PRIVACY NOTICE / PRIVACY POLICY CUSTOMERS & APP USERS In accordance with the provisions of the Federal Law on the Protection of Personal Data in the Possession of Individuals (the "Law"), as well as the requirements of the Apple App Store and Google Play Store, this Privacy Notice is issued in the following terms. I.- RESPONSIBLE FOR PERSONAL DATA For the purposes of this Privacy Notice, Compania Mexicana de Radiologia CGR, S.A. de C.V. (hereinafter CMR) with address located in Fraccionamiento Industrial La Noria S/N, El Marquez, Qro 76240, is responsible for obtaining, storing, use, handling, exploitation, and/or disposal of the personal data that it collects from its Clients and App Users (hereinafter the "Data Subjects"). II.- PERSONAL DATA COLLECTED The Personal Data that the Controller collects from the Data Subjects are, in an illustrative but not exhaustive manner, the following: - Name, address, phone number. - Information collected automatically by our application (e.g., Device ID, IP address, operating system version, app usage statistics, and crash reports). Your personal data is collected through the following means: In person, by telephone, by email, or directly through the use of our mobile application. III.- PURPOSE OF DATA COLLECTION We use the collected information for the following purposes: - To provide, maintain, and improve our services and app functionality. - To communicate with you regarding updates, support, and administrative messages. - To analyze app usage and improve the user experience. IV.- DATA SHARING AND THIRD PARTIES We do not sell your personal data. We may share your information with trusted third-party service providers only to the extent necessary to perform services on our behalf (such as cloud hosting or analytics), under strict confidentiality agreements. V.- DATA RETENTION AND DELETION We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Data Deletion Request: You have the right to request the deletion of your personal data. You can request the deletion of your account and associated data by contacting us at the email provided below, or through the data deletion form provided on our website. VI.- CHILDREN'S PRIVACY Our services and application are not directed to children under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information. VII.- SENSITIVE DATA POLICY The Data Controller, within its commercial policies, does not collect information that under the Law is understood as sensitive data, such as: opinions, religion, sexual preferences, political opinions, among others. CMR supports and promotes diversity and therefore prohibits any discriminatory act or the request for any information that could imply a discriminatory act. VIII.- ARCO RIGHTS & REVOCATION OF CONSENT You may revoke the consent you have given us at any time for the processing of your personal data. To do so, you must submit an application for the exercise of ARCO rights (Access, Rectification, Cancellation, and Opposition). The notification will have a period of 15 business days to be made effective. If your request is deemed appropriate, your data will no longer be processed by CMR. IX.- CHANGES TO THE PRIVACY NOTICE Any changes to this Privacy Notice will be communicated to you through the following means: - Through an email that we will personally send you. - Through announcements in a visible location within the operational areas from the responsible party. - Through an update notification within our mobile application. Similarly, the Holders are informed that the Privacy Notice may be modified at any time for the purpose of addressing legislative developments, as well as CMR internal policies. If the purposes for which your data are processed were to be modified, consent will be requested again, whether express or tacit, depending on the particular case. X.- CONSENT OF THE HOLDER & CONTACT In the event that the Holder does not agree in whole or in part regarding the content of this Privacy Notice, we request that you notify us of your disagreement and objection by email. Email: contacto@cmr3.com.mx (Attention to the Data Protection Department)