Last updated date: 01 December 2023

‍1. PRIVACY NOTICE
‍At CCSI COMPUCOM GSC MEXICO S DE R L DE CV (hereinafter "Compucom"), with address at Av. Insurgentes Sur 1431, Insurgentes Mixcoac, Benito Juárez, 03920 Mexico City, CDMX, Mexico your personal data are treated in a strictly private and confidential manner, so the collection, processing, transfer and exercise of the rights derived from said personal data, it is done through an adequate, legitimate and lawful use, permanently safeguarding the principles of legality, consent, quality, information, proportionality, responsibility, loyalty and purpose.

‍2. COLLECTION OF PERSONAL DATA AND ITS PURPOSES
‍At Compucom we are committed to safeguarding the privacy of your personal data and maintaining a close and active relationship with our candidates and employees. Therefore, the personal data that may be collected during the course of your recruitment and selection process, or in the event that you are hired during the employment relationship that unites us with you, will belong to the following categories:

(i) Identification Data: the full name; gender; date of birth; marital status; country of origin, citizenship and nationality; work visas and/or permits to work in Mexico or abroad; Federal Taxpayer Registry (RFC) code; Unique Population Registry Code (CURP); affiliation number to the Mexican Institute of Social Security (IMSS); images; photographs, fingerprints, facial features, biometric features, photo IDs; weight; height; particular signs; signature;

(ii) Contact Details: the address; e-mail; the telephone number; cell phone numbers; IP (Internet Protocol) address; real-time location;

(iii) Employment and Academic Data: curriculum vitae; occupation; work experience and previous salary and income; skills and areas of knowledge; job references; personal references; information relating to previous employees; documents that prove academic preparation and degree of studies; results of verification studies of the information you provide to Compucom; job performance; disciplinary records;

(iv) Third Party Data: data of economic dependents and beneficiaries such as name; date of birth; kinship; contact details; identification and contact details of persons designated in case of emergency;

(v) Tax and Social Security Data: tax returns and tax withholdings, contributions, worker-employer contributions, number and data of credits with INFONACOT and/or INFONAVIT (if applicable);

(vi) Personal Data from Publicly Accessible Sources and Received via Consented Transfer: data from public registries, directories, social networks and other lawful sources available in the market;

(vii) Personal Data Derived from Social Networks: personal data and information that you have shared publicly on social networks (such as Facebook, Twitter, LinkedIn, among others), including information that you have shared in any other way publicly.In addition, examinations and background checks may be collected and/or carried out periodically to collect Sensitive Data (which must be understood to be included within the term "personal data") and that require special protection such as results of evaluations and psychometric examinations; results of medical tests, including audiometry tests, blood tests, serological tests or tests for the detection and containment of communicable diseases including COVID-19 and information related to the application of the COVID-19 vaccine, x-rays, temperature taking, and vision tests; medical and family history (if a family member has or has had a contagious disease, if they are elderly, pregnant, with chronic diseases or immunosuppression or any other condition that places them in a situation of vulnerability), criminal, labor and credit history; health data and conditions including medical issues for which you have been absent; information about whether you are a smoker and information about union membership or membership; likewise, Compucom may collect the image of the people who enter and transit in its facilities for their safety and that of the people who are in them; as well as Financial or Patrimonial Data: such as salaries, labor benefits and other perceptions, expenses, withholdings and entire taxes, as well as information contained in Digital Tax Receipts by Internet (CFDI), deductions, contributions to the savings fund (if applicable); in the event of termination of the employment relationship with Compucom, data relating to the payment of severance payments and settlements; bank accounts, beneficiaries and results of socioeconomic studies.

In addition, Compucom may require you to show original documentation and provide a copy of it as evidence to support the information you have provided.

