Privacy Policy

The legitimate, controlled, and informed processing of your personal data is of vital importance to achieve the corporate objectives of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., across all business areas, reiterating our commitment to your privacy and the right to informational self-determination. In compliance with the Federal Law on Protection of Personal Data Held by Private Parties, we provide you with our PRIVACY NOTICE

This applies to all products, services, programs, and/or websites owned by AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V. Depending on the nature of the personal data collected and in accordance with applicable privacy legislation, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V. may publish new specific Privacy Notices or updates, which may or may not require the express consent of the data owner. However, through our website www.costaline.com.mx or at our headquarters, the privacy policies applicable to the personal data provided are made publicly available

A. NAME AND ADDRESS OF THE DATA CONTROLLER

For purposes of the disclosure and processing of personal data that you have provided or may provide through various means, including our websites, technological tools, or directly to our representatives, as part of the relationship or potential relationship through the use of one of our products and/or services, as well as any related activity, the data controller will be considered AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., a company established in accordance with the laws of the Mexican Republic, with headquarters at Avenida Heroica Escuela Naval Militar, number 220, Col. Magdalena Culhuacán, Coyoacán, CDMX, postal code 04260

For any information regarding this Privacy Notice, or to exercise any of your rights derived from your personal data under this Privacy Notice or applicable law, including without limitation your rights of access, rectification, cancellation, and opposition, please contact our Privacy Department via email at [email protected] or by phone at 01800 0037 635 / 01800 249 0460, Monday to Friday, from 9 a.m. to 6 p.m

B. PERSONAL DATA COLLECTED

To carry out the purposes described in this privacy notice, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V. may collect and, where appropriate, process the personal data specified below, based on the legal or non-legal relationship with the Data Owner

• Full name

• Age

• Date of birth

• Official ID (IFE or INE)

• Address

• Email

• Contact phone number(s), mobile, work, personal

• Social media accounts

• Employment information

• URL and IP information

• Video recordings

• Web Beacons

• Cookies

• Federal Taxpayer Registry (RFC)

B. PERSONAL DATA THAT IS COLLECTED

The personal data we collect from you is necessary for the fulfillment of obligations, the relationship and/or provision of services that exists or may exist between the Data Owner and AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., who uses, stores, transmits, or transfers it to the extent permitted by law, to comply with obligations arising from the legal or non-legal relationship with the Data Owner

We also inform you that the facilities, branches, and corporate offices of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V. have a video surveillance system, therefore, images and audio of the Data Owner may be obtained through our security cameras, for purposes of identification, control, and security of users, suppliers, and staff of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V.

Below we list the purposes for which we will process your Personal Data:

• Identification

• Contact

• Location

• User service history

• Compliance with contractual obligations

• Control

• Security

• Service improvements

• Collection

• Rectifying commercial relationships

• Improve our commercial and promotional initiatives (marketing)

• Send information or messages about new products and/or services

• Respond to your request for information, products, or use requests, including exclusively the services of Destinos Parhikuni, S.A. de C.V.

• Attend to any complaint, question, or comment

• Sending notifications, notices, propaganda, or advertising about our products or services as allowed by applicable law

• Sending information and news about our services, as well as communications or advertising from AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., or its related companies

• Create databases for statistical purposes, research, and development of new products or services

• Transfer to other participants in attended events, for commercial, professional, and business purposes, as well as to service providers whose products and services are applicable in the sector

• Sending notifications of changes to this privacy notice

• Sale of insurance

D. PUBLIC RECORDS

The Public Registry of Consumers, Users, and other related entities, referred to in provisions regarding the Protection of Personal Data, will remain in force and will be governed according to the applicable laws and provisions derived from them, along with the rights established therein.

E. TRANSFER AND REMITTANCE OF PERSONAL DATA

As part of the company's business operations and in order to fulfill the purposes described, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., may share some or all of your personal data with third parties, both national and international.

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will ensure through the signing of agreements and adoption of other binding documents that such third parties maintain adequate administrative, technical, and physical security measures to protect your personal data, and that such third parties only use your personal data for the purposes for which it was collected and in accordance with this Privacy Notice.

