Zumma Relaciones Institucionales S.C., (hereinafter "Zumma") with address at Homero 203, Floor 2, Polanco V Section 11560, Miguel Hidalgo, Mexico City, in compliance with the Federal Law on Protection of Personal Data Held by Private Parties, its regulations, guidelines and other relative and applicable provisions (hereinafter jointly "The Law"), informs you of its privacy policy, as well as the treatment that it will give to personal data that is collected directly through its Zumma Energy Analytics Data Room portal in www.zumma.com.mx (hereinafter the "Portal") guaranteeing that the processing of personal data that you provide through the Portal is carried out in a legitimate, controlled and informed manner, preserving your right to privacy and informational self-determination, through the use and implementation of technical, physical and administrative security measures, aimed at preventing any damage, loss, alteration, destruction, use, access or treatment not authorized.

Personal data collected

The type of information that will be collected from the user through the Portal (hereinafter the "Owner"), will be the following personal data; user name; email; phone; home; as well as at least one valid payment method (hereinafter the "Information").

Sensitive personal data

The type of information that will be collected from the user through the Portal (hereinafter the "Owner"), will be the following personal data; user name; email; phone; home; as well as at least one valid payment method (hereinafter the "Information").

Purposes

The personal data that are provided by the Owner to Zumma, will have the following purposes:

1. Subscribe as a user of the Portal, and if appropriate, have access to the products and/or services offered through it;
2. Sending reports, emails, notifications, invitations to events and advertising related to products and/or services;
3. To comply with fiscal obligations;
4. Offer products and services, through the Portal that is available to Zumma;
5. Carry out any type of collection efforts on balances pending payment as a result of the commercial relationship;
6. Carry out the charges automatically billed for your convenience.

The Owner may, according to the mechanisms established herein, deny, revoke their consent, as well as oppose the processing of their personal data for purposes that are different from those strictly necessary for the fulfillment of the established purposes.

Data transfer

Zumma will not transfer personal data. In the event of requesting a service that involves the transmission of personal data, the Owner will be requested to give his consent in order to provide the service.

Notwithstanding the foregoing, Zumma may at any time disclose and transmit Information when required by law and/or competent authority, or by considering in good faith that such disclosure is necessary to: i) comply with legal processes; ii) respond to claims that involve any content that undermines the rights of third parties; iii) protect the rights, property or safety of Zumma, its users and the general public, and; iv) when the transfer is provided for in a Law or Treaty to which Mexico is a party

Zumma may provide the Information to any authority that requires it, to interpose any means of defense in their favor, to establish protection measures against illegal activities or situations that imply risk to the safety of any person and any other activity that the law or any authority requires.

Rights of access, rectification, cancellation or opposition (A.R.C.O).

The Owner of the personal data provided to Zumma, is responsible in any case, for the veracity, accuracy, validity and authenticity of the Information provided, and undertakes to keep it duly updated.

The Owner may: i) know the personal data that Zumma has and the details of its treatment; ii) rectify her/his personal data if it is inaccurate; iii) cancel the processing of personal data when she/he considers that they are excessive or unnecessary for the purposes that justified their collection; and iv) oppose the processing of her/his personal data for specific purposes.

The Owner must consider that for certain purposes, the revocation of consent to the processing of the Information will imply that Zumma cannot continue to provide the product and/or service requested by the Owner.

At any time, the Owner may revoke the consent granted for the processing of their personal data, in order to stop its use. In case she/he need to limit the use and/or disclosure of personal data or to exercise any of her/his rights of access, rectification, cancellation or opposition (ARCO Rights), you must direct your request: (i) to the email info@zumma.com.mx, having to confirm the receipt of said document by calling 55 6378 7229, Monday to Friday from 10:00 a.m. to 6:00 p.m., on business days, as appropriate.

For the above, you must inform Zumma, clearly and precisely, the personal data that the Owner wishes to be rectified, canceled or revised, as well as the purpose for which they were provided and in general meet the requirements mentioned in article 29 of the Federal Law on Protection of Personal Data Held by Private Parties:

• Full name of the Owner, address, telephone and email account, to be able to communicate the answer to your request.
• The documents that prove the identity or, if appropriate, the legal representation of the Owner of the personal data.
• A clear, succinct and precise description of the request.
• Any other element or document that facilitates in case of, to fulfill the request and/or to issue a response to it.

Zumma will have a period of no more than 20 business days after the reception of the aforementioned request to respond to it, and a further 15 business days to exercise the right that it requests, if appropriate.

The aforementioned terms may be extended for an equal period of time, as long as the circumstances of the case justify it.

Modifications

Any modification to this document will be notified through the following means:

• Website: www.zumma.com.mx

Any change of address, telephone number, fax and/or website will be published on the aforementioned website for ten calendar days prior to the effective date of the change, and it is the user responsibility to consult this notice and its modifications.

Consent

By providing personal data through the Portal, the Owner of the information confirms and accepts that he/she has read and gives his/her consent to comply with the provisions of this Privacy Notice. Also, in the event of providing sensitive and/or personal, patrimonial and/or financial data, the consent will be obtained expressly and in writing leaving as evidence the autograph signature, electronic signature, or any authentication mechanism established for that purpose.