PRIVACY NOTICE

EPA FOUNDATION A.C.

Purpose of data processing and possible transfers Our Foundation is a non-profit Civil Association whose main objective is to promote Education through a comprehensive educational scholarship program for high-performing students at different educational levels who do not have sufficient financial resources to cover these expenses in quality institutions. By virtue of the information that Fundación EPA, A.C. collects from aspiring students and/or recipients of said scholarships (including their parents or guardians), benefactors (donors) and suppliers, in accordance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter the "Law"), Fundación EPA, A.C. (hereinafter the "Responsible") issues this Privacy Notice under the following terms:.

1.- Responsible for the protection of your personal data

For the purposes of this Privacy Notice, the Responsible Party, through its Personal Data Department, with address located at Avenida Circuito Madrigal #1736 Col. San Wenceslao CP. 45110 Zapopan, Jalisco Mexico, will be responsible under the terms of the Law for the collection, disclosure, storage, use, handling and transfer of personal data collected from any natural person (hereinafter the “Owner” or the “Owners”).

2.- Purposes of the processing of personal data

The purposes of the processing of Personal and Sensitive Data are the following:

A. Students (applicants and/or scholarship recipients):

Primary: (i) Participate as candidates in the scholarship programs of “Fundación EPA” and their respective selection process: (ii) in the case of being a scholarship recipient, to compile their file; (iii) compilation of the file requested by the corresponding educational institution and (iv) follow up on their questions, doubts and comments regarding the scholarship awarded.

Secondary: (i) contact the Holder to inform him/her about new calls and/or keep his/her file updated; (ii) marketing; (iii) advertising; and (iv) surveys.

B. Parents and/or Guardian(s) (applicable for underage students):

Primary: (i) Consent for your child or minor for whom you exercise guardianship to participate as a candidate in the “EPA Foundation” scholarship program; (ii) to integrate the file of your child or minor who is eligible for a scholarship and (iii) to follow up on your questions, doubts and comments regarding the scholarship awarded.

Secondary: (i) to contact the Holder to inform him/her about new calls and/or to keep his/her file updated; (ii) marketing; (iii) advertising; and (iv) surveys.

C. Benefactors:
Principal: (i) to integrate the Owner's file as a donor of the responsible party.

If you do not consent to the processing of your data for the purposes described in the immediately preceding paragraph, please contact the Personal Data Department located at Avenida Circuito Madrigal #1736 Col. San Wenceslao CP. 45110 Zapopan, Jalisco Mexico, or by phone at 3326377380 or by email at informes@fundacionepa.org The Personal and Sensitive Data provided by the Owner to access links, videos, photographs, texts and information from “Fundación EPA” will be protected in accordance with the provisions of the Law, its Regulations, the Privacy Notice Guidelines, the Federal Education Law, the Internal Regulations of the Ministry of Public Education, the Federal Consumer Law, the provisions and agreements published by the Ministry of Public Education and the state provisions regarding education. The data owner may obtain a copy of the privacy notice at any time through its internet portal https://www.fundacionepa.org/.

Additionally, the Controller records (audios and videos) and takes photographs of the events it holds, such as conferences, scholarship award events, training, cultural, recreational, dissemination and as a security measure, among others, which will be treated and protected in a special way as sensitive data according to the Law and its Regulations. By signing this privacy notice, I consent to the use of my sensitive personal image and voice data to include them in said material (audios, videos and photographs).

3. Personal and sensitive data collected and processed

In order to carry out the purposes described in this Privacy Notice, we will collect the following personal identification data of the Owner and/or his/her legal representative (the “Personal Data”) as well as his/her sensitive data (“Sensitive Data”):

A. Students (scholarship applicants and/or recipients) (i)
• Personal Data:
• Full name.
• Official identification.
• Unique Population Registry Code.
• Birth Certificate
• Proof of address.
• Telephone and/or cell phone number(s).
• Email address.
• School grade and academic information (academic institutions where you have studied, certificates or records of studies, grade certificates).

