Fomento Educativo del Centro, A.C., also known as Centro Escolar Cedros (hereinafter referred to as "Colegio"), domiciled at 364 Tecoyotitla Street, Col. Ex Hacienda de Guadalupe, Chimalistac, Del. Álvaro Obregón, C.P. 01050, Mexico City, makes this privacy notice available to you and informs you that in accordance with the Federal Law for the Protection of Personal Data in Possession of Individuals, it is responsible for the treatment and protection of the personal data referred to herein.

1. PERSONAL DATA TO BE PROCESSED BY THE SCHOOL For the purposes mentioned in point 2 of this privacy notice, the School will collect and use the following categories of personal data: 1.1. PARENT OR GUARDIAN Personal identification, contact, employment, academic, patrimonial and financial data. 1.1.1.1.SENSITIVE PERSONAL DATA Ideological data (religion), health data. 1.2. STUDENT Personal identification data, contact, physical, academic, financial and financial characteristics. 1.2.1 SENSITIVE PERSONAL DATA Ideological data (religion); health data. If you wish to know in detail the personal data corresponding to each of the categories mentioned above, you may exercise your right of access through the procedure indicated in paragraph 5 of this privacy notice. We inform you that the school will make reasonable efforts to ensure that the personal data processed are the minimum necessary in accordance with the purpose of the processing that takes place. For the personal data of family members or references that you provide us, you must previously inform the owner of such data or their parent or guardian in case of minors, that they can know our privacy notice for family members and references by requesting it to our privacy officer, through the forms set forth in paragraph 4 of this notice. Regardless of the above, at the first contact with the holder or prior to the use of personal data if the processing does not require contact with the holder, the College will make available to the holder the aforementioned privacy notice for family members and references.

