Privacy Policy

COMPREHENSIVE PRIVACY NOTICE

At Laboratorios Química Son's S.A. de C.V., hereinafter referred to as "SON'S", located at 23 Poniente 2302-A, Colonia Volcanes, Puebla, Puebla, Mexico, ZIP code 72410, with contact phone number (222) 3030601 and website www.quimicasons.com.mx, we are responsible for the use and protection of your personal data, which we handle by adopting all physical, administrative, and technical security measures that we consider pertinent, taking into account all factors related to the nature of your data and their processing.

We provide you with this Privacy Notice in order to inform you about the personal data we will collect, as well as the handling, utilization, transfer, disposal, disclosure, or storage that we will give to them in strict compliance with applicable laws and regulations.

Categories of Personal Data

At SON'S, we may process the following categories of your personal data:

• Identification and Contact Information such as: name, address, email address, telephone number, marital status, CURP (Unique Population Registry Code), RFC (Taxpayer Registry Code), image on video recording.

• Health and Biometric Information such as: blood type, clinical analyses, illnesses, physical characteristics (height, weight, skin color), fingerprints.

• Employment Information such as: current employment and previous employments with contact information of current or previous employers.

• Academic Information such as: level of education, degree or professional license.

• Financial and Asset Information such as: bank statements, account number, CLABE (Banking Institution Code), credit history, tax situation, income.

• Sensitive personal data such as: information about religious beliefs, political ideologies, preferences, or sexual habits.

Purposes of Personal Data Use

At SON'S, we want you to know the specific purposes for which we will process your personal data.

The necessary purposes for the use of your personal data will be those derived from: a) the legal or commercial relationship that you may have with SON'S; b) applicable legal regulations. Likewise, additional necessary purposes may vary depending on whether you are a visitor, applicant, consumer, supplier, or client.

Visitors

• Preserve the security of our facilities.
• Maintain registration and control in the event of contingencies.

Applicants

• Evaluate and analyze information for recruitment and personnel selection.
• Prepare the necessary legal documents for the legal relationship that may be established.

Consumers

• Follow up on adverse reactions to medications.
• Report adverse reactions to medications to the corresponding authorities.
• Comply with applicable health regulations.

Suppliers and Clients

• Register in the company's system and banking system.
• Follow up on the billing and payment process.
• Prepare the necessary legal documents for the legal relationship that may be established.

Secondarily, we may process your personal data to evaluate the quality of our services and carry out advertising and commercial prospecting activities. If you do not wish your personal data to be processed for these secondary purposes, you can request it by calling (222) 3030601. Your refusal to use personal data for these secondary purposes will not be a reason for denying you the main services offered by SON'S or terminating your contractual relationship with the company.

Transfer of Personal Data

Transfer, in legal terms, means sharing. In this sense, at SON'S, we transfer your personal data to the corresponding health authorities and to any other authority or person that, by legal or judicial obligation, requires your

information. Likewise, SON'S may transfer your personal data to legally or commercially related third parties solely for the purposes described in this Notice.

By accepting this Privacy Notice, tacitly or expressly, you are authorizing SON'S to transfer your personal data to third parties when the aforementioned criteria are met. For your peace of mind, when transfers occur, the third-party recipients of your data will assume the same obligations regarding your personal data in accordance with the terms of this Privacy Notice or the applicable legislation for government entities regarding personal data.

ARCO Rights and Consent Revocation

As the owner of personal data, you can exercise your ARCO rights; revoke the consent you may have given us for the processing of your personal data; and limit the use of your personal data.

To do so, you can contact our data protection officer, Renato Sánchez Godínez, at the same address and telephone number stated in this Notice, who will provide you with our form. We will respond to your requests free of charge within a maximum period of 20 business days and may reproduce your personal data in any electronic format. We remind you that:

• ARCO rights consist of: knowing the conditions of the processing of your personal data (Access); requesting the correction of your personal information (Rectification); deleting your information from records or databases when you consider that it is not being used properly (Cancellation); objecting to the use of your personal data for specific purposes (Opposition).
• At SON'S, we will not disclose your personal data, but you can request any other limitation on its use by writing to our email address and requesting to be included in the SON'S Exclusion List.
• In the event of revocation of personal data, we may not be able to immediately cease the use of your data in all cases, as we may be required to continue processing your data due to legal or contractual obligations. You should also consider that, for certain purposes, revoking your consent may mean that we cannot fulfill our legal or commercial relationship.

Notice for Website and GDPR

It is important for you to know that any information you provide through our website, especially through our contact form (and, where applicable, our social media profiles), is subject to this Privacy Notice. We will request your consent to collect, process, and handle personal data in terms of the treatment of personal data and free movement of such data, as mentioned in the General Data Protection Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016.

Likewise, our website may contain hyperlinks to other sites that are independent of us, and when you leave our profile, we assume no responsibility for the privacy policies or legal conditions of any other entity.

It is important for you to know that any information you upload to the platform we develop on your behalf will be solely and exclusively your responsibility, and we will not be liable for its processing. This Privacy Notice does not apply to such information. Therefore, we urge you to comply with your obligations regarding third parties in terms of the Federal Law on Protection of Personal Data Held by Private Parties and all applicable national and international regulations.

Changes, Modifications, Updates

This Privacy Notice may undergo modifications, changes, or updates due to new legal requirements, our privacy practices, changes in the services offered, or other legally justified reasons. We commit to keep you informed about any changes that may occur in this Privacy Notice by providing you with the updated version on our websites www.quimicasons.com.mx, as well as at our address!