(ii) Sensitive:
• Personal image (photographs)
• Biometric data
• Nationality

B. Father, Mother or Guardian (as representative of the minor student Holder) (i) • Personal Data:
• Full name.
• Official identification.
• Proof of address.
• Telephone and/or cell phone number(s).
• Email address.
• Occupation
• Marital Status
• Socioeconomic Information

(ii) Sensitive:
• Personal image (photographs)
• Biometric data
• Nationality
C. Benefactors (individuals or legal entities) (i)
• Personal Data:
• Full name or business name.
• Official identification of the Holder or his/her representative.
• Proof of address.
• Telephone and/or cell phone number(s).
• Email address.
• Occupation
• Sector

(iii) Sensitive:
• Personal image (photographs)
• Biometric data
• Nationality

In order to generate a donation online or through direct debit, you will be sent to a secure payment system provided by a banking entity, through which your payment will be processed.

4. Security Measures

In order to obtain, process and safeguard the Personal Data and Sensitive Data of the Owner, the Controller has established different security measures and has the technological, administrative, material and human infrastructure to ensure that your personal data is treated in a responsible, lawful, fast, precise, complete and secure manner, to avoid damage, loss, alteration, destruction or unauthorized use, access or processing. This information will be stored securely on our internal server, accessible only through a username and password controlled by and in the possession of our IT manager.

Furthermore, the Controller undertakes to safeguard the Personal Data and Sensitive Data of the Owner only for as long as is appropriate for the purposes mentioned in this Privacy Notice or as required by applicable law.

Only authorized personnel of the Controller, who have complied with and observed the corresponding confidentiality requirements, may participate in the processing of your personal data. Authorized personnel are prohibited from allowing access to unauthorized persons and using your personal data for purposes other than those established in this Privacy Notice. The confidentiality obligation of the persons involved in the processing of your personal data continues even after the relationship with the Controller has ended.

5. Regarding the transfer of personal data.

Personal Data and Sensitive Data will not be transferred to third parties, since they are intended exclusively for internal use, except for those required by the academic or educational institution by virtue of the scholarship awarded to the Owner, if applicable. This information will be stored securely on our internal server, accessible only through a username and password controlled and in the possession of our IT manager.

In the event that the Holder is a student providing social service or professional internships at an educational institution, your personal data will be transferred to the same, that is, those public or private, national or foreign organizations, where you are assigned and accepted to perform such function. By signing this privacy notice, the Holder consents to the transfer of his/her personal and sensitive data by virtue of the legal relationship contracted in terms of section VII of article 37 of the Law.

Your Personal Data may be transferred to third parties to fulfill the obligations assumed by the Controller when necessary. By accepting it, you grant your consent for the Company to be authorized to transfer your Personal Data.

If you do not consent to the processing of your data for the purposes described in the immediately preceding paragraph, please send an email informes@fundacionepa.org or call the Personal Data Department at 3336101418.

6. Limit on use or disclosure

Notwithstanding the provisions of the previous chapter, the Owner has the choice and the right at any time to prohibit the Controller from providing and/or transferring his/her personal data to third parties through the procedure indicated in the immediately following point. However, it is important for the Data Subject to take into account that not in all cases will the Controller be able to respond to their request or terminate the use immediately, since it is possible that due to some legal obligation it may be required to continue processing and/or transferring their personal data.

7. ARCO Rights (Access, Rectification, Cancellation and Opposition to the Processing of your Personal Data)

You are hereby informed that you have the right to Access to know what personal data we have about you, what we use it for and the conditions of its use; the right to Rectification to request the correction of your personal information if it is outdated, inaccurate or incomplete; the right to Cancellation so that your information is deleted from our records or databases when you consider that it is not being used appropriately; as well as the right to Oppose the use of your personal data for specific purposes.

The exercise of the ARCO rights must be carried out directly in the Personal Data Department of the Controller, since it must verify the identity of the Owner. Through email, the Holder may only obtain and receive all information related to this privacy notice, the Data Protection Project of the Controller, and the subsequent follow-up to requests for ARCO rights.

