1. Identity and Address of the Data Controller. 

Recurso Confiable, S.A. de C.V. (hereinafter the Controller or Recurso Confiable), with an address located at Autopista México Querétaro 3069-C, Colonia Centro Industrial Tlalnepantla, Tlalnepantla de Baz, Estado de México, C.P. 54030, in compliance with the new Mexican Law on the Protection of Personal Data Held by Private Parties (hereinafter the Law) is responsible for the processing of personal data provided by the natural person who is the owner thereof (hereinafter, the Data Subject), in accordance with the provisions of this Privacy Notice. Through this notice, you are informed about the terms and conditions under which your personal data will be processed. 

1. Personal Data Subject to Processing by the Controller. 

To comply with the purposes established in this Privacy Notice, the Controller collects the Data Subject’s personal data when they provide it directly , either when submitting their service request, or through any other document and/or means authorized by the Controller. The data collected includes, but is not limited to, the following: 

• Identification Data: Full name and surnames, place of birth, nationality, date of birth, age, marital status, address, people with whom they reside, email, current official identification, place of issue and number of Passport and Visas the Data Subject possesses, driver’s license, as applicable, personal phone, home phone, Unique Population Registry Key (CURP), Federal Taxpayers Registry (RFC), educational level, study certificates, languages they master, knowledge of computer software packages, current and previous employment, work history, letters of recommendation, personal references, availability to travel, personal goals, hobbies, sports they practice, membership in social or sports clubs, emergency contact data, as well as family information such as name, age, occupation, living status and occupation of father, mother, spouse and children, economic dependents, as well as Trust Tests. Any other information contained in the curriculum vitae or employment application provided by the Data Subject is also included. Likewise, a copy of the birth certificate, proof of address, official identification and, where applicable, migratory document may be collected. 
• Financial and Patrimonial Data: Information related to the existence of active credits in INFONAVIT and/or INFONACOT (only in Mexico), as well as data related to one or more motor vehicles owned by the Data Subject, Consultations with the Credit Bureau, Consultations with the Legal Incidents Bureau. 

III. Purposes of the Processing of Personal Data. 

The Controller will process the personal data described in this Privacy Notice for the following: 

Primary Purposes: 

• Perform a Trust Test. 
• Perform the eCheck service, which consists of validating the information provided by the Data Subject and the use of biometric data. 
• Identification and validation of the Data Subject’s labor profile for contracting purposes, route assignment, and compliance with legal and operational requirements. 
• Administrative management of the labor or contractual relationship, including contract drafting, attendance control, payroll payment, benefits, and compliance with tax and social security obligations. 
• Assignment, control, and tracking of vehicle units, as well as monitoring of routes, delivery times, and compliance with security and logistics protocols. 
• Compliance with legal and regulatory obligations before labor, tax, transport, and public safety authorities, including verification of licenses, medical certificates, and work history. ● Internal and external communication, related to daily operation, emergencies, incident 

reports, and coordination with clients or third parties involved in the logistics chain. ● Performance evaluation and training, in order to improve the quality of the Controller’s service, road safety, and compliance with operational standards. 

• Protection of assets, facilities, and merchandise under the Data Subject’s custody, through control, supervision, and audit mechanisms. 

Furthermore, secondary purposes for the processing of the Data Subject’s personal data, understood as those that are not necessary or directly derived from the legal relationship established between the Data Subject and the Controller, are not contemplated in this Privacy Notice. 

The Controller undertakes to process the Personal Data under the strictest security measures, guaranteeing its confidentiality at all times. If the Data Subject does not wish their personal data to be processed for the purposes described in this section, they can express this intention immediately by sending an email to datospersonales@recursoconfiable.com 

If no response is received within a period not exceeding 5 business days counting from the time their personal data is collected, it will be understood that the Data Subject has given their consent for the use of said information. 

1. Use of Cookies and Other Technologies. 

The Data Subject is informed that the website www.recursoconfiable.com owned by the Controller uses cookies, web beacons, and other technologies with the purpose of monitoring their behavior as an internet user, improving the quality of the service and browsing experience, as well as offering personalized content and advertising based on their interests. 

The information collected may include, among other data, the type of browser, operating system, IP address, date and time of access, pages visited, selected links, and session duration. 

The Data Subject may disable or modify the use of these technologies through the configuration of the browser they use to access the website www.recursoconfiable.com, as well as from the mobile device through which they access the services provided by the Controller. 

This information will be processed in accordance with the provisions of the Law and other applicable regulations. 

1. Mechanisms, Means and Procedures for Exercising the Rights of Access, Rectification, Cancellation or Opposition (ARCO Rights) / Revocation of Consent for the Processing of Personal Data. 

The Data Subject has the right to know, at any time, what information the Controller possesses, for what purposes it is used, and under what conditions its processing is carried out (Right of Access). Likewise, they may request, at any time, the correction or update of their personal data if it is inaccurate, incomplete, or outdated (Right of Rectification); require its elimination from records or databases when they consider that it is not being processed in accordance with the principles, duties, and obligations established in the Law (Right of Cancellation); as well as object to the processing of their personal data for specific purposes (Right of Opposition). 

