Intent of the Privacy Notice

This Privacy Notice is made available to you with the intention that the Owner is aware of the treatment that will be given to them, as well as the precise information to exercise their rights of access, rectification, cancellation and opposition (hereinafter "Rights"). ARCO (Access, Rectification, Cancellation, and Opposition) -”), which are described below:

1. Right to access your personal data held by Daaq Interiores, except in the cases mentioned in the Law.
2. Right to rectify your personal data when they are inaccurate or incomplete.
3. Right at any time to cancel your personal data, Daaq Interiores may refuse to cancel the data under the terms established by law.
4. Right at any time and for legitimate reasons to oppose the treatment.

It is important to inform you that the Federal Law on Protection of Personal Data Held by Private Parties protects your personal information from unauthorized use and without your consent, so this document will make known the information we collect from the Owner, for what and how we use it, possible transfers to third parties, the purposes of data processing, your rights. ARCO (Access, Rectification, Cancellation, and Opposition) , as well as the revocation of your consent, which the Owner can exercise before Bracco Interiorismo in order to have full control and decision over your personal data. For this reason, we recommend that you read the following information carefully:

This Privacy Notice is applicable to the Holders of Personal Data obtained directly, indirectly or personally by ARCO (Access, Rectification, Cancellation, and Opposition) , through product purchase-sale processes, contracts, letters, requests for information, as well as the different forms contained in the Company's Website “ www.bracco.com.mx ” (hereinafter the Company's Website) or any other means specified for such purposes, which refer to this Privacy Notice.

Personal Data

Personal Data is provided through the creation of an Account or User Registration, and/or by sending a contact request through the contact form on the customer service page. The Company collects personally identifiable information that is voluntarily provided by the User, or in response to explicit requests by the Company.

The information must be true and complete. The user will be responsible at all times for the data provided and under no circumstances will Daaq Interiores be responsible for the veracity of the same.

The requested information is as follows: Name, Address, Date of Birth, Gender, Transactions, Email Account, Telephone Number(s), Tax Data for Invoicing, Bank Card Number, and Bank Account Identifiers.

Daaq Interiores does not request Sensitive Personal Data on the Website it manages.

Cookies

The User of the Company's Website knows and accepts that the Company may use a tracking system through the use of cookies (the "Cookies").

Cookies are data files stored on the hard drive of a user's computer or electronic communications device when browsing a website, which allows the exchange of status information between said website and the user's browser. Status information may reveal means of session identification, authentication or user preferences, as well as any data stored by the browser regarding the website.

Cookies are used to understand the interests, behavior and demographics of visitors to the Website and thus better understand their needs and interests and provide them with better service or related information. We also offer certain functionalities that are only available through the use of Cookies.

We will also use the information obtained through Cookies to analyze the pages visited by the visitor or User, the searches performed, improve our commercial and promotional initiatives, display advertising or promotions, banners of interest, improve our offer of content and articles, personalize said content, presentation and services.

Cookies are also used so that the User does not have to enter their password so frequently during a browsing session, also to count and corroborate records, User activity and other concepts and commercial agreements, always having as the objective of the installation of the Cookies, the benefit of the User who receives it, and will not be used for other purposes outside the Company.

It is established that the installation, permanence and existence of Cookies on the User's or visitor's computer depends on his or her exclusive will and can be eliminated from his or her computer whenever he or she so wishes. To know how to remove Cookies from the system, it is necessary to review the Help section of the browser. Also, Cookies or other similar systems installed by third parties can be found on certain pages of our Site. The Company does not control the use of Cookies by third parties.

If you want to learn more about cookies, go to PAGE WEB.

The Company also uses Web Beacons when the user is using the Page. Web Beacons are visible or hidden images inserted within a website, which are used to monitor the user's behavior on these media, such as storing information about the user's IP address, duration of interaction time on said page and the type of browser used, among others.

Protection

The security and confidentiality of the data that users provide when contracting a service or purchasing a product online will be protected by a secure server under the Secure Socket Layer (SSL) protocol, so that the data sent will be transmitted encrypted to ensure its protection.

To verify that you are in a protected environment, make sure an “S” appears in the “httpS”:// navigation bar.

However, despite the fact that we have more secure tools every day, the protection of data sent over the Internet cannot be guaranteed 100%; therefore, once received, every effort will be made to safeguard the information.

