Notice of Privacy

In order to guarantee the principle of information, privacy and the right to informative self-determination of the holders, in accordance with the provisions of the Federal Law on Protection of Personal Data in Possession of Private Parties (the "Law"), informs that DISTRIBUIDORA DE DISPOSITIVOS MéDICOS DE MéXICO, SA DE C.V., ("MDS"), domiciled in Mexico City, is responsible for the legitimate, controlled and informed treatment of your personal data.

In terms of the Law and in order to determine whether or not it is positive for the SARS-CoV2 virus (Covid-19), by providing your personal data to MDS, in order to carry out either the rapid test or the PCR test. , (hereinafter the "Test"), except where otherwise stated, you tacitly consent to their treatment, administration and manipulation in accordance with the provisions of this Privacy Notice.

Their personal data may be processed without your consent in the following cases: (i) when provided for by law; (ii) the data appear in publicly accessible sources; (iii) the personal data are subject to a prior dissociation procedure; (iv) has the purpose of fulfilling obligations derived from a legal relationship between the owner and the person in charge; (v) there is an emergency situation that could potentially harm an individual in person or property; (vi) are essential for medical care, prevention, diagnosis, the provision of health care, medical treatment or the management of health services, while the owner is not in a position to grant consent, under the terms established by law and applicable legal provisions and that said data processing is carried out by a person subject to professional secrecy or equivalent obligation; or (vii) a competent authority resolution is issued.

In compliance with the provisions of Articles 15, 16 and other applicable Law, MDS makes this privacy notice available to you, which will be available at all times on our website: [●]

Personal Information

MDS collects personal data from its clients, including, but not limited to, the following: full name, gender, nationality, contact telephone numbers, address, marital status, occupation, email, age, place and date of birth, Federal Register of Taxpayers , Unique Population Registration Code, Advanced Electronic Signature, current Official Identification, bank accounts, the result obtained from the Test carried out and other data necessary for the adequate performance, administration of its activities and provision of its services.

Said personal data may be obtained directly from you, either personally or through any electronic, optical, sound, visual means or through any other technology, as well as through third parties and other sources permitted by the applicable legal provisions, or well, generated as a result of the financial services requested or contracted by you with MDS.

MDS has the security, administrative, technical and physical measures necessary to safeguard the privacy and confidentiality of your personal data, as well as to comply with the principles of protection of personal data provided for in the Law.

Purpose Of The Processing Of Personal Data

The processing of personal data collected by MDS will be that which is necessary, adequate and relevant for the fulfillment of the following purposes: (i) the performance of each and every one of the activities and the provision of services that in accordance with the provisions laws applicable to MDS and its subsidiaries or affiliates can carry out, depending on how they are contracted and requested by our clients; (ii) compliance with the applicable legal provisions and the obligations contracted with our clients; (iii) inform about new products or services or changes in them; (iv) promoting our products and services; (v)the evaluation of the quality of our services, including conducting surveys, as well as the creation and implementation of analytical and statistical processes necessary or convenient for said purposes; (vi) meeting the requirements of any competent authority, but not limited to health and health risks; (vii) conducting inquiries, administrations investigations and reviews in relation to any complaint or claim; and (viii) the performance of any complementary, auxiliary, compatible or analogous activity to the previous purposes, without the need to obtain your consent again.

Transfer Of Personal Data

In order to be able to comply with the purposes set forth in this privacy notice, when to judgment by MDS is necessary, certain personal data of our clients may be transferred to third parties, MDS committing in any case to ensure compliance with the principles of personal data protection established in the Law and take the necessary and sufficient measures to guarantee that both the Law and this privacy notice are respected at all times by him or the third parties to whom MDS transfers the personal information.

In this sense, MDS may transfer your personal data, among others, to its subsidiaries and affiliates, authorities and self-regulatory bodies and third party providers of the services necessary for its proper functioning and for the fulfillment of the purposes. established in this document. Notice of Privacy.

Unless you express your opposition, it will be understood that you grant your consent to MDS to manage and manipulate, transfer your personal data to third parties, provided that this is necessary for the fulfillment of the purposes established in this privacy notice. The foregoing, with the understanding that the third party receiver will assume the same responsibilities and / or obligations of MDS derived from this privacy notice, having to respect it at all times.