To exercise any of the ARCO Rights/Revocation, the Data Subject must submit a Request that contains all the necessary elements so that it can be addressed in accordance with the Law, through the following means: 

1. Electronically to the email address: datospersonales@recursoconfiable.com
2. In person, the Data Subject may exercise their ARCO Rights/Revocation by going directly to the Personal Data area at the address located at: Autopista México Querétaro 3069- C, Colonia Centro Industrial Tlalnepantla, Tlalnepantla de Baz, Estado de México, C.P. 54030. 

The Data Subject’s Request must contain the following information: 

1. Name and address to hear and receive any type of notifications or any other means for the same purpose; 
2. Document that proves the identity of the Data Subject or, where applicable, the legal personality of their legal representative; and 
3. A clear and precise description of the personal data over which one wishes to exercise any of the ARCO rights, or, where applicable, request its Revocation. 

The Controller will have a maximum period of 20 (twenty) business days, counting from the reception of the Request, to issue a response. In the event that the Request is admissible, an additional period of 15 (fifteen) business days will be available to make the corresponding right effective. The response will be granted according to the modality that has been specified in the Request. In the case of requests for the exercise of the Right of Access to personal data, the delivery will proceed upon prior accreditation of the identity of the Data Subject or legal representative, as applicable. 

The aforementioned periods may be extended once for an equal period, provided that the circumstances of the case justify it. 

1. Options and Means Offered by the Controller to Limit the Use or Disclosure of Personal Data. 

The Data Subject may request the Controller to limit the use, disclosure and/or transmission of their personal data contained in physical documents and/or electronic media. Likewise, they may request information, submit doubts or clarifications related to the processing of their personal data, as well as receive support and corresponding attention from the Controller through the following contact means: 

1. Email Address: datospersonales@recursoconfiable.com
2. Going directly to the Personal Data area at the Controller’s address located at: Autopista México Querétaro 3069-C, Colonia Centro Industrial Tlalnepantla, Tlalnepantla de Baz, Estado de México, C.P. 54030. 
3. By telephone, calling the number: 55 1940 0570. 

VII. Transfer of Personal Data. 

The Controller reserves the right to transfer the information provided by the Data Subject to natural or legal persons who maintain a business relationship linked to the services offered by the Controller, as well as those who intervene in the execution, development or implementation of the contractual relationship established with the Data Subject. This transfer may be carried out in order to comply with legal, contractual, operational, administrative or commercial obligations, always guaranteeing the adequate processing and protection of the data in accordance with the provisions of this Privacy Notice, as well as in the applicable legislation on personal data protection. In these cases, the content of this Privacy Notice will be made known to the third parties, in order to ensure that the Data Subject’s personal data is processed in accordance with its terms. Likewise, the Data Subject 

acknowledges and accepts that the Controller may transmit the information provided to any judicial, administrative, or any other authority that, in accordance with applicable legislation, requires it. In such cases, this Privacy Notice will be communicated to ensure that the personal data is processed in accordance with its provisions. The Controller will not perform data transfers without the Data Subject’s consent, except in cases provided for by the Law. 

VIII. Changes to the Privacy Notice. 

Recurso Confiable reserves the right to make modifications or updates to this Privacy Notice at any time, in order to address changes within the framework of the Law, adjustments to its internal policies, or new requirements related to the provision or offering of its products or services. 

These modifications will be available to the public through the following means: (i) visible announcements at the Controller’s establishment; (ii) brochures or flyers available at its establishments or customer service centers; (iii) on the Controller’s website, in the Privacy Notice section; or (iv) by sending an email to the last email address provided by the Data Subject. 

1. Data Subject’s Consent. 
2. Based on Article 7 of the Law, the Data Subject consents to provide their personal data to the Controller so that it may be processed in accordance with the provisions of this Privacy Notice, which was duly made available to them. 
3. Based on the second paragraph of Article 35 of the Law, the Data Subject accepts the transfer of their personal data to the necessary third parties as provided in section VII of this Privacy Notice. Said third parties will assume the same obligations corresponding to the Controller regarding personal data protection. 

In the event that the Data Subject does not consent to the processing, purposes, and transfer of their personal data, they may express this intention immediately through the following means: 

1. Email Address: datospersonales@recursoconfiable.com
2. Going directly to the Personal Data area at the Controller’s address located at: Autopista México Querétaro 3069-C, Colonia Centro Industrial Tlalnepantla, Tlalnepantla de Baz, Estado de México, C.P. 54030. 
3. By telephone, calling the number: 55 1940 0570. 

In the event that the Data Subject considers that their rights regarding personal data protection have been violated by any conduct of the Controller’s employees, by their actions or responses, or presumes that the processing of their personal data contravenes the provisions of the Law, they may file the corresponding complaint or denunciation with the Mexican authorities: Secretaría Anticorrupción y Buen Gobierno. 

For this, they must send an email to the address updp.privado@buengobierno.gob.mx detailing the situation, in order for said authority to determine the relevance of initiating any procedure for the protection of their rights. 

The Data Subject expresses their explicit consent for the processing of their personal data in accordance with the terms of this Privacy Notice, through electronic or digital acceptance or by any other means enabled on the Controller’s website, which will produce the same legal effects and validity as if such consent had been granted in writing and with a handwritten signature.