the guidelines in section F.

E. AUTOMATIC MEANS TO COLLECT PERSONAL DATA

Kueski only uses cookies and/or web beacons to facilitate the navigation on its websitehttps://kueski.com/. It is not necessary to log-in in the home page in order to send your application to any of the job openings in the web pagehttps://kueski.com/careers.

F. MEANS TO EXERCISE THE DATA SUBJECT’S ARCO RIGHTS

With the purpose of protecting the personal data, privacy and trust of the data subjects, Kueski offers you the emailarco@kueski.comwhere, at anytime, you can limit the usage or disclosure of your personal data. Additionally you can deny or withdraw your authorization for the processing of your data by exercising your rights of access, rectification, cancellation and objection (ARCO rights) according to the Law.

For exercising your ARCO rights, you must request the application form via email to the addressarco@kueski.com. Then you should fill the form and send it back to the same account. Our department of Legal and Compliance will attend this petition.

The request must contain the following:

a) The data subject’s name and his or her personal email, or any other mean for Kueski to communicate the response of the request;

b) Any document that can prove the identity, or in such case, the legal representation of the data subject;

c) A clear and precise description of the personal data that the data subject is trying to exercise any of the rights described above, and;

d) Any other document or element that makes the localization of the personal data easier.

Kueski will inform you the decision taken, in a period of time of twenty business days top, starting on the day Kueski received the petition. Given the case where the request proceeds, this one will be effective on a period of time no longer than fifteen business days after the date in which the Processor informed the answer.

If the information provided in the application was incomplete, inaccurate or out of date, or was not accompanied by the necessary documents to prove your identity or the correspondent legal representation or any other necessary document to exercise your rights, the Processor, within five business days after the reception of your application, will ask you to complete and/or correct the deficiencies in order to continue the process of your request. You will have ten working days to attend this petition starting the day after you received it. If you fail to rectify the information within this period, your request will be considered as not issued.

G. TRANSFER OF YOUR PERSONAL DATA

Kueski could transfer or send your personal data to:

Third parties and the receiver entities of the personal data, will assume the same obligations and/or responsibilities as Kueski, according to the information described in this Privacy Notice.

H. WITHDRAWAL OF CONSENT

At any given time, you can withdraw or update your consent for the processing of your personal data for any of our secondary purposes, by entering to the followingapplication formand choosing the corresponding checkboxes. the refusal regarding the processing of your personal data for these purposes will not affect your recruitment process with Kueski.

I. CHANGES TO THE PRIVACY NOTICE

Any change to this Privacy Notice, will be informed to you throughout the email account that you provided to the Processor when you gave your personal data.

Last update date: March 2022.