Privacy Notice and Data Protection Policy

PRIVACY NOTICE AND DATA PROTECTION

In accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations, this Privacy Notice is issued under the following terms:

I. Who processes and protects your personal data?
NEARUSTECH, S. de R.L. de C.V., a limited liability company with variable capital, duly incorporated under the laws of the United Mexican States, with Tax ID (RFC): NEA250625N22, and registered in the Public Registry of Property under commercial folio N‑2025049799 (hereinafter referred to as “NEARUSTECH”), is responsible for the processing of personal, technical, and confidential data provided by its customers, suppliers, employees, candidates, strategic partners, and any natural or legal person from whom information is collected (the “Data Subject”).

II. How can you contact us?
Personal Data Protection Department
Address: Blvd. Zacatecas No. 845, 3er Piso, Interior 6, Col. Trojes de Alonso, Aguascalientes, Ags., C.P. 20126.
Business Hours: Business days from 8:00 a.m. to 3:00 p.m.
Email: privacidad@nearustech.com
Website: https://nearustech.com

III. What purposes do we collect and use your personal data for?

Primary Purposes (necessary)
Recruitment, selection, and hiring of personnel Compliance with tax, labor, and social security obligations Management of contractual relationships with clients, suppliers, and strategic partners Preparation of contracts, agreements, and administrative records Internal security and compliance with corporate policies Provision of technological services, consulting, technical support, software development project evaluation, data engineering, and Artificial Intelligence services

Secondary Purposes (optional)
Sending commercial information, promotions, and newsletters from NEARUSTECH Invitations to events, training sessions, webinars, and networking activities Quality surveys, market research, and internal statistics Promotion of NEARUSTECH products and services or those of related third parties (If any additional purpose arises, the Data Subject will be informed and/or consent will be requested.)

IV. What personal data do we collect and from what sources?
Personal Data may be collected in person, verbally, in writing, and/or electronically through our website, email, or any means permitted by law.

General and Contact Personal Data
Including but not limited to:
  • Full name
  • Age and gender
  • Landline and mobile phone number
  • Email address
  • Physical address
  • Federal Taxpayer Registry (RFC)
  • Unique Population Registry Code (CURP)

Data
Including:
  • Professional references
  • Employment history
  • Job position and current employment status

Financial and Asset Data
Including:
  • Billing information
  • Bank account details
  • Tax and contractual information

Confidential and Technological Information
Including:
  • Source code
  • Algorithms
  • Artificial Intelligence models
  • ETL scripts
  • Architecture diagrams
  • Information related to current or future processing and storage infrastructure
  • Automation methodologies

V. How do we process sensitive personal data?
NEARUSTECH may collect sensitive personal data, including:
  • Social security number
  • Health status (only during hiring processes)
  • Employment background
  • Union affiliation
Such data is strictly protected and accessed only by authorized personnel on a strict need‑to‑know basis. We implement physical, administrative, and technological security measures, including robust encryption methods and logical access controls, to prevent loss, misuse, or unauthorized access.

VI. Data Protection and Incident Management
In the event of a security breach affecting personal data, NEARUSTECH will notify the Data Subject in writing within no more than 72 calendar hours after detection, including information about the incident and the corrective actions taken.

VII. How can you exercise your ARCO Rights or revoke consent?
The Data Subject may exercise their ARCO Rights (Access, Rectification, Cancellation, or Opposition), as well as limit or object to the processing of specific data.

Procedure
Submit a written request to the Personal Data Protection Department via:
Email: privacidad@nearustech.com
Physical address: As indicated above

Requirements
The request must include documents proving the identity of the Data Subject.

Response Time
  • A response will be provided within 20 business days
  • If approved, the request will be executed within 15 additional business days

VIII. Can your personal data be shared with third parties?
The Data Subject consents to the transfer of personal data among NEARUSTECH affiliates, as well as to national or foreign third parties that maintain a legal and/or contractual relationship with NEARUSTECH.

Consent will not be required for transfers permitted under Article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties.

IX. When is personal data destroyed or deleted?
Personal information will be stored for the duration of the commercial or legal relationship and for an additional period of five (5) years from the date of disclosure.

Information considered a Trade Secret will be protected indefinitely.

Upon termination of the legal relationship or at the express request of the Data Subject, digital or physical copies will be permanently destroyed (irreversible deletion) within a period not exceeding ten (10) business days.

X. How are changes made to this Privacy Notice?
Any updates or modifications to this Privacy Notice will be communicated through publication of the updated version on our official website:
https://nearustech.com

XI. Where can you file complaints regarding improper data processing?
If you believe your ARCO Rights have been violated under applicable law, you may file a complaint with the Secretaría Anticorrupción y Buen Gobierno, the authority responsible for personal data protection in Mexico.