Vallarta Medical Network

At VALLARTA MEDICAL NETWORK (hereinafter referred to as VALLARTA MEDICAL NETWORK) with operational address at Vienna 160, Colonia Versalles, Puerto Vallarta, Jalisco, Mexico, we are responsible for the use and protection of your personal data, and we hereby inform you as follows: PURPOSES OF COLLECTING PERSONAL DATA The personal data we collect will be used for the following purposes, which are necessary for the service you request: Primary purposes:

• To provide you with the products and services requested from VALLARTA MEDICAL NETWORK as a platform for the promotion of medical services (medical appointments, information on medical articles, sale of medical equipment and supplies, referrals for medical personnel, clinics, hospitals, laboratories, etc.).
• To inform you about changes in requested services, prices, availability, and payment conditions for the same.
• Sending information electronically about the products and services requested from VALLARTA MEDICAL NETWORK.
• Providing customer service.
• Verifying the credit card information with which you intend to make or have made payment for the services requested from VALLARTA MEDICAL NETWORK.
• Establishing contact and maintaining communication with you regarding the products and/or services requested from VALLARTA MEDICAL NETWORK.
• Collection management of your possible debts.
• Retention for the provision of future services requested from VALLARTA MEDICAL NETWORK.
• For the identification of the Data Subject.
• Preparing and signing service provision contracts.
• Invoicing for services provided by VALLARTA MEDICAL NETWORK.

Secondary purposes: Likewise, by providing your personal data, you authorize VALLARTA MEDICAL NETWORK to use it for marketing, statistical, promotional, advertising, informative, or prospecting purposes regarding the products and/or services that VALLARTA MEDICAL NETWORK handles, as well as quality surveys in the provision of services, without these being necessary purposes or purposes that give rise to a legal relationship between you and VALLARTA MEDICAL NETWORK, but that allow us to provide you with better attention. If you do not wish your personal data to be processed for these additional purposes, you can communicate this to us, via email to the following address info@vallartamedicalnetwork.com. Refusal to use your personal data for these purposes cannot be a reason for us to deny you the services and products you request or contract with us. PERSONAL DATA SUBJECT TO TREATMENT To carry out the purposes described in this privacy notice, we will use the following personal data:

1. a) Identification data: Information that allows the differentiation of one person from another, such as: name, marital status, handwritten signature, Federal Taxpayers Registry (RFC), Unique Population Registry Code (CURP), place and date of birth, and nationality.
2. b) Contact Information: Information that allows maintaining or entering into contact with its owner, such as: address, email, landline and cell phone.

SENSITIVE PERSONAL DATA We inform you that to fulfill the purposes set forth in this privacy notice, in addition to the personal data mentioned above, the following sensitive personal data, which require special protection, will be collected and processed:

1. a) Financial or patrimonial data: Information concerning an individual relative to their credit card (number, security code, expiration date, address where the statement is received, and a simple copy of the card) and a simple copy of identification to verify the signature.

We undertake to treat them under the strictest security measures to guarantee their confidentiality. In accordance with what is established in articles 8 and 9 of the Law, we require your express consent for the processing of your sensitive, patrimonial, and financial personal data; therefore, before collecting this data, we will ask you to indicate whether or not you accept their treatment, as established by the Law. TRANSFER OF PERSONAL DATA Your personal data may be transferred and processed within and outside the country by persons or entities other than VALLARTA MEDICAL NETWORK, for the following purposes:

We undertake not to transfer your personal data to third parties without your consent, except for the exceptions provided for in article 37 of the Law, as well as to make this transfer under the terms established by said legal provisions. In the event of a transfer, we inform you that VALLARTA MEDICAL NETWORK will take the necessary measures to ensure that the persons receiving them comply with VALLARTA MEDICAL NETWORK’s privacy policies and the purposes contained in this privacy notice. MEANS OF OBTAINING PERSONAL DATA For the purposes set forth in this privacy notice, we may collect your personal data in various ways: when you provide them to us directly, when you visit our website or use our online services, when we obtain information through other public sources permitted by law, as well as when you visit our offices. USE OF COOKIES, WEB BEACONS We inform you that on our website we use cookies, web beacons, and other technologies through which the number and frequency of visitors to the portal and its different areas are collected. This type of information helps VALLARTA MEDICAL NETWORK determine how many of its clients access a certain area and which segments of the site they use, in order to improve its services and ensure that it is as attractive as possible. VALLARTA MEDICAL NETWORK only uses this information statistically. The cookies used by VALLARTA MEDICAL NETWORK do not collect personal information such as usernames or email addresses. Given that the cookies and web beacons we use on our website do not obtain personal data, no procedure is provided to disable them. MEANS AND PROCEDURE TO EXERCISE ARCO RIGHTS At any time, the user will have the right to access, rectify, cancel, and oppose all their personal data. To exercise this right, the user must send an email to info@vallartamedicalnetwork.com. requesting the right to exercise any of the ARCO Rights (access, rectification, cancellation, and opposition to the processing of personal data), the request for access, rectification, cancellation, and opposition must contain and accompany the following:

1. The name of the holder of the personal data.
2. Telephone number and email.
3. A clear and precise description of the personal data regarding which any of the aforementioned rights are sought to be exercised. Any other element or document that facilitates the location of personal data.

IV. Applicant’s identification. From the receipt, VALLARTA MEDICAL NETWORK will have a period of 20 business days to respond to your request, however, said period may be extended for an equal period of time, which will be notified to you, by the means you have indicated to us for such purposes, stating the reasons for such extension, in accordance with article 32 of the Federal Law on Protection of Personal Data Held by Private Parties. SECURITY MEASURES VALLARTA MEDICAL NETWORK has adopted and maintains the necessary security measures, administrative, technical, and physical, to protect your personal data against damage, loss, alteration, destruction, unauthorized use, access, or processing. VALLARTA MEDICAL NETWORK will ensure, with these measures, that the data collected by Internet or magnetic media are free from any damage, loss, alteration, destruction, or unauthorized use, access, or processing. The measures or mechanisms referred to in the previous paragraph are:

1. a) The classification and identification of personal data information.
2. b) Personnel in charge of personal data is trained, capacitated, and updated regarding the protection of personal data.
3. c) There is a private security system that prevents access by unauthorized personnel, which helps to physically protect personal data.
4. d) The databases where personal data are stored have restricted access to only those persons who require access to said databases for the purposes indicated in this Privacy Notice.
5. e) The databases where personal data are stored will be protected by electronic security measures, such as encryption and passwords.

VALLARTA MEDICAL NETWORK will refrain from selling, leasing, or renting your personal data to third parties. If you do not express your opposition to your personal data being transferred, it will be understood that you have given your consent to do so. You may revoke your consent at any time, without retroactive effects, regarding the treatment of your personal data by sending an email to the address info@vallartamedicalnetwork.com. Likewise, you can unsubscribe from our mailing list by clicking on the unsubscribe link found in the VALLARTA MEDICAL NETWORK emails. CHANGES TO PRIVACY NOTICE VALLARTA MEDICAL NETWORK reserves the right to make modifications or updates to this Privacy Notice at any time, in order to attend to new legislation or jurisprudence, internal policies, new requirements for the provision or offering of our services, or market practices. Any modification to this Privacy Notice will be made available to the public through the website https://vallartamedicalnetwork.com/ or, if requested, by email.