To ensure that personal data is treated in accordance with the provisions of the Law, Bracco Interiorismo complies with the following principles:

1. You will be informed of the purposes for which your personal data will be processed, collecting only the data necessary to fulfil these purposes and they will not be used for any purpose other than that established in this privacy notice.
2. Appropriate maintenance will be carried out to ensure that your personal data is correct and up-to-date. If it is necessary to retain your data, it will be in accordance with the provisions of the applicable Law.
3. Security measures have been implemented to ensure the protection of your personal data.

Databases

The Company's Database, where the information collected is stored, will keep the Information provided by the Owner saved and protected, even if it is modified, updated, or even cancelled for any reason. The above is done in order to maintain a History of the Owner and protect their legal interests. The conservation of information indicated in this paragraph may be deleted or eliminated in its entirety by exercising the Rights ARCO (Access, Rectification, Cancellation, and Opposition).

To unsubscribe from our newsletters, please click the following link located within our emails: “Unsubscribe from this list”.

Purposes of Personal Data Processing

Personal Information is collected and stored for purposes of

• Identification and certainty of the Website User;
• Operation, management, shipment of goods, returns, billing, collection, administration, provision of our services;
• Delivery of notifications, requests, letters or newsletters or attention to your requests related to the services we provide;
• Help complete a transaction or order that has been initiated on the website;
• Analysis of User behavior and demographics;
• Improve our commercial and promotional initiatives (marketing);
• Send information or messages about new products and/or services, information from our business partners, as well as any other information;
• Display advertising or promotions of interest to our Users;
• Transfer of the Owner's information in applicable cases in accordance with the section “Transfer of Information with Third Parties” of this Notice;
• Prevention or reporting to different authorities of illegal acts or events;

Comply with the exercise of rights ARCO (Access, Rectification, Cancellation, and Opposition) as well as revoke the consent of the Owner.

With the above, the Company can provide an efficient service to the User.

The purposes are necessary for the fulfillment of the obligations and the relationship with the Owner, that is, for the Company to provide an efficient service to the User, this being the main obligation and which gave rise to the Legal Relationship between the Company and the User.

The collection of information allows the Company to offer services and functionalities that are better suited to the User's needs. It also allows the Company to send the User, by different means and channels (including conventional or electronic mail, SMS, MSM, electronic notifications), offers of products and services that may be of interest to the User, in addition to fulfilling its obligations by these means.

The Company reserves the right to request any additional proof and/or information in order to corroborate the personal data of each User, as well as to temporarily or permanently suspend those Users whose data could not be confirmed.

The User acknowledges that the User account or Registration is personal, unique and non-transferable, and it is prohibited for the same User to register or have more than one account. In the event that the Company detects different accounts that contain matching or related data, it may cancel, suspend or disable them. The User will be responsible for all operations carried out in his/her account, since access to it is restricted to the entry and use of his/her personal password, which is the exclusive knowledge of the User. In the event that the account is suspended, the Company will store the User's personal data, so that the User and the Company will continue to be subject to the provisions of this Privacy Notice.

In the event that the User's information at the time of registration is incorrect or incomplete, making it impossible to verify and identify the User, the Company shall have the right to immediately suspend the provision of Services through the Website, without prior notice, with the User being liable at all times for any losses and damages ultimately suffered.

Confidentiality

The data of the Data Subjects will be provided only by the Company in the forms established in this Privacy Notice. The Company will do everything in its power to protect the privacy of the information. It may happen that, by virtue of court orders or legal regulations, the Company is compelled to reveal information to authorities or third parties under certain circumstances, or in cases where third parties may intercept or access certain information or data transmissions, in which case the Company will not be liable for the information that is revealed. In these cases, the Company will notify the Data Subject of this situation.

We do not assume any obligation to keep confidential any other information that the Owner provides through newsletters and online chats, as well as information obtained through cookies, information that has not been directly provided to the Company.

It should be noted that the Owner's information is NOT sold, given away, provided or rented to any third party. If the user does not wish for their data to be shared, they can decide NOT to use a particular service or NOT to participate in certain promotions or contests.

The Company will take all possible measures to maintain the confidentiality and security described above, but will not be liable for any damages or losses that may arise from the violation of these measures by third parties who use public networks or the Internet, altering security systems to gain access to the information of the Holders.

Any security breaches occurring at any stage of processing that significantly affect the property or moral rights of the Data Subjects will be immediately reported by the Company to the Data Subject, so that the latter may take appropriate measures to defend his or her rights.