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., may share all or part of your Personal Data with entities authorized under Mexican Law for the supervision of our products' activities and operations, who may or may not process your Personal Data on behalf of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., according to the purposes and uses outlined in this privacy notice. Additionally, it reserves the right to share your Personal Data with administrative, judicial, or governmental authorities of any type in the United Mexican States.

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., may transfer your Personal Data to advisors and collection service providers, any acquirer of the company, parent companies, affiliates, or subsidiaries of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., external professional advisors, and other service providers offering services, technical support, information technologies, and in general, any third party acting as a processor on behalf of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V.

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., may remit Personal Data to companies responsible for receiving, safeguarding, and processing the Data Owner’s personal data under the terms of this Privacy Notice.

Except in these cases, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will not share or transfer your Personal Data to third parties except as provided by the Federal Law on Protection of Personal Data Held by Private Parties or any other applicable legislation or regulation.

F. SECURITY MECHANISMS

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will implement the necessary technical, administrative, and physical security measures to ensure the integrity of your personal data and prevent damage, loss, alteration, destruction, or unauthorized use, access, or processing. Only authorized personnel of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., who have fulfilled and observed the corresponding confidentiality requirements, may participate in the processing of your personal data. Authorized personnel are prohibited from allowing unauthorized access and from using your personal data for purposes other than those established in this Privacy Notice. The confidentiality obligation of those involved in processing your personal data remains even after their relationship with AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., ends.

G. STORAGE OF YOUR PERSONAL DATA

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., may store your Personal Data in databases located in the United Mexican States or abroad without any limitation, provided that reasonable commercial technology and security standards have been implemented to protect the information provided.

H. CHANGES TO THE PRIVACY NOTICE

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., reserves the right to modify the terms and conditions of this Privacy Notice, in which case the modification will be notified through the communication method deemed most appropriate, such as email, notices in media, direct communication, and/or an announcement on our website or branches.

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., as well as the Data Owner, acknowledge that this Privacy Notice is of unlimited duration. However, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will keep this Notice updated.

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., recommends that the Data Owner regularly read this document to stay informed about any modifications.

Alterations or modifications to this Privacy Notice will take effect immediately after their publication at our headquarters, without prejudice to the use of any other means by AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., for such publications.

Once the modifications have been made, it will be presumed that the Data Owner who continues using or requesting services, or performing acts that originated the relationship with AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., has full knowledge of, has read, and has consented to the revised Privacy Notice.

I. CONSENT

The Data Owner expresses and consents to this Privacy Notice, in accordance with the Federal Law on Protection of Personal Data Held by Private Parties, not opposing the Privacy Notice. No data will be processed until five days after it has been provided by the user and they have not expressed opposition.

J. ARCO RIGHTS

Likewise, you may request access to your data, rectify it, cancel it, object, limit its use or disclosure, or revoke your consent, under the Federal Law on Protection of Personal Data Held by Private Parties and other applicable provisions. To exercise these rights, you must contact the Privacy Department using the email and/or phone numbers listed above in our contact information.

Under applicable law, any request to exercise the aforementioned rights must indicate:

1. Name and address, which are indispensable to respond to your request.

2. Documents proving your identity or, if applicable, the legal representation of the person making the request on your behalf.

3. A clear and precise description of the Personal Data you wish to access or rectify, cancel, or object to, and any other element that facilitates locating your data.

4. Any other requirement established by the Federal Law on Protection of Personal Data Held by Private Parties and/or other applicable provisions.

At any time, you may request that the sending of commercial messages or notices and information about new products be suspended or canceled through our Privacy Department.

If you request the rectification of personal data, you must also indicate the modifications to be made and provide the documentation supporting your request.

The response to your request will be communicated within 10 (ten) business days from the date it is received, which may be extended by 5 (five) additional days in cases established by law; if applicable, measures to comply with your request will be carried out within the following 15 (fifteen) business days from the date the response is communicated.

The Data Owner must cover justified shipping costs or the cost of reproduction in copies or other formats. Depending on the information, whether electronic or physical, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will require an address to send the information.

Once the data is no longer necessary to fulfill the purposes set forth in this Privacy Notice and applicable legal provisions, it must be canceled, blocked, and deleted by law.

The request will not be valid if any of the above requirements are omitted.