The personal data collected by Compucom may be used for the following necessary purposes:
‍
- Evaluation of your candidacy, experience, knowledge, skills and abilities in relation to a vacancy at Compucom;
- Participation in the process of recruitment, selection and, where appropriate, hiring as an employee;
- Evaluation of your health and physical condition and only in case of being hired or employed by Compucom;
- For compliance with any legal obligation related to the information provided and derived from the employment relationship;
- Performance evaluations, conducting disciplinary records and for promotion purposes;
- To provide access to information about the employment relationship with Compucom;
- Compliance with Compucom policies;
- For the preparation of all types of reports in the relationship with our employees;
- To form and determine the labor divisions that we have;
- Determine job positions;
- Talent management and personnel management;
- Time and attendance management;
- For payroll payment and administration;
- Payment and administration of benefits, withholding and payment of worker-employer contributions and contributions, withholding and payment of taxes, benefits, bonuses, reimbursements, pensions, settlements, insurance and others, if applicable;
- Contracting of medical, life and other insurance, if applicable;
- Preparation and maintenance of the Compucom board of directors;Lists for e-mail and sending internal communications;
- Conducting medical examinations for the detection of alcohol and drug use, biometric interface, evaluating health status, as well as for the prevention and containment of contagious diseases including COVID-19 and evaluating and monitoring symptoms related to them;
- To carry out internal or external research processes;
- To be exhibited in the event of a national and international lawsuit or in any administrative or any other proceeding before a competent authority, whether national or international, and in general to comply with orders of authority and legal obligations and for the defense of the interests and rights of Compucom, its affiliates, subsidiaries and any natural or legal person with whom Compucom has a contract, has had or may have a business relationship;
- Protect the property and rights of Compucom and related companies, as well as the confidentiality of their information;
- Carry out studies, analyses or reviews (monitoring), in order to guarantee the safety of employees inside and outside the workplace, being able to make use of real-time location applications and ensure the confidentiality of the information owned by Compucom, and for the prevention, investigation or detection of the commission of crimes and file complaints against the probable perpetrators, as well as to protect our employees against third parties who have committed crimes or failed to comply with their obligations to Compucom. To this end, Compucom may carry out random review according to its policies of the information contained in computers, mobile devices and other devices provided as work tools or property of Compucom, including the use made of the Internet and networks;
- Carry out audits aimed at completing any merger or acquisition;
- Contact designated emergency persons;
- Conduct employee feedback surveys;
- Carry out relocations;
- For international mobility;
- Conduct performance management reviews or review development annually;
- To assess how your health condition impacts your ability to perform your job and whether any accommodations are required;
- Conduct internal conferences;Book business trips;
- Where appropriate, to carry out the termination of the employment relationship with Compucom, and in general, for the fulfillment of legal obligations, including being exhibited to authorities or individuals for the fulfillment of the obligations provided by law.

In case you are employed or hired by Compucom, personal data may be used for any purpose related to the initiation, administration and termination of your employment relationship with Compucom.

Likewise, personal data may be used for unnecessary or secondary purposes such as:

Communications (including emails) relating to Compucom;
Develop and maintain a database for future employment opportunities with Compucom; y
Provide job references from you to prospective employers or recruitment agencies.

To limit or object to the use of these unnecessary purposes, you may submit your request in writing to our Privacy Officer electronically at myhrmexico@compucom.com and your request will be recorded on the Exclusion List.

The personal data you provide to Compucom will be processed exclusively for the purposes described and will be treated confidentially and exclusively to the extent that they are strictly necessary to fulfil the purpose for which they were collected. Your personal data will not be processed for marketing or commercial prospecting purposes.

To prevent unauthorized access to your personal data and in order to ensure that the information is used for the purposes set out in this privacy notice, we have implemented physical, electronic and administrative procedures and security measures, using advanced technologies that limit the use or disclosure of your data, allowing us to treat it appropriately and prohibiting the unauthorized extraction of any type of information that may be used by the Compucom offices contains personal data, as well as to prevent the damage, loss, alteration or destruction of the same.

3. MECHANISMS AND PROCEDURES FOR THE REVOCATION OF CONSENT TO THE PROCESSING OF PERSONAL DATA AND EXERCISE OF ARCO RIGHTS

At any time you may revoke the consent you have granted us for the processing of your personal data, so that we stop using them, as well as the right to know what personal data Compucom maintains, as well as to rectify them if they are inaccurate, or instruct us to cancel them when they are excessive or unnecessary for the purposes described that justified their collection, or request the limitation of its use for specific purposes in cases where the Law allows it. Please note that if you revoke your consent, Compucom will not be able to fulfill the purposes described above including legal obligations.

