In terms of the Federal Law on the Protection of Personal Data in the Possession of Private Entities (“LFPDPPP” or “Law”) and other applicable laws, Terminal de LNG de Altamira S. de R.L. de C.V., (“TLA”), as well as its accredited personnel, collect information, and some of your Personal Data and Sensitive Personal Data as defined in the Law (“Data”) for the purposes set forth in the documents, messages and/or communications connected with such relationship, in the terms set forth in this Privacy Notice (“Notice” or “Privacy Notice”).

In accordance with the LFPDPPP, Terminal de LNG de Altamira S. de R.L. de C.V. shall be liable (“Liable Party”) for the aforementioned Data and its transfer to its affiliates, related companies or third parties contracted thereby in order to perform services on behalf or in favour of TLA, in Mexico or abroad, indicating as the address for the purposes of this Notice the one located at Rio Palmas s/n, Col. Puerto Industrial. Altamira, Tamaulipas, C.P. 89603, México.

By exercising this relationship, You consent to the processing of your Data for such purposes in accordance with these terms and conditions by considering You to be the Data Holder in terms of the Law, regardless of whether it is explicitly submitted, for the purposes of this Privacy Notice, it is understood that You have understood and accepted its terms by giving your tacit or express consent to the collection and processing of your Personal Data. The above in accordance with the LFPDPPP.

Only persons over 18 years of age may consent to their Data.

Your Data is treated as strictly confidential, being used for any of the following main purposes:

1. Identify, locate, communicate or contact you.
2. Send You information, allow You to download information, and respond to your comments.
3. Acts related to the services that may be provided in the Mexican Energy Sector in accordance with the Hydrocarbons Law and all the legal or regulatory provisions that implement or relate thereto.
4. Statistically aggregate the supply and demand of energy market products and services of the United Mexican States, in a strict and absolutely confidential manner. Such aggregations do not contain sensitive data, nor will they be outsourced or commercialised by consisting of Confidential Information obtained and managed by TLA.
5. Assessment of likely labour, commercial or service relations, or their execution, if applicable, potential administrative or judicial processes involving the Data Holder, etc.
6. Ensure compliance with all kinds of legal obligations.
7. Send You notifications regarding changes to this Notice.

TLA may collect all or some of the following Data:

1. Identification Date: full name, place and date of birth, nationality, age, marital status, gender, image, legal representative, education and/or professional profile, profile your client.
2. Contact Data: address, e-mail address, landline and mobile phones.
3. Profile and/or commercial or legal or regulatory interests, geographic location, or other Data to define your interaction with TLA.

Your Data can also be collected by the company through all social networks (Twitter and LinkedIn, among others), short message services (SMS) and Internet instant messaging systems (WhatsApp, Telegram, Signal, Google Meet, Microsoft Teams, among others).

Similarly, during your visit to TLA websites, TLA may automatically collect the following information:

1. The domain and server from which You access the Internet.
2. The Internet address of the site from which you linked directly to our site, if any.
3. The date and time You entered our site, how long You stayed on the site, and which areas of the site you visited.
4. Your Internet Protocol Address (IP address).
5. Your computer operating system and browser software.

As the Holder, it is your responsibility to ensure that the Data provided to TLA is accurate and complete, and to communicate to TLA any changes in the Data so that the obligation to keep the information up-to-date can be complied with.

The Data is obtained and stored in our computer services.

TLA may employ third parties to handle these execution measures; however, no Data will be outlined in order to define the individual identity of any visitor. Such third parties must observe our privacy standards and provide us with only the information in its entirety, in order to use it only for the purposes for which the third party was contracted, and then destroy that information.

The temporality of the handling of Personal Data and/or Sensitive Data, unless the Law defines another assumption, will be indefinite, starting from the date on which the Data was provided to TLA.

Once You transfer your Data to TLA, it will be kept on secure technological means, access to which is limited only to individuals and/or legal entities with whom TLA has a legal relationship; thus, the privacy and confidentiality of your Data are safeguarded through administrative, legal, technical, and physical security measures, which together offer reasonable protection against damage, loss, unauthorised alteration, destruction, dissemination, use, access, or processing.