If the right to object to the processing of Personal Data has been requested, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will consider the following:

1. There is a legitimate cause and your specific situation requires it, which must justify that even if the processing is lawful, it must cease to prevent harm to the data owner.

2. You need to express your opposition to the processing of your personal data so that it is not carried out for specific purposes.

3. The processing is not necessary to fulfill a legal obligation imposed on the data controller.

In the event that the right to object to the processing of Personal Data has been exercised, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will add the Personal Data to an Exclusion List in accordance with the Law.

K. PROCEDURES FOR BLOCKING AND DELETION OF PERSONAL DATA

Once the data has been canceled, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will retain the Data Owner’s personal data for one more month for clarification purposes and preparation for deletion. Once this period expires, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will permanently block the Data Owner’s personal data, with no possibility of locating or contacting the owner.

If the Data Owner engages in another action with AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., it must be initiated as if the previous relationship never existed, while observing the Privacy Policies for purposes of retaining information by law or authority.

Personal data that has fulfilled its purposes but cannot be canceled and/or deleted by law or contract will be blocked from the purposes for which it was processed until deletion is possible. During this period, personal data may only be used for retention and safeguarding.

L. REVOCATION OF CONSENT

Consent may be revoked at any time without retroactive effect. To revoke consent, the Data Owner must submit a written request to [email protected] including the following requirements:

• There is a legitimate cause, and your specific situation requires it, which must justify that even if the processing is lawful, it must cease to prevent harm to the Data Owner.

• You need to express your opposition to the processing of your personal data so that it is not carried out for specific purposes.

• The processing is not necessary to fulfill a legal obligation imposed on the Data Controller.

• The Data Owner’s name and address or another means to communicate the response to your request.

• Documents proving identity, IFE and/or PASSPORT, or, if applicable, the legal representation of the Data Owner.

• A clear and precise description of the relationship with the Company.

• Provide documentation supporting your request.

• The request must be addressed to AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V.

• Documents proving that the relationship with AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., has ended.

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will issue a response confirming the revocation of consent, or, if applicable, indicating the reasoning depending on the specific case, within 15 (fifteen) days. Deadlines will be counted from the moment the email is received by our server, issuing the corresponding Acknowledgment of Request.

Any subsequent request will have the same effect as an initial one, with the Data Owner and AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., bound by the same deadlines mentioned above.

The request will not be valid if any of the aforementioned requirements are omitted.

M. JURISDICTION

This Privacy Notice, the processing of your Personal Data, and all related documents are governed by the Federal Law on Protection of Personal Data Held by Private Parties and other laws and regulations of the United Mexican States. Acceptance of this Privacy Notice or the mere continuation in requesting services once the Privacy Notice has been published and made available implies express acceptance of its terms and express submission to the courts of Mexico City for any dispute or claim arising from this Privacy Notice.

I declare that I have read and understood this Privacy Notice and give my consent, where necessary, for the processing of my personal data under the terms herein. I confirm that I have informed the individuals whose personal data I have provided about how their data will be processed.

Welcome to AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. de C.V., with its main office located at avenida Heroica Escuela Naval Militar, number 220, col. Magdalena Culhuacán, Coyoacán, CDMX, postal code 04260, who is responsible for the processing of your personal data, in compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties.

The personal data we collect from you, the Data Owner, is used by AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. de C.V., for control, registration, and identification of people visiting our offices, appointment management, data search and location in our system, statistical control, and security.

To carry out the purposes described in this privacy notice, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. de C.V., may collect and, where applicable, process the following personal data:

• Full name

• Phone number

• Company of origin

• Person being visited

• Area to be visited

• Purpose of the visit

Additionally, we inform you that AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. de C.V., has a video surveillance system, so the images and audio obtained through the security cameras will be used for identification, control, and security purposes of the people within these facilities.

For more information regarding the processing, use, transfer, and disclosure of your Personal Data, as well as the ARCO rights you may exercise, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. de C.V., provides our Comprehensive Privacy Notice through our website www.costaline.com.mx.