To exercise the rights as mentioned in the previous paragraph, you may go to our offices and request the "ARCO Rights Request Form", which we have also made available to you at our offices located at Av. Insurgentes Sur 1431, Insurgentes Mixcoac, Álvaro Obregón, 03820 Mexico City in the Human Resources department, accompanying said application with the documents that prove their identity, or where appropriate whoever legally represents them.

Otherwise, you can send your request to our Privacy Officer at protección.datos@compucom.com email address to which you can write with at least the following information

(i) Name and address or other means of communicating the response to your request,
‍
(ii) the documents that prove your identity, or if applicable, who legally represents you,
‍
(iii) a clear and precise description of the personal data in respect of which you wish to exercise any of the aforementioned rights,
‍
(iv) relevant channel or means to receive a response from us, and
‍
(v) any other element or document that facilitates the location of your personal data.

In the event that the information provided in your request is erroneous or insufficient, or if the corresponding accreditation documents are not attached, Compucom's Privacy Officer, within five (5) business days following receipt of the request, may require you to provide the necessary elements or documents to process it. You will have ten (10) business days to respond to the requirement, counted from the day after you have received it. If no response is given within this period, the corresponding application will be deemed not to have been submitted.

Compucom's Privacy Officer will communicate the response within a maximum period of twenty (20) business days from the date on which the request and its complete documents were received, so that, if appropriate, it may be effective within fifteen (15) business days following the response is communicated. The response will be given electronically to the email address specified in your request.

If you consider that you have not received a response or the response given to you is not satisfactory, you have the right to apply to the Federal Institute for Access to Information and Data Protection (INAI) to submit a data protection request within fifteen days of the date on which you submitted your request to Compucom or of the response we have given to the same.

4. TRANSFER OF PERSONAL DATA

By means of this privacy notice, you are authorizing Compucom to transfer personal data to national or foreign third parties, for the fulfillment of the purposes described herein; In addition, in the event of a corporate restructuring, including the merger, consolidation, sale or transfer of all or part of our business or assets, the national or international transfer of personal data may be necessary. The third parties to whom Compucom may transfer your personal data may include:

- Other affiliated companies or subsidiaries acting under the same policies and procedures as Compucom;
- External professional advisors acting on behalf of and on behalf of Compucom;
- Service providers that are hired to fulfill the purposes described and that act in the name and on behalf of Compucom;
- Potential purchasers of Compucom's business or assets;Insurance companies with which insurance is contracted;
- External auditors;
- Companies that carry out benefits and finance administration; y
- Compucom customers to whom services are provided.

In addition, Compucom may transfer your personal data when necessary for the administration of justice and recognition of a right in a judicial process, as well as to Mexican or foreign authorities that require Compucom to do so, to comply with requirements of competent authorities, applicable regulations or obligations provided by law, or to be exhibited as evidence in court in Mexico or in any country abroad.

If you do not express your opposition to the transfer of your personal data, it will be understood that you have given your consent to do so. If you wish to limit the use or disclosure of your personal data, you should submit your request to the email myhrmexico@compucom.com, with the understanding that Compucom would not be able to comply with some of its obligations if this happens.

Compucom undertakes to transfer only that information that is absolutely and strictly necessary. When Compucom shares your personal data with third parties, it will use its best efforts to ensure that such third parties take the necessary steps to protect the confidentiality and security of your personal data. Compucom will require such third parties to comply with applicable data protection laws, Compucom's policies and Privacy Notice and will prohibit them from using your personal data for any purpose other than that for which it has been engaged.

Compucom will ensure that such information is safeguarded in accordance with the principles of personal data protection recognized by the Federal Law on the Protection of Personal Data in Possession of Private Parties and its Regulations (the "Law") and that, where appropriate, the recipient of the data assumes the same obligations as Compucom, for which it will agree on contractual obligations related to the security of data protection.

Compucom never sells personal data, nor does it assign or transfer your personal data to third parties outside Compucom, without your prior consent. However, Compucom may transfer your personal data where such transfer is provided for by law.

5. MODIFICATIONS TO THE PRIVACY NOTICE

This privacy notice may be modified or updated from time to time by Compucom. Such modifications will be informed through the last email address we have and/or will be published on the https://www.compucom.com/privacy-policy website.

6. USE OF COOKIES AND OTHER TRACKING TECHNOLOGIES

Compucom does not directly use cookies or other tracking technologies to collect your personal data when you access the internal network service, internal portal and/or website.