Notwithstanding the foregoing, MDS may carry out the transfer of your personal data without your consent in the following cases: (i) when the transfer is provided for in a law or treaty to which Mexico is a party; (ii) when the transfer is necessary for the prevention or medical diagnosis, the provision of healthcare, medical treatment or the management of healthcare services; (iii) when the transfer is made to holding companies, subsidiaries or affiliates under the common control of the person in charge, or a parent company or any company of the same group of the person in charge that operates under the same internal processes and policies ; (iv) when the transfer is necessary by virtue of a contract entered into or to be entered into in the interest of the owner, the person responsible and a third party; (v) when the transfer is necessary or legally required for the safeguarding of a public interest, or for the procurement or administration of justice; (vi) when the transfer is necessary for the recognition, exercise or defense of a right in a judicial process, and (vii) when the transfer is necessary for the maintenance or fulfillment of a legal relationship between the controller and the owner.

Security Measures And Levels

MDS, has adopted the necessary measures to maintain the level of security required by the nature of the personal data processed and the circumstances of the treatment, in order to avoid, as far as possible, its alteration, loss, treatment, improper use or access Unauthorized.

MDS has the security, administrative, technical, physical and legal measures necessary to safeguard the privacy and confidentiality of personal data, as well as to comply with the principles of protection of personal data provided for in the Law.

Means To Exercise The Rights Of Access, Rectification, Cancellation And Opposition

In accordance with the provisions of the Law, as of January 6, 2012, you will have the right, at all times, to access your personal data held by MDS; rectify them in case they are inaccurate or incomplete; instruct us to cancel them when it considers that they are excessive or unnecessary for the purposes that justified their obtaining or the contractual relationship with MDS has ended; as well as to oppose for a legitimate reason the processing of your personal data.

In order to exercise the rights of access, rectification, cancellation and opposition (the "ARCO Rights") before being referred, the respective request must be sent to our Specialized User Service Unit at the following email address: [●]. For more information, please call [●].

The request must contain and be accompanied by the following: (i) your name and address or any other means to communicate our response; (ii) the documents that prove your identity and / or that of your legal representative; (iii) the clear and precise description of the personal data with respect to which it is sought to exercise any of the aforementioned rights; (iv) any other document or element that facilitates the location of your personal data and; (v) in the case of rectification requests, you must also indicate the modifications to be made and provide the documentation that supports your request, if it is appropriate.

Limitation Of Use And Disclosure Of Personal Data

In addition to the aforementioned rights, you will have, at all times, the right to limit the use, administration, manipulation or disclosure of your personal data, as well as the right to stop receiving promotional messages or advertising.

In order to exercise this right, the respective request must be sent to our Specialized User Service Unit at the email address and with the requirements indicated for the exercise of Arco Rights, when applicable.

Revocation Of Consent For The Processing Of Personal Data

Likewise, you will have, at all times, the right to revoke the consent granted to MDS for the processing of your personal data in terms of what is established in this privacy notice, without retroactive effects being attributed to the revocation.

Modifications To The Privacy Notice

MDS reserves the right to make, at any time, modifications or updates to this privacy notice, either as a result of legislative reforms, internal policies, new requirements for the provision or offering of our services and / or products, market practices or others. Said modifications will be within those accepted in case you do not express your disagreement with those within a period of 3 (calendar days) counted from when they have been made.

Modifications or updates will be incorporated into this privacy notice and will be available on our website, or it will be sent to the last email you have provided.

Complaints

In the event that you consider that the right to the protection of your personal data has been violated by any conduct of our employees or by the actions of MDS and, therefore, you presume that there is a violation of the provisions set forth in the Law , you may file the corresponding complaint with the National Institute of Transparency, Access to Information and Protection of Personal Data. For more information visit the website www.ifai.org.mx

Last update date: 2021

In accordance with the provisions of the Federal Law on Protection of Personal Data Held by Individuals (a) I acknowledge that I have read and understand the scope of the MDS Privacy Notice and (b) I expressly authorize MDS to collect, process and transfer my personal data for the purposes established in and in accordance with the provisions of the Privacy Notice, as it is modified from time to time.