TALENTO INSTITUCIONAL, S.A. DE C.V. (hereinafter the “Data Controller”), located at Calle 15 de Mayo #1027, Col. Centro, Postal Code 64000, Monterrey, Nuevo León, is responsible for the use and protection of your personal data, and in this regard, we inform you of the following:

FOR WHAT PURPOSES DO WE USE YOUR PERSONAL DATA?

In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter the “Law”), as well as its corresponding Regulations, we inform you that the personal data we collect from you (hereinafter the “Data Subject”), will be used for the following purposes that are necessary for the proposed relationship:

Primary purposes (necessary for the employment relationship)

• Creation and management of your employment record;
• Creation of a user profile across our internal platforms;
• Presentation of an economic offer to the Data Subject;
• Conducting medical check-ups;
• Management of physical access to work facilities;
• Management of electronic access to systems and technological infrastructure;
• Statistical purposes within the organization;
• Administration of payroll services, including, without limitation, salary adjustments, overtime pay, and other benefits;
• Procurement of insurance policy(ies);
• Designation of beneficiaries for insurance policy(ies);
• Management and/or operation of your savings fund and savings bank;
• Provision of a bank account for the receipt of payroll payments;
• Provision of grocery vouchers;
• Delivery of training programs;
• Creation and implementation of analytical and statistical processes;
• Compliance with the terms of the employment contract entered into with the Data Controller, as well as applicable labor, tax, or other legal regulations issued by competent authorities;
• Carrying out all necessary offboarding procedures upon termination of the employment relationship;
• Providing employment references regarding you, as permitted by applicable laws; and
• Carrying out all necessary activities for the administration and management of your job position and other employment benefits.

Secondary purposes (not necessary for the employment relationship)

• Your personal image (photo or video) for the creation of materials used internally (training materials, circulars, memorandums) as well as externally (social media posts by the organization);
• Enhancement of the work environment (acknowledgments, celebrations, recognitions, special company events);
• Providing benefits and/or facilitating the use of agreements with third parties.

WHAT PERSONAL DATA DO WE USE FOR THESE PURPOSES?

To carry out the purposes described in this privacy notice, we may use the following personal data of the Data Subject:

1. Full name;
2. Date of birth;
3. Nationality;
4. Country of birth;
5. Academic background;
6. Address (street or avenue, exterior and interior number, neighborhood, postal code, municipality, state, and country);
7. Landline and/or mobile phone number;
8. Email address;
9. Gender;
10. Economic activity;
11. Marital status;
12. Health status;
13. Federal Taxpayer Registry (RFC);
14. Unique Population Registry Code (CURP);
15. Handwritten signature;
16. Asset and/or financial data;
17. Personal image;
18. Biometric data; and/or
19. Lifestyle habits and interests;

HOW CAN YOU LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL INFORMATION?

The Data Subject may object to the use or disclosure of their personal information for purposes that are not indispensable to the legal relationship (secondary purposes) by sending an email to datos.personales@aevsa.com following the steps in the section “How can you access, rectify, or cancel your personal data, or object to its use?”

HOW CAN YOU ACCESS, RECTIFY, OR CANCEL YOUR PERSONAL DATA, OR OBJECT TO ITS USE?

The Data Subject shall at all times have the right to: (i) access their personal data held by the Data Controller; (ii) rectify their data when it is inaccurate, incomplete, or outdated; (iii) cancel their personal data; and (iv) object to the processing of their data. These rights are known as ARCO Rights.

For such purposes, the Data Subject or their legal representative, as applicable, must complete the ARCO Rights Request Form, which can be downloaded here. In this form, you must indicate in detail:

1. Your full name;
2. The business unit where your data was collected (Casino/Gaming Hall or Support Offices);
3. The type of request you wish to make (Access, Rectification, Cancellation, or Objection regarding your data);
4. A detailed explanation of the requested action;
5. The email address to which your request should be resolved; and
6. The type of relationship you maintain with the Data Controller (customer, supplier, employee, applicant, or other).

Once the form is completed, the Data Subject or their legal representative must sign it by hand and send it to the Data Controller via email to the following address: datos.personales@aevsa.com, attaching a scanned copy of their valid official identification. If the request is submitted by the Data Subject's legal representative, an electronic copy of the public instrument certifying their authority as a representative must also be included, or, where applicable, a power of attorney signed by the data subject and two witnesses.

The Data Controller will respond to your request within a maximum period of up to 20 (twenty) business days, starting from the date the corresponding request is received. If the request is determined to be admissible, it will become effective no later than 15 (fifteen) business days following the communication of the favorable response to the Data Subject. The aforementioned timeframes may be extended once for an equal period, provided that the circumstances of the case justify it.

In the case of requests to access personal data, delivery will proceed prior verification of the identity of the applicant or legal representative, as applicable.

WITH WHOM WILL WE SHARE YOUR INFORMATION?

To fulfill the necessary purposes described above or other requirements established by law or competent authorities, the Data Controller may share the necessary personal data with the following data processors and for the following purposes:

The Data Controller may also transfer your data to a third party without your consent under any of the circumstances established in Article 37 of the Law.

HOW CAN YOU LEARN ABOUT CHANGES TO THIS PRIVACY NOTICE?

The Data Controller reserves the right to modify the terms and conditions of this Privacy Notice, in whole or in part. Any changes made to this Privacy Notice will be posted at the Data Controller's address, as well as on its website: https://www.logrand.com/aviso-de-privacidad-de-talento-institucional/

Last update to this Privacy Notice: September two thousand twenty-two.