In the event of any breach or intrusion in the safety measures mentioned in the preceding paragraph, which significantly affects the wealth or moral rights arising from or directly related to your Personal Data held by TLA, this will be communicated to You through the means of contact that You have previously provided to us, in this way, You will be in the position of freely exercising the relevant measures and remedies to carry out the defence of your rights.

In the event that any authority requires the transfer of the Data, TLA may share the Data in accordance with the terms established by the Law.

You, as the Holder of your Data, under the terms of the Law, have the right to exercise the following rights of Access, Rectification, Cancellation or Opposition (“ARCO Rights”), under the following general guidelines:

1. Access your Data held by TLA and the details of its processing, as well as know this Privacy Notice.
2. Rectify it when it is inaccurate or incomplete.
3. Cancel it when You consider that it is not required for any of the purposes set forth in this Notice or consider that it is used for purposes not consented to.
4. Oppose the processing of your Data for specific purposes or limit its use or disclosure.

If you wish to exercise the ARCO Rights granted by Law, You must submit a request in writing, electronic, or by telephone (“Request”), to the Terminal de LNG de Altamira S. de R.L. de C.V., at the address indicated in this Notice or at the e-mail address tla.datos.personales.mx@lngaltamira.com. If TLA does not have a statement from you, it will freely select a means to send you follow-up information on your Request.

The exercise of ARCO Rights is free of charge, the Holder must cover only the costs of shipping, reproduction and, if necessary, certification of documents.

The processing of your Data will be carried out in accordance with this Notice, until You express your opposition in writing by means of one of the means permitted by Law.

You have the right to have TLA inform you of any transfer or disclosure of your Data to a third party and to oppose it. Such opposition may be made against any transfer, regardless of the means by which it is executed, such as in writing, by telephone, e-mail, optical or magnetic means, or whatever the technology allows.

TLA will respond to the Requests of the Holder, after accreditation of their identity, through the presentation of a copy of their identification document and after comparison with the original. Electronic instruments by which the Holder can be reliably identified, or other authentication mechanisms permitted by other legal or regulatory provisions, or those previously recognised by TLA, may also be eligible. The use of an advanced electronic signature or the electronic instrument that replaces it shall exempt the presentation of a copy of the identification document.

In terms of the Law, any Request shall contain the following:

1. The Holder name and address or other means of communicating the response to your Request.
2. Documents that prove the identity or, where appropriate, the legal representation of the Holder.
3. The clear and precise description of the Data in respect of which the ARCO rights are sought.
4. Any other element or document that facilitates finding the Personal Data.

In the event that the Holder does not indicate their address, the Request will be deemed not presented. Noting the above by TLA.

TLA shall have twenty business days from the date of the Request or the date on which the Holder complies with any information request made by TLA, to inform such Holder whether or not the Request is accepted.

If the Request is accepted, it will be effective within fifteen business days. The periods referred to may be extended only once for an equivalent period, provided that the circumstances of the case justify it.

The response to the Holder will only relate to Personal Data specifically stated in the Request.

Holders may revoke consent to the processing of their Data at any time, for which they must submit a Request to TLA.

If You wish to stop receiving communications from us, You may request it via email at tla.datos.personales.mx@lngaltamira.com

If TLA needs to use your Data for purposes other than those agreed upon under the legal relationship defined with You, you will be notified and explained what new uses are intended in order to use the Data in order to receive your authorisation.

TLA provides its suppliers, contractors or service providers with a copy of this notice and will transfer only the Data they need to perform the services provided and will not use it for other purposes.

TLA reserves the right to modify this Privacy Notice at any time to comply with legislative updates, jurisprudence, internal policies, new requirements for the provision of services or any other legally acceptable cause.

Any modification and updating of this Notice will be available on the platforms or facilities in which it is used (TLA website (https://lngaltamira.com/tla20/aviso), Suppliers Portal, physical facilities and offices of TLA, etc.).

This Privacy Notice, as well as TLA general handling of the Law made by TLA, is governed by the legislation in force and applicable in the United Mexican States; therefore, any dispute arising as a result of its application must be heard before the competent courts in Mexico City.