Privacy Notice

Identification of the person responsible and processing of your personal data.

In accordance with the provisions of Articles 16 and 17, Section II of the Federal Law on the Protection of Personal Data Held by Private Parties, we inform you that Créditos Forja (the "Controller"), with registered address at Avenida Arcos NO. 937 Int. 27, Col. Jardines del Bosque, CP44520, in the city of Guadalajara, Jalisco (the "Contact Address"), will process the personal data it collects from you in accordance with the terms of this privacy notice.

Purposes.

The processing of personal data, and where applicable, sensitive personal data, will be carried out for the following purposes:

1. Necessary for the legal relationship with the Controller:
2. To generate a customer database;
3. Improved control and execution of subsequent customer consultation and service processes;
4. Collect information, provide the service, and;
5. Enter into a contract for the Controller to provide its services, such as recruitment, selection, and subcontracting of personnel, among others.

Others:

1. Make transfers of your personal data to third parties in accordance with the privacy notice.

Therefore, and to achieve the purposes set out above, the following personal data will be processed: name, surname, address, telephone number (mobile and landline), nationality, country of residence, type of service required, contact name, contact telephone number, contact email address, description of the contracted service and commercial conditions, name, address and telephone numbers of the applicant, and the following financial or asset data: credit institutions in which you have bank accounts, branches, account numbers, and CLABE account numbers.

Options to limit the use or disclosure of your personal data.

You may limit the use or disclosure of your personal data by contacting the Controller in person at the address indicated above or by submitting a request to the contact email address provided.

Means to exercise rights of access, rectification, cancellation, or opposition to consent for the processing of personal data.

You may revoke your consent to the processing of your personal data in the same manner as described in the previous section for limiting the use or disclosure of your personal data. If, after revocation, you request confirmation of your consent, the Controller will respond expressly.

You have the right to: (i) access your personal data in our possession and know the details of the processing thereof, (ii) rectify them if they are inaccurate or incomplete, (iii) cancel them when you consider that they are not required for any of the purposes indicated in this privacy notice, they are being used for purposes not consented to or the contractual or service relationship has ended, or (iv) oppose the processing of them for specific purposes, as provided by law.

To exercise your rights, you must send or deliver to the Controller, either electronically, at the addresses provided or physically at the company's address, the following content:

1. Name, address and email or contact address.
2. A copy of the documents that prove your identity (copy of IFE, passport or any other official identification) or, where applicable, the documents that prove your legal representation, the original of which must be presented in order to receive the Controller's response;
3. A clear and precise description of the personal data in respect of which you seek to exercise any of the aforementioned Rights;
4. Any document or information that facilitates the location of your personal data, and;
5. If you request a correction of your personal data, you must also indicate the changes to be made and provide documentation to support your request.

The Controller will respond to your request by email or physical means to the address provided by the Owner within a maximum of 30 business days from the day the request is received. If the request is answered affirmatively or appropriately, the requested changes will be made within a maximum of 15 business days. The Controller may notify you within the time periods referred to in this paragraph of a one-time extension for a period equal to the original.

The Controller may refuse the request in cases permitted by law, and must inform the requester of the reason for such a decision. The refusal may be partial, in which case the Controller will access, correct, cancel, or object to the request in the appropriate portion.

The exercise of the rights mentioned at the beginning of this section will be free of charge. The applicant must cover the justified shipping costs or the cost of reproduction in copies or other formats and, where applicable, the cost of document certification.

Transfers of personal data.

We inform you that your personal data may be transferred within and outside the country to the following types of recipients, for the purposes indicated in each case:

Companies to which the services covered by NUVOLA or NUVOLAMOM are provided.

Companies in the same group as the Controller, companies providing marketing, advertising, and commercial projection services.

Institutions related to the provision of services by the Controller, necessary to carry out the company's purpose. The purpose of this transfer will be to fulfill the various services provided by the entity, whether physical or electronic.

Your personal data will not be transferred to third parties other than the Controller.

Changes or modifications to the privacy notice.

The Controller reserves the right to make modifications or updates to this privacy notice at any time, with the understanding that any modification will be made known to you at least 30 days prior to the date on which the modifications take effect, by publishing the notice on the website www.nuvolamom.com

In the event of a security breach occurring at any stage of the processing of personal data that significantly affects your property or moral rights, the Controller will immediately notify you of the security breach by email so that you can take the necessary measures to defend your rights. If your email address is not available, the notification will be published on the Controller's website.

Consent.

I give my consent for the transfer of my personal data in accordance with this privacy notice.

I give my consent for the treatment of my personal data, including sensitive and personal data necessary for both the relationship with the “Controller” and to use the services provided by the “Controller”.

(Refusing to process your personal data will result in the impossibility of establishing a legal relationship with the "Controller", as well as being an user of any of the services provided by it).

UPDATE DATE: November 2020.