Comprehensive Privacy Notice

1. Identity and address of the controller

The controller of your personal data is Iván Erick Tlatecatl Morales, with address C. 2 Sur 308, La Santísima Trinidad, 72810 San Andrés Cholula, Pue., and contact email info@cmuindust.com (the "Controller").

The Controller is responsible for collecting, using, and protecting the personal data you provide through this website, in accordance with the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality, and accountability established by law.

2. Personal data we collect

Through this website's contact form, we collect directly and by electronic means only the following personal data:

• Full name.
• Company or organization.
• Email address.
• Any information you voluntarily include in the message field, as well as the selected interest type (NDA, licensing, acquisition, integration, or technical conversation).

We do not collect sensitive personal data, nor financial or asset-related data, through this site.

3. Purposes of processing

Primary purposes (necessary)

Your data is used for the following purposes that give rise to and are necessary for the relationship with you:

• To handle, follow up on, and respond to your request for information, NDA, licensing, acquisition, or integration.
• To contact you by electronic or telephone means to coordinate technical conversations, due diligence, or IP transfer discussions.
• To identify and qualify the requester as a potential counterparty or partner.
• To comply with obligations arising from the relationship that may be established.

Secondary purposes (optional)

We currently do not use your personal data for secondary purposes, such as sending institutional updates, newsletters, or promotional communications. If this changes in the future, this notice will be updated accordingly. This does not affect the primary purposes necessary to respond to your request.

4. Consent

By providing your personal data through this website form and submitting your request, you acknowledge that you have read this Privacy Notice and grant your consent for the processing of your data in accordance with the purposes described herein. Consent may be revoked at any time in accordance with section 6.

5. Transfers of personal data

The Controller will not transfer your personal data to third parties without your consent, except in the cases expressly allowed by law (for example, when the transfer is provided for in a regulation, is necessary for the administration of justice, or takes place between companies within the same group under common policies).

If the Controller needs to transfer data to third parties outside the cases above (for example legal counsel or specialized service providers strictly necessary to process your request), you will be informed and, when required by law, your consent will be obtained.

6. Means to exercise ARCO rights and revoke consent

You have the right to know what personal data we hold about you, what we use it for, and the conditions of its use (Access); to request its correction if it is inaccurate or incomplete (Rectification); to have it deleted from our records when you consider it is not being used in accordance with applicable regulations (Cancellation); as well as to object to the use of your data for specific purposes (Opposition). These are known as ARCO rights.

To exercise any of these rights, or to revoke your consent, send a request to info@cmuindust.com indicating:

• Name of the data subject and means to communicate the response.
• Document proving identity (or legal representation, if applicable).
• Clear and precise description of the right you wish to exercise or the specific request.
• Any element that helps locate the personal data.

The Controller will respond to your request within the time limits established by applicable law.

7. Means to limit the use or disclosure of your data

You may request that we limit the use or disclosure of your personal data by sending your request to info@cmuindust.com. Additionally, any communication you receive from us will include a mechanism to request that you stop receiving it.

8. Use of cookies and tracking technologies

This site does not use cookies or tracking technologies that automatically collect personal data.

9. Changes to the Privacy Notice

This Privacy Notice may be modified due to legal changes, internal practice updates, or new requirements. Any change will be published on this same page, indicating the date of the last update. We recommend reviewing it periodically.

10. Data protection authority

If you believe your right to personal data protection has been violated, you may contact the competent authority in Mexico regarding the protection of personal data held by private parties.