2. PURPOSES OF PROCESSING The personal data previously referred to, we obtain them to carry out the following purposes, according to the type of holder: 2.1. PURPOSES FOR PERSONAL DATA OF THE PARENT OR GUARDIAN 2.1.1. The parent or guardian's personal data will be used for the following primary purposes, which are necessary to provide your child or ward with our educational services: a) Identify and contact you. b) To complete the corresponding administrative file. c) Register the student in the various systems implemented by the College to carry out the academic and administrative management. d) Send account statements, issue invoices, inform you and/or provide you with school supplies, and carry out the payment/collections procedure that originates with the student's enrollment to the School and the services we provide. e) Prepare documents to share with you institutional information related to our educational services (circulars, notices and electronic newsletters). f) Inform you about the purchase of uniforms, g) To carry out an academic follow-up of the student, and to contact parents or guardians in case of any setback or emergency, as well as for medical and psycho-pedagogical attention. h) Inform you about the student's discipline and performance reports. i) Evaluate the quality of our educational services. j) Request authorization for the student to participate in events inside and outside the school, as well as inside and outside the country. k) To inform them of the extracurricular activities and complementary services for the student's education. l) Enroll the student in one or more extracurricular activities, workshops and/or courses. In this case, we will use your personal data for the registration process, integrate the corresponding administrative file, inform you about the student's performance and events related to the extracurricular activity, carry out the procedures that may be required before the authorities, process certifications and accreditations, carry out procedures for the participation of students in national events, carry out immigration procedures for the participation of students in international events, develop and implement the logistics activities necessary to facilitate the development of extracurricular activities. m) To know and attend their doubts, comments and suggestions in relation to the curricular and extracurricular activities we offer. n) Comply with the provisions set forth by the Ministry of Public Education for the registration, registration and issuance of documentation of students enrolled in the school. o) In case the parent or guardian wishes the student to receive the sacrament of Confirmation and/or the sacrament of the Eucharist, their personal data will be used to inform them about the process and requirements to carry out the same; prepare the family for the student to receive the desired sacrament; manage the vouchers and records of the sacrament to be received. p) Register you in the mandatory courses offered by our Family Education Center, integrate the corresponding administrative file, record your attendance, ask you to evaluate the course content, as well as the material used and the class dynamics, and issue you with a certificate of attendance to the course. q) Evaluate, determine and manage different supports for families that request them (scholarships and exemptions from mandatory services). r) Implement security measures. s) Develop and implement the logistical activities necessary to facilitate the school transportation service; make the corresponding charges for the service. t) To comply with the obligations imposed on the College by the various laws. 2.1.2. Additionally, the personal data of the parent or guardian will be used for the following secondary purposes, which are not necessary to provide our services, but are very useful to promote and strengthen our educational offerings: a) To solicit and/or receive donations and sponsorships. b) Sending advertising about services that complement the educational offerings of the school, as well as advertising about the educational services of sister institutions. c) Obtain images and videos to generate publicity elements to disseminate the services of the College in different media. d) Marketing and commercial prospecting. If you wish to express your refusal to the processing of your personal data for the secondary purposes mentioned above, or any of them, you may indicate it in section 12 of this privacy notice, called "Consent". 2.2. PURPOSES FOR THE STUDENT'S PERSONAL DATA 2.2.1. The student's personal data will be used for the following primary purposes, which are necessary to provide you with our educational services: a) To integrate the corresponding administrative file of the student. b) Prepare a student credential. c) Register the student in the various systems implemented by the school to carry out the academic and administrative management. d) Discharge the student to the appropriate division (lower elementary, upper elementary or secondary). e) Apply evaluations for the different curricular subjects; in the case of English, manage evaluations through third parties to obtain certificates of language proficiency. f) Report on the status of compliance with the obligations as a student of the school (specifically on the control of uniforms, work material and preparation of discipline reports and student performance). g) To integrate to the student's academic record aspects related to school performance, as well as the medical and psycho-pedagogical attention received at the school. h) Provide insurance coverage for school accidents. i) To carry out activities of spiritual formation and social service. j) To register the loan of material available in the school library. k) Implement mechanisms and measures for the safety of students in the school. l) To develop and implement the logistics activities necessary to facilitate the school transportation service. m) Comply with the provisions set forth by the Ministry of Public Education for the registration, registration and issuance of documentation of students enrolled in the school. n) In case the parent or guardian wishes the student to receive the sacrament of Confirmation and/or the Eucharist, the student's personal data will be used to inform him/her about the process and requirements to carry out the same; prepare him/her to receive the desired sacrament; manage the vouchers and records of the sacrament to be received. o) Provide basic first aid if necessary. p) Register students and follow up on the preceptorship model implemented by the school. q) Evaluate, determine and manage different supports for families that request them (scholarships, exemptions from mandatory services and economic support). 2.2.2. SECONDARY PURPOSES, which are not necessary to provide you with our educational services, but are very useful to promote and strengthen our educational offerings: a) Sending advertising about other services that complement the School's educational offerings. b) Sending advertisements about the educational services of sister institutions. c) Obtain images and videos to generate publicity elements to disseminate the services of the College in different media. d) Obtain photographs of the student for the school yearbook. If you wish to express your refusal to the processing of the student's personal data for the secondary purposes indicated, or any of them, you may indicate it in section 12 of this privacy notice, called "Consent".

