PRIVACY NOTICE

In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter the “Law”), we would like to inform you of the following:

1. Identity and Address of the Data Controller

GRUPO TRIMEX, S.A. de C.V. and its Subsidiaries (hereinafter “GRUPO TRIMEX”), designating for the purposes of this Privacy Notice the address located at Boulevard Manuel Ávila Camacho No. 191, Units 103, Section A, and 104, Colonia Los Morales Polanco, Miguel Hidalgo, Mexico City, ZIP Code 11510, is responsible for processing the personal data it receives from suppliers and/or individual customers, legal representatives, and operational contacts of corporate suppliers, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties and other applicable regulations.

2. Personal Information Collected

GRUPO TRIMEX, by virtue of its activities, interacts and has interacted with various individuals, who are the subjects of the Personal Data (hereinafter “Data”) that was collected at some point from candidates, employees, contract staff, and interns, as well as from suppliers, customers, or other individuals; Therefore, TRIMEX GROUP hereby informs you that the processing of such Data is carried out for the purposes of institutional processes related to its production and/or commercial operations, such as research, evaluation, selection, competitive hiring, procurement of goods and/or services and/or employees, location, determination of compensation or consideration, etc., among others.

The Data may include sensitive personal information, the processing of which is authorized in favor of GRUPO TRIMEX upon acceptance of this privacy notice. The processing of Data made available to GRUPO TRIMEX in any form or under any circumstances may be carried out in accordance with these terms and conditions; therefore, it is hereby understood that the Data Subject grants consent for such processing, unless the Data Subject provides written notice, duly certified and delivered to GRUPO TRIMEX, as indicated below.

For the process of registering, evaluating, and managing suppliers and/or customers, we may collect the following information:

For individuals:

  • Full name.
  • Age
  • Nationality
  • Sex
  • Suffering from illnesses
  • RFC and CURP
  • Address
  • Phone number(s) and email address.
  • Banking information for payment (account number, CLABE, bank).
  • Billing information.
  • Employment or Professional Information

For legal entities (representatives and contacts of customers and/or suppliers):

  • Name of the legal representative and a copy of the power of attorney (if applicable).
  • Company RFC.
  • Tax Address.
  • Contact phone number(s) and email address.
  • Company banking information.
  • Regulatory Compliance Documentation

It is understood that the Data will at all times be processed in accordance with the principles and requirements set forth in the Law.

3. Purposes of Data Processing

The purpose of collecting the Data, as already established in the previous section, is to support institutional processes related to its production and/or commercial operations, such as research, evaluation, selection, competitive recruitment, procurement of goods and/or services and/or employees, location, determination of compensation or remuneration, etc.

If you do not want your data to be used for secondary purposes, you can notify us by email at: datospersonales@gtrimex.mx.

4. Transfers of Personal Data

TRIMEX GROUP may disclose and/or transfer the Data in accordance with the terms authorized by law, to both individuals and legal entities, whether domestic or foreign. If you, as the Data Subject, sign this notice or do not exercise your right to object as provided in this privacy notice, it will be understood for all relevant legal purposes that you, as the Data Subject, authorize, if necessary and at the discretion of GRUPO TRIMEX, the assignment and/or transfer of your Data. The recipients of such Data will be subject to the provisions of this privacy notice.

In light of the foregoing, GRUPO TRIMEX may need to transfer the Data to third parties with whom it has business or professional relationships, solely for the purpose of having them perform, on behalf of GRUPO TRIMEX, tasks related to its production or commercial operations, such as research, evaluation, selection, competitive bidding, and the procurement of goods and/or services and/or employees.

These third parties will receive the Data solely for the purpose of providing such services, within the scope of those services and/or as information necessary for the fulfillment of the commercial or professional relationships agreed upon with GRUPO TRIMEX, and will comply with the terms of this privacy notice and the law.

GRUPO TRIMEX will select only those third parties that formally commit to implementing the necessary security measures to ensure an adequate level of privacy for the Data. GRUPO TRIMEX will be responsible for notifying third parties of the content of this notice, as well as of any modification or deletion of Data resulting from the exercise of their rights.

For further clarification and by way of example, the Data may be transferred to:

  • Health, prosecutorial, judicial, or regulatory authorities, when necessary to comply with legal obligations (SAT, Ministry of Health, courts and tribunals, etc.).
  • Internal or external auditors for certification, quality control, safety, or regulatory compliance processes.
  • Banks, for payment processing.
  • Logistics or transportation companies, solely for coordinating product deliveries or pickups.

These transfers do not require consent under the law. Any additional transfers will be made only with your prior authorization.

5. ARCO Rights and How to Exercise Them

GRUPO TRIMEX is responsible for the collection, storage, and processing of the Data.

You may at any time exercise your rights of access, rectification, erasure, or objection (in whole or in part, or regarding restrictions on use, disclosure, or transfer) regarding your Data by submitting a written request to GRUPO TRIMEX, Personal Data Protection, which must include the following information:

  • Account Holder's Name
  • Official identification or a document proving identity.
  • Description of the right to exercise.
  • Email
  • Phone number

It must be submitted/served at the following address: 191 Manuel Ávila Camacho Boulevard, Col. Los Morales, Polanco, Miguel Hidalgo District, Mexico City, ZIP Code 11510, during business days and hours, or by sending a request via email to datospersonales@gtrimex.mx.

The Data Controller will respond to the request regarding ARCO rights within the timeframe established by the LFPDPPP.

6. Data Retention and Deletion

The data will be retained only for as long as necessary to:

  • To fulfill the commercial and/or employment relationship;
  • Comply with tax or regulatory requirements in the food industry;
  • Traceability and food safety purposes (where applicable).

Once these periods have expired, the data will be blocked and subsequently deleted in accordance with applicable law.

7. Safety Measures

The company implements administrative, technical, and physical controls to protect information against loss, unauthorized access, misuse, alteration, or destruction.

8. Notification of Security Breaches

In the event of a breach that compromises personal data, the data subject will be notified immediately, with the following information provided:

  • Nature of the incident;
  • Compromised data;
  • Corrective actions implemented;
  • Recommendations for mitigating effects;
  • Support measures to protect their rights.

9. Changes to the Privacy Notice

Any changes to this Privacy Notice will be posted on our website, https://gtrimex.mx/, as well as on the current and future websites of the companies in the TRIMEX GROUP.

The updates will take effect on the date they are published.

Use of Cookies, Web Beacons, and JavaScript

Cookies are small pieces of information automatically sent by our website and stored in your browser. This allows the website to access this information to track the user’s previous activity and streamline certain processes, such as maintaining the session or identifying which sections of the site the user has already visited.

Web beacons, in conjunction with web analytics JavaScript code, allow us to store information about usage patterns on our website. Please be advised that we use these tools to collect statistical information such as the following:

Browser type and operating system, web pages viewed, source of the visit, IP address used to access the site, time spent on our site, and other statistical data.

Cookies, JavaScript, and other tracking and monitoring technologies can be disabled; however, disabling them may prevent the website or some of its features from functioning properly.

10. Authority

If you believe your rights have been violated, you may file a complaint with the Secretariat for Anti-Corruption and Good Governance, the competent authority under the 2025 amendment to the Federal Law on the Protection of Personal Data Held by Private Parties.

11. Consent

We accept as our own the obligations set forth in this Notice regarding the proper use of personal data and sensitive personal data that we may come to know as a result of our professional and/or commercial relationship with said company(ies), which we will treat as confidential information that may not be reproduced or disclosed to any third party without the prior written consent of GRUPO TRIMEX.

Date of last modification: December 15, 2025.