To exercise any of the ARCO rights, the Holder must observe the following mechanisms and procedures: 1. Submit the respective request directly to the address of the controller located at Avenida Circuito Madrigal #1736 Col. San Wenceslao CP. 45110 Zapopan, Jalisco Mexico. Regarding the procedure and requirements of your requests, we inform you of the following:

(i) The holder or Father, Mother or Guardian of the minor must prove his/her identity through a valid official identification with a photograph. In the case of a person other than the Father, Mother or Guardian, he/she must prove his/her identity through a simple power of attorney signed by the holder, attorney and two witnesses.
(ii) The means by which the holder or Father, Mother or Guardian may exercise their ARCO rights will be through a signed document, addressed to Fundación EPA, A.C., said document must contain the full name of the holder, address, email where they can receive a response, in said document they must describe and indicate which rights they intend to exercise.

They may also exercise their ARCO rights through the forms that “Fundación EPA has for such purpose.
2. Within a maximum period of twenty business days from their request, the Responsible Party will inform the Holder of the admissibility or inadmissibility of their request, so that, if it is admissible, it will be made effective within fifteen business days following notification of the resolution. In the case of requests for access to personal data, the identity of the applicant or their legal representative will be provided after proof of identity, as appropriate. The aforementioned deadlines may be extended once for an equal period, as long as the circumstances of the case justify it.
3. The response will be made known to you by email to the address indicated in your request or at the address of the Controller at the end of the first period of twenty business days for the determination and at the end of the period of fifteen business days to make it effective, that is, to give you access, make the correction, cancel or resolve the opposition to the processing of your personal data.
4. The information will be delivered in printed or digital form depending on the medium requested by the data owner.
The Personal Data Department of the Controller is the area in charge of processing requests for ARCO rights, informing and clarifying doubts regarding the processing of your data.

The Data Subject may revoke the consent that, where applicable, he or she has given us for the processing of his or her Personal Data and Sensitive Data or limit its use or disclosure by submitting a written document with the characteristics indicated above to the Data Controller's Personal Data Department. However, it is important to note that we will not be able to respond to your request in all cases, or terminate the use immediately, since it is possible that due to some obligation or legal provision we may require us to continue processing your personal data. Likewise, the Data Subject must consider that for certain purposes, the revocation of his or her consent will prevent the Data Controller from fulfilling the obligations assumed towards the Data Subject.

To obtain information about the procedure and requirements for exercising your rights or to obtain information about the procedure, you must do so through: o Email: informes@fundacionepa.org
o Avenida Circuito Madrigal #1736 Col. San Wenceslao CP. 45110 Zapopan, Jalisco Mexico

8. Use of tracking technologies on our internet portal

The Controller informs you that on our website, our social media channels and any means of publishing mass information we use technologies such as cookies (to recognize you when you use or return to our sites). A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the website again, the cookie allows the site to recognize your browser. Cookies can store unique identifiers, user preferences and other information. Through cookies it is possible to monitor your behavior as an Internet user, technical information such as your Internet protocol address, your computer operating system and browser type, the address of a reference website, if applicable, and the route you follow during your journey through our website.

The Personal Data and Sensitive Data that we collect through these technologies serve to optimize your visit to our website and the information collected by them will be used to provide you with a better service and experience when browsing our website.

The Owner may choose to browse our website without accepting the use of cookies, since the Controller's systems do not depend on them, but blocking the use of cookies may cause the website to not operate optimally on your browser.

The Owner may allow, block or delete the cookies installed on your computer by configuring the options of your browser. We provide you with the following links on the Internet, which are not the responsibility of “Fundación EPA” but which can help you disable and customize cookies in your preferred browser: http://www.apple.com/es/privacy/use-of-cookies/ http://windows.microsoft.com/es-es/windows-vista/block-or-allow-cookies

9. Changes and modifications to the PRIVACY NOTICE

The Controller reserves the right to make changes or updates to this privacy notice at any time, to address legislative or jurisprudential developments, internal policies, new requirements for the provision or offering of our services or products and market practices; these modifications will be available to the public through the following means: on our website www.fundacionepa.org, privacy notice section. Likewise, the Controller will notify the Owner by email of any changes to its privacy notice to the email address provided by the owner.

We inform you that you can contact the National Institute for Transparency, Access to Information and Protection of Personal Data at any time if you consider that your right to data protection has been violated.

The date of the last update to this privacy notice is November 22, 2024.