Transfer of Information to Third Parties

The Owner expressly authorizes the Company to keep in its registry the information provided by the Owner, and also authorizes the Company to provide constant information about the aforementioned registry to (i) authorities that request it as permitted by current legislation and (ii) to its strategic, commercial or technical partners in order to offer better conditions for Promotions and/or User content. In addition, the User expressly allows the Company to collect information for traffic monitoring, with the intention of identifying groups and user profiles, as well as for advertising targeting purposes.

Data Transfers are for lawful purposes and in accordance with the provisions of the Law on the Protection of Personal Data Held by Private Parties.

The Company declares that it will not transfer any type of information of the Owner to national or foreign Third Parties. Otherwise, the Owner will be informed by publishing a new Privacy Notice. The above in accordance with the provisions of article 36 of the Regulations of the Law on the Protection of Personal Data Held by Private Parties.

Transfer in special circumstances

If there is a sale, merger, consolidation, change in corporate control, transfer of substantial assets, reorganization or liquidation of the Company, then we may transfer or assign the information collected on this Website to one or more relevant parties, in addition to obligating us to issue a new Privacy Notice updated to reflect the internal changes suffered.

Data Transfer

The Company declares that it may communicate personal data of the Owner with the Processor, within or outside the national territory in terms of the provisions of the law or the Regulation.

The Data Controller is a natural or legal person, public or private, outside the organization of the Company, who alone or jointly with others, processes personal data on behalf of the Company, as a result of the existence of a legal relationship that links it to the Company and delimits the scope of its action for the provision of a service.

This data transfer is to fulfill the purposes specified in the processing, which are directly related to the fulfillment of the contractual or extra-contractual objects and relationships with the Company.

The processing of data in this referral is subject to the following terms agreed between the company and the person in charge:

1. Process personal data only in accordance with the Company's instructions;
2. Refrain from processing personal data for purposes other than those instructed by the Company;
3. Implement security measures in accordance with the Law, Regulations and other applicable provisions;
4. Maintain confidentiality regarding the personal data processed;
5. Delete the personal data being processed once the legal relationship with the Company has been fulfilled or upon instructions from the Company, provided that there is no legal provision requiring the retention of personal data;
6. Refrain from transferring personal data.

The exercise of the Holder's rights ARCO (Access, Rectification, Cancellation, and Opposition) or any other right indicated in the law or regulation, will be in accordance with this Privacy Notice.

Limitation of use or disclosure of Personal Data

In order for the User to exercise his/her right to limit the use or disclosure of Personal Data, but with the intention of continuing to use the services provided by the Company, the user must state this in writing to the following email address: contacto@daaqinteriores.com.mx. Said writing must contain the following:

• The name of the owner and email where you will receive the response.• Addressed to the Company.

  • Customer registration or account with the Company to prove your identity or the relationship you have with the Company.

  • A clear and precise description of the data that you wish to limit the use or disclosure of.

Daaq Interiores will have a period of 20 working days to respond and, if applicable, execute the limitation of use. In this response, it will give the resolution and the possibility of carrying out what was requested in the Written Letter, without prejudice to the possibility of exercising its other rights.

ARCO Rights (Access, Rectification, Cancellation, and Opposition)

The Owner has the right, personally or through a Representative, to request from the Company, at any time, access, rectification, cancellation or opposition, with respect to the personal data stored in the Company's Database.

The legal framework applicable to this request is found in Chapter IV of the Federal Law on the Protection of Personal Data (articles 28 to 35), by Chapter VII Sections I to V of the Regulations of the Federal Law on the Protection of Personal Data (articles 92 to 111), and by the Guidelines of the Twenty-Fifth, Twenty-Eighth, Twenty-Ninth and Thirtieth Privacy Notice.

The application must be in writing with the following requirements:

• The name of the owner and address or other means to communicate the response to your request.
• Documents proving identity (a copy of a voter registration card, for example) or, where applicable, legal representation of the holder. Identification documents must be official.
• A clear and precise description of the personal data for which you wish to exercise any of the rights of access, rectification, cancellation or opposition to the same.
• If applicable, the modifications to be made and provide the documentation supporting your request.
• Any other element that facilitates the location of personal data.
• That the letter is addressed to the Company.

The Request will be sent to the Committee or the Personal Data Officer via email clientes@bracco.com.mx, and internally it will be sent to the person who receives and answers these requests.

The Company will notify the Holder, via the email from which the request came, within a period of 20 (twenty) business days from the date on which the request for access, rectification, cancellation or opposition was received, the decision adopted. The moment in which the request is received is the moment in which it has entered our server.

