PRIVACY NOTICE INFRAESTRUCTURA ENERGÉTICA NOVA, S.A.P.I. DE C.V.

This Privacy Notice, that complements any other privacy notices provided to you by any of our companies, is issued in accordance with the provisions of Articles 6, 8, 15 and 16 of the Federal Individuals' Personal Data Protection Law (the "Law").

Infraestructura Energética Nova, S.A.P.I. de C.V. (hereinafter referred to as "IEnova"), its subsidiaries and affiliates (as stipulated in Article 70 of the Regulations of the Law), domiciled at Paseo de La Reforma 342 piso 24, Col. Juárez, C.P. 06600, Ciudad de México, as the party responsible for the treatment of personal data reiterates the Company's commitment to transparency, security and privacy of personal data. Any information concerning an individual identified or identifiable, whether one of our customers and/or users, on being gathered shall be treated in accordance with the principles of legality, consent, information, proportionality, loyalty, responsibility and purpose as provided by the Law.

PERSONAL DATA PROCESSED BY IENOVA

IEnova, in order to comply with the purposes of this Notice, shall process the following information exclusively for the Company's own purposes:

• Identification information
• Contact details
• Image data

SENSITIVE PERSONAL DATA

Also, we hereby inform you that in order to comply with the purposes of our relationship mentioned in this Notice, IEnova will not collect sensitive personal data via its website.

PERSONAL DATA OF MINORS AND PEOPLE WITH SPECIAL NEEDS

IEnova may collect the personal data of minors and people with special needs through its website. However, this information may not be processed without the express consent of their parents, guardians or legal representatives. If you are the parent, guardian or legal representative of a minor or a person with special needs and you are aware personal data has been provided to us without your consent, you may request that it be canceled by sending an e-mail to [email protected].

IMAGE DATA

We hereby inform you that you may be photographed and/or videoed at IEnova events for the fully justified and own purposes of the activities it conducts and by IEnova's internal means of communication. You herein grant your consent to IEnova to use your personal image on its website. Said images may also be used in printed or electronic publications, provided that their use for solely for informative, interactive or recreation purposes.

MAIN PURPOSES OF PERSONAL DATA TREATMENT

IEnova may use your personal data to meet several purposes, depending on the circumstances in which it is collected, but always considering our relationship with you and the privacy notice provided to you.

1. To control access and maintain IEnova's security when you visit our installations
2. When you decide to send us your resume to establish contact with you to consider you for a recruitment and selection process
3. To manage your participation in events organized by IEnova
4. Verification of identity
5. Customer service and dealing with customer requests
6. Respond to and/or contact users to make requests via the website and/or ask questions, and resolve both specific and general doubts
7. Meet obligations to customers
8. Prepare the internal reports required in accordance with IEnova's objectives and purpose
9. Update or modify the personal data of holders who voluntarily wish to make said update through the channels provided on the website

SECONDARY PURPOSES OF PERSONAL DATA TREATMENT

Also, if you do not instruct us otherwise, IEnova will use your personal data for the following secondary purposes:

• Marketing and advertising
• Commercial prospecting
• Statistical purposes
• Evaluate the quality of the services rendered by IEnova
• Conduct surveys or studies to evaluate the consumption habits or our customers

You may declare your denial for the purposes established in the preceding paragraph by sending an e-mail to [email protected]. Denial for the use of your personal data for additional purposes shall not be a reason for the termination of your relationship with IEnova.

TRANSFER OF PERSONAL DATA

IEnova may transfer your personal data to Mexican or foreign third parties that have a legal relationship with it in order to comply with the purposes described in this Privacy Notice. IEnova may also transfer your personal data in the cases provided for and authorized by the Law for the following purposes:

If you do not agree with the aforementioned first purpose, you can declare your disagreement by sending an e-mail to: [email protected].

SECURITY MEASURES

IEnova has adopted and maintains the administrative, technical and physical security measures necessary and within its reach to protect your personal data against any damage, loss, alteration, destruction, misuse or mistreatment.

IENOVA PRIVACY COMMITTEE

The IEnova Privacy Committee has been formally appointed to deal with holders’ requests for the exercise of their rights, as well as foster and ensure the protection of the personal data in our possession.

You can contact our Privacy Committee by sending an e-mail to [email protected] for all matters related to the treatment and protection of personal data.

ARCO RIGHTS

As a holder of personal data, you can exercise you Access, Rectification, Cancellation and Opposition Rights, hereinafter referred to as the ARCO Rights, at any time directly with our Privacy Committee, which is located at Paseo de la Reforma 342 piso 24, Col. Juárez, C.P. 0660, Ciudad de México, or by e-mail to [email protected].

If you wish to learn about the procedure to exercise your ARCO Rights, you can meet with the Privacy Committee or send an e-mail to the address above.

The ARCO Rights refer to the following:

• Access: you are entitled to know which of your personal data we process, as well as the information in the general conditions of its treatment
• Rectification: at any time, you may request any incorrect or incomplete information to be rectified
• Cancellation: you may request that the processing of your personal data be ceased by blocking and eventual suppression
• Opposition: you may oppose, with legitimate reason, the processing of your personal data

CONSENT REVOCATION MECHANISMS AND PROCEDURE

In the terms of the applicable standards, you may revoke any consent you have granted us. However, it is important that you keep in mind that your request will not be admissible in all cases, because there is a possibility that we may be required to continue processing your personal data due to a legal obligation.

You must send us an e-mail to [email protected] to request the revocation of your consent.

LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA

You may limit the use or disclosure of your personal data by sending a request by e-mail to [email protected].

If your request is deemed admissible, the Privacy Committee will register it in the exclusion list to prevent your personal data from being used.

You are hereby informed that there are other mechanisms to limit the use or disclosure of your data. These are the Federal Consumer Protection Agency's (PROFECO) Public Anti-Publicity Register and the National Financial Services Users' Protection Commission's (CONDUSEF) Public Users’ Register. You can consult the websites of both registries to obtain further information on the services provided by each agency.

COOKIES AND WEB BEACONS

When browsing our websites, our "cookies", "server record" and "web beacons" collect certain non-personal information. This information is collected through the use or interaction with our website, and includes the Internet Protocol, type of browser, mobile device and the route taken on the website.

The data is used solely for statistical purposes relating to the time spent on our website and third-parties’ websites that sent you to ours. The information is also used to update users’ profiles.

These technologies may be disabled in all browsers. For further information on the subject or to learn about the procedure applicable to your browser, visit http://allaboutcookies.org/es Certain functions of our website may be blocked by disabling or blocking these technologies.

MODIFICATIONS TO THIS PRIVACY NOTICE

This Privacy Notice may be modified, amended or updated as a result of new legal requirements, our own needs due to the services we offer, our privacy practices, changes in our business model or for other reasons.

IEnova commits to keeping you informed about any change that may be made to this Privacy Notice through publication on https://www.ienova.com.mx/privacidad.php

Last update: December 2023