Nordstern Technologies
Privacy Notice

Identity and Domicile of the Controller

Nordstern Technologies, S.A. de C.V. in Mexico, Nordstern Technologies Europe SL. in Spain, (hereinafter Nordstern Technologies or the CONTROLLER), with domicile in Mexico: Londres 40, Colonia Juárez, Alcaldía Cuauhtémoc, Mexico City, C.P. 06600 and in Spain: Calle Mario Vargas Llosa, 8, 28229 Villanueva del Pardillo - Madrid, Spain, through its ISM (Information Security Manager) or data protection delegates, and in terms of the provisions of the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations, issues this Privacy Notice regarding the processing of personal data that it collects or may collect as a result of your interest in being our client or supplier.

Nordstern Technologies informs you that these data will be treated in accordance with the provisions of Regulation (EU) 2016/679, of April 27 (GDPR), and Organic Law 3/2018, of December 5 (LOPDGDD).

About the Personal Data we collect or may collect

At Nordstern Technologies, we care about having a close and active relationship with our clients; therefore, derived from your interest in our services, we will collect or may collect the following personal data: company name, full name, address, phone number (landline and/or mobile), email, IP address, location, and contact information through social networks.

Additionally, we inform you that if you attend any of our events, you may be photographed and/or video-recorded. In this sense, by entering any of the events organized by Nordstern Technologies and/or the brands of Nordstern Technologies' partners, you consent to Nordstern Technologies using your image and/or voice in one or more photographs and/or videos and/or other supporting materials that it considers pertinent for the purposes detailed below.

We inform you that we will treat and safeguard your personal data based on the principles of lawfulness, quality, consent, information, purpose, loyalty, proportionality, and responsibility, enshrined in the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations.

Purposes of the processing of your Personal Data

We will process the personal data described in the preceding paragraph for the following purposes:

• a) In your case, allow the download of content on our website relating to the services we offer.
• b) Allow access to the promotions and raffles we offer to those interested in our services.
• c) Customize information about the services that may be most appropriate to the needs of our clients and potential clients.
• d) Be able to contact you regarding a possible commercial or business relationship with you.
• e) In case you acquire any of our products, have your contact information to provide you with advice and follow-up as our client.
• f) Maintain communication in case you become one of our suppliers.
• g) Sending of advertising commercial communications by e-mail, fax, SMS, MMS, social networks, or any other electronic or physical means, present or future, that makes it possible to carry out commercial communications. These communications will be made by the CONTROLLER and will be related to its products and services, or its collaborators or suppliers, with whom it has reached a promotion agreement. In this case, third parties will never have access to personal data.
• h) Conduct market research and statistical analysis.
• i) Process orders, requests, respond to queries or any type of request made by the USER through any of the contact forms made available on the CONTROLLER's website.
• j) Send the online newsletter about news, offers, and promotions in our activity.

Why can we process your personal data?

Because processing is legitimized by Article 6 of the GDPR as follows:

• With the USER's consent: sending commercial communications and the newsletter.
• For the legitimate interest of the CONTROLLER: conduct market research, statistical analysis, etc., and process orders, requests, etc., at the USER's request.

How long will we keep your personal data?

They will be kept for no longer than necessary to maintain the purpose of the treatment or as long as there are legal prescriptions that dictate their custody. When it is no longer necessary for this, they will be deleted with adequate security measures to guarantee the anonymization of the data or their total destruction.

To whom do we provide your personal data?

No communication of personal data to third parties is foreseen except due to a legal obligation or, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the CONTROLLER has signed the confidentiality and data processor contracts required by current privacy regulations.

What are your rights?

The rights that assist the USER are:

• Right to withdraw consent at any time.
• Right of access, rectification, portability, and deletion of your data, and the limitation or opposition to its processing.
• Right to file a claim with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.

Mandatory or optional nature of the information provided

USERS, by filling in and submitting the data in the fields marked with an asterisk (*) on the contact form or presented in download forms, expressly, freely, and unequivocally accept that their data is necessary for the provider to meet their request, being voluntary to include data in the remaining fields. The USER guarantees that the personal data provided to the CONTROLLER are truthful and is responsible for communicating any changes to them.

The CONTROLLER informs that all data requested through the website are mandatory, as they are necessary to provide optimal service to the USER. In the event that not all data is provided, it is not guaranteed that the information and services provided will be completely tailored to your needs.

Options and means to limit the use and/or disclosure of your Personal Data

At Nordstern Technologies we specialize in data protection and network security, which is why we are committed to safeguarding your personal data under strict administrative, technical, and physical security measures that have been implemented in order to protect them against damage, loss, alteration, destruction, unauthorized use, access, or processing.

How to limit the use or disclosure of personal data:

In case you want to limit all or part of the Personal Data you provide us, you can do so for free, through the format referred to below:

• a) You must send an email to the following address privacidad@nst.mx indicating in the "Subject" "Limitation of Use or Disclosure", please include in the message your full name, address, and a phone number where you can be reached, in order to send you the respective application form.
• b) You must send along with the format a copy of your valid official identification with photograph, and additionally, if you are the proxy of the owner, a copy of the public deed or power of attorney granted before two witnesses, stating your powers to act on behalf of the owner. (You may be required to provide the original of such documents for collation when delivering the respective response and making it effective).
• c) The ISM must respond to your request within twenty business days after the date on which it receives the email with the duly completed format and the requested documentation.
• d) The ISM will have fifteen business days after the response to your request has been communicated to make the response effective, having to inform the owner.
• e) As long as there is no legal obligation that prevents the origin of the limitation, you will be included in our exclusion list and we will not process your Personal Data for these purposes, unless you request it in writing.

For more information, please contact the phone numbers: (55) 5514 1367 - (55) 8055 9195 or the email privacidad@nst.mx.

Means to exercise ARCO rights

You can exercise your rights of Access, Rectification, Cancellation, or Opposition of your Personal Data, commonly called ARCO rights at any time, through the formats that you can request at the following email: privacidad@nst.mx, or by requesting it by telephone to our ISM at (55) 5514 1367. You can consult the procedure to exercise any of these rights in the instructions that include the format that will be delivered to you for such purposes.

Transfer of Personal Data

If you are a client or prospect, your personal data may be transferred to third parties with whom we maintain commercial relations in order to offer you customized services as well as to be able to offer you better conditions regarding the services of your interest. If you are a supplier, your personal data may be transferred to third parties interested in your products or services. The above, as long as you grant us your consent to make such transfers.

Modifications to this Privacy Notice

Should it be necessary to make modifications to this Privacy Notice, Nordstern Technologies will make it known to you by sending an email to the account you have provided us. Notwithstanding the foregoing, in case of any doubt, you can consult the current Privacy Notice at any time on the website: http://nordsterntech.com/

Security Measures

In accordance with what is established in the current regulations on personal data protection, the CONTROLLER is complying with all the provisions of the GDPR and LOPDGDD for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, by which they are processed in a lawful, fair, and transparent manner in relation to the interested party and are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

The CONTROLLER guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of the USERS and has communicated the adequate information to them so they can exercise them.