Once the response has been sent within the specified period, the Company will have 15 (fifteen) business days to execute the Access, Rectification, Cancellation or Opposition of the personal data in accordance with the request or similar rights.

Daaq Interiores requests that the User update their data whenever there is any change, as this will allow us to provide an efficient and personalized service.

When the data is no longer necessary for the fulfillment of the purposes set forth in this privacy notice and the applicable legal provisions, it must be cancelled, blocked and deleted by operation of law.

Procedures for blocking and deleting personal data

Once the data has been deleted, the Company will retain the personal data of the Owner for one more month, for the purposes of clarification and preparation for deletion. Once this period has expired, the Company will permanently delete the personal data of the owner, without having the opportunity to locate or contact the owner, and all files related to the owner will be eliminated from the database and discarded. If the owner were to carry out another act with the company, he must begin it as if the relationship had never existed.

The above, observing what is indicated in the Privacy Policies for the purposes of preserving information by operation of law or authority.

Personal data whose purposes have been fulfilled but which cannot be cancelled or deleted by operation of law or contract will be blocked from the purposes for which they were processed until they can be deleted. During this period, personal data may not be processed.

Privacy of minors

Daaq Interiores does not intentionally collect information from minors, so parents and guardians are advised to carry out the activities of purchasing products or registering on the Website themselves.

Consent

The User declares that by using the page, providing his/her Personal Data, or by directly performing contractual or extra-contractual transactions with Daaq Interiores, he/she has already read this notice and agrees to the provisions set forth therein. The User agrees to this Privacy Notice, in accordance with the Law on the Protection of Personal Data Held by Private Parties.

Revocation of consent

Consent may be revoked at any time without retroactive effect. To revoke consent, the User must send a Request, which must be in writing with the following requirements:

• The name of the holder and address or other means to communicate the response to the request.• Documents proving identity (copy of voter ID, for example) or, where applicable, the legal representation of the holder.

IDs must be official.

• A clear and precise description of the relationship that the User has with the Company.

• Provide documentation supporting the User's request.

• That the letter is addressed to the Company.

• Verify that the relationship you have with the Company has ended.

The Company will issue a response confirming the revocation of consent, or, where appropriate, indicating the reasoning depending on the specific case, with the company having 15 days to issue this response. The deadlines will be counted from the moment the email enters the Daaq Interiores server.

Any request subsequent to that mentioned in the previous paragraph will have the same effect as an initial request, with the User and the Company being bound by the same deadlines indicated above.

The Application will not be valid if the above is omitted.

Modifications to the Privacy Notice

The Company, as well as the User, acknowledge that this Privacy Notice is of unlimited validity. However, the Company will endeavor to keep this Notice updated.

Daaq Interiores reserves the right to make changes to these Privacy Policies at any time and adapt them to new legislation, jurisprudence, internal policies, new requirements for the provision or offering of our services or products, as well as market practices. It is the User's responsibility to periodically read the terms and conditions of this Privacy Notice to be aware of such changes, which will automatically come into effect when they are introduced on the Website.

Any amendments to the Privacy Notice will be made known to the User through a notice on the Home Page of the Company's Website.

Disclaimer

The Website may contain links, hyperlinks or hypertext links, banners, buttons and/or Internet search tools that, when used by users, transport them to other portals or Internet sites that may be owned by third parties. Daaq Interiores does not control such sites nor is it responsible for the Privacy Notices they contain, or the personal data that users may provide through these portals or Internet sites other than the Website, which should be verified in the Privacy Notice on each site accessed.

The Company may also provide social media features on the Website that allow you to share information from the Website on your social networks and interact with Daaq Interiores on various social media sites. The use of these features may involve the collection or sharing of information about the Owner, which will depend on each specific feature. We recommend that you review the settings and privacy policies of the social media sites with which you interact.

Final provisions

This document is an integral part of the Terms and Conditions of Use of the Website Daaq Interiors , which constitutes a legal agreement between the User and the Company. If the User uses the services of the Site  Daaq Interiors , means that you have read, understood and agreed to the terms set out above.

If you agree to have read this Privacy Notice and do not express your opposition to your personal data being processed or transferred, it will be understood that you have given your consent to do so.

This Privacy Notice shall be governed by and construed in accordance with the laws of Mexico.

If the User considers that his/her rights regarding the protection of personal data have been violated, he/she has the right to go to the corresponding authority to defend his/her exercise of his/her rights. The authority is the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI), whose website is: www.inai.org.mx.