Comprehensive Privacy Notice – Activities, Contests, Events, and Workshops

Bello, Gallardo, Bonequi y García, S.C. (hereinafter the “Data Controller”) is the entity responsible for your personal data. The Data Controller designates the following address for service of process and receipt of notifications: Avenida Santa Fe, No. 428, Tower 1, 14th Floor, Cuajimalpa de Morelos Municipality, Postal Code 05300, Mexico City, Mexico.

For the purposes set forth in this Privacy Notice, the Data Controller may process the following categories of personal data:

• Identifying and contact information
• Photographic and video data
• Personal information
• Data on social conditions
• Academic and Professional Background

Bgbg does not request sensitive personal information for the purposes listed in this Privacy Notice. As the data subject, you should refrain from providing this type of information.

In connection with the organization and conduct of bgbg activities, contests, events, or workshops, you agree and acknowledge that we may process your personal data for the following purposes:

Primary objectives:

1. Provide participants with the guidelines and relevant information regarding activities, contests, events, and workshops.
2. Streamline the participant registration process.
3. Register to participate in the activities, contests, events, and workshops organized by bgbg.
4. Manage your participation in the activities, contests, and events organized by bgbg.
5. If selected, you will participate in the activities, contests, events, and workshops in accordance with the previously shared guidelines.
6. If you win any of the activities, contests, events, or workshops organized by bgbg, we will award the prize and handle its distribution.
7. Communication via physical or digital means (including the management of email contact lists) between the participant and bgbg.
8. Statistical and historical purposes regarding the participants.

Secondary purposes:

1. During activities, contests, events, or workshops, take photos and/or videos to be used for promotional, informational, and outreach purposes regarding bgbg’s activities, contests, events, and workshops across various media, including print, digital, and social media.

If you change your mind, you may object to the processing of your personal data for the secondary purpose indicated above, and even withdraw your consent for such purposes. In such cases, you may communicate your decision through the procedure outlined in the “ARCO Rights” section of this Privacy Notice.

Refusing to allow your personal data to be used for secondary purposes shall not be grounds for denying your registration or participation in any of the activities, contests, events, or workshops organized by bgbg.

Your personal data may be transferred within Mexico or abroad to the following categories of recipients and for the purposes identified:

• Federal, state, and/or municipal governments and authorities; commissions; institutes; regulatory agencies; judicial or administrative authorities; and domestic and/or foreign government entities, for the purpose of complying with reporting and transparency obligations and preventing fraud, crimes, or other illegal activities, as well as for complying with judicial or administrative orders issued by competent authorities.
• Universities or educational institutions, in order to notify them of your registration, confirmation, and participation in our activities, contests, events, and workshops.

The law stipulates that the aforementioned data transfers do not require your consent to be carried out, but bgbg is required to inform you of them. Any transfer of your personal data that does require your consent will be disclosed in advance through updates to this Privacy Notice and prior to the transfer of such data.

The law governs the ARCO rights you have as a data subject. These rights include:

• Access: Your right to know what information we have about you, as well as how we use or share it.
• Correction: Your right to request, at any time, that your data be corrected if, for any reason, it is incorrect, inaccurate, or incomplete in our databases.
• Deletion: the right to request that we delete your information, starting with its blocking and followed by its permanent deletion.
• Objection: Your right to provide a legitimate reason why we should stop using your personal data.

To exercise any of your ARCO rights, you must submit a request. To exercise any of your ARCO rights, you must submit a request addressed to our Personal Data Department via the following email address: datospersonales@bgbg.mx.

The application must include or be accompanied by:

• Your full name and address, or another way to contact you regarding the response to your request,
• A copy of your ID (or a power of attorney, if someone is acting on your behalf),
• A description of the right you wish to exercise, along with related information, and
• Any other information you consider important for processing your request or locating your personal data.

Bgbg will respond to your request within 20 (twenty) business days of the date it is submitted and received. If the request is deemed valid, we will process it within 15 (fifteen) business days of the date we notify you of our response. If the information and/or documentation provided in your request is incomplete, incorrect, and/or insufficient, or if the necessary documents to verify your identity or legal representation are not included, we will ask you to correct and remedy these deficiencies so that we may process your request. You will have 10 (ten) business days to comply with the request and correct the application; otherwise, it will be deemed not submitted.

By using electronic means to exercise your ARCO rights, you authorize bgbg to respond to your request via the same means, unless you clearly and explicitly specify another method of contact in your request.

The right to erasure is not absolute. Please note that bgbg must retain certain information to comply with various legal obligations and, in doing so, may share your personal data with other entities or organizations. In such cases, you may need to exercise your right to erasure by contacting the entity that received your personal data.

In some cases, you may withdraw your consent to the processing of your personal data; however, this revocation cannot have retroactive effect; that is, it cannot affect situations, procedures, or transfers carried out prior to the revocation of your consent; nor can it apply in cases where such revocation would result in a breach of general public policy provisions establishing the obligation to continue processing your personal data for a specified period.

You can send a request to withdraw your consent to the following email address: datospersonales@bgbg.mx, following the instructions for exercising your rights

You may restrict the use or disclosure of your personal data by submitting a request to our Personal Data Department, following the procedure and instructions applicable to the exercise of ARCO rights.

Bgbg has the means and procedures in place to ensure that certain of your data is included in our own opt-out lists, thereby preventing the disclosure of your data. In such cases, we will provide data subjects who request registration with the corresponding proof of registration.

Bgbg reserves the right to modify, update, expand, and/or otherwise change the content and scope of this Privacy Notice at any time and at its sole discretion; in such cases, we will post such changes on the website https://bgbg.mx/, under the Privacy Notices section. At any time, you may request a copy of the latest version of this Privacy Notice from our Personal Data Department via the following email address: datospersonales@bgbg.mx.

The Privacy Notice governing the processing of your personal data is the one published in our Privacy Notices section on the following website: https://bgbg.mx/.

If you have any questions or need clarification regarding this Privacy Notice, please contact our Personal Data Department at the following email address: datospersonales@bgbg.mx.