The legitimate, controlled, and informed processing of your personal data is of vital importance to achieving the corporate objectives of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., across all business areas, reaffirming our commitment to your privacy and the right to informational self-determination. Therefore, in compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, we make our PRIVACY NOTICE available to you

This applies to all products, services, programs, and/or websites owned by AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., according to the nature of the Personal Data collected and in accordance with applicable privacy and data protection laws. AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V. may publish new specific Privacy Notices or updates, for which the express consent of the Personal Data owner may or may not be required. However, through our website www.costaline.com.mx or at our central offices, the privacy policies applicable to the Personal Data provided to us are made publicly available

A. NAME AND ADDRESS OF THE DATA CONTROLLER

For the purposes of the disclosure and processing of the Personal Data you have provided or may provide through various means, including our websites, technological tools, or directly to our representatives, due to the relationship or potential relationship arising from the use of one of our products and/or services, as well as for any related activity, the responsible entity shall be considered AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., a company incorporated under the laws of the United Mexican States, with central office located at Avenida Heroica Escuela Naval Militar, number 220, Col. Magdalena Culhuacán, Coyoacán, CDMX, postal code 04260

For any information regarding this Privacy Notice, or to exercise any of your rights derived from your Personal Data, this Privacy Notice, or applicable law, including but not limited to your rights of access, rectification, cancellation, and opposition, please contact our Privacy Department via email at [email protected] or at 01800 0037 635 / 01800 249 0460, Monday to Friday, from 9 a.m. to 6 p.m

B. PERSONAL DATA COLLECTED

To carry out the purposes described in this privacy notice, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V. may collect and, if applicable, process the personal data specified below, based on the legal or non-legal relationship with the Data Owner, including Sensitive Personal Data, detailed as follows

• Full name

• Age

• Date of birth

• Address

• Marital status

• Email address

• Social media accounts

• Contact phone number(s) (mobile, work, personal)

• Touristic, sports, social, and entertainment preferences

• Unique Population Registry Code (CURP)

• Federal Taxpayer Registry (RFC)

• Social Security number

• Employee number

• Employee category and position

• Salary, earnings, and deductions

• Personal and family references

• Information related to beneficiaries and/or dependents

• Spouse and parents' names

• Spouse's date of birth

• Father's name

• Mother's name

• Medical history of the Data Owner, as well as of family members, beneficiaries, and/or dependents

• Psychometric evaluation results

• Technical evaluation results

• Medical evaluation results

• Blood type

• Religious preferences

• Medical certificates and treatment information

• Video recordings

• Academic degree and institution accrediting the studies

• Career / Specialization

• School period

• Degree status (graduate, incomplete, completed)

• Last company worked for and city

• Position held and period

• Subcontracted company

• Reason for hiring

• Name of the person being replaced

• Date of entry

• Position

• Office

• Work schedule

• Information regarding job performance

• IP address

• URL information

• Cookies

• Web Beacons

• Medical unit to which they belong

• Bank account number

• Infonavit, Fonacot, or any other social security credit data

C. PURPOSES FOR USING PERSONAL DATA

The personal data we collect from you is necessary to fulfill obligations, the relationship, and/or provision of services that exist or may exist between the Data Owner and AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., who uses, stores, transmits, or transfers it to the extent permitted by law to fulfill obligations arising from the legal or non-legal relationship created with the Data Owner

Furthermore, we inform you that AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V. facilities, branches, and corporate offices are equipped with video surveillance and/or audio recording systems. Therefore, images and audio of the Personal Data Owner may be obtained through our security cameras for identification, control, and security purposes for users, suppliers, and staff of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V

Below we list the purposes for which we will process your Personal Data

• Identification and contact

• Location

• Employment history

• Statistics

• Control and security

• Rectify employment relationship

• Address any complaint, question, or comment

• Sending notifications, notices, advertisements, or information and news about our products or services of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., or its related companies

• Create databases for statistical purposes

• Create administrative employee files

• Create employee medical files

• Payroll management and administration

• Payment of benefits, salaries, compensations, bonuses, reimbursements, pensions, insurance, and others

• Insurance contracting

• Assign work tools, and document and control the assignment of computing and communication assets

• Internal audits

• Creation and assignment of corporate email accounts

• Preparation of company directory

• Assign passwords and access codes

• Ensure compliance with confidentiality obligations and other labor and tax obligations

• Verify personal and employment references

• Contact family members, dependents, and beneficiaries in case of emergency

• Send information about suppliers offering products, services, and/or labor benefits

