Employee Privacy Notice

In compliance with and adhering to the provisions established in the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations, we disclose the following points:

Who is responsible for the personal data you provide?

For the protection of personal data of the holders, Manao, S.A. de C.V., is responsible for the use and handling of this data, with its address for receiving notifications at José Ma. Morelos Poniente, 201-C, Col. Centro, Tulancingo, Hidalgo, CP 43600.

For what purposes will we use your personal data?

The personal data we collect will be used for the following purposes that are necessary for your hiring:

Preparation of your employment file.
Designation of beneficiaries in life insurance and contact in case of emergency.
Creation of your employee profile for the management of your employment.
Payroll services administration.
Preparation and presentation of the economic proposal.
Issuance of credentials.
Conducting medical check-ups.
Training and delivery of acknowledgments.
Administration of physical access to Manao's facilities.
Management of performance and personal and professional development tools.
Administration of electronic access to Manao's systems and infrastructure.
At the end of the employment relationship, to carry out all necessary termination procedures.
Compliance with the provisions of the employment contract you sign and all those that apply according to the Federal Labor Law, IMSS, and INFONAVIT, among others.
Providing job references as permitted by applicable laws.
Enrollment in insurance and/or your family members, according to agreements with different insurers.
To carry out all necessary activities for the administration and management of your job position and other labor benefits.

To carry out the purposes described in this Privacy Notice, we will use your identification, contact, employment, academic, immigration (in the case of foreigners), property and/or financial data, and data related to your family members. By providing personal data related to your family members, you acknowledge having their consent for Manao to process their data to contact them.

In addition to the personal data mentioned above, for the purposes informed in this Privacy Notice, we will use your personal data considered sensitive and that require special protection, such as blood type, medical contraindications, allergies, or special service requirements.

In terms of the provisions of Articles 8 and 9 of the “Law,” 15 Section III, 16, and 19 of the “Regulation,” when required, you must give your express and written consent for the processing of your sensitive personal data through this Privacy Notice.

I authorize the sensitive data provided to be used for the purposes described in this Privacy Notice.

Manao will treat your information and personal data as confidential and will maintain preventive measures aimed at protecting it against loss, misuse, unauthorized access, alteration, or destruction, and will not disclose it for any purpose other than that established in this Privacy Notice.

The above will be obtained through in-person visits to our offices, directly through the exchange of information via email, or indirectly through job boards, references, and any other available or legally permitted source of information.

Manao informs you that the data may be used for the following secondary purposes:

To improve and promote the work environment and climate (such as disseminating congratulations and other celebrations and special days).
Your personal image (whether photo or video) may be used for the preparation of informational and promotional material.
Sending marketing communications.
Providing job references and information about your job performance to third-party companies, even after the legal relationship has ended, as permitted by applicable laws.

If you do not wish your personal data to be processed for these additional purposes, you can express your refusal for the use of your data by indicating it in writing in this notice or, if you prefer, by sending an email to contacto@manao.mx, where we will respond to your request.

With whom can we share your personal data?

The requested personal data may be transferred to public and private entities to comply with legal obligations applicable to this company.

Recipient Reason Data Shared Requires Consent

Law firms Specialized legal advice Identification, contact, financial, No

in contract review and employment data.

regulatory compliance.

Consultants in different Training, advice for the Identification and No

subjects implementation of regulations employment data.

civil protection, and/or

identification of areas of

opportunity and continuous

improvement.

SAT Compliance with tax Tax and financial data. No

obligations.

Insurers Insurance management Identification, contact, No

and/or reimbursements and employment, property, financial

medical service. data, and family members.

Labor and other Compliance with legal Identification and contact data. No

competent authorities provisions.

Logistic support service Conducting events, recording, Identification and contact data. No

providers for events, and photographing events,

conferences, video employee training, and

recording, photography, awarding recognitions.

and training

Subsidiary companies Assignment of responsibilities Identification and contact data. No

and execution of administrative

activities.

If we do not receive an express opposition from you for your personal data to be transferred in the manner and terms described above, we will understand that you have given your consent for it.

In cases provided by law, it is possible to transfer data without the holder's consent when established by a law or treaty to which Mexico is a party, when necessary for medical prevention or diagnosis, the provision of health care, medical treatment, or the management of health services, under a contract concluded or to be concluded in the interest of the holder by the responsible party and a third party, to fulfill obligations and responsibilities arising from the legal relationship between the responsible party and the holder, or when necessary or legally required for the safeguarding of a public interest, or for the procurement or administration of justice as indicated in Article 37 of the LFPDPPP.

The recipients of the personal data, managers, and/or third parties assume the same obligations as the responsible party in accordance with the terms defined in this privacy notice.

How can I limit the use and/or dissemination of my personal data?

You can limit the use and disclosure of your personal data at any time by contacting contacto@manao.mx or requesting your registration in our exclusion list.

Are my data used on a website?

We inform you that Manao has a website and uses only technical cookies that allow us to have a better experience in viewing our website on any electronic device, so no information is collected through the use of these technologies.

How can you exercise your Rights of Access, Rectification, Cancellation, or Opposition (ARCO) and/or Revocation of consent?

We inform you that at any time you have the right to access, rectify, cancel, or oppose the processing of your personal data that you have provided to us, as well as to revoke your consent. For this, it is necessary to send a request to the following email contacto@manao.mx, where you will be provided with more information on the subject, and your request will be attended to appropriately.

1. Information and/or documents necessary for exercising ARCO rights:

Date of request.
Name and address of the holder.
Telephone number or email address for contact and notifications regarding the request.
Clear and precise description of the personal data for which any of the aforementioned rights is sought to be exercised.
Copy of the voter ID, official identification with a photo of the holder, and in case of requiring the support of a legal representative, provide a copy of the official identification and the document accrediting the legal representation of the same.
Contact details (name, address, email, and/or phone) of the holder.

2. Procedure for exercising ARCO rights and/or revocation of consent:

As the data holder, you can enforce your ARCO rights and/or revocation of consent as long as you submit the corresponding request and the documents mentioned above in copy via email to contacto@manao.mx.
Upon receiving your request, if the information provided is insufficient or incorrect, or if it is not accompanied by the required documents, we may require them for the first time within five business days following the receipt of your request, adding the necessary elements or documents to process it.
As the data holder, you will have ten business days to address the requirement, counted from the day following its receipt. If no response is given within that period, the corresponding request will be considered not submitted. If the requirement is addressed, the period for the response will start the day after its receipt.
Upon receiving your request and finding it complete, we will conduct a feasibility analysis, having twenty business days for it and fifteen more business days to, if appropriate, perform the corresponding operational-administrative activities to attend to your request.

Changes to this privacy notice

This privacy notice may undergo modifications, changes, or updates derived from new legal requirements, our own needs for the services we offer, changes in our privacy practices, changes in our business model, or other causes.

We commit to keeping you informed about any changes to this privacy notice through its display at our previously cited facilities and on our website: https://www.manao.mx.