Privacy Notice

I (the owner of the personal data, hereinafter the "Owner") hereby unrestrictedly and expressly authorize Zuma Energía, S.A. de C.V. and/or its affiliated companies, with registered office at Torre Reforma, Paseo de la Reforma 483, 53rd floor, Colonia Cuauhtémoc, Alcaldía Cuauhtémoc, C.P. 06500, Mexico City, (responsible for the custody of personal data, hereinafter indistinctly the "Responsible" or "Zuma") to carry out the collection, access, use, exploitation, disclosure, transfer, disposition and/or storage (hereinafter each and every one of these activities jointly referred to as the "Processing") of my personal data (including my sensitive personal data) hereinafter the "Personal Data", as such terms are defined in the Federal Law for the Protection of Personal Data Held by Private Parties and its Regulations (the "Law"), by any means known or to be known, for as long as necessary in accordance with the applicable legal provisions. This authorization for the Processing of Personal Data shall be revocable by the Holder in accordance with the applicable provisions of the Law.

The Processing of Personal Data will be carried out for the Responsible to be able to compile the records applicable to its relationship with the Owner (candidates for employment positions at Zuma, employees, customers, suppliers, any type of collaborators, commercial prospects, service providers, any natural person who enters a relationship with Zuma).

The purpose of the Processing of Personal Data will be to carry out all activities necessary for Zuma to provide, including but not limited to, professional, administrative, technical, human resources, financial, operational, managerial, marketing, consulting, advisory, design, management, construction, acquisition and, in general, all activities contemplated by its corporate purpose, within the limits applicable by law.

The Processing of Personal Data will be carried out for as long as necessary for the Responsible and/or the Owner to fully comply with each one of their obligations under the contract(s), agreement(s) or any type of relationship established between the Owner and the Responsible for the time agreed upon and for the additional time provided for in accordance with the applicable legal provisions.

The Processing of Personal Data will be carried out solely and exclusively by the following persons: the Responsible, its partners or shareholders, its administrators, managers, employees and attorneys-in-fact, its consultants, counterparties in bilateral and multilateral contracts and representatives, as well as its related companies, being understood as such each and every one of the companies that belong to the same corporate group of the Responsible, including the partners or shareholders, administrators, managers, employees, attorneys-in-fact, consultants and representatives of such companies.

By accepting the terms of this Privacy Notice you expressly authorize the Responsible to transfer your Personal Data to such third parties, whether domestic or foreign. Any transfer of data will be subject to the purposes indicated in this Privacy Notice. However, you are hereby informed that the Responsible has the necessary means and security measures to protect and limit the use or disclosure of your Personal Data.

It is established that the Holder of the Personal Data will have the rights of Access, Rectification, Cancellation or Opposition (ARCO) in accordance with the legal provisions.

In order to enforce these rights, the Personal Data Holder shall follow the procedure described below: The request for access, rectification, cancellation or opposition must be made in writing and addressed to Zuma Energía, S.A. de C.V. and/or its affiliated companies, domiciled at Torre Reforma, Paseo de la Reforma 483, 53rd floor, Colonia Cuauhtémoc, Alcaldía Cuauhtémoc, C.P. 06500, Mexico City, with contact telephone: +52 (55) 5280-6207, and e-mail: avisoprivacidad@zumaenergia.com, attention: Legal Department. The request must contain and be accompanied by the following: (i) the name of the Owner and contact information to communicate the response to the request; (ii) the documents proving the identity or, if applicable, the legal representation of the Owner; (iii) a clear and precise description of the Personal Data with respect to which the Owner seeks to exercise any of the aforementioned rights; (iv) any other element, reference or document that facilitates the location of the Personal Data; (v) if applicable, the modifications to be made and provide the documentation supporting the request.

The Responsible will communicate to the Owner, within a maximum period of 20 (twenty) business days from the date on which it receives the corresponding duly integrated request, the determination adopted, so that, if appropriate, the same becomes effective within 15 (fifteen) business days following the date on which the response is communicated to the Owner.

In accordance with the provisions of the Law, the terms may be extended once for an equal period of time, provided that the circumstances of the case so justify. This Privacy Notice may undergo modifications, changes or updates derived from new legal requirements; from our own needs for the services we offer; from our privacy practices; from changes in our business model, or from other causes for which we commit to keep you promptly informed through our website at the following electronic address: http://www.zumaenergia.com/policy-privacy where for a period of 30 (thirty) calendar days prior to the effective date of the modification, the two versions of the Privacy Notice will coexist so that if the Holder does not agree with the modifications, he/she can make use of his/her right to oppose in the aforementioned terms.