Colliers Lomelín S.A. de C.V.

Based on the provisions of articles 15, 16, and 17 and others related and applicable of the Federal Law on Protection of Personal Data Held by Private Parties, as well as its Regulations, and the Privacy Notice Guidelines, published by the Ministry of Economy in the Official Gazette of the Federation dated August 17, 2013, we inform you that Colliers Lomelín S.A. de C.V. is responsible for this Privacy Notice (hereinafter it will be referred to as “Notice”), which establishes the terms and conditions under which the personal data of the Holder that you provide will be processed, which is why we request and/or recommend that you learn the following information:

Your personal information will be used for the following purposes: to provide the services and products you have requested; notify you about new services or products that are related to those already contracted or acquired; notify you about changes in them; prepare studies and programs that are necessary to determine consumption habits; carry out periodic evaluations of our products and services in order to improve their quality; evaluate the quality of the service we provide, and in general, to comply with the obligations we have contracted with you.

For the aforementioned purposes, we need to obtain the following personal data:

• Full name
• Landline and/or cell phone
• Email
• Address

For better understanding in the treatment of this Notice, we provide you with the definitions in accordance with article 3 of the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, the guidelines of the Privacy Notice, and with this Notice it will be understood :

Personal Data.- Any information concerning an identified or identifiable physical or moral person.

Sensitive Personal Data.- Those personal data that affect the most intimate sphere of its owner, or whose improper use may give rise to discrimination or entail a serious risk for it. In particular, those that may reveal aspects such as racial or ethnic origin, present or future state of health, genetic information, religious, philosophical and moral beliefs, union affiliation, political opinions, sexual preference are considered sensitive.

Arco Rights.- Rights of access, rectification, cancellation, and opposition provided for in the Federal Law on Protection of Personal Data Held by Private Parties.

Manager.- Natural or legal person who, alone or jointly with others, processes personal data on behalf of the person in charge.

Law.- Federal Law on Protection of Personal Data Held by Private Parties.

Guidelines.- Privacy Notice Guidelines.

Regulations.- Regulations of the Federal Law on Protection of Personal Data Held by Private Parties.

Transfer and Remission of data.- The communication of personal data between the person in charge and the person in charge inside and outside the national territory.

Responsible.- Private physical or moral person who decides on the processing of personal data, who in this Notice is Colliers Lomelín, S.A. de C.V.

Owner.- Physical or moral person to whom the personal data corresponds.

Identity and address of the person in charge.- The person in charge of the personal data that you provide is Colliers Lomelin, S.A. de C.V., who has his address at Avenida Paseo de la Reforma 505 Floor 44 Suite “A”, Colonia Cuauhtémoc, Alcaldía Cuauhtémoc, Mexico City, C.P. 06500.

Arco Rights and/or revocation of consent.

You or your legal representative may exercise any of the rights of access, rectification, cancellation, or opposition (hereinafter “arch rights”), as well as revoke your consent for the processing of your personal data by sending an email to the Marketing Department responsible for the Protection of Personal Data email address Contacto.Privacidad@colliers.com. In this sense, the request is in a free format which must contain and accompany at least the following elements:

Name of the Holder, address, or other means to respond to your request.

The documents that prove your identity (simple copy in printed or electronic format of your voter identification card, passport, etc.) or, where appropriate, the legal representation of the Holder (simple copy in printed or electronic format of powers, or power of attorney with signature handwritten signature of the Mandatory Holder, and their corresponding official identifications.The clear and precise description of the personal data with respect to which they seek to exercise any of the arc rights and, any other element or document that facilitates the location of the Holder’s personal data.

In the case of requests for the rectification of personal data, the Owner must clearly and precisely indicate the modifications to be made and carry the documentation that supports their request.

Limitation of the Use and Disclosure of the data.

You may limit the use or disclosure of your personal data by sending your request to the address Contacto.Privacidad@colliers.com where you can explain what data and your desire that they not be used for communications or promotions by the Responsible.

Important: Any modification to this Privacy Notice can be consulted at http://www.colliers.com/

Data transfer.

The person in charge requires the transfer of personal data within the Organization (Colliers International). The person in charge undertakes to ensure that all the legal principles of protection regarding the transfer of your personal data are complied with and expresses his commitment to respect this privacy notice at all times, by us and by our business partners.

By virtue of this privacy notice, the owner accepts the transfer of their data, with the understanding that: (i) each person in charge intends to transfer personal data to national or foreign third parties, other than the person in charge, to whom said person in charge will communicate this privacy notice. privacy and the purposes to which the owner subjected his treatment; and (ii) the third-party recipient will assume the same obligations that correspond to the person in charge who transferred the data, for which reason the data will be processed in accordance with what is agreed in this privacy notice.

Provisional section in Privacy Notice in the face of the COVID-19 pandemic

In order to deal with the health emergency caused by the COVID-19 pandemic and in compliance with the official provisions on the matter, personal and/or sensitive data will be collected provisionally from Colliers International employees and collaborators, visitors to our offices, as well as third parties related to all of these.

The following categories of personal and/or sensitive data will be processed:

Identification, age, municipality of residence, telephone number, company in which you work, information regarding behaviors that you have carried out and are directly related to the detection and care of COVID 19; Sensitive health data (Information related to your past, present and future state of health).

Personal and/or sensitive data will be processed for the following purposes:

• Provide you with immediate help or attention that you may need during your work or stay at any of the Colliers International offices nationwide;
• Apply the necessary sanitary measures to take care of your health and that of all collaborators in our offices;
• Carry out the necessary preventive and corrective actions for the prevention, attention and mitigation of COVID 19, as well as to guarantee the safety and health of third parties. The foregoing includes, if necessary, informing people with whom you may have been in contact so that they can take the necessary measures to care for your state of health;
• Follow up on your health status;
• In the case of an employee or collaborator of Colliers, if applicable, determine if they are able to continue performing their job functions;
• In the case of a visitor to our offices, if applicable, determine whether or not access to them is authorized;
• Collaborate with competent authorities in the care of health contingencies;
• Contact their relatives and/or authorized third parties in case of emergency and/or to follow up on their clinical condition and/or to provide medical guidance.

To fulfill the purposes described above or others required by law or by the competent authorities, your personal data may be transferred, exclusively related to COVID-19, without requiring your consent, to the following third parties:

• Competent national authorities when necessary, including local and federal health authorities;

• Hospitals and health clinics;

• Subsidiary companies and affiliates of Colliers Lomelin, S. A. de C. V. This transfer is based on the fact that the companies operate under the same internal processes and policies regarding privacy.

In case you have provided personal data of other holders, it is important to remind you of your obligation to inform them regarding this delivery, as well as the places where the Privacy Notice is available for consultation.

Last update: July 22, 2020