In Esentia we are committed to the protection of your personal data, assuming the commitment of use, handling, storage and confidentiality in accordance with the provisions of the Federal Law for the Protection of Personal Data in Possession of Private Parties (the "Personal Data Law") and in order to provide you with information regarding the main characteristics of the treatment to which your personal data will be subjected, this Privacy Notice is issued.

1- Identity of the Responsible Party

We inform you that the persons responsible for collecting and processing or using the personal data you provide us are Esentia New Projects Holding, S.A. de C.V., Esentia Pipeline de Toluca, S. de R.L. de C.V., Tarahumara Pipeline, S. de R.L. de C.V., Esentia Pipeline El Encino, S. de R.L. de C.V., Esentia Pipeline de Occidente, S. de R.L. de C.V., S. de R.L. de C.V. Esentia Pipeline El Encino, S. de R.L. de C.V., Esentia Pipeline de Occidente, S. de R.L. de C.V., Esentia Pipeline La Laguna, S. de R.L. de C.V., Esentia MEMS II, S. de R.L. de C.V., Esentia MEMS III, S. de R.L. de C.V., Esentia Compression Solutions, S. de R.L. de C.V., Esentia Hub Chavez, S. de R.L. de C.V., Esentia Energy EELL, S. de R.L. de C.V., Esentia Energy RR Holdings Two, S. de R.L. de C.V., Esentia Gas Enterprises, S. de R.L. de C.V., Esentia Pacífico, S.A. de C.V., Herbodem, S.A. de C.V., SOFOM, E.N.R., Moral Energy de México, S. de R.L. de C.V. and Moral Energy Mexico Services, S.A. de C.V.

Each of the aforementioned legal entities is individually responsible for the data it collects in its capacity as Responsible Party.

2- Address of the Responsible Party

For the purposes of this Privacy Notice, the Responsible Party indicates its address as Blvd. Presidente Adolfo Ruiz Cortines #3433, San Jerónimo Lídice, Alcaldía Magdalena Contreras, Mexico City, C.P. 10200.

3- Purpose of the Processing

Los datos personales que la Responsable recabe serán utilizados, en general, para hacer posible el desarrollo integral de la relación particular que has decidido entablar con la Responsable, de acuerdo a las políticas internas, disposiciones contractuales, la Ley de Datos Personales y a la demás legislación aplicable. En lo particular, la Responsable utilizará tus datos personales para las siguientes finalidades: a) corroborar la identidad y veracidad de la información proporcionada; b) cumplir con regulaciones, políticas y medidas de seguridad física y protección civil, tales como sistemas de video vigilancia, acceso a instalaciones y áreas restringidas; c) permitir el acceso a cualquiera de los inmuebles en los que se encuentren ubicadas nuestras oficinas; d) aquellas indispensables para el cumplimiento de una relación jurídica; e) alta en el archivo maestro de proveedores y acceso al mismo por el personal autorizado para tales propósitos; f) alta en los sistemas internos que permitan la organización y seguimiento de las obligaciones contraídas con nuestros clientes y socios, así como los posteriores accesos a los mismos por el personal autorizado para ello; g) facturación y cobranza; h) proceso de reclutamiento, selección y contratación laboral o de prestación de servicios independientes, según sea el caso; i) conformación del expediente laboral y seguimiento de las obligaciones contraídas; j) seguimiento a los servicios o productos adquiridos;  k) la defensa de los derechos de la Responsable, incluyendo procedimientos judiciales, laborales o administrativos; l) dar cumplimiento a los requerimientos hechos a la Responsable por autoridades gubernamentales, y m) proporcionar información acorde o en cumplimiento con las medidas que emita la autoridad en casos de situaciones extraordinarias de carácter sanitario y demás similares.

4- Data to be obtained

For the purposes mentioned in paragraph 3the Responsible Party is required to obtain from third parties your name, nationality, country of birth, date of birth, address, registration number before the Federal Taxpayers Registry (if applicable), Unique Population Registry Code (if applicable), telephone number and e-mail address. The Responsible Party does not obtain personal data through publicly available sources, but may acquire some of the above data through transfers as indicated in paragraph 10 below. párrafo 10 siguiente.

