Privacy Notice

Gema Latinoamérica, S.A. de C.V., as well as its affiliates, subsidiaries, and parent company under the trade name BEYOND TECHNOLOGY (hereinafter “BEYOND”), with address at Avenue Universidad 1627, 3rd Floor, Tower A, Exhacienda de Guadalupe Chimalistac, Álvaro Obregón, Mexico City, is responsible for the processing of your Personal Data, in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and other applicable provisions governing its use and protection.

Purpose of Data Processing

The Personal Data we collect is used for the following purposes:

In general, BEYOND collects Personal Data from you that is related to or derived, directly or indirectly, from the contractual and/or commercial relationship between you and BEYOND, as well as from the performance of activities necessary to fulfill the agreed obligations.

In collecting and processing such information, BEYOND undertakes to observe and comply with the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality, and accountability.

Therefore, the data requested by BEYOND is collected lawfully, with your consent, and only includes data that is pertinent and necessary to fulfill the obligations undertaken.

Additionally, BEYOND has implemented administrative, technical, and physical security measures to protect your Personal Data, including sensitive Personal Data, in order to guarantee the confidentiality and security of the information you provide.

Your Personal Data will be compiled and stored in a database owned exclusively by BEYOND.

Clients and Prospective Clients:

The information is used for document review processes, financial analysis, credit history investigation, contact, and consultation. If approved as a client, processes include credit evaluation, completion of registration forms, system registration, file creation, contracts, purchase orders, invoicing, collection processes, contact, marketing of services and promotions, and any other activities strictly necessary to fulfill the commercial relationship.

Suppliers and Prospective Suppliers:

The information is used to validate addresses, bank account numbers, names, as well as for contact and consultation. If services are required, the data is used to register suppliers in our system, create files, contracts, purchase orders, invoicing, payment processing, contact, quotation requests, and service or promotional offers, as well as other activities necessary to fulfill the relationship.

Collaborators:

Employee information is used for contact purposes, contract execution, database registration, creation of personnel files, registration with government authorities as required by Mexican law, payroll processing, updates, training, data analysis, and any other activities necessary to fulfill the employment relationship.

To fulfill the above purposes, BEYOND may collect the following categories of Personal Data:

• Identification Data: Full name, date and place of birth, age, nationality, marital status, handwritten and/or electronic signature.
• Contact Data: Address, email, phone numbers.
• Employment and Academic Data: Position, profession, work history, last level of studies.
• Financial and Asset Data (when applicable): Banking information, commercial and credit references.
• Biometric Data: Fingerprint for access control to facilities.
• Sensitive Personal Data: Those that according to the LFPDPPP require reinforced protection and express consent.

For the purposes indicated, BEYOND states that it will only collect the data strictly necessary, pertinent and proportional for the described purposes.

We may collect your Personal Data in different ways:

• When such information is provided directly by you.
• When documents are provided such as birth and marriage certificates, proof of address and studies, military service card, identification and other official documents.
• When your fingerprint is registered to allow access to facilities.
• When we obtain information through other sources permitted under applicable legislation.

Secondary Purposes

• Marketing, advertising, commercial prospecting and offering of products or services.
• Preparation of statistical analysis, internal studies and process improvement.

The holder may oppose the processing of their data for secondary purposes by sending their request according to the ARCO Rights section.

Principles

Personal data will be processed in strict adherence to the principles established in the LFPDPPP:

1. Legality
2. Consent
3. Information
4. Quality
5. Purpose
6. Loyalty
7. Proportionality and Responsibility

BEYOND undertakes to protect personal data by adopting, implementing and maintaining appropriate administrative, technical and physical controls that guarantee its confidentiality, integrity and availability, as well as preventing any damage, loss, alteration, destruction, misuse, unauthorized access or disclosure.

Preferences Based on Interests

Some of our sites may use tools such as cookies, web beacons and other similar tracking technologies through their websites and digital platforms.

These technologies collect automatic information about the user’s browsing behavior in order to improve user experience, optimize services, personalize content, measure audiences and analyze usage trends.

The user may configure their browser to reject or delete cookies at any time; however, such deactivation could affect the proper functioning or availability of certain functionalities of BEYOND’s sites or services.

Cookies allow us to:

• Recognize when you enter our sites and offer a personalized experience.
• Know the personal settings specified by you.
• Calculate audience size and measure traffic parameters.
• Improve content, headlines and promotions.
• Track activities such as survey participation.

Cookies will not be used to identify users, except in cases where possible fraudulent activity is being investigated.

Transfer of Personal Data

BEYOND informs you that your Personal Data may be transferred and processed within and outside the country by persons different from this company in order to comply with obligations contracted with collaborators and to carry out scientific and statistical studies aimed at improving the BEYOND ecosystem.

Personal Data may be transferred without requiring additional consent when:

• Necessary for the maintenance or fulfillment of a legal relationship.
• Transferred to parent companies, subsidiaries or affiliates under common control.
• Required by a competent authority or legal provision.

Likewise, BEYOND may transfer data to:

• Parent company, subsidiaries and/or affiliates.
• Business partners and service providers.
• Third parties with a contractual relationship with BEYOND.
• Third parties in charge of data analysis and storage.

In all cases, BEYOND will require third-party recipients to comply with equivalent security and confidentiality measures.

Sensitive Personal Data

Sensitive Personal Data may only be transferred to a third party when consent is expressly granted through handwritten or digital signature, in accordance with applicable law.

Means for the Limitation of the Use or Disclosure of Personal Data

In accordance with the Law, you may exercise your ARCO Rights:

• Access: Know whether BEYOND possesses your Personal Data and how it is processed.
• Rectification: Correct inaccurate or incomplete Personal Data.
• Cancellation: Request deletion of your Personal Data after the applicable blocking period.
• Opposition: Request that BEYOND refrain from processing your Personal Data in certain circumstances.

Consent

If you do not express your opposition for your Personal Data to be transferred and processed, it will be understood that you have granted your consent for such purpose.

Consent may be revoked only if there is no pending obligation to be fulfilled.

Contact

In case you have any questions or wish to exercise any of your ARCO Rights, you may contact us through:

Office:
Avenue Universidad 1627, 3rd Floor, Tower A,
Exhacienda de Guadalupe Chimalistac,
Álvaro Obregón, Mexico City

Phone: 50107000

Email: finanzas@beyondtechnology.net

Modifications to the Privacy Notice

Any modification to this Privacy Notice will be notified through our website:

https://beyondtechnology.net/es/aviso-privacidad/

We reserve the right to make modifications or updates to this Privacy Notice at any time due to legislative changes, internal policies, service updates or market practices.

The data subject acknowledges having read and understood this Privacy Notice and grants consent for their Personal Data to be processed and transferred in accordance with the terms set forth herein.

Last update date: May 28, 2026