• Send notifications of changes to this privacy notice

Likewise, the user-owner is responsible for the truthfulness, accuracy, and timeliness of the personal data they publish on their social media profiles or on the social media of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., as well as the extent of dissemination of their information and the access to it that they allow or authorize to third parties through these profiles

D. PUBLIC REGISTRIES

The Public Registry of Consumers, Users, and others, as indicated in provisions related to Personal Data Protection, shall remain valid and shall be governed in accordance with the laws cited and applicable provisions derived therefrom, along with the rights provided therein

E. TRANSFER AND REMISSION OF PERSONAL DATA

As part of normal business operations and to fulfill the purposes described, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., may share some or all of your personal data with third parties, national or foreign

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will ensure through agreements and other binding documents that such third parties maintain appropriate administrative, technical, and physical security measures to safeguard your personal data, and that they only use your personal data for the purposes for which it was collected in accordance with this Privacy Notice

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., may share all or part of your Personal Data with entities authorized under Mexican Law to supervise our activities and product operations, who may or may not process your Personal Data on behalf of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., according to the Purposes and Uses described in this privacy notice

Likewise, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., reserves the right to share your Personal Data with administrative, judicial, or governmental authorities of any kind in the United Mexican States

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., may transfer your Personal Data to advisors and collection service providers, any company acquiring the business, parent companies, affiliates or subsidiaries of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., external professional advisors, and other service providers offering services, technical support, information technologies, and in general, any third party acting on behalf of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., may remit Personal Data to companies responsible for receiving, storing, and processing the data of the Data Owner under the terms of this Privacy Notice

Except for these cases, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will not share or transfer your Personal Data to third parties except as provided in the Federal Law on the Protection of Personal Data Held by Private Parties or any other applicable law or regulation

F. SECURITY MECHANISMS

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will implement the necessary technical, administrative, and physical security measures to ensure the integrity of your personal data and prevent damage, loss, alteration, destruction, or unauthorized use, access, or processing

Only authorized personnel of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., who have complied with and observed the corresponding confidentiality requirements, may participate in the processing of your personal data. Authorized personnel are prohibited from allowing access to unauthorized persons and from using your personal data for purposes other than those established in this Privacy Notice. The confidentiality obligation of persons involved in the processing of personal data remains even after the relationship with AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., has ended

G. STORAGE OF YOUR PERSONAL DATA

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., may store your Personal Data in databases located in Mexico or abroad without limitation, understanding that reasonable commercial technology and security policies and standards have been implemented to protect the information provided

H. MODIFICATIONS TO THE PRIVACY NOTICE

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., reserves the right to modify the terms and conditions of this Privacy Notice, in which case the modification will be notified through the communication means considered most appropriate by AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., which may include email, notices in media, direct communication, and/or an announcement on our website or branches

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., as well as the Data Owner, acknowledge that this Privacy Notice has unlimited validity. However, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will keep this Notice updated

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., recommends that the Data Owner regularly reread this document to remain informed about any modifications

Alterations or modifications to this Privacy Notice will become effective immediately after publication at our headquarters, without prejudice to the use of any other means for AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., to make these publications

Once modifications are made, it will be presumed that the Data Owner continuing to use or request our services, or performing acts that originated the relationship with AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., has full knowledge, has read, and consents to the amended Privacy Notice

I. CONSENT

Once modifications are made, it will be presumed that the Data Owner continuing to use or request our services, or performing acts that originated the relationship with AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., has full knowledge, has read, and consents to the amended Privacy Notice

J. ARCO RIGHTS

Similarly, you may request access to your data, rectify it, cancel it, object, limit its use or disclosure, or revoke your consent, under the terms of the Federal Law on the Protection of Personal Data Held by Private Parties and other applicable provisions. To exercise these rights, you must contact the Privacy Department at the email and/or phone number provided above

Under applicable law, any request to exercise the aforementioned rights must indicate:

1. Name and address, an indispensable requirement to respond to your request

2. Documents proving your identity or, if applicable, the legal representation of the person making the request on your behalf

3. Clear and precise description of the Personal Data you wish to access, rectify, cancel, or object to, and any other element that facilitates locating your data

4. Any other requirement established by the Federal Law on the Protection of Personal Data Held by Private Parties and/or other applicable provisions

