Industrial Marítima de Veracruz S.A. de C.V., better known as INDUMAR, with registered address in Veracruz, Ver., Mexico, and website www.indumarver.com, is responsible for the use and protection of your personal data, and in this regard we inform you of the following:

For what purposes will we use your personal data?

We will use the personal data we collect from you for the following purposes, which are necessary for the service you request:

• To register you as a customer, supplier, and/or collaborator of our products and/or services;
• To provide the services and/or products that Industrial Marítima de Veracruz S.A. de C.V. markets;
• To respond to and process the request(s) you have made and, therefore, manage the relationship you wish to establish with Industrial Marítima de Veracruz S.A. de C.V., or the relationship already established between you and the company itself;
• For administrative purposes with service providers, internal areas of the company, and/or all matters related to the performance of related contractual obligations and legal obligations, such as accounting or tax obligations. Additionally, we will use your personal information for the following secondary purposes that are not necessary for the requested service, but which allow us to provide you with better service:
• To inform you about changes and new developments in the product and/or service line, prices, availability, and payment terms;
• To find out your opinion about the quality of the services provided by the company;
• Marketing or advertising;
• Commercial prospecting. If you do not want your personal data to be processed for these secondary purposes, you can notify us of this at any time by sending an email to info@indumarver.com. Refusal to allow your personal data to be used for these purposes will not be a reason for us to deny you the services and products you request or contract with us. What personal data will we use for these purposes? To carry out the purposes described in this privacy notice, we will use the following personal data:
• Identification data
• Contact details
• Employment details
• Academic details
• Asset and/or financial details
• Video surveillance when visiting the facilities
• Images collected by video surveillance cameras. The images and sounds recorded by video surveillance cameras will be kept for a maximum period of ninety days and will then be deleted, unless otherwise required by court order, legal provision, and/or regulation. With whom do we share your personal information and for what purposes? We inform you that your personal data is shared within and outside the country with the following persons, companies, organizations, or authorities other than us, for the following purposes: security and the safety of other persons within the facilities of the responsible party will be used for this purpose, as well as for its customers, suppliers, candidates, and employees.

With regard to transfers that require your consent, if, after reading this privacy notice, you do not express your refusal to allow them to take place, we will understand that you have given us your consent. We provide you with the following mechanism so that, if necessary, you can inform us of your refusal to allow such transfers to take place: Send an email to info@indumarver.com

How can you access, correct, or delete your personal data, or object to its use?

You have the right to know what personal data we hold about you, what we use it for, and the conditions under which we use it (Access). You also have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to have it removed from our records or databases when you believe it is not being used appropriately (Cancellation); as well as to object to the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights.

To exercise any of your ARCO rights, you must submit the respective request via email to info@indumarver.com or by sending a letter to the company’s address indicated in this document.

With regard to the procedure and requirements for exercising your ARCO rights, we inform you of the following:

a) By what means can the owner and, where applicable, their representative, prove their identity, as well as the latter’s legal status?

By sending an email to info@indumarver.com

 b) What information and/or documentation must the request contain?

Name of the owner, address, and email address to communicate the response to your request; Official documents proving your identity (IFE, passport, or professional license) and, if the owner is not the one submitting the request, a document proving the existence of representation along with the official identification of the owner and legal representative; A CLEAR and PRECISE description of the personal data for which you wish to exercise any of your ARCO rights, which right you wish to exercise and the reasons why you wish to exercise it; Any other element or document proving that your personal data is owned by Industrial Marítima de Veracruz S.A. de C.V. If requesting a correction of data, the modifications to be made shall also be indicated and the documentation supporting your request shall be provided.

 c) How many days will it take us to respond to your request?

20 business days from the date of receipt of your request.

d) How will we communicate our response to your request?

The response may be sent by email to the address indicated in your request.

 e) In what formats can the personal data you request be reproduced?

Simple copies or electronic documents.

 f) We provide you with the following forms or systems to facilitate the exercise of ARCO rights:

By email or by writing to the Personal Data Privacy Department.

The contact details of the person or department responsible for processing ARCO rights requests are as follows:

Name of the personal data department:

Personal Data Privacy Department

Email: info@indumarver.com

Phone: +52 (229) 932 85 47 / 932 32 39.

You may revoke your consent to the use of your personal data.

You may revoke any consent you may have given us to process your personal data. However, it is important to note that we may not be able to comply with your request or terminate use immediately in all cases, as we may be required by law to continue processing your personal data. You should also bear in mind that, for certain purposes, revoking your consent will mean that we will no longer be able to provide you with the service you requested, or that your relationship with us will be terminated.

To revoke your consent, you must submit your request by email to info@indumarver.com or by writing to the company’s address indicated in this document.

With regard to the procedure and requirements for revoking your consent, we inform you of the following:

1. a) By what means can the owner and, where applicable, their representative, prove their identity, as well as the latter’s legal status? By email to info@indumarver.com

1. b) What information and/or documentation must the request contain?

Name of the owner, address, and email address to communicate the response to your request; Official documents proving your identity (IFE, passport, or professional license) and, if the owner is not the one submitting the request, a document proving the existence of representation along with the official identification of the owner and legal representative; A CLEAR and PRECISE description of the personal data for which you wish to exercise your right to revoke consent, indicating whether the revocation applies to all the purposes for which your personal data is used or only to some of them. If it is only some of the purposes, you must specifically mention which ones.

1. c) How many days will it take us to respond to your request?

Within 20 business days from the date of receipt of your request.

1. d) How will we communicate our response to your request?

The response may be sent by email to the email address indicated in your request.

How can you limit the use or disclosure of your personal information?

In order for you to limit the use and disclosure of your personal information, we offer the following means:

By email to info@indumarver.com or by writing to the company’s address indicated in this document.

How can you find out about changes to this privacy notice?

This privacy notice may be modified, changed, or updated as a result of new legal requirements; our own needs for the products or services we offer; our privacy practices; changes to our business model; or other reasons.

We are committed to keeping you informed of any changes to this privacy notice through our website www.indumarver.com.

The procedure for notifying you of changes or updates to this privacy notice is as follows: Please check the “Privacy Notice” section of our website www.indumarver.com regularly to stay informed of any changes.

Right to promote the procedures for the protection of rights and verification carried out by the Institute

If, after exercising your Personal Data Protection Rights before Industrial Marítima de Veracruz S.A. de C.V. through the mechanisms established in this Privacy Notice, you consider that your right to personal data protection has been violated by any conduct or omission on our part, or you suspect a violation of the provisions of the Federal Law on Protection of Personal Data Held by Private Parties and other applicable regulations, you may file a complaint with the Federal Institute for Access to Information and Data Protection (IFAI). For more information, visit www.ifai.org.mx.

October 2025