On July 5, 2010, the Federal Law on Protection of Personal Data Held by Private Parties was published in the Official Gazette of the Federation (hereinafter the "Law"), which aims to protect personal data in possession of individuals, in order to regulate their legitimate, controlled and informed treatment, in order to guarantee privacy and the right to informative self-determination of people.

The main purpose of this Privacy Notice is to inform you as the owner of personal data; first, that your personal information will be collected and used for certain purposes, and; second, the characteristics of the treatment to which your personal data will be submitted. The foregoing for the legitimate purpose that you make informed decisions regarding your personal data and control the use of your personal information.

To facilitate your understanding of this Privacy Notice, we provide you with the following definitions:

• Tacit consent: It will be understood that the owner tacitly consents to the processing of their data, when, having made this Privacy Notice available to them, they do not express their opposition.
• Express consent: The consent will be express when the will of the owner is manifested verbally, in writing, by electronic, optical means or by any other technology, or by unequivocal signs.
• Sensitive personal data: Those personal data that affect the most intimate sphere of its owner, or whose misuse may give rise to discrimination or entail a serious risk for it. In particular, those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union affiliation, political opinions, sexual preference are considered sensitive.
• ARCO rights: They are the rights of access, rectification, cancellation and opposition.
• Responsible: The department of personal data indicated in this Privacy Notice, which processes personal data on behalf of the Responsible.
• IFAI: Federal Institute for Access to Information and Data Protection.
• Law: Federal Law on Protection of Personal Data Held by Individuals.
• Responsible party: The private legal person indicated in this Privacy Notice, who decides on the processing of personal data.
• Headline: The natural person to whom the personal data correspond.
• Transfer: Any communication of data made to a person other than the person in charge or in charge of the treatment.
• Treatment: Obtaining, using, disclosing or storing personal data by any means. The use includes any action of access, handling, use, transfer or disposition of personal data.

In compliance with the provisions of the first paragraph of this Privacy Notice, SWEET NIGHTS, its subsidiaries or affiliates or any company of the group that operates and this Privacy Notice is applicable to it (hereinafter “SWEET NIGHTS”), With address at Bosque de Duraznos number 65, Colonia Bosques de las Lomas, Postal Code 11700, Miguel Hidalgo Delegation, in Mexico City, is responsible for collecting your personal data, the use that is given to them and of their protection.

Your personal information will be used to provide or request goods, services and / or products related to our business and / or commercial activity; inform you about changes in them and evaluate the quality of the service we provide. For the aforementioned purposes, we need to obtain, as the case may be, the following data:

In compliance with what is stated in the first paragraph of this Privacy Notice, DULCES NOCHES, its subsidiaries or affiliates or any company of the group that operates and this Privacy Notice is applicable to it (hereinafter "SWEET NOCHES"), with address at Bosque de Duraznos number 65, Colonia Bosques de las Lomas, Postal Code 11700, Delegación Miguel Hidalgo, in Mexico City, is responsible for collecting your personal data, the use that is given to them and their protection.

Your personal information will be used to provide or request goods, services and / or products related to our business and / or commercial activity; inform you about changes in them and evaluate the quality of the service we provide. For the aforementioned purposes, we need to obtain, as the case may be, the following data:

I.- DATA AND ITS PURPOSE.

I.1.- Personal data that may be requested: Full name, telephone numbers, email, address and RFC. This description is illustrative, but not limiting. The purpose of having this data is to send you information related to our business and / or business activity. Similarly, "SWEET NIGHTS" may require the updating, storage and use of the personal and patrimonial data that you provide us with the detailed purposes as follows: (i) offer and inform you of our services; (ii) carry out activities related to the advertising of our services; (iii) provide the services that are required of us; (iv) customer service; (v) evaluate the quality of our service; (vi) conduct internal studies on consumer habits; (vii) attracting new clients; (viii) quotation of services requested from us; (ix) attention to doubts and suggestions; (x) conclusion of contracts or agreements related to our business and / or commercial activity; (xi) comply with obligations contracted with our clients; (xii) payment of consideration; (xiii) billing; (xiv) inform about changes to our services; or (xv) any other purpose that is considered convenient according to our business and / or commercial activity. In the absence of this information, we would not be able to efficiently provide you with our services.