3. TRANSFER OF PERSONAL DATA The College will make the following transfers of personal data, for each type of holder: 3.1. TRANSFERS OF PERSONAL DATA OF THE PARENT OR GUARDIAN The personal data of the parent or guardian may be transferred to the following natural or legal persons, without legally requiring their consent in terms of Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties: a) To the Ministry of Public Education (SEP), in order to accredit studies, grades, exams, certificates of the different educational levels, authorizations for external visits and health status of the student, in compliance with the official provisions issued by the SEP. b) To the hospital of your choice, in case the student suffers an accident or health situation within our facilities that requires a specialized medical service, in order to provide such service. c) To the insurance company with which the school has an agreement, in order to support the school in providing medical insurance for students. d) To Fundación Cedros, I.A.P., in order to carry out the activities of linkage with external donors, when the parent or guardian requests financial support. e) To the company Grupo Cotrep, S.A. de C.V., to provide the transportation service to the student and issue the corresponding tax receipts. Only the parent's or guardian's tax information and the amount to be paid will be transferred. f) In the case of students receiving the sacrament of Confirmation and/or the Eucharist, to the corresponding church, so that the corresponding sacrament may be administered. g) To the different leagues in which the student is enrolled, with the purpose of participating in the representative team of the school. h) To governmental authorities, for the completion of procedures. i) To the competent authorities when so required and legally justified. In this case, the only purpose of the transfer would be to comply with the authority's order. We will not make transfers that require your consent. 3.2. TRANSFERS OF THE STUDENT'S PERSONAL DATA The student's personal data may be transferred to the following natural or legal persons, without legally requiring the consent of the parent or guardian, in terms of article 37 of the Federal Law for the Protection of Personal Data in Possession of Private Parties: a) To the Ministry of Public Education (SEP), in order to accredit studies, grades, exams, certificates of the different educational levels, authorizations for external visits and health status of the student, in compliance with the official provisions issued by the SEP. b) To the hospital of your choice, in case the student suffers an accident or health situation within our facilities that requires a specialized medical service, in order to provide such service. c) To the insurance company with which the school has an agreement, in order to support the school in providing medical insurance for students. d) To Centro Deportivo Tetelpa, S.A. de C.V., which is a company belonging to our corporate group, for the purpose of conducting retreats. e) In the case of students receiving the sacrament of Confirmation and/or the Eucharist, to the corresponding church, so that the corresponding sacrament may be administered. f) To Fundación Cedros, I.A.P., to carry out the activities of linkage with external donors, when the parent or guardian requests financial support. g) To governmental authorities, for the completion of procedures. h) To the company Grupo Cotrep, S.A. de C.V., to provide the student with the transportation service and issue the corresponding tax receipts to the parent or guardian. Only the student's identification and contact information will be transferred. i) To national or foreign institutions, when it is necessary for the student's participation in national or international events. j) To the competent authorities when so required and legally justified. In this case, the only purpose of the transfer would be to comply with the authority's order. We will not make transfers that require the consent of the parent or guardian.

4. INFORMATION ABOUT OUR PRIVACY OFFICER AND HOW TO CONTACT HIM Our privacy officer is the person within the school who has been formally designated to promote and ensure the protection of the personal data we have in our possession, as well as to attend to the rights of personal data subjects. For all matters relating to the processing and protection of your and/or the student's personal data, you may contact our privacy officer in any of the following ways: (i) By e-mail, to the address protecciondedatos@cedros.edu.mx; (ii) by telephone, at the following number: 50919556. With regard to the latter form of contact, if no one is able to take your call, you may leave a message and the privacy officer or his staff will contact you.

5. ARCH RIGHTS AND WITHDRAWAL OF CONSENT Under the terms of the applicable regulations, you have the right to know what personal data we hold about you or the student, what we use it for and the conditions of our use of it (Access). Likewise, it is your right to request the correction of your or the student's personal information in case it is outdated, inaccurate or incomplete (Rectification); that we remove it from our records or databases when you consider that it is not being used properly (Cancellation); as well as to oppose the use of your or the student's personal information for specific purposes (Opposition). These rights are known as ARCO rights. Likewise, under the terms of the applicable regulations, you may revoke the consent you may have given us for the processing of your and/or the student's personal data. To learn about the procedure and requirements for the exercise of ARCO rights and/or revocation of consent, you may use any of the following means: (i) Contact our privacy officer via email; (ii) call the telephone number indicated in paragraph 4 of this privacy notice, to request a format with the procedure and requirements, free of charge; (iii) request, via e-mail or telephone, an appointment with our privacy officer to personally provide you with the corresponding information, and to clarify any doubts you may have in this regard. To exercise any of the ARCO rights and/or revoke consent, you must submit the respective request via email to our privacy officer, or deliver it personally to the address of the College indicated above, to the attention of the privacy officer. At any time you may request an appointment with our privacy officer to personally address any complaint or comment regarding the exercise of your ARCO rights and/or revocation of consent, as well as for any other matter related to the processing of your personal data.

6. OPTIONS AND MEANS THE SCHOOL OFFERS TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA In addition to exercising your ARCO rights and your right to revoke consent, you may limit the use and disclosure of your personal information by sending an email to our privacy officer at the above address, requesting your registration to the "Opt-Out List for Parents and Students", so that we do NOT use your personal information for secondary purposes. For more information about our opt-out list, you may contact our privacy officer via e-mail. The school has implemented internal means and mechanisms to limit the use and disclosure of your personal data, as well as various administrative, physical and technological security measures to ensure proper storage and custody of such data.

