PlastiDrum in compliance with the applicable provisions of the Federal Law for the Protection of Personal Data in Possession of Individuals, its Regulations and other applicable laws (the “Law”), makes available this privacy notice (the “Privacy Notice”).

Personal data is considered as any information concerning a natural person, that identifies him/her or that can be associated to an identifiable person (the “Personal Data”). PlastiDrum protects the privacy and is responsible for the treatment of the Personal Data provided by its owner (the “Owner”).

PlastiDrum has the technological, physical, administrative and legal mechanisms to protect the information and Personal Data of the Data Subject, and PlastiDrum applies the best international practices in the handling and administration of Personal Data. In any case, PlastiDrum manages the Personal Data of the Data Subject with high standards of ethics, responsibility and professionalism

The Privacy Notice is addressed to any Data Subject who provides his or her Personal Data by virtue of the following: (1) Customers who make purchases at PlastiDrum Stores; (2) Customers and/or users who make purchases or use the website located at https://plastidrum.com/ (hereinafter “Website”), and (3) Any person who makes use of social networks managed by PlastiDrum and other possible means of communication, face-to-face surveys at own or third party events, as well as for information collected by any other means.

1. TYPE OF INFORMATION COLLECTED

In compliance with the Law, PlastiDrum may collect the following data.

a) Identification data: information that makes it possible to differentiate the Data Subject from other individuals. The data that may be requested are mentioned but not limited to: name, title, autograph signature, electronic signature, federal taxpayer registration (RFC), official identification, country of birth, city of residence, age and any other data that PlastiDrum collects from time to time.

b) Contact data: information that allows us to maintain communication with the Holder. The data may include information about address, fiscal address, address for delivery purposes, e-mail, home telephone, contact telephone and other contact data.

c) Financial or patrimonial data: PlastiDrum may request data on the Owner’s assets or financial information.

The Holder undertakes that the Personal Data is true, complete, accurate, as well as to have the ownership and the right to provide them and make use of them. Any false, incomplete, inaccurate or requiring the authorization of a third party will be the sole responsibility of the Holder, so in this act releases PlastiDrum from any liability arising from omission of the Holder to the provisions of this paragraph.

2. USE OF THE INFORMATION COLLECTED

The Personal Data collected by PlastiDrum are used, in general, to process requests, transactions, provide services, inform about new products and in general to disclose any useful information to the Holder. Some other uses are:

a) To process requests and payments for purchase of PlastiDrum products as well as to evaluate the method of payment, prevent fraud and coordinate the delivery of the order of any PlastiDrum product.

b) Process the Personal Data of the Holder to issue invoices, process returns of PlastiDrum products, manage the history of the Holder’s transactions, follow up on clarifications and inquiries and manage any marketing program of PlastiDrum.

c) Establish communication with the Holder for any reason arising from the commercial relationship with PlastiDrum including aspects related to the delivery of orders of PlastiDrum products, follow up on any clarification.

3. TRANSFER OF COLLECTED INFORMATION

PlastiDrum reserves the right to share and/or transfer Personal Data to third parties as set forth below.

a) To third parties: PlastiDrum may transfer your Personal Data to third parties that provide you with any service, including without limitation, suppliers related to e-commerce operations including payment processing through debit and/or credit cards, product shipment, sending emails, among others. For this purpose, PlastiDrum will ask its suppliers to use Personal Data only to the extent necessary for the business relationship between PlastiDrum and the Holder. In this regard, your data may be transferred to the following suppliers which are mentioned in an enunciative but not limited manner:

(i) Payment processing and fraud prevention service providers. With respect to transactions made by credit or debit card, the information that will be delivered will have the following purposes that are mentioned but not limited to: to process payments of transactions with PlastiDrum to provide the corresponding bank with information about the card and the particularities of the transaction, for information to the issuer of the card or the bank to identify fraud risks related to the card used for the transactions.

(iv) Other necessary documentation: The documentation supporting the request must be attached in simple copy, for example, in the request for rectification of Personal Data must be listed and attached the incorrect data, the correct data and the supporting document.

If the information provided in the request is incorrect or insufficient, or if the corresponding supporting documents are not attached, PlastiDrum may require the Holder to correct the necessary within 10 (ten) working days from the date of receipt of the request. In this case, the Holder will have 10 (ten) working days, counted from the requirement of PlastiDrum to correct or rectify the corresponding request, otherwise, if the request is not corrected within that period, the request will be deemed not submitted.

PlastiDrum will communicate to the Holder the resolution adopted within a period of 20 (twenty) working days from the date on which it received the request or from the date on which the Holder has corrected the requirement made by PlastiDrum, as appropriate. The resolution will be effective within 15 (fifteen) business days from the date of notification of the corresponding resolution. The resolution will be given by the same means in which you sent us your request.

4. ARCO RIGHTS

The Data Subject may exercise his/her ARCO rights (Access, Rectification, Cancellation and Opposition) as well as revoke his/her consent for the processing of his/her Personal Data at any time, by contacting PlastiDrum directly at ventas@plastidrum.com.

The request must contain the information listed below, regardless of the provisions of Article 29 of the Federal Law on Protection of Personal Data Held by Private Parties.

(i) Data of the holder: Full Name, Full Address, Telephone and E-mail (where the response to your request will be communicated to you).

(ii) Information of the legal representative (if applicable): Full Name, and in case of being the legal representative of the holder, the corresponding public instrument in original, or in its case, power of attorney signed before two witnesses, must be attached to your letter.

(iii) ARCO Rights: Indicate the right(s) you wish to exercise: Access, Rectification, Cancellation and/or Opposition. Likewise, you must provide a description of the Personal Data with respect to which you wish to exercise the right(s) indicated above and/or any other comment that will help us to better serve your right.

(iv) Other necessary documentation: The documentation supporting the request must be attached in simple copy, for example, in the request for rectification of Personal Data, the incorrect data, the corrected data, and the incorrect information must be related and attached to the request for rectification of Personal Data.

5. MODIFICATIONS

PlastiDrum reserves the right to change the content of this Agreement.

PlastiDrum will not be responsible if the Holder does not receive the notification of change in the Privacy Notice, for any problem with the data of the email account or data transmission over the Internet provided by the Holder. The Holder agrees and undertakes to review from time to time the content of this Privacy Notice on the Website.

6. DISPUTE RESOLUTION.

In the event of a dispute arising out of this Privacy Notice, the parties shall first attempt to resolve the dispute through good faith negotiations and may be assisted by a professional mediator. If after a maximum of 30 (thirty) working days of negotiation, the parties do not reach an agreement, the provisions of the Federal Law for the Protection of Personal Data in Possession of Private Parties shall apply, and the parties accept the intervention that the Federal Institute of Access to Information and Protection of Personal Data may have.

PlastiDrum – Blvrd Julian Treviño Elizondo 501, El Milagro Apodaca, N.L. C.P. 66634

ventas@plastidrum.com