I.2.- Personal data that may be requested as our suppliers: Full name, telephone numbers, email, address, RFC and bank account information. This description is illustrative, but not limiting. Your data will be used for the following purposes: (i) quotation of goods and / or products whose supply we require; (ii) request the provision of services; (iii) contact; (iv) service to providers; (v) payment of consideration; (vii) billing; (viii) share references with other national and foreign companies; or (ix) any other that derives from the fulfillment of the obligations foreseen in the contract that we have previously signed, or that, where appropriate, is celebrated. If we do not have this information, we would not be able to acquire goods and / or products from you or to request the provision of a service.

I.3.- Personal data linked to job applications: Full name, gender, place and date of birth, marital status, CURP, telephone numbers, email address, address, educational level, work experience and current employment. This description is illustrative, but not limiting. Your personal information will be used to evaluate your profile and determine if it is appropriate to initiate an admission process, as well as to know and evaluate your trajectory, skills, work experience, and aptitudes, so that, in case of fulfilling the profile of the vacancy that request, we contact you and have a first job interview. The job applications and / or curriculum vitae that you send us, only constitute (s) a job application and, therefore, does not represent any guarantee that it will be accepted and does not generate any labor rights in your favor. In the absence of this information, we would not be able to evaluate your profile and determine if it is appropriate to initiate an entry process. If you are not selected to work in our company, once the 6 (six) month period has ended, the personal data you have provided us will be destroyed, in order to avoid improper treatment of them.

I.4.- Sensitive personal data: In particular, those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union affiliation, political opinions, sexual preference are considered sensitive. We inform you that in order to fulfill the purposes set forth in this Privacy Notice, in the event that sensitive personal data is collected and processed (hereinafter "Sensitive Personal Data"), we undertake that they will be treated under the strictest security measures that guarantee your confidentiality. For which, in accordance with what is established in article 9 of the Law, we require your express consent for the processing of your Sensitive Personal Data, for which we will ask you to indicate whether or not you accept the treatment.

For the purposes indicated in paragraphs I.1, I.2 and I.3 of this Privacy Notice, we may collect your personal data in different ways: (i) when you provide them directly to us; (ii) when you give us information in order to provide us or to provide you with a service; (iii) when you visit our website, and (iv) when we obtain information through other sources that are permitted by law, such as telephone or work directories.

II.- LIMIT ON THE USE OR DISCLOSURE OF THE DATA.

The data provided to "SWEET NIGHTS”, Will be protected and administered in terms of the provisions of the Law and, in this sense, we are committed to safeguarding such information under the principles of loyalty and responsibility. The information obtained is protected by means of physical, technological and administrative procedures adhering to regulations that safeguard the data in terms of the provisions of the Law. By registering with “SWEET NIGHTS", You grant your consent for such information to be shared with companies of equal prestige and / or related to our business and / or commercial activity. If you do not express your opposition for your personal data to be transferred, it will be understood that you have given your tacit consent to do so.

III.- MEANS TO EXERCISE THE “ARCO” RIGHTS.

You have the right to access your personal data that we have and the details of their treatment, as well as to rectify them if they are inaccurate or incomplete; cancel them when you consider that they are not required for any of the purposes indicated in this Privacy Notice, are being used for non-consensual purposes or the contractual or service relationship has ended, or, oppose the treatment of them for specific purposes.

The mechanisms that have been implemented for the exercise of these rights you can find out through our Personal Data Department, in charge of processing your personal data on behalf of the Responsible, by submitting a written request signed by the owner of personal data, at the address indicated above, addressed to Lic. José Benjamín Espinoza Solorio.

Your request must contain the following information:

1. Names)
2. Last name
3. Mother's last name
4. Birthdate
5. Home
6. Postal Code
7. State
8. Type of identification (passport, credential from the National Electoral Institute (INE), national military service card, professional card or immigration document)
9. Email
10. Telephone
11. Contact schedule
12. Point out that: "In exercise of the right of access to my personal data, I request DULCES NOCHES, IN ADVANCE" SWEET NOCHES ", the following (indicate any of the following options):
    a) Access to information that “SWEET NIGHTS"Owns my Personal, Patrimonial and / or Sensitive Data.
    b) Rectification or modification of the following Personal Data in the sense indicated below:
    b.1) current: (indicate it, for example: “Juan Domingo Canales”)
    b.2) modify it by: (indicate it, for example: "Juan Manuel Domingo Canales")
    c) Cancellation of any purpose or treatment of my Personal, Patrimonial and / or Sensitive Data, which are stipulated in the Privacy Notice.
    c.1) which ones: (indicate them, for example: “carry out activities related to advertising your services” or “carry out internal studies on consumer habits”)
    d) Opposition to the transfer or processing of my Personal, Patrimonial and / or Sensitive Data.
    d.1) which ones: (indicate them, for example: “share references with other national and foreign companies”)
    e) Applicant or candidate to work in “SWEET NIGHTS”.
13. Indicate the type of relationship you have with “SWEET NIGHTS”:
    a) Client
    b) Provider
    c) Employee
    d) Other: (specify)

Once the application is duly prepared, we ask you to attach a photocopy of the official document that proves the identity of the interested party (passport, credential of the Federal Electoral Institute (IFE), now National Electoral Institute (INE), national military service card, identity card professional or immigration document). If acting through legal representation, the identification of the representative and power of attorney must be provided where the representation of the interested party is accredited.

It is necessary that the request contains the complete data that is required of you or your legal representative since in case the information is not enough or, is inaccurate or erroneous to locate your data and proceed with your request, we will request you in a term of 3 (three) business days to complement or clarify the information; Otherwise, your request will be deemed not submitted, considering the process started, considering the request as inadmissible.

The deadlines to attend your request are the following:

In accordance with the provisions of the Law, our response period will be a maximum of 20 (twenty) business days from the receipt of your request and the period for sending the required information, will be effective within 15 ( fifteen) business days following the date on which the source is communicated.

At the request of the applicant, we can deliver the information personally to the following address Bosque de Duraznos number 65, Colonia Bosques de las Lomas, Postal Code 11700, Delegación Miguel Hidalgo, in Mexico City. The delivery of information will be personally.

In no case can we deny you access to information establishing reasons other than those indicated by law. The request will only be processed once the accreditation of the owner of the requested personal data has been received.

Any request will not be processed when an identical right has already been exercised in a period not exceeding 12 months.

Please report any questions or comments to info@dulcesnoches.com

IV.- DATA TRANSFER.

Your personal data may be transferred and processed within and outside the country, by people other than "SWEET NIGHTS”. In this sense, your information may be shared with companies of equal prestige and / or related to our business and / or commercial activity, for the purposes described in paragraphs I.1, I.2 and I.3 of this Privacy Notice. .

If you do not express your opposition for your personal data to be transferred, it will be understood that you consent to the transfer that may be made, where appropriate, of your personal and patrimonial data to a third party, unless you expressly express your opposition in accordance with the provisions in number III (three roman) of this Privacy Notice, to the entities that are directly or indirectly part of "SWEET NIGHTS”, Its subsidiaries and affiliates and third parties, national or foreign. The latter are obliged to maintain the confidentiality of the information provided by "SWEET NIGHTS”, And not to use it in a manner other than that established in this Privacy Notice.

The Personal Data that can be transferred are: Full name, telephone numbers, email, address, RFC and bank account data. This description is illustrative, but not limiting. If express consent is required in terms of the Law, to transfer, where appropriate, Sensitive Personal Data, we will require your express consent, in accordance with what is established in article 9 of the Law, to indicate whether or not you accept. the treatment.

V.- CHANGES TO THE PRIVACY NOTICE.

We reserve the right to make modifications or updates to this Privacy Notice at any time, in order to attend to new legislation or jurisprudence, internal policies or new requirements for the provision or offering of our services or products and market practices.

Such modifications will be available to the public and may be consulted through notices placed in our offices, or informed by any means of communication that we have with you, or with our Department of Personal Data, dependent on the Legal Area of ​​"SWEET NIGHTS", or visit our website www.dulcesnoches.com Any questions or comments send them to the email address info@dulcesnoches.com.

If you consider that your right to protect personal data has been harmed by any conduct of our employees or our actions or responses, you presume that in the processing of your personal data there is a violation of the provisions provided in the Law, you may file Complaint or corresponding complaint to IFAI, for more information visit www.ifai.org.mx

The date of the last update to this privacy notice: May 3, 2020