7. USE OF COOKIES AND WEB BEACONS We have implemented cookies on our website. Cookies are automatically downloaded files that are stored on your computer's hard drive when you access our site. These files allow you to save some of your data on the server. You can also find web beacons, which are images embedded in the page. Cookies and web beacons are used to monitor your browsing behavior to provide you with a better service and browsing experience on our site, as well as to offer you our educational services. The personal data we obtain from the aforementioned tracking technologies are the following: Your browser type and operating system; time and time spent browsing our Internet site, sections consulted; Internet pages accessed prior to ours; the links you follow; the search engine you may have used to reach our site; your IP address; how often you visit us, or if it is the first time you visit us. We do NOT share your personal data obtained through these technologies with third parties. We also inform you that you can disable these technologies. To learn how to do this, please refer to the technical information of the browser you are using. In the following links you will find examples of how to do it for these types of browsers: For Internet Explorer: http://windows.microsoft.com/es-MX/internet-explorer/delete-manage- cookies#ie=ie-11 For Google Chrome: https://support.google.com/chrome/answer/95647?hl=es-419

8. USE OF SOCIAL NETWORKS The School disseminates its services in different social networks, in this sense, the promotional activities in social networks are catalogued in the purpose determined as "Obtain images and videos to generate advertising elements to disseminate the services of the College in different media.

9. MODIFICATIONS AND UPDATES TO THIS PRIVACY NOTICE The school may at any time make modifications and/or updates to this privacy notice, informing you directly or personally.

10. BREACH OF SECURITY In the event of a security breach at any stage of the processing of personal data that significantly affects your economic or moral rights, the privacy officer will notify you as soon as possible so that you can take appropriate action.

11. GUARANTOR AUTHORITY FOR THE PROTECTION OF PERSONAL DATA If you consider that your right to the protection of your personal data has been violated by any conduct or omission on our part, or presume any violation of the provisions of the Federal Law for the Protection of Personal Data Held by Private Parties, its Regulations and other applicable laws, you may file a complaint with the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI). For more information, we suggest you visit their official website at www.inai.org.mx.

12. CONSENT As father, mother or guardian of _, of whom I exercise parental authority or guardianship, and in my own right, I give my consent for the personal data of the minor and those of the undersigned, including sensitive personal data, to be processed in accordance with this privacy notice. (YES / NO), I consent to the processing of my personal data for the following secondary purposes: a) Send and/or receive requests for donations and sponsorships. b) Sending useful information about other services that help to complement the educational offer of our institutions. c) Obtain images and videos to disseminate the College's events through any institutional media. d) To carry out studies on marketing and commercial prospecting. (YES / NO), I consent to the processing of my child's or ward's personal data for the following secondary purposes: a) Sending useful information about other services that help to complement the educational offerings of our institutions. b) Obtain images and videos to disseminate the College's events through any institutional media.

COMPREHENSIVE PRIVACY NOTICE - HUMAN RESOURCES

Fomento Educativo del Centro A.C., domiciled at Tecoyotitla 364, Col. Ex Hacienda de Guadalupe, Chimalistac, C.P. 01050, Delegación Álvaro Obregón, in México, D.F., is responsible for the personal and direct collection of personal data, as well as the use given to them and their protection.