5- Security measures

The Responsible guarantees the proper use of the personal data it collects as well as its protection and confidentiality; for these purposes it has established administrative, technical and physical security measures necessary to comply with the applicable regulatory provisions and with the internal policies of the Responsible.

6- Means to exercise the Rights of Access, Rectification, Cancellation and Opposition (ARCO)

You may access, rectify, cancel or oppose the processing of your personal data by submitting your request at Blvd. Presidente Adolfo Ruiz Cortines #3433, San Jerónimo Lídice, Magdalena Contreras, Mexico City, C.P. 10200 or by sending your request to privacidad@newe.devYou may consult the requirements and procedures, as well as download the corresponding application at www.esentia-energy.com.

Likewise, we inform you that you may initiate a Rights Protection Procedure before the National Institute of Transparency, Access to Information and Protection of Personal Data within 15 (fifteen) business days following the date on which you are informed of the response from the Responsible Party, or, if you do not receive a response, you have 20 (twenty) business days from the date of receipt of your request to exercise your rights.

ARCO Rights refer to the following:

• Access: to know the personal data that the Responsible Party has registered and associated to your person.
• Rectification: to update and/or rectify personal data that is inaccurate or incomplete.
• Cancellation: request the cessation of the processing of your personal data
• Opposition: oppose the processing of your personal data.

7- Mechanisms to revoke consent to the processing of your personal data

You may revoke the consent that, where appropriate, you have given us for the processing of your personal data. However, it is important that you keep in mind that not in all cases we can meet your request or terminate the use immediately, since it is possible that some legal obligation may require us to continue processing your personal data. Also, you should consider that, for certain purposes, the revocation of your consent will mean that we can no longer provide the service you requested, or the conclusion of your relationship with us.

To revoke your consent, you must send your request to the e-mail privacidad@newe.dev accompanied by your official identification.

8- Limiting the use or disclosure of personal data

You may limit the use and disclosure of your personal information by sending your request to the e-mail privacidad@newe.dev. If your request is accepted, the Responsible will register it in the exclusion list for the applicable purpose according to the request.

Additionally, you may limit the use and disclosure of your personal data through the Public Registry to Avoid Advertising, which is in charge of the Federal Consumer Protection Agency ("PROFECO"). For more information about this registry, you may consult PROFECO's website or contact PROFECO directly.

9- COOKIES

We inform you that on our website we use cookies, web beacons and other technologies through which it is possible to monitor your behavior as an Internet user in order to provide you with a better service and user experience when browsing our website.

The data we obtain from these tracking technologies are the following: browsing hours, browsing time on our website, sections consulted and Internet pages accessed prior to ours.

Likewise, we inform you that you can disable the use of these mechanisms by following the procedure for deactivation, established for your Internet browser.

10- Transfer of Personal Data

The Responsible Party may transfer your personal data to third parties, national or foreign, that are legally related to the Responsible Party in order to comply with the purposes described in this privacy notice. Likewise, the Controller may transfer your personal data in the cases foreseen and authorized by the Personal Data Law for the following purposes:

Addressee of personal data	Compliance with an order, mandate or injunction from a competent authority.
Autoridades competentes	Compliance with an order, mandate or injunction from a competent authority.
Third-party suppliers	Compliance with legal, accounting, regulatory or contractual obligations of the Responsible Party or any of its controlling companies or subsidiaries in Mexico or abroad. Delivery of information according to or in compliance with the measures issued by the authority in cases of extraordinary situations of sanitary nature and other similar.

Whenever the Controller intends to make any transfer of personal data as indicated herein, it will inform the interested parties so that they may express their opposition to such transfer, except in those cases in which the applicable regulations allow such transfer without their consent.

EN CASO DE QUE USTED NO CONSIENTA QUE SUS DATOS PERSONALES SEAN TRANSFERIDOS EN LOS TÉRMINOS QUE SEÑALA EL PRESENTE AVISO DE PRIVACIDAD, POR FAVOR ENVÍE SU SOLICITUD A privacidad@newe.dev. 

11. Modifications to the privacy notice

This privacy notice may undergo modifications, changes or updates derived from new legal requirements; from the Responsible Party's own needs due to the products or services we offer; from our privacy practices; from changes in our business model, or for other reasons.

The Responsible undertakes to keep you informed about the changes that this privacy notice may undergo, through its publication in www.esentia-energy.com.

Last update: January 01, 2023.