At any time, you may request the suspension or cancellation of commercial messages or notices and information about new products, through our Privacy Department

In case of requesting rectification of personal data, you must also indicate the modifications to be made and provide documentation supporting your request

The response to your request will be communicated within 10 (ten) business days from the date it was received, which may be extended by 5 (five) more days in cases established by law; so that if appropriate, measures will be taken to comply with your request within 15 (fifteen) business days after notification of the response

The Data Owner must cover justified shipping costs or reproduction costs in copies or other formats. Depending on the information, whether electronic or physical, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will need an address to send the information

When data is no longer necessary for the purposes provided in this Privacy Notice and applicable legal provisions, it must be canceled, blocked, and deleted by law

The request will not be valid if the above information is omitted

If the right of opposition to the processing of Personal Data has been requested, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will consider the following:

1. There is a legitimate cause, and your specific situation requires it, which must justify that even though the processing is lawful, it must cease to prevent harm to the data owner

2. You need to express your opposition to the processing of your personal data so that it is not carried out for specific purposes

3. That the processing is not necessary to fulfill a legal obligation imposed on the responsible party

If the right of opposition has been exercised, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will send the Personal Data to an Exclusion List in accordance with the Law

K. PROCEDURES FOR BLOCKING AND DELETING PERSONAL DATA

Once the data has been canceled, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will retain the Data Owner’s personal data for one more month for clarification purposes and preparation for deletion. Once this period expires, AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will permanently block the data, without possibility of location or contact

The above is done in accordance with Privacy Policies for the purpose of retaining information as required by law or authority

Personal data that has fulfilled its purpose, but cannot be canceled or deleted by law or contract, will be blocked for the purposes they were intended for until they can be deleted. During this period, personal data cannot be further processed beyond retention and safeguarding

L. REVOCATION OF CONSENT

Consent may be revoked at any time without retroactive effect. To revoke consent, the Data Owner must send a written request to [email protected] with the following requirements:

• The name of the Data Owner and address or other means to communicate the response to the request

• Documents proving the identity of the Data Owner, IFE and/or PASSPORT, or if applicable, the legal representation of the Data Owner

• Clear and precise description of the link with the Company

• Provide documentation supporting your request

• The request must be addressed to AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V.

• Documents proving that the legal relationship with AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., has ended

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., will issue a response confirming the revocation of consent or providing reasoning depending on the specific case, within 15 (fifteen) days. The term is counted from the moment the email enters our server, issuing the corresponding Acknowledgment of Receipt

Any subsequent request will have the same effect as the initial one, with the Data Owner and AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., bound to the same deadlines

The request will not be valid if the above information is omitted

M. JURISDICTION

This Privacy Notice, the processing of your Personal Data, and all related documents are governed by the Federal Law on the Protection of Personal Data Held by Private Parties and other laws and regulations of the United Mexican States. Acceptance of this Privacy Notice or simple continuation in requesting services once published implies express acceptance of its terms and submission to the courts of Mexico City for any dispute arising from this Privacy Notice

I declare that I have read and understand this Privacy Notice and give my consent, where necessary, for the processing of my personal data under the terms herein. I confirm that I have informed the persons whose data I have provided about the processing that will be done with their data

This message is intended exclusively for the use of the person, department, or entity to whom it is addressed; it contains strictly confidential and legally protected information, whose disclosure is sanctioned by law. If the reader of this message is not the intended recipient, nor the employee or agent responsible for this information, you are hereby notified that its reproduction and distribution is strictly prohibited. If you received this communication in error, please immediately notify the sender and destroy the message. All opinions contained in this email are those of the message author and do not necessarily reflect the views of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., or any of its subsidiary companies.

AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V., with headquarters at Avenida Heroica Escuela Naval Militar, number 220, Col. Magdalena Culhuacán, Coyoacán, CDMX, postal code 04260, is responsible for the processing of your personal data, in compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties.

For more information about the processing, use, transfer, and forwarding of your Personal Data, as well as the ARCO rights you may exercise, we provide you with our Comprehensive Privacy Notice, which you can request via our email www.costaline.com.mx or at the headquarters of AUTOTRANSPORTES ESTRELLA ROJA DEL SUR, S.A. DE C.V.