1.- PERSONAL DATA COLLECTED AND PROCESSED

2.- PURPOSE OF THE PROCESSING OF PERSONAL DATA 1.1 PERSONAL DATA COLLECTED AND PROCESSED FROM THE CANDIDATE: (a) Identification Data: full name, date of birth, marital status, address, telephone, e-mail, Federal Taxpayers Registry (RFC), homoclave and signature. (b) Academic Data: professional studies, professional degree, certificates of studies. (c) Employment History: name and address, previous employers, telephone number, line of business. (d) Financial and Property Data: real and personal property, personal income and expenses, bank accounts, credit cards, family and personal financial situation. (e) Physical characteristics: photograph, image. (f) Sensitive Data: religious beliefs, emotional and family life. 2.1. PURPOSE OF PROCESSING OF PERSONAL INFORMATION OF THE CANDIDATE: Your personal information will be used during the recruitment and selection process, specifying the following necessary and secondary purposes: Necessary: (1) Integration of the candidate's personal administrative file, (2) Preparation of a socioeconomic study. Secondary: (1) Dissemination of services, courses, diploma courses and conferences related to the Centro Escolar de Educación Familiar (CEF) for the training of parents. (2) Sending promotional information about courses and events of Fomento Educativo de Centro, A.C. sister institutions and Fundación Cedros, I.A.P. (3) Development of spiritual formation and social service activities. (4) Curriculum exchange of candidates with institutions related to Fomento Educativo del Centro, A.C. 1.2. PERSONAL DATA COLLECTED AND PROCESSED FROM EMPLOYEES AND FORMER EMPLOYEES: (a) Identification Data: full name, age, date and place of birth, gender, marital status, address, telephone, e-mail, nationality, Unique Population Registry Code (CURP), Federal Taxpayers Registry (RFC). (b) Academic Data: name and address of school of origin, educational background, grades and certificates issued by other institutions, languages, transcripts, school records and grade level. (c) Sensitive Data: health data (health status, diseases, allergies, medical and psychological treatments and blood group), physical characteristics (photograph, image, weight and height), religious beliefs, data on social, emotional, psycho-pedagogical, emotional and family life. (d) Financial and Wealth Data: bank accounts, tax information, tax returns, payroll receipts and in general data on the family and personal economic situation. 2.2. PURPOSE OF THE PROCESSING OF EMPLOYEE'S PERSONAL DATA AND EXEMPLOYEES: Necessary (1) Integration of the employee's personal file (2) Elaboration of the individual employment contract, if applicable. (3) Preparation of labor documentation during and at the end of the development. (4) Preparation of seniority and/or performance awards. (5) Attention to requests for information of a judicial nature (6) Attention to requests for employment references. Secondary: (1) Development of spiritual formation and social service activities. (2) Application process for exemptions from mandatory school transportation. (3) Dissemination of services, courses, diploma courses and conferences related to the Family Education Center (CEF) for the training of parents. (4) Sending promotional information on courses and events of the school, related institutions and Fundación Cedros, I.A.P. (5) Development of spiritual formation and social service activities, (6) Congratulations on the occasion of the employee's birth. If you do not provide the requested personal data, we will not be able to initiate the personnel selection procedure and, if applicable, to enter into an individual employment contract to initiate the employment relationship with Fomento Educativo del Centro. A. C., we have the security measures for the protection of your personal data.

3. ARCO RIGHTSOnce the personal data has been provided, you have the right to access, rectify and cancel the personal data provided, as well as to oppose the processing of the secondary purposes of the same. You may limit the use and disclosure of the data that have a secondary purpose, as well as revoke the consent you have given us for that purpose. To know the procedures, requirements, terms and conditions for the exercise of these rights, you may contact the Privacy Officer of our Personal Data Department, at protecciondedatos@cedros.edu.mx, whose address is located at Calle Tecoyotitla 364, Col. Ex Hacienda de Guadalupe, Chimalistac, C.P 01050, Delegación Álvaro Obregón, in Mexico City, at telephone number 50.91.95.00 ext. 1805, or visit our web page www.cedros.edu.mx. . Within 5 working days your request will be attended and we will inform you about the origin of your request to the e-mail address you provide us.
4. TRANSFER We transfer personal data of the Institution to: (1) Insurance Companies, for the purpose of contracting major medical, life and auto insurance. (2) Sociedad Financiera de Objeto Múltiple, for the processing of loans requested by employees. If you do not express your opposition to the transfer of your personal data, it will be understood that you have given your consent to do so.
5. SENDING PERSONAL DATA: We send personal data within the Institution and with our service providers acting on our behalf, for the fulfillment of the agreed contractual obligations and the purposes described in this Privacy Notice. The persons in charge of receiving personal data will assume the same obligations and/or responsibilities that the Controller has assumed with the owner in this Notice.
6. MODIFICATIONS AND UPDATES TO THIS PRIVACY NOTICE: Any modifications and/or updates to this Privacy Notice may be consulted at www.cedros.edu.mx.
7. FACEBOOK/YOUTUBE: This institution disseminates its services on its website, twitter, Facebook and YouTube, using images and photographs of employees, students and parents for information and communication purposes with the Cedros community and other interested parties. Facebook uses the security and privacy locks provided by the page. If you do not express your opposition to our use of your images or photographs for the aforementioned purposes or to their transfer, it will be understood that you have given your consent to do so.
8. USE OF COOKIES AND WEB BEACONS: The institutional website uses cookies and web beacons, through these we obtain the stored data, the IP address of origin, browser used, operating system, time you accessed the page, email.