PRIVACY NOTICE OF
ISATEL DE MÉXICO, S.A. DE C.V.

URPOSE AND LEGAL BASIS

This Privacy Notice of ISATEL DE MÉXICO, S.A. DE C.V. (hereinafter referred to as “ISATEL”) is intended to define the scope and general conditions governing the processing of Personal Data (hereinafter referred to as the “Processing”), as well as to inform Data Subjects thereof, so that they may make informed decisions and retain control over the use and disclosure of their personal information.

This Privacy Notice also enables ISATEL to ensure transparency regarding such Processing and, consequently, to strengthen the level of trust of Data Subjects.

The foregoing is in accordance with the provisions of the second paragraph of Article 16 of the Political Constitution of the United Mexican States, which establishes that every individual has the right to the protection of their personal data, as well as to access, rectification, cancellation, and opposition (ARCO rights), under the terms established by law, which shall set forth exceptions to the principles governing data processing for reasons of national security, public order, public safety and health, or to protect the rights of third parties.

Likewise, the applicable regulatory framework includes the Federal Law on the Protection of Personal Data Held by Private Parties and its Regulations (hereinafter referred to as the “Law” and its “Regulations,” respectively), which define Personal Data as any information concerning an identified or identifiable natural person.

Accordingly, ISATEL, in its capacity as Data Controller, makes this Privacy Notice available to inform Data Subjects about the existence and principal characteristics of the Processing to which their Personal Data will be subject, enabling them to exercise their rights to informational self-determination, privacy, and data protection.

IDENTITY AND ADDRESS OF THE DATA CONTROLLER

For purposes of this Privacy Notice, ISATEL shall be referred to as the “Data Controller” responsible for the Processing of Personal Data, including, without limitation, the collection, disclosure, storage, use, access, handling, exploitation, transfer, or disposal thereof.

ISATEL is a company duly incorporated under the laws of the United Mexican States and is the owner of the website www.isatel.mx ISATEL declares that it is individually responsible for the Personal Data it collects and designates the following address for purposes of this Privacy Notice:

Morena 804, 12th Floor
Colonia Narvarte Poniente
Benito Juárez
Mexico City, Mexico

Through this Privacy Notice, the Data Controller undertakes to protect and respect the privacy of Data Subjects and to observe the principles of lawfulness, consent, information, quality, purpose limitation, loyalty, trust, proportionality, and accountability.

PERSONAL DATA SUBJECT TO PROCESSING

Personal Data that may be subject to Processing by the Data Controller shall be classified under the following categories:

Non-Sensitive Personal Data.

• Identification data
• Contact information
• Location data
• Financial and/or patrimonial data
• Tax information
• Demographic data
• Consumer preferences or interests related to the goods and services we provide
• Information generated by devices used to access our website, including internet usage and
  application interaction data
• Information voluntarily provided for the handling of complaints, claims, service requests, or inquiries

The above-mentioned Non-Sensitive Personal Data may be collected through electronic means owned by the Data Controller, directly and/or in person, or through any other means made available to the Data Subject.

Sensitive Personal Data.

For purposes of this Privacy Notice, ISATEL does not process Sensitive Personal Data.

PURPOSES OF PERSONAL DATA PROCESSING

The Personal Data collected by the Data Controller shall be processed for the following purposes:

Primary Purposes. Those necessary for the existence, maintenance, and fulfillment of the legal relationship between the Data Controller and the Data Subject, including:

• Verifying the identity of the Data Subject
• Retaining information to comply with requests from competent authorities
• Maintaining updated and accurate information
• Complying with the Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin
• Providing the services requested by the Data Subject
• Formalizing contractual relationships and fulfilling related obligations
• Offering products and services through available electronic means
• Updating databases of clients, users, and prospects
• Addressing inquiries, complaints, and clarifications
• Conducting quality and service surveys
• Designing, developing, analyzing, and promoting new products and services
• Evaluating customer satisfaction and service experience
• Taking appropriate legal action in the event of breach of legal and/or contractual obligations

Secondary Purposes. Not necessary for the legal relationship, including:

• Sending promotional, marketing, and commercial prospecting communications
• Following up on service requests
• Issuing invitations to events, conferences, or workshops
• Generating statistical information regarding services provided

LIMITATION ON USE OR DISCLOSURE

ISATEL has implemented administrative, physical, and technical security measures, as well as internal privacy policies and programs, to prevent unauthorized disclosure of Personal Data in accordance with applicable laws.

Personal Data is processed under strict confidentiality and in compliance with the principles established under the Law.

ARCO RIGHTS (ACCESS, RECTIFICATION, CANCELLATION, OPPOSITION)

Data Subjects may exercise their ARCO Rights by submitting a request to:

Email: isatel@isatel.mx
Address: Morena 804, 12th Floor, Colonia Narvarte Poniente, Benito Juárez, Mexico City, Mexico

Requests must include:

• Full name and contact details
• Proof of identity or legal representation
• The specific right to be exercised
• A clear description of the Personal Data concerned
• Supporting documentation (if applicable)

The Data Controller shall respond within twenty (20) business days.

If the Data Subject believes their rights have been violated, they may file a complaint before the National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

TRANSFER OF PERSONAL DATA

ISATEL may transfer Personal Data domestically or internationally without the Data Subject’s consent in cases permitted under Article 37 of the Law, including but not limited to:

• Transfers required by law or international treaty
• Transfers to parent, subsidiary, or affiliated companies under common control
• Transfers necessary for contractual relationships
• Transfers required by competent authorities
• Transfers necessary for the recognition, exercise, or defense of legal claims

Recipients of Personal Data shall assume the same obligations as ISATEL under this Privacy Notice.

DATA RETENTION AND SECURITY

Personal Data shall be retained for the period necessary to fulfill the purposes described herein and in accordance with applicable legal requirements.

Appropriate security measures are implemented to prevent damage, loss, alteration, destruction, or unauthorized access.

COOKIES AND TRACKING TECHNOLOGIES

ISATEL uses cookies and similar tracking technologies to enhance website functionality and user experience.

Users may disable cookies through their browser settings. ISATEL does not automatically collect Personal Data through its website beyond what is permitted by law.

DISCLAIMER

ISATEL is not responsible for the privacy practices of third-party websites linked from www.isatel.mx.

Personal Data provided through external websites is the sole responsibility of the Data Subject and the respective third- party site owners.

MODIFICATIONS TO THIS PRIVACY NOTICE

ISATEL reserves the right to modify this Privacy Notice at any time. Updates will be published on www.isatel.mx and shall become effective immediately upon publication.

Data Subjects are encouraged to review this Privacy Notice periodically.

CONSENT

By providing Personal Data to ISATEL, the Data Subject acknowledges having read, understood, and agreed to the terms set forth herein, granting free, specific, informed, and unequivocal consent for the Processing of Personal Data in accordance with the Law and its Regulations.

Last updated: January 27, 2026